How Fraudulent Information Is Blocked From a Credit Report

Last updated October 7, 2026 · 1,606 words · Identity Theft

Under FCRA section 605B, a consumer who submits an identity theft report can ask a nationwide credit reporting agency to block fraudulent information from the credit file. When the request qualifies, the agency blocks that information from appearing on credit reports and cannot put it back without the consumer's consent.

This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.

Key takeaways

Fraudulent information is blocked from a credit report through a specific federal procedure: a consumer submits proof of identity and an identity theft report to a nationwide credit reporting agency, identifies the entries that resulted from identity theft, and states that those entries do not relate to any transaction the consumer made. Under FCRA section 605B, 15 U.S.C. section 1681c-2, the agency must then block that information from the file (Cornell Law School). Blocking is narrower than many people expect, and understanding its limits is as important as understanding its requirements.

What “Blocking” Means Under the Fair Credit Reporting Act

The Fair Credit Reporting Act was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003. It sets the rules for how the three nationwide credit reporting agencies — Equifax, Experian, and TransUnion — collect, verify, and disclose consumer information. Section 605B is the provision that deals specifically with identity theft report blocking.

The statute requires an agency to block the reporting of information that a consumer identifies as resulting from an alleged identity theft. “Block” is used in a literal and narrow sense: the information stops appearing in the consumer's credit file and in reports generated from that file. The agency must also notify the company that furnished the information — the bank, lender, or debt collector that reported it — that a block was requested, that an identity theft report has been filed, and the effective date of the block.

Timing is set by the statute rather than by agency practice. Section 605B states that a block must be applied not later than four business days after the agency receives the required materials (Cornell Law School).

The Four Elements a Blocking Request Must Contain

Section 605B lists four things a credit reporting agency must receive before a block is required. Each element serves a distinct purpose, and a request that leaves one out is not a complete blocking request under the statute.

Element under section 605BWhat it establishes
Appropriate proof of the consumer's identityConfirms that the person making the request is the consumer whose file is involved.
A copy of an identity theft reportDocuments that the alleged identity theft was reported through an official channel.
Identification of the information to be blockedPoints to the specific accounts, inquiries, or entries at issue rather than the whole file.
A statement that the information is not related to any transaction by the consumerSeparates third-party fraud from activity the consumer actually authorized.

An identity theft report is a defined term. In general it involves a report filed by the consumer with a law enforcement agency that alleges identity theft and meets the statute's content requirements, and a complaint filed with the Federal Trade Commission is treated as an identity theft report for these purposes. The Federal Trade Commission publishes guidance on filing the report and on the recovery steps that follow it (Federal Trade Commission). When tax records are affected, identity theft can also be reported to the Internal Revenue Service using Form 14039.

Blocking Compared With an Ordinary Dispute

A dispute and a block are separate mechanisms that rely on different standards. A dispute challenges the completeness or accuracy of an item and is resolved through reinvestigation. A block addresses information that the consumer attributes to identity theft and rests on the documentation described above. Both routes run through the same three nationwide agencies, and both are governed by the FCRA.

Dispute (FCRA section 611)Identity theft block (section 605B)
TriggerA consumer questions whether an item is complete or accurate.A consumer identifies information that resulted from alleged identity theft.
What the consumer providesAn explanation of the problem and any supporting documents.Proof of identity, an identity theft report, identification of the information, and a statement that the information is not the consumer's transaction.
Agency timelineGenerally 30 days; the period can extend to 45 days if the consumer provides additional information during the initial 30-day window.A block is required not later than four business days after the agency receives the required materials.
Result if the request succeedsThe item is corrected, updated, or deleted after reinvestigation.The information is blocked from the file, and the furnisher is notified.

Under the FCRA, a consumer is entitled to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Those reports are where unauthorized accounts, unfamiliar addresses, and unexpected inquiries usually become visible. What appears in a consumer file and how long it stays there is covered in the credit reports hub.

An Agency Can Decline or Rescind a Block

Section 605B is not absolute. The statute permits a credit reporting agency to decline a block, or to rescind one already applied, when the agency reasonably determines that the information was blocked in error, that a block was requested in error, that the request rested on a material misrepresentation of fact by the consumer relevant to the blocking request, or that the consumer obtained goods, services, or money as a result of the blocked transaction. When a block is declined or rescinded, the statute calls for the affected consumer to be notified promptly in writing (Cornell Law School).

Because that provision exists, the four elements carry real weight. A request that clearly separates fraudulent entries from accounts the consumer opened and used is easier to evaluate than one that treats an entire file as disputed.

Fraud Alerts and Security Freezes Under Section 605A

A block is one of several FCRA tools that address identity theft, and the tools are not interchangeable. Section 605A, 15 U.S.C. section 1681c-1, covers fraud alerts. An initial fraud alert lasts one year. An extended fraud alert, which requires an identity theft report, lasts seven years. A fraud alert signals to a user of a credit report that the consumer's identity may have been used without authorization and asks that user to take reasonable steps to verify identity before extending credit.

A security freeze works differently. Under federal law, a freeze is free to place, temporarily lift, or remove, and it restricts access to a credit file so that many potential creditors cannot view it at all. The differences among these controls, and how each interacts with a blocked item, are described in the credit freeze guide, with related access controls covered at credit lock.

The Consumer Financial Protection Bureau, created by the Dodd-Frank Act in 2010 and operating since 2011, publishes consumer-facing material on fraud and scams that explains how these protections function in practice (Consumer Financial Protection Bureau).

What a Block Does and Does Not Do

Why Fraudulent Entries Appear in a Credit File

Fraudulent information usually enters a credit file when a lender or service provider opens an account using another person's identifying details and then reports that account to one of the three nationwide agencies. The resulting entries look like ordinary credit activity: a new account, a growing balance, a hard inquiry. Hard inquiries typically remain on a credit report for two years, and most negative information, including late payments, stays for seven years. A Chapter 7 bankruptcy stays on a report for 10 years, while a Chapter 13 bankruptcy stays for 7 years. Those retention periods are long, so information that resulted from identity theft can remain visible for years when it is not identified and addressed through a dispute or a block.

Where Identity Theft Is Reported

Two reporting channels matter for blocking. A complaint filed at IdentityTheft.gov creates a record with the Federal Trade Commission, and the site generates a personal recovery plan (Federal Trade Commission). A report filed with a local law enforcement agency creates the law enforcement record that the FCRA's definition of an identity theft report contemplates. Each plays a different role, and section 605B refers to the identity theft report rather than to a specific agency's form.

A block applies to the information identified in the request, not to anything reported afterward, so a credit file can change again after a block is in place. Credit monitoring services observe changes to a credit file and generate alerts, though they do not prevent an account from being opened. What those services watch, and what falls outside their view, is described in the credit monitoring overview and the identity theft hub. Readers comparing score models can also review FICO versus VantageScore and credit score ranges explained.

Nothing on this page is a substitute for the text of the statute or for guidance published by a federal agency, and this page is published for education only and is not financial advice.

Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.

Three Bureau Credit Scores and Reports

CreditMonitored.com may earn a commission from partner links at no additional cost to you.

Frequently asked questions

What does it mean to block information on a credit report?

It means a nationwide credit reporting agency stops reporting specific information that a consumer has identified as resulting from alleged identity theft. The agency must receive proof of identity, a copy of an identity theft report, identification of the information, and a statement that the information is not related to any transaction by the consumer. Once a block is applied, the furnisher of that information is notified.

How long does a credit reporting agency have to block fraudulent information?

Section 605B of the Fair Credit Reporting Act states that the block must be made not later than four business days after the agency receives the required materials. This is separate from the general dispute timeline, under which an agency generally must investigate a dispute within 30 days, with the period extending to 45 days if the consumer provides additional information during the initial 30-day window.

Can a blocked item reappear on a credit report?

Yes, in limited circumstances. The FCRA allows an agency to decline a block or rescind one already applied when it reasonably determines that the information was blocked in error, that the block was requested in error, that the request rested on a material misrepresentation of fact by the consumer, or that the consumer obtained goods, services, or money as a result of the blocked transaction. The statute calls for the consumer to be notified promptly in writing when that happens.

Is identity theft report blocking the same as a fraud alert or a security freeze?

No. A block under section 605B removes identified information from a credit file. A fraud alert under section 605A signals to users of credit reports that identity may have been used without authorization; an initial fraud alert lasts one year and an extended fraud alert lasts seven years. A security freeze restricts access to the file and is free to place, temporarily lift, or remove under federal law. Each addresses a different part of the problem.

Does an identity theft report have to come from law enforcement?

The FCRA's definition of an identity theft report generally contemplates a report filed by the consumer with a law enforcement agency that alleges identity theft and meets the statute's content requirements. A complaint filed with the Federal Trade Commission is treated as an identity theft report for these purposes, which is why reports made at IdentityTheft.gov carry weight in the blocking process.

Does a block remove a fraudulent debt from the consumer's responsibility?

No. A block removes information from a credit report and stops it from being reported. It does not by itself cancel a debt, and it does not resolve a disagreement with the creditor or debt collector that furnished the information. Those are separate matters governed by other parts of federal and state law.

Related guides

Related terms

Sources