Someone Opened an Account in Your Name? Here's Exactly What to Do

First 24 Hours: The Short List

1) Call the fraud department of the company where the account was opened, tell them it is fraud, and ask them to close or freeze it. Write down who you spoke with and when. 2) Place a free fraud alert with one credit bureau — that bureau must notify the other two. 3) Go to IdentityTheft.gov and file a report; it generates your FTC Identity Theft Report and a personal recovery plan. 4) Pull all three credit reports free at AnnualCreditReport.com and list every account or inquiry you don't recognize.

Then breathe. Under federal law you are generally not responsible for debts a thief ran up in your name once you report them, and the bureaus are required to block fraudulent information when you send a valid identity theft report.

What Is an Identity Theft Affidavit?

An identity theft affidavit is a signed statement, made under penalty of perjury, that someone used your personal information without permission and which accounts or debts are not yours. Today the standard version is the FTC Identity Theft Report you create at IdentityTheft.gov. The FTC replaced its older paper affidavit form with this online report, which counts as an official identity theft report for credit bureaus and most creditors.

It matters because the Fair Credit Reporting Act gives special rights to people who have an identity theft report: bureaus must block fraudulent accounts within four business days of receiving one (15 U.S.C. § 1681c-2), and you can get an extended seven-year fraud alert.

How to Fill Out an Identity Theft Affidavit

At IdentityTheft.gov, choose "Report identity theft," then answer the guided questions: what was misused (credit card, loan, utilities, tax refund, benefits), the company name, the approximate date, and the amount if you know it. Add every fraudulent account you found on your reports. Enter your contact details accurately, because creditors use them to confirm the report is yours.

Before you submit, create an account or save the PDF — if you skip that step, you cannot return and download the report later. Print it, sign where indicated, and keep copies. Be precise and honest: knowingly filing a false identity theft report to remove debts that really are yours is a crime.

Does an Identity Theft Affidavit Need to Be Notarized?

Usually no. The FTC Identity Theft Report is signed under penalty of perjury and is not normally notarized. A few creditors or debt collectors have their own fraud affidavit forms and may ask for a notary; if one does, a bank branch or shipping store notary is usually inexpensive or free for customers.

A police report is optional for most credit-bureau steps. Some creditors still request one, and it can help if a thief's activity is ongoing or you know who did it. If you file one, attach a copy alongside your FTC report.

Where to Mail Your Identity Theft Affidavit

Do not mail it to the FTC — they already have it. Send copies to: each credit bureau reporting a fraudulent account, along with proof of identity and a letter asking them to block the listed items; and the fraud department of each company where an account was opened in your name. Use certified mail with return receipt so you have proof of delivery.

Bureau mailing addresses, phone numbers, and online upload options are listed on our credit bureau contact page. Many bureaus also accept identity theft reports through their online dispute portals.

Freeze Your Credit (Free, and the Strongest Lock)

A credit freeze stops lenders from pulling your report, which blocks most new accounts from being opened in your name. It is free by law at Equifax, Experian, and TransUnion, does not affect your score, and you can lift it temporarily when you need to apply for credit. Unlike a fraud alert, you must place a freeze separately at each of the three bureaus.

Fraud alert vs. freeze: an alert tells lenders to verify your identity before approving credit and lasts one year (seven with an identity theft report). A freeze blocks access completely. Many victims do both.

Getting Fraudulent Accounts Removed From Your Credit Report

Send each bureau your FTC Identity Theft Report, proof of identity, and a list of the fraudulent accounts and inquiries. They must block those items within four business days unless they have a reasonable basis to believe the request is wrong. Separately, ask each creditor for records of the fraudulent account — you are entitled to them under 15 U.S.C. § 1681g(e).

If a fraudulent account keeps coming back or a bureau refuses, follow the escalation steps in our verified-but-still-wrong guide, including a CFPB complaint. If your score fell suddenly, our score-drop checker can help confirm whether fraud is the cause.

Frequently asked questions