An unfamiliar account deserves a closer look. Check the creditor's name and your records before concluding that the account is fraudulent.
If someone used your identity, begin with the companies where the fraud occurred. Contact their fraud departments, explain the unauthorized activity, and ask about closing or freezing the affected accounts. Secure your account logins, passwords, and PINs. [S1]
Next, review your credit reports and consider a fraud alert and credit freeze. These tools serve different purposes. A freeze restricts access to your credit report to help prevent new-account fraud. A fraud alert tells businesses to verify your identity before granting new credit. Freezes are free to place and lift; request them separately from Equifax, Experian, and TransUnion. [S2]
Visit IdentityTheft.gov to report the theft and obtain an FTC Identity Theft Report and a recovery plan tailored to the information you provide. Follow that plan's instructions for affected accounts and credit reporting. [S3]
Keep an organized folder of reports, correspondence, confirmation numbers, and dates. A recovery plan gives you a sequence to follow; it is not a promise that every account will be corrected immediately.
For related information, read our identity-theft reporting guidance and credit education resources.
Separate immediate protection from credit-report cleanup
It helps to maintain two lists: actions that prevent further misuse and actions that correct the existing damage. A credit-report correction does not secure a compromised email account. Changing a password does not remove a fraudulent loan from a report.
Use independently verified contact details for each affected business. Do not follow payment instructions from an unexpected caller claiming to be a fraud investigator. The CFPB’s identity-theft guidance warns about impersonators and explains credit-report protections.
- Identify the accounts and contact channels that may be compromised.
- Contact the affected business’s fraud department and ask what protective action and documentation it needs.
- Secure affected credentials and review account access.
- Document the fraudulent activity and follow your IdentityTheft.gov recovery plan.
- Track the separate responses from each business and reporting company.
Credit freeze versus fraud alert
A freeze restricts new creditors’ access to your file; an alert calls for identity verification. Neither tool removes an existing fraudulent account. A freeze also does not stop misuse of an already-open account.
- Freeze: request it separately at all three nationwide bureaus. Keep the account-access instructions secure so you can lift the freeze when appropriate.
- Initial fraud alert: contact one nationwide bureau, which must notify the others. It generally lasts one year and can be renewed.
- Extended alert: identity-theft victims with the required report may qualify for a seven-year alert.
These protections are free. Follow the FTC’s freeze and alert instructions and check what a prospective lender needs before arranging a temporary lift. Paying for monitoring is not a prerequisite to using a free freeze.
Request correction using an identity-theft document package
A block of fraudulent information is a distinct protection; it is not the same as an ordinary dispute or a temporary freeze. The CFPB describes submitting an identity-theft report, proof of identity, and a letter identifying the fraudulent debts or entries. Identify the information resulting from theft and state truthfully that the transactions were not yours.
Under the applicable process, fraudulent information generally must be blocked within four business days after the bureau receives the required material. That is not a promise that every document package is sufficient or that every claim qualifies. A bureau can decline or rescind a block in specified circumstances, including incorrect information or an account not caused by identity theft. Ask what is missing if a request is rejected, and save the written explanation.
Use a recovery tracker
For each affected account, record the business, partial account identifier, date discovered, report or case number, documents sent, delivery confirmation, and next action. Store identity documents securely; avoid putting full identifiers in a shared checklist.
Hypothetical example: one bureau removes a fraudulent collection while another still displays it. Keep the removal letter, but separately check what the second bureau received and how it answered. One company’s result does not prove that every company has completed its work.
Practical questions
Does an unfamiliar company name prove identity theft?
No. A creditor’s reporting name or a collection company may differ from the name you remember. Compare your records and ask for identifying information through verified channels.
Does an FTC report finish the recovery?
No. It supports a recovery process; affected businesses and bureaus may need their own submissions. Keep following the personalized plan.
What if a collector contacts me about the fraudulent account?
Keep the letter and relevant deadlines. Explain the identity-theft issue through the appropriate process and retain copies. Credit reporting, collection responses, and court deadlines are separate matters; get qualified legal help for court papers.
Additional educational guidance prepared with AI assistance. Sources reviewed October 22, 2026.
Sources for this practical guide
Educational information only, not individualized legal advice. Outcomes depend on the facts and applicable procedures. Use identity-theft reporting only for activity you truthfully believe was unauthorized.
Official sources
Sources checked October 6, 2026.