An identity theft report is a report of identity theft filed with a government law enforcement agency, where filing false information carries criminal penalties. Most people create one through the FTC at IdentityTheft.gov; a police report can also qualify.
An identity theft report is the key document that unlocks several FCRA protections for identity theft victims.
The legal definition
Regulation V defines an identity theft report as a report that (12 CFR § 1022.3(i)):
- alleges identity theft with as much specificity as the consumer can provide;
- is a copy of an official, valid report filed with a federal, state, or local law enforcement agency, the filing of which subjects the person to criminal penalties if the information is false; and
- may include additional information or documentation that a furnisher or bureau reasonably requests to determine the validity of the alleged theft.
How to get one
- IdentityTheft.gov. The FTC’s site walks you through reporting the theft and provides a personal recovery plan and pre-filled letters to credit bureaus, businesses, and debt collectors. The report you file there is commonly used as the identity theft report in letters to the bureaus.
- Police report. A report filed with your local police department can also qualify. Some businesses may ask for one in addition to the FTC report.
Describe each fraudulent account, inquiry, and address in detail. Vague reports can lead to requests for more information.
What it lets you do
With an identity theft report you can:
- request that each bureau block fraudulent information within 4 business days (15 U.S.C. § 1681c-2);
- place an extended fraud alert lasting 7 years (§ 1681c-1(b)); and
- send it to furnishers that reported the fraudulent accounts.
Requests for more information
A bureau or furnisher may ask for additional information, but Regulation V sets time limits: generally within 15 days after receiving the report (or your request, whichever is later), with a final decision within another 15 days, extended by 5 days if you submit information on day 11 or later of that period (§ 1022.3(i)(1)(iii)).
See identity theft and your credit report for next steps.
Related
Sources
- 12 CFR § 1022.3(i) — Definition of identity theft report (Cornell LII)
- 15 U.S.C. § 1681a — Definitions (Cornell LII)
- FTC — What To Know About Identity Theft
- IdentityTheft.gov — Sample Identity Theft Letter to a Credit Bureau
Updated November 2026. This page is general information, not legal advice.