How Identity Theft Shows Up on Credit Reports
Identity theft appears on a credit report as activity a consumer never authorized: unfamiliar accounts, hard inquiries from unknown lenders, collection items for debts never owed, and personal-information changes. Because the three nationwide credit reporting agencies build files from creditor-supplied data, a fraudulent account is recorded the same way a legitimate one is.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- Fraudulent accounts are not flagged as fraud on a credit report; they appear as ordinary credit history.
- A fraudulent account can touch several scoring factors at once, including payment history, amounts owed, length of credit history, and new credit.
- Under FCRA section 605B (15 U.S.C. section 1681c-2), information resulting from identity theft can be blocked when a consumer provides an identity theft report, proof of identity, and identification of the information.
- A credit reporting agency generally must investigate a dispute within 30 days, a period that can extend to 45 days if additional information is supplied during the initial 30-day window.
- An initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years, while a security freeze is free to place, temporarily lift, or remove under federal law.
- Most negative information, including late payments, stays on a credit report for 7 years; a Chapter 7 bankruptcy stays 10 years and a Chapter 13 bankruptcy stays 7 years.
Identity theft shows up on a credit report as accounts, hard inquiries, addresses, or collection items that a consumer never created. The three nationwide credit reporting agencies — Equifax, Experian, and TransUnion — assemble files from data supplied by creditors, so a fraudulent account is stored the same way a legitimate one is. The file then describes someone else's borrowing activity next to the consumer's own.
Signals of identity theft on a credit report
Credit files are not built from a consumer's memory of what they applied for. They are built from what creditors report. That means fraudulent entries arrive as ordinary credit history rather than as flagged exceptions.
- An account the consumer does not recognize. The tradeline can carry a real balance, a run of on-time payments, or an unpaid status, and it sits in the account section of the file.
- A hard inquiry from a lender the consumer never contacted. Hard inquiries typically remain on a credit report for 2 years.
- A collection account tied to an unfamiliar debt. A fraudulent balance can be charged off and placed for collection, which adds a second entry to the file.
- Personal information that does not match. A new address, a name variation, or an unfamiliar employer can indicate that an application was submitted with different identifiers.
- A balance on an account the consumer thought was inactive. Activity can resume on a dormant or unused account.
| Signal on the report | What it usually indicates | Where it appears |
|---|---|---|
| Unfamiliar tradeline | Credit was extended using stolen identifiers | Account or tradeline section |
| Hard inquiry | A lender reviewed the file during an application | Inquiries section, typically 2 years |
| Collection or charge-off | A fraudulent balance was written off or sold | Collections section |
| New address or name variation | An application used different personal data | Personal information section |
| Shift in amounts owed | New balances changed the relationship between balances and limits | Account balances |
How fraudulent accounts interact with credit score factors
Most credit scores, including FICO and VantageScore, use a range of 300 to 850. FICO publishes approximate weights for the factors in its calculation: payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own factor weighting and does not publish fixed percentages. The FICO vs VantageScore comparison covers how the two models differ, and credit score ranges explained covers what the ranges mean.
A single fraudulent account can reach several of those factors at once:
- Payment history (35% of the FICO calculation). An unpaid balance created by a thief can be reported as late, and late payments generally stay on a report for 7 years. See payment history and credit scores.
- Amounts owed (30%). A new account with a balance changes the relationship between balances and credit limits, which is what utilization measures. See credit utilization explained.
- Length of credit history (15%). A brand-new account changes the average age of the accounts on the file. See length of credit history.
- New credit (10%). Each fraudulent application generates a hard inquiry.
- Credit mix (10%). An unfamiliar account type changes the balance between revolving and installment credit on the file.
The mechanics behind these factors are set out in how credit scores are calculated.
How fraudulent data reaches a credit file
When a creditor reports an account, it sends identifying data — typically a name, address, Social Security number, and date of birth — to the credit reporting agencies. The agency matches that data to an existing file. If the data matches closely enough, the account is added to the file, and no step in that process asks the consumer whether the account is real. Two outcomes follow: a fraudulent account can land inside a consumer's own file, or an application can create a new file that later merges with an existing one. Both situations produce the same symptom — credit history that does not belong to the person named on the file.
Identity theft compared with a file-accuracy dispute
The two processes are related but distinct. A standard accuracy dispute concerns information about the consumer's own account — the balance is wrong, the payment was credited to the wrong month, the account was closed but still shows as open. An identity theft report concerns an account the consumer never had. Blocking under FCRA section 605B depends on supplying an identity theft report, which is a report filed with a law enforcement agency or with the Federal Trade Commission, rather than only a written statement of disagreement.
Reporting identity theft and requesting that information be blocked
Under FCRA section 605B (15 U.S.C. section 1681c-2), a consumer who submits an identity theft report, proof of identity, and identification of the fraudulent information can ask a credit reporting agency to block that information from the file. The full statutory text is published by the Cornell Law School Legal Information Institute. The FCRA was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003.
Consumers can report identity theft to the credit bureaus directly, and can file a federal report at IdentityTheft.gov, which is operated by the Federal Trade Commission. The FTC's identity theft page describes the reporting process. Tax-related identity theft can also be reported to the IRS using Form 14039.
Once a dispute is filed, timing is set by statute: a credit reporting agency generally must investigate a dispute within 30 days, and the period can extend to 45 days if the consumer provides additional information during the initial 30-day period. The Consumer Financial Protection Bureau publishes consumer tools on fraud and scams; the CFPB was created by the Dodd-Frank Act in 2010 and began operating in 2011.
Fraud alerts and security freezes
FCRA section 605A (15 U.S.C. section 1681c-1) covers fraud alerts. An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years. A security freeze is free to place, temporarily lift, or remove under federal law. A fraud alert asks lenders to take additional steps to verify identity before extending credit, and a freeze restricts access to the file itself; neither one removes information from a report. More detail appears in credit freeze and credit lock.
How long items stay on a credit report
| Item | Typical time on the report |
|---|---|
| Late payments | 7 years |
| Most other negative information | 7 years |
| Chapter 7 bankruptcy | 10 years |
| Chapter 13 bankruptcy | 7 years |
| Hard inquiries | 2 years |
| Information blocked under FCRA section 605B | Removed once the block is granted |
Keeping watch on reports and files
The FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Because a fraudulent account can appear on one file and not the others, all three files are part of the picture. Background on how files are structured appears in credit reports and credit profile, while ongoing review is described in credit monitoring and credit check. The Federal Reserve's G.19 release reports total outstanding consumer credit, which gives a sense of the scale of the reporting system overall. The broader topic is covered in identity theft.
When a reinvestigation does not resolve an item
If a disputed item comes back verified instead of corrected, consumers can file a complaint with the CFPB or contact a state attorney general's office. Whether a particular entry qualifies for blocking under FCRA section 605B depends on the documentation submitted and the nature of the item, which is a question for a consumer's own legal or financial representative; this page describes the general process rather than any individual file.
This page is for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
How does identity theft show up on a credit report?
It appears as ordinary credit history that the consumer did not create: new tradelines, hard inquiries from unfamiliar lenders, collection accounts for debts never owed, and personal-information changes such as an added address. Nothing in the file marks these entries as fraudulent, because the agencies build files from what creditors report.
Does identity theft always change a credit score?
It depends on which factors the fraudulent activity reaches. A new account adds a hard inquiry and changes the average age of accounts, while an unpaid fraudulent balance can be reported as late, which falls under payment history. A fraudulent account that is reported and paid as agreed still alters length of credit history, new credit, and often credit mix.
Can a fraudulent account be blocked from a credit report?
Under FCRA section 605B (15 U.S.C. section 1681c-2), a consumer can ask a credit reporting agency to block information resulting from identity theft by providing an identity theft report, proof of identity, and identification of the information to be blocked.
How long does a credit reporting agency have to investigate a dispute?
Under the FCRA, a credit reporting agency generally must investigate a dispute within 30 days. The period can extend to 45 days if the consumer provides additional information during the initial 30-day period.
Is a fraud alert the same as a security freeze?
No. A fraud alert asks lenders to take extra steps to verify identity before extending credit; an initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years. A security freeze restricts access to the credit file and is free to place, temporarily lift, or remove under federal law.
Where is identity theft reported?
A federal report can be filed at IdentityTheft.gov, which is operated by the Federal Trade Commission, and tax-related identity theft can be reported to the IRS using Form 14039. Consumers can also report identity theft to the credit bureaus so that the affected files are flagged and disputed.
Related guides
- How Credit Scores Are Calculated
- Credit Utilization Explained
- Payment History And Credit Scores
- Fico Vs Vantagescore
- Length Of Credit History Explained