How to Remove Debt From Identity Theft

Q: What is the first step if I discover debt from identity theft?

The first and most urgent step is closing or freezing any affected accounts and contacting the fraud department of any financial institution where the fraud occurred, since acting quickly limits how much additional damage can be done while you sort out the rest of the process. Immediately after that, file a report with the Federal Trade Commission at IdentityTheft.gov, which generates an official FTC Identity Theft Report and a personalized recovery plan walking you through the remaining steps specific to your situation. This FTC report becomes the foundational piece of documentation for nearly everything that follows, including disputing fraudulent debts with creditors, blocking fraudulent information from your credit reports, and, if needed, filing a police report, so completing it accurately and promptly is worth prioritizing over other steps. It's also wise to place an initial fraud alert on your credit reports at this early stage, which requires businesses to verify your identity before extending new credit in your name, making it considerably harder for the identity thief to open additional fraudulent accounts while you work through the rest of the recovery process.

Q: How do I get a fraudulent debt removed from my credit report?

You have the legal right to request that credit reporting companies block fraudulent information resulting from identity theft, and they're required to do so within four business days of receiving a properly documented request, provided you submit an FTC Identity Theft Report along with supporting documentation proving your identity. Send a dispute letter to each of the three major credit bureaus, Experian, Equifax, and TransUnion, since each maintains a separate credit report and each needs its own dispute submitted independently, including a copy of your FTC Identity Theft Report, a copy of a government-issued photo ID, and proof of your current address such as a utility bill. Sending your dispute letters by certified mail with return receipt requested gives you documented proof the bureaus actually received your dispute, which can matter if the process takes longer than expected or requires escalation. Once a credit bureau blocks fraudulent information following a properly documented identity theft claim, that information cannot legally reappear on your report, and the bureau is required to notify whoever originally furnished the fraudulent information that it resulted from identity theft.

Q: Do I have to pay a debt collector for a debt caused by identity theft?

No, you are not legally responsible for paying a debt that resulted from identity theft, and this is one of the clearest, most well-established consumer protections available specifically for identity theft victims, backed by federal law. Once you notify a debt collector that a specific debt resulted from identity theft and provide them with your FTC Identity Theft Report as documentation, they're generally obligated to stop collection activity on that specific account and are required to notify the original creditor that the debt was the result of identity theft rather than continuing to pursue you for payment. If a debt collector continues attempting to collect on a debt after you've properly notified them it resulted from identity theft and provided appropriate documentation, that continued collection activity itself may violate the Fair Debt Collection Practices Act, which is worth knowing since it can give you additional legal leverage if a collector doesn't stop as required. Keep detailed records of every communication with debt collectors throughout this process, including dates, names of representatives you spoke with, and copies of everything sent, since this documentation can become important if a collector doesn't comply or if the matter escalates further.

Q: How long does it take to clear debt caused by identity theft?

Timelines vary considerably depending on how many fraudulent accounts are involved, how many different creditors and collectors need to be contacted individually, and how responsive each specific institution is to your documentation and dispute requests, so there's no single universal timeline that applies to every case. Credit bureaus are legally required to block fraudulent information within four business days of receiving a complete, properly documented request, which is relatively fast once your paperwork is fully in order, but gathering that paperwork, obtaining a police report if needed, and initially discovering the full scope of the fraud can itself take meaningful time before you're even at the point of submitting disputes. More complex cases, particularly ones involving multiple fraudulent accounts opened across different institutions, or accounts that have already been sold to third-party debt collectors, can understandably take considerably longer to fully resolve, sometimes stretching across several months of ongoing follow-up. Staying organized from the very beginning, with copies of every letter sent and received, every phone call logged with dates and names, and every piece of documentation saved, meaningfully speeds up the process and gives you leverage if any single creditor or collector doesn't comply with your dispute in a reasonable timeframe.

A person calmly reviewing documents and a laptop while filing a formal identity theft report

Quick answer

You are not legally responsible for debt resulting from identity theft. Start at IdentityTheft.gov to file an official FTC Identity Theft Report — the foundational document for everything that follows. Send this report plus ID and proof of address to all three credit bureaus (separately — each maintains its own report); they must block fraudulent information within 4 business days. Notify collectors in writing with your report — they're legally required to stop collection and inform the original creditor. Place a fraud alert immediately to prevent new fraudulent accounts while you work through the process.

Act Fast on the First Two Things

Close or freeze affected accounts

Contact the fraud department of any institution where the fraud occurred immediately — this limits further damage while you handle the rest.

File your report at IdentityTheft.gov

This generates an official FTC Identity Theft Report and a personalized recovery plan. This document becomes the foundation for nearly every step that follows — prioritize getting it right.

Place a fraud alert on your credit reports right away. It requires businesses to verify your identity before extending new credit in your name — a simple, immediate step that makes it considerably harder for the thief to open more fraudulent accounts while you sort out the rest.

How to Get It Off Your Credit Report

Send a dispute letter to all three bureaus separately

Experian, Equifax, and TransUnion each maintain their own report — each needs its own independent dispute. Include your FTC Identity Theft Report, a copy of a government-issued photo ID, and proof of current address.

Send everything by certified mail with return receipt

Documented proof the bureaus received your dispute matters if the process takes longer or needs escalation.

What a properly documented dispute unlocks

Bureaus must block fraudulent information within 4 business days of a complete request
Blocked information cannot legally reappear on your report
Bureaus must notify whoever furnished the fraudulent information that it resulted from identity theft

Dealing With Collectors

You do not have to pay a debt collector for a fraudulent debt. Notify them in writing that the debt resulted from identity theft, and provide your FTC Identity Theft Report. They're generally required to stop collection activity and notify the original creditor the debt was fraudulent.

If a collector keeps pursuing you after proper notification and documentation, that continued activity may itself violate the Fair Debt Collection Practices Act — real legal leverage if a collector doesn't comply. See our guide on dealing with debt collectors for your broader rights in these conversations.

Stay Organized — It Genuinely Speeds Things Up

Keep records of every communication: dates, names of representatives, copies of everything sent and received. Timelines vary considerably depending on how many accounts are involved and how responsive each institution is — complex cases with multiple accounts or debts already sold to collectors can take several months. Good documentation is the single biggest lever you have to speed that up and hold institutions accountable if they don't comply.

The bottom line: Debt from identity theft is genuinely not your responsibility, and the law backs that up with real, enforceable mechanisms — not just goodwill. File your FTC report first, since nearly everything else depends on it, then move through bureaus and collectors with that documentation in hand. Stay organized, keep every record, and don't pay a cent on a debt that was never yours to begin with.

Sarah Mitchell

Personal Finance Writer, CentByStep

Every CentByStep guide is researched by hand and written to be genuinely useful, not just search-friendly. Every guide is cross-referenced with primary sources including the CFPB and FTC. Full bio →

Frequently Asked Questions

What is the first step if I discover debt from identity theft?

Close or freeze any affected accounts and contact the fraud department of any institution where the fraud occurred immediately, since acting quickly limits further damage. Then file a report at IdentityTheft.gov, generating an official FTC Identity Theft Report and a personalized recovery plan. This report becomes the foundational documentation for nearly everything that follows, including disputing fraudulent debts, blocking fraudulent credit report information, and filing a police report if needed — completing it accurately and promptly is worth prioritizing. Place an initial fraud alert on your credit reports at this early stage too, requiring businesses to verify your identity before extending new credit, making it harder for the thief to open additional accounts while you work through recovery.

How do I get a fraudulent debt removed from my credit report?

You have the legal right to request credit reporting companies block fraudulent information from identity theft, required within four business days of a properly documented request, including an FTC Identity Theft Report and supporting identity documentation. Send a dispute letter to each of the three major bureaus separately — Experian, Equifax, TransUnion — since each maintains its own report, including your FTC report, a government-issued photo ID copy, and proof of current address. Sending by certified mail with return receipt gives documented proof of receipt, useful if the process takes longer or needs escalation. Once blocked following a properly documented claim, that information cannot legally reappear on your report, and the bureau must notify whoever furnished it that it resulted from identity theft.

Do I have to pay a debt collector for a debt caused by identity theft?

No, you're not legally responsible for paying a debt resulting from identity theft — one of the clearest, most well-established consumer protections for victims, backed by federal law. Once you notify a collector in writing that a debt resulted from identity theft and provide your FTC Identity Theft Report, they're generally obligated to stop collection activity and notify the original creditor the debt was fraudulent. If a collector continues attempting collection after proper notification and documentation, that continued activity may itself violate the Fair Debt Collection Practices Act, giving you additional legal leverage. Keep detailed records of every communication with collectors — dates, names, copies of everything sent — important if a collector doesn't comply.

How long does it take to clear debt caused by identity theft?

Varies considerably depending on how many fraudulent accounts are involved, how many creditors and collectors need contacting individually, and how responsive each institution is — no single universal timeline applies. Bureaus must block fraudulent information within four business days of a complete, properly documented request — relatively fast once paperwork is in order, but gathering that paperwork and discovering the full scope of fraud can itself take meaningful time first. More complex cases, especially multiple accounts across different institutions or debts already sold to collectors, can take considerably longer, sometimes several months of ongoing follow-up. Staying organized from the start — copies of every letter, every call logged with dates and names — meaningfully speeds the process and gives leverage if any creditor or collector doesn't comply in a reasonable timeframe.

Sources & References

Consumer Financial Protection Bureau — What Do I Do If I Am a Victim of Identity Theft: 4-business-day bureau blocking requirement, fraud alert vs credit freeze distinction
Justia — What to Do After Identity Theft & Relevant Legal Concerns: extended fraud alert duration, government ID replacement process
Identity Theft Resource Center — Clear Identity Theft Accounts From Collection Agency Records: creditor fraud-department documentation request, written confirmation process
Experian — How to Remove Fraudulent Information From Your Credit Report: police report vs FTC report roles, extended fraud alert eligibility
Lehrman Law — Tips for Disputing Debts With Credit Bureaus After Identity Theft: dispute letter content checklist, 30-45 day bureau investigation window
New York Attorney General — Identity Theft: Tools to Take Back Your Financial Identity: three-step immediate response framework, fraud alert renewal process

Financial disclaimer: This content is for general informational and educational purposes only and is not legal advice. Identity theft recovery processes and timelines vary by circumstance. Consult the FTC's IdentityTheft.gov or a consumer protection attorney for guidance specific to your situation. This is not financial advice. Last updated July 2026.