How to File an Identity Theft Report

Last updated: August 11, 2026

Quick Answer: A stolen name, Social Security number, bank account, or tax record calls for fast action: file an identity theft report and lock down the accounts tied to the theft. Many people start with the FTC report; in a lot of cases, 1 FTC report plus 1 police report is what a creditor or lender wants before it takes the claim seriously. This article explains how file an identity theft report and when the FTC report is enough.

Key facts
– The FTC report starts at IdentityTheft.gov.
– A police report is sometimes required in addition to the FTC report.
– If your credit file is affected, freeze all 3 bureaus: Equifax, Experian, and TransUnion.
– For tax identity theft, the IRS has separate identity protection steps.
– For cyber-enabled fraud, the FBI’s Internet Crime Complaint Center can be part of the record.
– A precise report is stronger than a vague one: include dates, company names, and dollar amounts.

A stolen name, Social Security number, bank account, or tax record calls for fast action: file an identity theft report and lock down the accounts tied to the theft. I’m talking about how file an identity theft report so you can challenge fake accounts, freeze your credit, and make lenders or collectors take the claim seriously. Which report you need depends on the situation — FTC, police, or both.

What an Identity Theft Report Actually Does

Fake accounts. Loan fraud. Tax fraud. A collector chasing debt you never opened. If that is the problem, the report is not just paperwork; it becomes the center of the cleanup. But when you only lost a wallet and nothing has been misused yet, a fraud alert, card freeze, and password reset may help more right away. Different tools, different jobs.

The Federal Trade Commission’s identity theft report is the standard starting point for most people, and it lives here: IdentityTheft.gov. The FTC site helps you build a recovery plan and generate an Identity Theft Affidavit. In some situations, especially when a creditor wants local proof or police involvement matters, you also need to file with your local police department. The FTC explains how the report can help you block fraudulent information from credit files and deal with debt collectors.

One report will not magically wipe the slate clean. Not even close. It gives you ammunition; you still have to use it through the credit bureaus, banks, and companies involved. That’s the part generic advice usually blurs over.

1. Gather the proof you already have: unfamiliar accounts, collections notices, bank statements, IRS letters, screenshots, or mail you did not request.
2. Go to IdentityTheft.gov and start the report. Use a real email address you control.
3. List every affected account, company, and type of misuse you know about.
4. Save and print the FTC recovery plan and affidavit when the site generates them.
5. Use the report immediately through the credit bureaus, banks, and any lender tied to the fraud.

Quick check: need a document to fight fraudulent accounts or debt? Then you need an identity theft report. Need to stop card use first? That calls for a faster move.

File the FTC Identity Theft Report First If You Need a Clear Paper Trail

No obvious starting point? Want one central record that follows the case? Start with the FTC report. That is often the best first move when fraud shows up on a credit report, a collections notice, a suspicious tax filing, or a strange bank account. Yet when your bank already caught the fraud and closed the card, the FTC report helps with cleanup rather than the damage already underway.

I’d use IdentityTheft.gov first because it forces the facts into a structured form instead of making you guess what to say. The site walks you through the fraud type and generates a personalized recovery plan. Useful, honestly. The next move depends on the kind of identity theft you’re dealing with.

1. Open [IdentityTheft.gov](https://www.identitytheft.gov/) and choose the theft type that fits best.
2. Describe the fraud in plain language: account opening, card misuse, tax fraud, medical identity theft, or something else.
3. List every company, account number, date, and dollar amount you know.
4. Review the generated report and save copies in PDF and print form.
5. Use the report to contact the affected creditor, bank, or collector and say you are disputing identity theft.
6. Send copies only where needed; do not hand out the full report to everyone if a narrower document will do.

The trade-off is simple: the FTC report is broad and useful, but some institutions still want a police report or extra identity proof before they will remove an account or stop collection activity. Fair or not, that is how it works. So make the FTC report first.

If a single card was already reversed by the issuer, you may not need to spend hours building every detail before you freeze credit and change passwords. But if the fraud touches your credit file, the time is well spent.

Quick check: need a standard national paper trail for multiple institutions? Start at IdentityTheft.gov.

When You Also Need a Police Report

When fraud is being used to open accounts, rent property, or drain more than one institution, the FTC report alone may not be enough. In those cases, a local police report can help when a creditor wants stronger proof or when you need a report number for a specific dispute. But when the theft is minor, and especially when you do not know where the misuse occurred, some police departments may not take a detailed report or may route you back to the FTC first.

Here’s the piece people miss: the police report does not replace the FTC report. It usually sits beside it. Use it when a lender, landlord, or debt collector says they need a local report, or when the fraud involves a stolen wallet, mailed documents, or a crime scene your police department can document.

1. Call your local police department’s non-emergency line and ask whether they take identity theft reports.
2. Ask what documentation they want before you go in: FTC report, ID, proof of address, account statements, or a written timeline.
3. Bring a clean summary of what happened, plus copies of the evidence and the FTC report if you already filed one.
4. Get the report number, the officer’s name, and a copy or instructions for obtaining one later.
5. Send the police report together with the FTC report to the creditor or bureau that asked for it.

If your local department refuses to take the report, ask for the reason in writing if possible. Then keep the rejection with your records and continue with the FTC report, credit freezes, and disputes. Annoying? Absolutely. Still, the paper trail matters more than the label on the report.

Before you file, one source is worth a look: the FBI’s guidance on reporting cyber-enabled fraud through the Internet Crime Complaint Center, especially if the theft came through email compromise, phishing, or online account takeover. Not a substitute. Just another piece of the record.

Quick check: a creditor, landlord, or local agency wants a police report? You probably need both reports, not one or the other.

The 3 Conditions That Change Everything

For a simple case, the standard route works. But if any of these three conditions are true, the order changes.

Tax trouble changes the script fast. Don’t start with the credit bureaus and assume that covers it. You need the IRS side too. The IRS has its own identity theft and taxpayer protection procedures, including the Identity Protection PIN program. Separate track. Different lane.

If the theft happened online through a hacked email, password reuse, or a phishing link, change passwords on the affected email and financial accounts before spending too long on the report narrative. Otherwise the thief may still be inside your inbox, which is a nasty little problem. They can intercept recovery messages and keep the damage going.

Medical identity theft is different again. Save every explanation of benefits and bill. Providers often need more than a generic fraud statement because their systems may attach your identity to treatment records. The FTC report helps, but you may also need each provider’s billing office and the insurer’s fraud team. If the billing office asks for a specific form, consult the provider’s fraud or privacy team and follow the instructions they give; this kind of case can vary by insurer and hospital. The FTC’s guidance on medical identity theft is a useful starting point.

Quick check: tax, cyber, or medical identity theft? Then the usual “just file a report and wait” advice is not enough.

What to Put in the Report So It Is Actually Useful

Vague facts make a weak report. Tight timelines and the right identifiers make it stronger. So include account names, dates, last four digits when available, who contacted you, and what exactly changed.

Your report should answer five questions: What was misused? When did you notice it? Which company or agency is involved? What did the thief do? What proof do you have? Plenty of people skip the proof part because they think the report itself is proof. It isn’t.

1. Write a one-paragraph timeline from the first sign of trouble to today.
2. List every fraudulent account, charge, collection notice, or tax document you found.
3. Record the exact company names, account numbers, and dates shown on statements or letters.
4. Attach or save screenshots, letters, emails, and credit reports that support each claim.
5. Keep one master folder with the FTC report, police report, and every dispute letter you send.

Don’t exaggerate the loss. Don’t guess at dates if you can avoid it. If you do not know a fact, say you do not know it. A precise, honest report beats a dramatic one with fuzzy details every time.

I’d also keep a written log of every phone call: date, company, department, agent name, and what they promised. That log helps when a lender says you never disputed the account, or when a collector keeps calling after you sent the report.

Quick check: if your notes could not help someone else understand the fraud in five minutes, tighten them before you file.

Edge Cases Where the Usual Advice Breaks Down

If your case looks unusual, the standard checklist can point you sideways. These are the situations that most often need a different move.

• Situation: the thief used your Social Security number but opened nothing yet.
  What changes: the damage may be invisible for a while.
  What to do instead: file the FTC report, freeze your credit with all three bureaus, and consider placing a fraud alert. The report is useful for the record; the freeze is what blocks new accounts.

• Situation: a child’s identity was used.
  What changes: the credit file may be thin or nonexistent, so the cleanup is different.
  What to do instead: check whether a file exists, then follow the bureau’s minor-report process and keep guardianship or custody documents handy.

• Situation: the fraud came from a data breach, not a stolen wallet.
  What changes: one breach can affect many people, and the thief may not yet have used the data.
  What to do instead: still file the report if misuse appears, but prioritize freezes, password changes, and breach-specific monitoring because the leak itself is the risk.

• Situation: the collector says the debt is “too old” to matter.
  What changes: old fraud can still poison your credit file.
  What to do instead: dispute the account anyway and send the identity theft report. Age does not make a fraudulent account legitimate.

• Situation: the fraud involves unemployment, benefits, or government accounts.
  What changes: the agency involved often has its own fraud unit and forms.
  What to do instead: file the agency’s fraud report in addition to the FTC report; do not assume the FTC alone will fix it.

• Situation: the thief is someone you know.
  What changes: emotional pressure often stops people from reporting.
  What to do instead: document the misuse like any other fraud and use the report to protect your accounts. Personal ties do not make the theft less real.

Quick check: child identity theft, a breach, government benefits, or someone you know? Then the standard one-size-fits-all path is not the answer.

After You File: The Next Moves That Matter

If the report is filed but the accounts are still open, you are not done. The report is step one in a cleanup sequence. What happens next depends on where the fraud landed.

1. Freeze your credit with Equifax, Experian, and TransUnion if new accounts are the problem.
2. Dispute each fraudulent account separately with the creditor and credit bureau.
3. Replace compromised cards and review email, banking, and payment apps for unauthorized access.
4. Set up alerts where you can: bank notifications, credit monitoring you already have, and account login alerts.
5. Keep all evidence, because collections problems and credit-file disputes often resurface months later.

For debt collectors, send your identity theft report in writing and keep proof that you sent it. For a bank, ask for the fraud department, not just customer service. For a credit bureau, use the bureau’s identity theft dispute process rather than a generic dispute when the account is outright fake.

Hard truth: some cleanup takes time. A report does not force every institution to agree with you on the first call. It gives you a stronger position when you insist that the account is not yours.

Quick check: filed the report but haven’t frozen credit or disputed each bad account? Then the job is only half done.

FAQ

Do I need a police report to file an identity theft report?

No. You can start with the FTC

Admin