What we checked to reach this conclusion
We cross-referenced the relevant federal statutes — the Fair Credit Reporting Act, the Fair Credit Billing Act, and the FTC's own guidance — with the dispute procedures published by all three major credit bureaus and the Consumer Financial Protection Bureau's complaint and recovery data. Where the official step-by-step guidance from government sources aligned with what consumer attorneys and fraud victims consistently report as effective, we treated that as confirmed. Where there were gaps or misleading shortcuts circulating online, we noted them in the "What Doesn't Work" section below.
-
Federal law reviewed — FCRA & FCBA Confirmed that consumers bear zero liability for unauthorized accounts under the Fair Credit Billing Act, and that bureaus must block fraudulent tradelines within four days of receiving an identity theft report under FCRA Section 605B.
-
FTC IdentityTheft.gov process verified Confirmed that an FTC Identity Theft Report carries the same legal weight as a police report for the purpose of disputing accounts and triggering bureau blocking obligations — and that most people don't need to file a separate police report unless the thief is known or the issuer specifically demands one.
-
Credit bureau freeze procedures confirmed Verified that security freezes are free at all three bureaus (Equifax, Experian, TransUnion) under federal law, take effect immediately online, and block new credit inquiries without affecting existing accounts or your ability to use current cards.
-
Card issuer fraud dispute process confirmed Confirmed that every major card issuer maintains a dedicated fraud department reachable by phone, and that disputes must be followed up in writing to trigger the issuer's formal investigation obligation and create a paper trail.
The situation calls for a sequence, not a single action — here's how to choose your depth of response
Most people only need the free, self-directed path — federal law makes it surprisingly straightforward. But depending on how serious the damage is and how uncooperative the card issuer turns out to be, you may want to escalate.
What people try first that wastes time or makes things worse
The internet is full of advice that sounds reasonable but either does nothing, delays your real remedy, or costs you money you don't need to spend.
-
Calling the card issuer and only disputing verbally — A phone call to the fraud line is a good first contact, but verbal disputes alone don't trigger the issuer's legal investigation obligation or create the paper trail you'll need if this escalates; always follow up in writing, certified mail, with your FTC report attached.
-
Paying for a "credit repair" service to handle this — Credit repair companies charge monthly fees — often $80–$150 — to do exactly what you can do for free using IdentityTheft.gov's pre-filled letters and the bureaus' own dispute portals; by law they cannot do anything for you that you cannot do yourself.
-
Waiting to see if the account shows up on your credit report before acting — Fraudulent accounts can take 30 to 60 days to appear on your report, and during that window the thief may be charging the card to its limit; freeze your credit and file your FTC report the moment you discover the fraud, even before the account appears in your file.
-
Filing a police report as your first step — Most people don't need a police report at all — an FTC Identity Theft Report is accepted by all bureaus and most card issuers as sufficient legal documentation, and it's faster to obtain; file a police report only if the card issuer specifically demands one or if you know the identity of the thief.
What others did
47 community results-
MR
I found out about the card when I got a welcome letter in the mail for a store credit card I'd never applied for. Froze all three bureaus that night — took maybe 20 minutes total. Filed the FTC report the next morning and used their pre-filled letters. The account was marked as fraud by the issuer within two weeks and disappeared from my Equifax report within 30 days. The whole thing cost me nothing except two certified mail stamps.
34 found this helpful -
DL
Someone opened a Capital One card in my name and ran up $1,800 before I caught it on my credit report. I was panicking and almost hired a credit repair company, but I came across this kind of guidance first. Did the freeze, the FTC report, and sent certified letters to all three bureaus plus Capital One's fraud department. Capital One investigated within 21 days, confirmed fraud, closed the account, and sent me a letter absolving me of the balance. Took about a month total but I owed nothing.
28 found this helpful -
TK
The freeze and FTC report worked perfectly to stop anything new from being opened. The dispute with the card issuer went smoothly too. But one of the credit bureaus — Experian in my case — was slow and initially denied my block request, saying they needed a police report in addition to the FTC report. I had to resubmit with a letter specifically citing FCRA Section 605B and my right to block fraudulent tradelines without a police report. The second submission worked. Don't let them tell you that you need a police report — you don't, the law is on your side — just cite the statute.
41 found this helpful
Did this solution work for you? Tell us what happened — it helps the next person.