How FCRA Section 605B Protects Identity Theft Victims
Understand how FCRA Section 605B helps you block fraudulent credit report entries and restore your financial reputation.
When you are a victim of identity theft, fraudulent accounts and charges can quickly damage your credit history and make everyday financial tasks more difficult. Section 605B of the Fair Credit Reporting Act (FCRA) gives you a powerful tool: the right to have consumer reporting agencies block information that stems from identity theft from appearing in your credit file.
This article explains how Section 605B works, what you need to do as a consumer, and what obligations apply to credit bureaus, information furnishers, and resellers.
Overview of Section 605B and Identity Theft Blocks
Section 605B of the FCRA (codified at 15 U.S.C. 1681c-2) requires consumer reporting agencies to block reporting of information that a consumer identifies as the result of identity theft, when the consumer provides specified documentation and statements.
The purpose of this provision is to prevent continued harm from fraudulent accounts or transactions by removing that information from credit reports used by creditors, insurers, employers, and other users of consumer reports.
| Key Feature | What It Means |
|---|---|
| Blocking obligation | Nationwide and other consumer reporting agencies must block identity theft–related items from a file when legal conditions are met. |
| Timeline | The block must be in place not later than four business days after the agency receives required documents and the consumer’s statement. |
| Scope | The block applies to information in the consumer’s file that resulted from alleged identity theft, not to all negative information. |
| Authority to rescind | Agencies may decline or later remove a block if certain misuse or error conditions exist, but must notify the consumer. |
Your Rights as an Identity Theft Victim Under 605B
The Future of AI: Preventing a Big Tech Monopoly >
As a consumer whose identity has been misused, Section 605B gives you specific rights related to your credit report:
- The right to request a block of information in your credit file that you identify as resulting from identity theft.
- The right to a timely response, with a block imposed within four business days after the reporting agency receives the required documentation.
- The right to notification if the credit bureau declines or later rescinds the block, including the specific reasons for that decision.
- The right to access underlying records related to fraudulent accounts or transactions from certain creditors and businesses, in many cases, to help you and law enforcement investigate.
These protections work alongside other FCRA tools such as fraud alerts and credit freezes, which are addressed in related sections of the statute but complement the blocking process.
What You Must Provide to Request a Block
Consumer reporting agencies do not block information automatically. Section 605B requires agencies to act once you deliver certain items that show you are the victim of identity theft and that the disputed information is not yours.
Required items for a valid 605B request
To trigger the four-business-day blocking obligation, you generally must provide:
- Proof of identity
Enough information for the credit bureau to verify that you are the correct consumer, such as copies of government-issued identification, proof of address, or other identifying documents, consistent with the bureau’s policies. - A copy of an identity theft report
Typically this is a report filed with law enforcement or an equivalent report recognized under federal law as an identity theft report. Official guidance stresses the need for a formal report to support blocking requests. - Identification of fraudulent information
A clear indication of which accounts, inquiries, or tradelines in your credit file arose from identity theft. You must specify the disputed items so the agency knows what to block. - A statement that the information is not yours
A signed statement asserting that the identified information does not relate to any transaction you made or authorized, and that it resulted from identity theft.
Credit bureaus may provide sample forms or preferred formats, but they must honor valid requests that meet the statutory criteria even if you do not use a particular company’s template.
How Consumer Reporting Agencies Must Respond
Once a consumer reporting agency receives all required items, Section 605B establishes a strict timeline and concrete duties for the agency.
Timeline and blocking duty
- The agency must block the reporting of the identity theft–related information in the consumer’s file not later than four business days after receiving the documentation listed above.
- After the block is in place, the agency must ensure that the blocked information does not appear in consumer reports issued to users, except in limited circumstances allowed by law (such as certain law enforcement or fraud investigation uses).
Notice to the furnisher of the information
Section 605B also requires the consumer reporting agency to promptly notify the furnisher of any information that the consumer has identified as arising from identity theft.
- Furnishers include the creditors, lenders, debt collectors, or other entities that originally supplied the data to the credit bureau.
- Under related FCRA provisions, once a furnisher is notified about identity theft or a dispute, it must investigate, correct inaccurate data, and stop reporting information that it knows or reasonably should know results from identity theft.
When a Credit Bureau May Decline or Rescind a Block
Section 605B balances consumer protections with safeguards against misuse. The law lets a consumer reporting agency decline to implement a requested block or rescind a block after it has been placed if specific conditions are met.
Grounds for declining or rescinding a block
A consumer reporting agency may decline or later remove a block if it reasonably determines that:
- The information was blocked in error or the block was requested in error by the consumer.
- The block or request was based on a material misrepresentation of fact by the consumer that was relevant to the blocking request.
- The consumer actually obtained goods, services, or money as a result of the transactions underlying the blocked information, indicating that the activity was not identity theft as defined in law.
Notice requirements if a block is denied or removed
If a bureau declines to block information or rescinds a previously imposed block, it must provide notice to the affected consumer.
- The notice must be provided in accordance with FCRA requirements and must state the specific reasons why the block was denied or rescinded.
- The bureau must send this notice within a reasonable period after deciding to decline or rescind the block, allowing the consumer to understand the basis and, if appropriate, contest or clarify the situation.
Special Rules for Resellers of Consumer Reports
Resellers are consumer reporting agencies that assemble and resell information obtained from other consumer reporting agencies, rather than maintaining their own primary databases. Section 605B includes specific rules for these entities, recognizing that they may not control the original data.
Resellers without their own files
In some cases, a reseller does not maintain its own permanent file on the consumer and simply passes through information obtained from another agency. If the reseller:
- Is acting solely as a reseller;
- Is not, at the time of the consumer’s request, otherwise furnishing or reselling consumer reports containing the disputed information; and
- Informs the consumer that they may report identity theft to the Consumer Financial Protection Bureau (CFPB) or to the original agency to exercise their rights,
then the reseller’s obligations under Section 605B are limited and primarily involve preventing further distribution of the disputed report, rather than changing the underlying file.
Resellers that maintain consumer files
When a reseller does maintain a file on the consumer, Section 605B requires that, at a minimum, the reseller must:
- Block its own report based on the disputed information from any further use once the consumer identifies the information as arising from identity theft under the statute.
- Pass along disputes and relevant information to the source consumer reporting agency, consistent with the FCRA dispute-handling rules for resellers.
Obligations of Information Furnishers When Notified of Identity Theft
Although Section 605B focuses on the duties of consumer reporting agencies, furnishers of information play a crucial role in preventing future harm. Other FCRA provisions, read together with 605B, require furnishers to investigate and correct identity theft–related information once notified.
What furnishers must do
According to federal guidance issued by the Federal Trade Commission and the Consumer Financial Protection Bureau, when a furnisher receives notice from a consumer reporting agency that information relates to identity theft, the furnisher must:
- Conduct a reasonable investigation into the consumer’s dispute and review all relevant information provided by the bureau.
- Report findings back to the consumer reporting agency.
- Correct, delete, or permanently block the information if it is inaccurate, incomplete, or cannot be verified.
- Refrain from continuing to furnish information that it knows or should know results from identity theft.
In addition, in many cases furnishers that provide credit, goods, or services must supply copies of relevant application or transaction records to identity theft victims or law enforcement agencies upon proper request, helping support investigations and consumer remediation.
Practical Steps for Consumers Using Section 605B
Understanding your legal rights is only helpful if you know how to exercise them. The following practical steps can help you make effective use of Section 605B protections.
1. Detect and document the fraud
- Monitor credit reports from the nationwide bureaus regularly to spot unfamiliar accounts, inquiries, or addresses.
- Gather statements, notices, and any correspondence that shows fraudulent activity.
2. File an identity theft report
- File a report with local law enforcement or another entity authorized to take identity theft reports under federal law.
- Obtain a copy of that report or confirmation document, which will be required for a 605B block request.
3. Contact the consumer reporting agencies
- Write to each bureau that is reporting the fraudulent information, following its published procedures for identity theft blocks.
- Include proof of identity, a copy of the identity theft report, a list of the specific items that are fraudulent, and your signed statement that those items are not yours.
4. Follow up and keep records
- Track dates of mailing and responses so that you can confirm that the four-business-day blocking requirement is met.
- Keep copies of all correspondence with credit bureaus, furnishers, and law enforcement.
5. Use complementary protections
- Consider placing fraud alerts or credit freezes on your credit reports, which can further reduce the risk of new fraudulent accounts being opened in your name.
- Continue to monitor your credit reports and account statements for any new signs of misuse.
Frequently Asked Questions (FAQs)
Q: Does Section 605B remove all negative items from my credit report?
No. Section 605B applies only to information that resulted from identity theft. It does not remove accurately reported late payments, legitimate debts, or other negative items that you incurred yourself.
Q: How quickly must a credit bureau block identity theft–related information?
Once the bureau receives appropriate proof of identity, a copy of an identity theft report, identification of the fraudulent items, and your statement, it must block the information not later than four business days afterward.
Q: Can a credit bureau ever undo a block once it is in place?
Yes. The bureau may rescind a block if it reasonably determines that the information was blocked in error, that the request involved a material misrepresentation of fact, or that you actually obtained goods, services, or money from the transactions. If it does so, it must notify you and explain the reasons.
Q: Do I need a lawyer to use Section 605B protections?
You do not need a lawyer to request a block under Section 605B, but legal advice may be helpful if your request is denied, if there is a large amount of disputed debt, or if you are considering litigation for FCRA violations.
Q: What is the difference between an identity theft block and a fraud alert?
A Section 605B block prevents specific identity theft–related information from being reported in your credit file. A fraud alert, created under a different FCRA section, is a notice on your file that warns potential creditors to take extra steps to verify your identity before opening new accounts.
References
- FCRA Section 605B (15 U.S.C. 1681c-2) — Federal Trade Commission. 2018-06-01. https://consumer.ftc.gov/system/files/consumer_ftc_gov/pdf/fcra-605b.pdf
- Notice to Users of Consumer Reports: Obligations of Users Under the FCRA — Experian. 2021-01-01. https://www.experian.com/connect/legal/fcra-obligations
- Consumer Reports: What Information Furnishers Need to Know — Federal Trade Commission. 2021-10-01. https://www.ftc.gov/business-guidance/resources/consumer-reports-what-information-furnishers-need-know
- CFPB Consumer Laws and Regulations: Fair Credit Reporting Act — Consumer Financial Protection Bureau. 2012-10-01. https://files.consumerfinance.gov/f/documents/102012_cfpb_fair-credit-reporting-act-fcra_procedures.pdf
- Identity Theft Blocks & FCRA Compliance Obligations Explained — Hudson Cook. 2020-07-15. https://www.hudsoncook.com/speaking/identity-theft-blocks-fcra-compliance-obligations-explained-tackling-the-complexities-of-fcra-fraudulent-claims/
- Section 605B—Block of Information Resulting From Identity Theft — National Consumer Law Center. 2019-01-01. https://library.nclc.org/book/fair-credit-reporting/section-605b-block-information-resulting-identity-theft-15-usc-1681c-2
Read full bio of Sneha Tete





