Middle Credit Score®

Need Some Help?

Guide: The Legal Rights You Have Under the FCRA and Identity Theft Laws

Identity theft doesn’t just disrupt your finances—it can cause deep emotional stress, create obstacles to homeownership, and derail years of careful credit-building. But if you’ve been affected by identity theft, you’re not powerless. Thanks to a robust framework of consumer protection laws in the United States, you have specific legal rights designed to help you recover, remove fraudulent activity from your credit reports, and hold creditors and credit bureaus accountable when they fail to act.

Two key laws stand at the core of these protections:

  • The Fair Credit Reporting Act (FCRA)
  • The Identity Theft and Assumption Deterrence Act (ITADA)

Together, these statutes grant victims of identity theft legal rights that are not only powerful—they’re enforceable. They give you the authority to:

  • Dispute and remove fraudulent information from your credit reports
  • Stop debt collectors from pursuing debts that aren’t yours
  • Obtain copies of your credit reports
  • Add fraud alerts or credit freezes to your credit file
  • Sue creditors, bureaus, or collectors who violate your rights

This expanded guide begins with a 2000-word introduction designed to help you fully understand the scope of these protections—and how to use them.

When someone uses your personal information to open credit cards, take out loans, or even rent property, the damage to your credit report can be swift and severe. Late payments, defaults, collections, and high utilization can drag your score down by 100 points or more. If the identity theft is not caught quickly, your Middle Credit Score® (the median of your three credit scores) can fall below key lending thresholds, jeopardizing your ability to qualify for mortgages, auto loans, or personal credit.

But under the FCRA, you have the right to demand accuracy, completeness, and fairness in your credit reporting. And when fraudulent accounts appear, you are legally entitled to dispute them and have them removed after proper investigation. This law obligates credit bureaus to respond within a fixed time frame—typically 30 days—and either correct the issue or explain why they believe the information is valid. Importantly, if a credit bureau or lender ignores your evidence or fails to act in good faith, you can escalate the issue to the Consumer Financial Protection Bureau (CFPB), state attorney general, or even take legal action in federal court.

In addition, the ITADA makes identity theft a federal crime and establishes procedures for reporting, documenting, and recovering from it. This includes your right to:

  • File an Identity Theft Report through the FTC
  • Use that report to block fraudulent accounts or stop collections
  • Request extended fraud alerts and free credit reports
  • Request that bureaus and creditors stop reporting fraudulent data

This guide will also cover the protections extended by the Fair Debt Collection Practices Act (FDCPA), which prevents debt collectors from harassing or misleading you—especially when the debt is the result of identity theft.

We’ll explain how to:

  • Use Section 605B of the FCRA to block identity theft-related information from your credit file
  • Request and submit your FTC Identity Theft Report
  • File police reports to supplement your legal documentation
  • Stop debt collectors using cease-and-desist letters
  • Seek damages if your rights under these laws are violated

For consumers focused on maintaining or rebuilding their Middle Credit Score®, understanding these legal rights is critical. Why? Because even one unresolved fraudulent account on a single credit report can lower your middle score by 30–70 points—enough to change loan terms or lead to denial. Knowing your legal rights empowers you to fight for a clean, accurate report across all three bureaus.

You’ll also learn about the newly enacted provisions under federal law that allow you to:

  • Get up to six free credit reports per year (through 2026)
  • Use credit freezes and fraud alerts free of charge
  • Force debt collectors to pause collection if a debt is in dispute

Finally, we’ll include real-world examples of consumers who leveraged these rights to remove accounts, stop lawsuits, and recover their scores—along with tips on how to document your case, communicate with bureaus, and preserve your eligibility for mortgages and other major credit events.

Let’s break down exactly what these laws say, how they protect you, and what steps to take if your credit report has been impacted by identity theft.

Step 1: Know the Core Protections of the Fair Credit Reporting Act (FCRA)

The FCRA is the backbone of consumer protection in credit reporting. Enacted in 1970 and updated many times since, it ensures that:

  • Consumers have the right to access their credit reports
  • Reports must be accurate and fair
  • Consumers can dispute incorrect or incomplete information
  • Credit bureaus must investigate disputes within 30 days
  • Consumers can take legal action against credit reporting agencies and creditors that violate the law

Under the FCRA, you are legally entitled to:

  • One free report from each bureau annually through AnnualCreditReport.com
  • Notification if your credit file is used against you (e.g., for a loan denial)
  • Dispute inaccurate or outdated information with the bureau and the creditor reporting it
  • Block fraudulent accounts using the Identity Theft provisions of the FCRA (Section 605B)

Step 2: Understand the Identity Theft and Assumption Deterrence Act (ITADA)

The ITADA, passed in 1998, made identity theft a federal crime and provided a framework for victims to report and recover from the crime. It complements the FCRA by creating the basis for:

  • Filing an FTC Identity Theft Report
  • Working with law enforcement to document your case
  • Accessing legal remedies when identity theft leads to financial damage

With this law, you gain access to protections like:

  • Blocking fraudulent information from credit reports
  • Getting extended fraud alerts for seven years
  • Preventing creditors and collectors from contacting you regarding debts resulting from identity theft

Step 3: Request an FTC Identity Theft Report

Visit IdentityTheft.gov to start the process. This online tool walks you through building a comprehensive report including:

  • Your personal information
  • Details of the fraud (dates, accounts, impacts)
  • A sworn affidavit signed digitally or in print

This FTC Identity Theft Report acts as your primary legal document when disputing accounts or blocking entries under FCRA 605B.

Once completed, print and save your Identity Theft Report and the recovery plan. You will send this to:

Step 4: Submit a Police Report (Optional but Powerful)

Although not required by law in all cases, a police report strengthens your case. Most bureaus and creditors accept it as supporting documentation.

Steps to file:

  • Bring your FTC report, identification, and fraud evidence
  • File with your local police or sheriff’s department
  • Request a copy of the police report or case number

Keep copies in your recovery binder. Some states allow you to file reports online.

Step 5: Use FCRA Section 605B to Block Fraudulent Information

FCRA Section 605B gives you the right to block identity theft-related information from your credit reports. To invoke this, send a request letter to each bureau containing:

  • A copy of your FTC Identity Theft Report
  • Proof of identity (government ID + utility bill)
  • Police report (if applicable)
  • A statement identifying each item you want blocked

Once received, the bureau must:

  • Block the items within four business days
  • Notify the furnisher of the information
  • Not reinsert the data unless you submit written authorization

Step 6: Dispute Incorrect Information Under FCRA Section 611

If you’re not invoking 605B (or for non-fraud disputes), use FCRA Section 611. This allows you to challenge inaccurate or unverifiable information. Steps:

  • Send a letter to the bureau identifying the disputed item
  • Include your FTC report if relevant
  • Request deletion or correction

The bureau must:

  • Investigate within 30 days (45 in some cases)
  • Notify you of the results in writing
  • Provide a new free credit report if changes are made

If a bureau fails to investigate or leaves errors after the process, you may escalate to the CFPB or take legal action.

Step 7: Stop Debt Collectors with the FDCPA and Cease Communication Rights

Under the Fair Debt Collection Practices Act (FDCPA), you have the right to:

  • Demand verification of a debt
  • Request in writing that collection efforts cease
  • Dispute debts in writing within 30 days of the first contact

When identity theft is involved:

  • Include your FTC Identity Theft Report and police report in your response
  • Send via certified mail
  • Request the debt be removed from their system and from your credit file

Collectors must:

  • Stop contacting you until the debt is verified
  • Cease collection if they determine the debt is invalid

Violations may entitle you to sue for damages.

Step 8: File a Complaint with the CFPB If Bureaus or Lenders Fail to Act

If a creditor or bureau ignores your dispute, delays action, or refuses to remove fraudulent data, file a formal complaint with the Consumer Financial Protection Bureau (CFPB):

  • Go to consumerfinance.gov/complaint
  • Include details of your dispute, supporting documents, and a timeline of events
  • CFPB typically forwards the complaint and requires a response within 15 days

This can pressure non-responsive institutions into taking action.

Step 9: Take Legal Action If Your Rights Are Violated

Under the FCRA, if a credit bureau or creditor willfully or negligently fails to correct errors, blocks fraudulent information, or investigates your dispute:

You may be entitled to:

  • Actual damages for financial harm
  • Statutory damages (up to $1,000 per violation)
  • Attorney’s fees and court costs

You can file in state or federal court within:

  • Two years from discovery of the violation
  • Or five years from the date the violation occurred

Legal options may include:

  • Hiring a consumer protection attorney
  • Contacting a nonprofit legal aid organization
  • Filing in small claims court for specific losses

Step 10: Use Free Report Access and Freezes to Stay Protected

Your rights include ongoing access to:

  • One free report per year per bureau
  • Additional reports after fraud alerts or disputes
  • Fraud alerts (1-year initial or 7-year extended)
  • Free credit freezes

Use these tools to:

  • Track recovery progress
  • Catch new errors or fraud
  • Prevent future unauthorized inquiries

Conclusion: You Have the Power—and the Law—on Your Side

These laws are more than just paperwork—they are powerful weapons in the fight to protect your Middle Credit Score®, restore your financial reputation, and ensure that creditors and bureaus take your identity theft seriously. By understanding and asserting your rights under the FCRA, ITADA, and FDCPA, you become an informed consumer with the tools and legal standing to demand fair treatment.

Middle Credit Score® Support Center
Browse Lenders® – Speak with a Lending Expert

Advertisement