You did everything the instructions said. You filed the report, mailed the letter, and waited. Months later the account is still sitting on your file, still dragging down the score, still costing you the rate you should have gotten. A credit bureau must block information you identify as the result of identity theft within four business days, but that clock does not start until four required items arrive, and a federal rule lets the bureau ask for more documentation before it treats one of them, your identity theft report, as complete. Three separate grounds also let it decline or undo a block after the fact. A Boca Raton FCRA identity theft attorney can tell you which one is holding your file.
When the Blocking Clock Starts
The blocking right does not run from the day you mail a dispute. Federal law requires a credit reporting agency to block the reporting of information that resulted from identity theft no later than four business days after the agency receives a complete package. Four items make it complete, and all four have to arrive:
- Appropriate proof of your identity
- A copy of an identity theft report
- Your identification of the specific information you say is fraudulent
- Your statement that the information does not relate to any transaction by you
Miss one and there is no clock to violate. The fourth item is easy to leave out, because it feels redundant after a police report. It is not redundant. It is a separate statutory element, and a bureau that never received it has a defensible reason for the account still showing. The second item has a definition too. Both the statute and the Bureau rule require a copy of an official, valid report filed with a federal, state, or local law enforcement agency, the United States Postal Inspection Service included.
In practice, the nationwide bureaus often accept the FTC Identity Theft Report you create at IdentityTheft.gov as the identity theft report itself, so you may not need a separate police report. A report filed with law enforcement remains the strongest option if a bureau pushes back.
The Bureaus Can Legally Demand More Proof Before the Clock Starts
In practice, the bureau does not have to treat your submission as a qualifying identity theft report the moment it arrives. The rule that defines that term builds in a documentation-request window, so a bureau can ask for more proof before it accepts the report as complete, which can push back when the four-day clock effectively begins.
A furnisher or a credit reporting agency may ask you for additional documentation within 15 days of receiving your report or of your request for the block, whichever comes later. It then has another 15 days for supplemental requests and a final decision on whether to accept the report. If your additional material arrives on the 11th day or later of that second 15-day period, the reviewer gets five days to make a final determination.
The same rule illustrates which requests are reasonable. A law enforcement report that carries detailed facts plus the signature or badge number of the officer who took it should be enough on its face, and absent a specific concern, asking for more is not reasonable. A bare automated report is different. Where the report is machine generated, simply alleges that identity theft occurred, and is offered to support a tradeline block, the regulation’s illustrative example treats a request for a notarized identity theft affidavit and identification documents as reasonable. That distinction is where a stalled file usually sits.
Three Grounds That Let a Bureau Decline or Undo a Block
A block is also reversible. A credit reporting agency may decline to block, or rescind a block already in place, if it reasonably determines one of the following:
- The information was blocked in error, or you requested the block in error
- The block rested on a material misrepresentation of fact by you that was relevant to the request
- You obtained possession of goods, services, or money as a result of the blocked transaction
The third ground is where legitimate victims get caught, particularly when a family member or an acquaintance opened the account. The statute limits that argument in one important way. If an agency rescinds a block, the fact that the item appeared in your file before the block is not evidence of whether you knew or should have known you received anything from it. If a block is declined or rescinded, the agency has to tell you promptly.
Why a Blocked or Deleted Account Reappears
Deletion is not always permanent, and reinsertion carries specific rules that are easy to miss. A block under the identity theft provision and a deletion after a dispute reinvestigation are separate routes with separate rules, and the reinsertion protections below attach to the second one.
Information deleted after a reinvestigation may not be put back unless the furnisher certifies that it is complete and accurate. If it is reinserted, the agency must notify you in writing within five business days, identify the furnisher it contacted, and tell you that you may add a statement to your file. Agencies also have to maintain reasonable procedures designed to prevent deleted information from reappearing, apart from information properly reinserted on a furnisher’s certification.
Furnishers carry a parallel duty. A company that receives notice of a block from a credit reporting agency must have reasonable procedures in place to keep itself from refurnishing that blocked information. That refurnishing duty sits in the part of the statute that only federal and state regulators can enforce, so a violation of it is evidence rather than a standalone claim. The claims live elsewhere: against the agency for reinserting without a certification or without the five-business-day notice, and against the furnisher for the dispute duties described next.
Disputing Only With the Creditor Can Cost You Leverage
Where you send the dispute changes what you can enforce later. A furnisher’s investigation duties are triggered by notice from a credit reporting agency. Those duties include investigating, reviewing what the agency forwarded, and reporting the results. If the investigation shows the information is incomplete or inaccurate, the furnisher must also pass that result to the other nationwide credit reporting agencies it supplied. The statute’s liability shield lists the provisions it covers, and the dispute duties are not among them. The same provision expressly preserves liability for violations of the dispute subsection, which is what leaves those duties enforceable by the consumer.
The furnisher’s separate duty to supply accurate information in the first place works differently. Violations of that duty are enforced by federal and state officials rather than by consumers, so a letter sent only to the creditor may leave you with a moral point and no claim. Routing the dispute through the credit reporting agencies, in addition to any direct letter, preserves the remedy. Anyone dealing with credit identity theft should treat that sequence as the default.
What the Law Allows You to Recover, and How Long You Have
Remedies scale with the conduct. Negligent noncompliance exposes a company to your actual damages plus costs and reasonable attorney fees. Willful noncompliance exposes it to actual damages or statutory damages of not less than $100 and not more than $1,000, whatever punitive damages the court allows, and again costs and fees.
Time is the constraint most victims underestimate. A claim must be filed by the earlier of two years after you discover the violation or five years after the violation occurs. A file you have been fighting since 2023 may already be partly time barred, which is why documenting every letter, envelope, and response date matters as much as the letters themselves. If you have not yet started, you can file a report with the federal government and build a recovery plan as the first step, then use it to support the law enforcement report the block itself requires.
Talk With a Florida Consumer Protection Lawyer
If a fraudulent account has survived your disputes, the reason is usually written into the statute, the regulation, or the paper trail. Lehrman Law represents consumers against credit reporting agencies, furnishers, and debt collectors, and we will tell you honestly what your file supports. Contact Lehrman Law to have someone read the record and explain where the process broke down.