Credit Report Error or Identity Theft? How to Tell
A credit-report error or identity theft: how to tell which you have
CheckDispute · Sources checked September 20, 2026
The question is a routing problem: two federal processes exist, they go to different places, and choosing the wrong one wastes time — or worse, requires a statement that is not true. An accuracy problem routes to a §611 dispute with the bureau and furnisher. Identity theft routes to IdentityTheft.gov and a statutory block. Here is the fork, plus the third state nobody covers: not sure yet.
What are the first signs of identity theft?
The FTC's list includes accounts in your name that you do not recognize, per its identity theft overview — and USAGov draws the same line: accounts you did not open are the signal pointing toward theft rather than ordinary error.
But "I do not recognize it" is not the same as "I did not open it." Before the fork, rule out the ordinary explanations the CFPB lists: an account sold or placed with a collector under a new name, a retail card reported under its issuing bank, an unfamiliar name that appears only as a prescreen inquiry. The first step for an unrecognized creditor is to contact the company — not to dispute and not to file a theft report.
How can I check my credit report for signs of identity theft?
The CFPB's review instruction is the check: confirm the report contains only items about you, and look for what is inaccurate or incomplete. The three identity-error causes sort the findings — wrong identity data, a mixed file from a same or similar name, or accounts resulting from identity theft.
Branch A: an accuracy problem
If the foreign-looking entry turns out to be your account misreported — wrong balance, wrong date, wrong status — the route is the ordinary dispute: the bureau and the furnisher, with the specific wrong field named and documents attached, per the CFPB's dispute guidance. The bureau reinvestigates within 30 days under 15 U.S.C. §1681i, extendable at most 15 days only if you supply relevant new information during that period. And the disclosure boundary applies here too: accurate negative information that is genuinely yours is not an error, and neither route removes it.
Branch B: identity theft
If the accounts are genuinely not yours — transactions you did not make — the route is different. Report at IdentityTheft.gov, which produces an Identity Theft Report and a personal recovery plan with pre-filled letters for bureaus, businesses and collectors; close affected accounts and contact your financial institutions' fraud departments, per the CFPB's identity-theft guidance.
While the report processes, a fraud alert is the matching access tool — an initial alert is free, lasts a year, and anyone who suspects they may be affected can place it by contacting one bureau, which must tell the other two. The alert also unlocks an extra free report from each bureau that does not count against the annual one.
Then the statutory tool: under 15 U.S.C. §1681c-2, a bureau must block information identified as resulting from alleged identity theft within four business days of receiving four things — proof of your identity, a copy of an identity theft report, your identification of the information, and your statement that the information does not relate to any transaction by you. The CFPB's warning is explicit: use this method only for debts that are the result of identity theft — a bureau can decline or rescind a block based on a material misrepresentation, and once notified, creditors cannot turn identity-theft debts over to collectors.
The third state: not sure yet
If you cannot say the transactions are not yours, the block is not your tool — that required statement is the reason. The honest middle is investigation: contact the company on the entry, pull a file disclosure under §1681g to see the sources, and gather your own records. And one warning worth the space: the CFPB cautions that scammers impersonate the FTC and financial institutions — the FTC never threatens you or tells you to move money to "protect it." Use official sites and phone numbers.
Two parallel cases show the fork. Jae sees a card he does not recognize; the issuing-bank check reveals it is his retail card under the bank's name — branch closed, nothing to dispute. Lena sees a phone-account collection; she has never had that carrier, the address attached is foreign, and her records confirm it — that is Branch B, and the theft report is the statement of fact that makes the block lawful.
Frequently asked questions
How do I check my credit report for signs of identity theft? Confirm the report contains only items about you. Accounts you did not open — after ruling out sold accounts, issuing-bank names and prescreen inquiries — are the signal pointing to theft.
What is the difference between disputing an error and reporting identity theft? An error routes to a reinvestigation by the bureau and furnisher. Theft routes to IdentityTheft.gov and a statutory block that requires your statement that the information is not from your transactions.
Can I use the identity-theft block if I'm not sure the account is mine? No — the block requires your statement that the information does not relate to any transaction by you, and a block based on a material misrepresentation can be rescinded. Investigate first.
What does IdentityTheft.gov actually do? It produces an Identity Theft Report and a personal recovery plan that walks you through each step, with pre-filled letters to send to bureaus, businesses and debt collectors.
One more limit on the theft branch worth keeping in view: the block is powerful precisely because it is narrow. It exists for information resulting from alleged identity theft — a misreported balance on your own account stays in the ordinary dispute lane, and so does an account you opened but regret. Mixing the lanes is how a reader ends up making a statement that is not true.
The fork is the whole answer: misreported → dispute; not yours → IdentityTheft.gov and the block; unsure → investigate before you swear to either. Disputing is free; free reports are at AnnualCreditReport.com. CheckDispute prepares a draft you review and approve — it does not send mail or file anything, and no process guarantees a particular result.
Comments
Post a Comment