FCRA §605B fraud block: removing identity-theft accounts in 4 business days
If an account on your credit report was opened by an identity thief, federal law gives you a fast-track removal path: FCRA §605B. Bureaus must block fraudulent items within 4 business days of receiving your identity-theft report. This is dramatically faster than a regular dispute (30 days) — but you have to follow the procedure exactly. Here's the playbook.
What §605B requires
FCRA §605B (15 U.S.C. §1681c-2) requires that credit bureaus, upon receipt of:
- An identity-theft report (typically the FTC IdentityTheft.gov affidavit)
- The consumer's identification information
- A list of the items resulting from identity theft
...block the disputed information from the consumer's file within 4 business days of receipt. The bureau must also notify the furnisher that the items are blocked.
How to file an §605B request
Three documents required:
- FTC Identity Theft Report: file at IdentityTheft.gov. Free, takes ~20 minutes. Generates a formal affidavit number.
- Police report: file with your local police. Some bureaus require this in addition to the FTC report.
- Photo ID + proof of address: government ID + utility bill from the past 60 days.
Mail to each bureau Certified with Return Receipt. Letter must:
- Cite §605B specifically
- List each fraudulent account with creditor + last 4 of account number
- State you did not authorize, open, or benefit from any of these accounts
- Demand the 4-business-day block per statute
What happens after the bureau receives it
The bureau has 4 business days to:
- Block the disputed items from your credit report
- Notify the furnisher (creditor) that the items are blocked
- Send you confirmation of the block
The furnisher can challenge the block by providing documentation that the consumer did open the account. Without that documentation, the block stays — and after the items are blocked for an extended period, they're typically deleted entirely.
Pair with an extended fraud alert
While you're at it, file an extended fraud alert with all three bureaus under FCRA §605A. Lasts 7 years. Requires creditors to take "reasonable steps" to verify your identity before opening new accounts in your name — significantly harder for thieves to keep using your file.
You only need to file with one bureau (Equifax, Experian, or TransUnion); they're required to notify the other two.
Common questions
What counts as an identity-theft report?
The FTC IdentityTheft.gov affidavit is the standard. Some bureaus also accept police reports or sworn statements with an FTC affidavit number attached. The IdentityTheft.gov flow generates everything you need in ~20 minutes.
Do I need a police report to invoke §605B?
Statute doesn't strictly require it, but bureaus often demand one as part of the documentation package. Filing a police report is also useful for the broader identity-theft cleanup (creditor disputes, ChexSystems, IRS PIN, etc.).
How is §605B different from a regular dispute?
Regular dispute: 30 days for bureau response, item may or may not come off. §605B fraud block: 4 business days mandatory block. Different statute, different speed, different proof burden (you must prove identity theft, not just inaccuracy).
Does CreditCougar handle §605B fraud blocks?
Yes. When you classify a tradeline as 'fraud / identity theft' in the wizard, we generate an §605B fraud-block letter (separate from the standard §611 dispute letter). You'll need the FTC IdentityTheft.gov affidavit; we generate the bureau letter and bundle the documents in the print packet.
Ready to act on this?
CreditCougar runs the full Cougar Method against your credit report — automatically.
Start the hunt — $1 trial