Consumer letter template

Identity Theft Credit Block Demand Letter (FCRA § 605B Free Template)

Someone opened accounts or ran up charges in your name, and now those fraudulent items are wrecking your credit report. Federal law gives you a fast, specific remedy: send the credit bureau an identity theft report and it must block the information within 4 business days. This letter cites the exact statute and demands both the block and that the furnisher stop reporting the debt.

Jump to letterHow to useState notesFAQ

the letter

Copy, customize, send.

[Your Full Name]
  [Address]
  [City, State ZIP]
  [Phone] [Email]
  [Last 4 of SSN: XXX-XX-____]  [Date of birth: __/__/____]

  [Date]

  [Equifax / Experian / TransUnion — Fraud / Identity Theft Department]
  [Bureau Address — see "How to use" for the current addresses]

  Sent via certified mail, return receipt requested

  Re: Request to BLOCK information resulting from identity theft under FCRA § 605B (15 U.S.C. § 1681c-2) — Consumer [Your Full Name], file/report no. [if known]

  To the Identity Theft / Fraud Department:

  I am a victim of identity theft. Under the Fair Credit Reporting Act § 605B, 15 U.S.C. § 1681c-2, I am requesting that you BLOCK the information identified below from my credit file, because it resulted from identity theft and does not relate to any transaction made by me.

  This letter and its enclosures provide the four things the statute requires you to act on:

    1. Appropriate proof of my identity — [enclosed: copy of my government-issued photo ID; a utility bill or bank statement showing my current address; and the identifying information above].
    2. A copy of my identity theft report — [enclosed: my FTC Identity Theft Report from IdentityTheft.gov, report no. [____]; and, if filed, a copy of my police report no. [____] from the [Police Department], filed [date]].
    3. Identification of the information to be blocked — listed below, item by item.
    4. My statement, under penalty of the false-filing provisions of my identity theft report, that none of the information below relates to any transaction made by me.

  Information resulting from identity theft — BLOCK each of the following:

    • Account / tradeline: [Furnisher / creditor name], account no. [____], opened [date], balance $[amount]. I never opened or authorized this account.
    • Inquiry: [Company name], dated [date]. I never applied for credit with this company.
    • Collection item: [Collection agency], original creditor [name], amount $[amount]. This debt is not mine and arose from identity theft.
    • [Add every fraudulent account, inquiry, collection, or public record. Circle them on the enclosed copy of my credit report.]

  Legal basis:

    Block by the credit bureau — FCRA § 605B (15 U.S.C. § 1681c-2). A consumer reporting agency "shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than 4 business days after the date of receipt" of (1) appropriate proof of identity, (2) a copy of an identity theft report, (3) the consumer's identification of the information, and (4) a statement that the information does not relate to any transaction by the consumer. § 605B(b) further requires you to "promptly notify the furnisher" that the information may be a result of identity theft, that an identity theft report has been filed, that a block has been requested, and the effective dates of the block. The four-business-day clock starts on your receipt of this letter and its enclosures.

    What an identity theft report is — FCRA § 603(q)(4) (15 U.S.C. § 1681a(q)(4)) and the FTC rule at 16 C.F.R. § 603.3. An identity theft report "alleges an identity theft with as much specificity as the consumer can provide" and is a copy of an official, valid report filed with a Federal, State, or local law enforcement agency (the FTC Identity Theft Report from IdentityTheft.gov qualifies). I have provided that report. If you reasonably need additional documentation, 16 C.F.R. § 603.3(a)(3) requires you to request it within 15 days; I will supply it promptly. A blanket refusal to block without a timely, specific request is not authorized.

    Furnisher's duty to stop reporting — FCRA § 623(a)(6) (15 U.S.C. § 1681s-2(a)(6)). I am sending a copy of this letter to the furnisher named above. The furnisher must "have in place reasonable procedures to respond to" your § 605B notification "to prevent that person from refurnishing such blocked information," and, having received my identity theft report, "may not furnish such information that purports to relate to the consumer to any consumer reporting agency, unless the person subsequently knows or is informed by the consumer that the information is correct." It is not correct. Stop reporting it.

    My right to the fraud records — FCRA § 609(e) (15 U.S.C. § 1681g(e)). I am also entitled to obtain, without charge and within 30 days of request, the application and business transaction records evidencing the fraudulent accounts. [Include only if also writing the furnisher: I request those records now.]

  Demand:

    1. Within 4 business days of receipt, BLOCK each item listed above from my credit file under § 605B.
    2. Promptly notify each furnisher of the block, as § 605B(b) requires.
    3. Send me written confirmation of the block and an updated copy of my credit report reflecting the removed items.
    4. [To the furnisher:] Cease furnishing the blocked information to any consumer reporting agency under § 623(a)(6), and provide the § 609(e) business records within 30 days.

  You may decline or rescind a block only on the narrow grounds in § 605B(c) — that the block was made in error, that I made a material misrepresentation, or that I obtained goods, services, or money as a result of the blocked transaction. None applies here, and if you assert one you must notify me in writing and state which.

  Please direct all correspondence to me at the address above.

  Sincerely,

  [Your Signature]
  [Your Printed Name]

  Enclosures:
    • FTC Identity Theft Report (IdentityTheft.gov) [and police report, if filed]
    • Copy of government-issued photo ID
    • Proof of current address (utility bill / bank statement)
    • Copy of credit report with fraudulent items circled
    • [FTC Identity Theft Victim's Complaint and Affidavit, if used]

This template is for informational use only. It is not legal advice and does not create an attorney-client relationship. Square-bracketed placeholders must be replaced with your specific facts. State law and procedural details vary; if your situation is urgent, complicated, or high-stakes, email info@imfrustrated.org for a free conversation with a volunteer attorney before you send it.

how to use it

A few things before you send.

  • 1First, create your FTC Identity Theft Report at IdentityTheft.gov — it walks you through the report and generates a personalized recovery plan and a printable Identity Theft Report you can attach. This is the single most load-bearing enclosure: § 605B's 4-business-day block clock does not start until the bureau has a copy of an identity theft report plus proof of your identity.
  • 2Send a separate copy to EACH of the three nationwide bureaus that is reporting the fraud (Equifax, Experian, TransUnion) AND a copy to each furnisher (the bank, lender, or collection agency that reported the account). The bureau block stops the item from showing; the § 623(a)(6) notice to the furnisher stops it from coming back. Use the bureaus' current identity-theft/fraud department addresses (printed on your credit report or on each bureau's website) — do not use a generic dispute address.
  • 3Send by certified mail with return receipt requested and keep the green card. The certified receipt is what proves the date of receipt — and the date of receipt is what starts the statutory 4-business-day deadline. Enclose copies, never originals.
  • 4Identify the fraudulent items with surgical precision: pull a current credit report, circle every fraudulent account, inquiry, and collection, and list each one in the letter by creditor name, account number, date, and amount. Add your statement that none of it relates to a transaction you made — that exact statement is one of the four things § 605B requires.
  • 5Top mistake to avoid: do not file this as an ordinary 'dispute.' A § 605B identity-theft block is a separate, faster, stronger remedy than a § 611 dispute, and it shifts the burden to the bureau and furnisher. Also avoid blocking items that are actually yours — § 605B(c) lets the bureau rescind a block (and treat it as a misrepresentation) if you blocked a transaction you really made.

state variations

What changes by state.

Not a comprehensive list. Confirm your state’s current statute before sending.

All states (federal law)
FCRA § 605B (15 U.S.C. § 1681c-2) is federal and applies in all 50 states, DC, and the territories. The 4-business-day block, the § 623(a)(6) furnisher duty, and the § 609(e) records right are identical everywhere. State law only adds remedies on top — it never subtracts the federal block.
California
Adds the CCRAA (Cal. Civ. Code § 1785.16) and a strong identity-theft-judgment statute (Penal Code § 530.8 / Civ. Code § 1798.93) letting victims sue to establish they are not liable. Stronger state damages stack on the FCRA block.
Texas
Identity Theft Enforcement and Protection Act (Bus. & Com. Code Ch. 521) plus the right to a court order declaring identity theft (Bus. & Com. Code § 521.101). Send the FCRA § 605B block first; use the state order if a furnisher resists.
New York
Gen. Bus. Law §§ 380-s and 380-w give identity-theft victims credit-file security and blocking rights that parallel the FCRA. The federal § 605B letter is the primary tool; NY law adds backup leverage.
Florida
Fla. Stat. § 817.568 (criminal identity theft) and § 501.005 (security freeze) supplement the FCRA. File a police report to satisfy both the federal identity-theft-report requirement and any state proof demand.
Illinois
Identity Theft Protection portions of 815 ILCS 505 and the Consumer Fraud Act add state remedies. The FCRA § 605B block governs the credit file; state law supports a damages claim if the furnisher keeps reporting.
Pennsylvania
18 Pa. C.S. § 4120 (identity theft) plus the state credit-freeze statute. Use the FTC Identity Theft Report for the federal block and the police report for the state record.

if this doesn’t work

Your next move.

If the bureau misses the 4-business-day deadline, blocks nothing, or the furnisher keeps reporting the fraud, you have real escalation paths. File a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint (the CFPB routes FCRA complaints to the bureaus and tracks responses) and with the FTC at ReportFraud.ftc.gov. The FCRA carries a private right of action: § 616 (15 U.S.C. § 1681n) allows actual or statutory damages of $100-$1,000 per willful violation plus punitive damages, and § 617 (15 U.S.C. § 1681o) allows actual damages for negligent violations — both with attorney's fees and costs for a prevailing consumer, which is what makes a lawyer economical on contingency for these cases. Use § 609(e) to pull the fraud records so you can prove the account was never yours. The FCRA statute of limitations is generally the earlier of 2 years from discovery of the violation or 5 years from the violation (15 U.S.C. § 1681p), so do not sit on it. For a fraudulent debt that a collector is still chasing, pair this with a debt-validation request and, if needed, a cease-communication letter under the FDCPA.

questions people ask

FAQ.

What's the difference between a § 605B block and a regular credit dispute?

A regular dispute under FCRA § 611 asks the bureau to investigate whether an item is accurate, and the bureau gets about 30 days. A § 605B identity-theft block is faster and stronger: if you give the bureau proof of identity, an identity theft report, identification of the items, and a statement that they aren't your transactions, it must block them within 4 business days. Use the block, not an ordinary dispute, when the cause is identity theft.

Do I have to file a police report, or is the FTC Identity Theft Report enough?

The FTC Identity Theft Report you create at IdentityTheft.gov is designed to satisfy the FCRA's 'identity theft report' requirement, and the nationwide bureaus accept it. But under 16 C.F.R. § 603.3 a bureau or furnisher can reasonably ask for more documentation (within 15 days), and some still want a police report. Filing one removes the argument entirely, so file both if you can.

How fast does the credit bureau have to block the fraudulent items?

Not later than 4 business days after it receives all four required elements: proof of your identity, a copy of your identity theft report, your identification of the specific items, and your statement that the items don't relate to any transaction you made. The clock starts on the bureau's date of receipt, which is why certified mail with a return receipt matters.

The block worked, but the same account reappeared. What now?

That's a § 623(a)(6) violation by the furnisher. Once it has your identity theft report, the furnisher may not refurnish the blocked information unless it learns the information is actually correct, and it must have procedures to prevent re-reporting. Send the furnisher a copy of this letter, then file a CFPB complaint. Repeated re-reporting after notice is the kind of willful violation that supports statutory and punitive damages under § 616.

Can the bureau refuse to block, or undo a block later?

Only on narrow grounds. Under § 605B(c) a bureau may decline or rescind a block if it reasonably determines the block was made in error, that you made a material misrepresentation, or that you actually obtained goods, services, or money from the blocked transaction. If it does, it must notify you. That's also the warning: never use this letter to block a debt that is genuinely yours.

Can I get the records showing how the thief opened the account?

Yes. Under FCRA § 609(e) (15 U.S.C. § 1681g(e)), the business that opened the fraudulent account must give you copies of the application and transaction records, without charge, within 30 days of your request, once you provide proof of identity and either a police report or an FTC/standardized affidavit. Those records help you prove the fraud and identify the thief.

Nervous about sending it yourself?

we’ll read it over with you.

Email the situation and a volunteer attorney will respond. No commitment, no invoice, no judgment — just an honest second pair of eyes from someone who actually understands the law.

info@imfrustrated.org