Disputing Fraudulent Accounts and Getting Them Blocked
Use the ordinary FCRA dispute process for inaccuracies and the identity-theft block process for qualifying fraudulent information; they have different requirements and timelines.
A standard credit-report dispute and an identity-theft block are not interchangeable. A normal dispute asks a consumer reporting company to investigate information you believe is inaccurate or incomplete. An identity-theft block is a specific FCRA remedy for information that resulted from identity theft. CFPB guidance says a bureau must block qualifying information within four business days after receiving the required package. Ordinary disputes generally use a 30-day investigation period, with some circumstances allowing 45 days. Choosing the correct route at the start can save weeks of circular correspondence.
First decide whether the item is wrong or fraudulent
Suppose your own credit card shows the wrong balance after a payment. That is an accuracy dispute. Suppose a card you never opened appears under your name. That may be identity theft. The difference is not how upset you are or how damaging the entry is; it is whether the information resulted from a transaction you did not make because someone used your identity. Write a one-sentence statement of the problem before preparing the packet. If you cannot state why the item is identity theft, do not force it into the block process.
For a fraudulent account, contact the creditor’s fraud team as well as the bureau. Closing or restricting the account prevents additional activity, while the consumer-report process addresses what is being reported. Ask the creditor for a case number and whether it needs its own identity-theft affidavit or documents. The bureau and furnisher may investigate in parallel, so keep a single timeline that shows what each organization received.
The identity-theft block packet has four essential parts
CFPB describes a package that includes proof of your identity, an identity-theft report, identification of the information that resulted from identity theft, and a statement that the information is not related to a transaction by you. Mark the exact tradeline, inquiry, or other information on a copy of the report. If there are several fraudulent items, label them clearly rather than sending an unannotated fifty-page report.
A block request is not stronger because it contains more documents. Extra tax returns, medical records, or full bank statements can expose sensitive information without helping the bureau decide whether the identified item resulted from identity theft. Follow the bureau’s current instructions and provide what is necessary for that request. Keep the submission confirmation, certified-mail receipt, fax record, or portal screenshot showing the date.
| Path | Use it when | Typical federal timing to know | Core evidence |
|---|---|---|---|
| Ordinary FCRA dispute | Your real account or report information is inaccurate or incomplete | Generally 30 days; some circumstances can extend to 45 days | Marked report item plus documents showing the correct information |
| Identity-theft block | The reported information resulted from identity theft | CFPB says qualifying information must be blocked within four business days after the required package is received | Proof of identity, identity-theft report, identified fraudulent information, and required statement |
| Creditor/furnisher fraud case | The account itself is unauthorized or still active | Depends on the institution and product | Fraud report, account details, transaction/application evidence |
| Regulator complaint | A well-documented process has stalled or a company is not addressing the legal issue | No universal resolution clock | Chronology, copies of submissions, responses, and the precise unresolved problem |
Send a parallel notice to the furnisher when it helps
The furnisher is the company that supplied information to the bureau, such as a lender or card issuer. If the account is fraudulent, its records are often where the false application originated. Tell the furnisher exactly which account is not yours, include the fraud case or Identity Theft Report information it requests, and ask for written confirmation of the outcome. If the bureau deletes an item but the furnisher continues resubmitting it, the record of your direct notice becomes important.
Do not mail original identity documents. Use copies and redact data the recipient does not need when the instructions allow it. Keep every outgoing packet as a PDF with a filename that includes the bureau or creditor and date. Six months later, “TransUnion_block_2026-09-07.pdf” is far more useful than a camera roll of unlabeled screenshots.
Read the bureau response like a decision document
When the bureau responds, compare the result to the exact item you challenged. Was it blocked, deleted, updated, verified, or rejected because information was missing? Do not treat “investigation complete” as synonymous with “the fraud is fixed.” Save the updated report and response letter. If a block was declined because the packet lacked required material, cure the deficiency. If the company says the account is yours despite strong identity-theft evidence, ask the furnisher for the application and transaction records that support that conclusion.
For account-specific dispute packets and recovery sequences beyond the credit-report layer, consult {{BACKLINK_2}} and keep each request tied to the actual product or institution involved.
A concise dispute letter beats a dramatic one
Your letter should identify you, identify the report item, state the requested action, explain the factual basis, and list the enclosures. Avoid accusations you cannot prove or pages of general identity-theft narrative. The reviewer needs to know which line on the report is disputed and why. If you are invoking the identity-theft block, say so and make the required documents easy to find. If it is an ordinary accuracy dispute, state the correct information and attach the record that proves it.
Escalate from a complete file, not from memory
If the matter remains unresolved, your recovery log should show the date of the first bureau submission, the date and content of each response, the furnisher case, the FTC report number, and any missing or contradictory information. That file can support a CFPB complaint or legal consultation. The goal is not to threaten escalation early; it is to make escalation effective if the ordinary correction paths fail. A complete chronology also prevents you from restarting the same dispute with slightly different wording and losing track of which evidence produced which result.
Close the item only when the underlying record matches the outcome
A case is not finished because a call center said “we took care of it.” Recheck the credit report and creditor account. Confirm that the fraudulent tradeline or inquiry is blocked or removed as expected and that the unauthorized account is closed or otherwise resolved. Preserve the final report and letter. Continue preventive freezes or monitoring as appropriate, but separate that future-risk management from the completed correction of this specific item.
Questions specific to Disputing Fraudulent Accounts and Getting Them Blocked
What is the four-business-day identity-theft block rule?
CFPB states that a consumer reporting company must block qualifying identity-theft information within four business days after receiving the required documentation package. The package requirements matter; an incomplete submission may not trigger the same result.
Are all credit disputes supposed to be completed in four days?
No. The four-business-day rule is for qualifying identity-theft blocks. Ordinary FCRA disputes generally use a 30-day investigation period, with some circumstances allowing 45 days.
Should I dispute with the bureau or the lender?
Often both. The bureau controls its report, while the lender or other furnisher controls the source account and the data it supplies. A coordinated paper trail can resolve both the account and the reporting.
What should I keep after the item is removed?
Keep the bureau response, updated report, Identity Theft Report, creditor correspondence, and proof of submission. Fraudulent information can reappear or related accounts can surface later, so the history remains useful.