What is the difference between a fraud alert and a security freeze?

A fraud alert under FCRA § 605A instructs lenders to take additional verification steps before opening new credit in your name but does not block access to your credit report entirely. A security freeze, also under § 605A as amended in 2018, blocks access to your credit file so that new lenders cannot pull your report at all, effectively preventing new fraudulent accounts from being opened. Security freezes are free and must be placed separately at each bureau.

How do I remove a fraudulent account from my credit report?

File an identity theft report at IdentityTheft.gov, then submit an FCRA § 605B block request to each bureau where the fraudulent account appears. The block request must include your identity theft report, proof of your identity, identification of the fraudulent accounts, and a written block request. The bureau must block the information within four business days. Also send a dispute letter under FCRA § 1681i to each bureau and directly to the furnisher under § 1681s-2(b).

Can I dispute credit fraud online?

You can initiate some disputes online through the bureaus' online portals, but for identity theft and fraud cases, written certified mail disputes are strongly recommended. Online dispute portals may limit the documentation you can submit and may reduce your legal rights compared to written disputes. For § 605B block requests, which require an identity theft report and supporting documentation, written requests sent by certified mail provide the clearest legal paper trail.

How long does credit fraud removal take?

FCRA § 605B requires bureaus to block identity theft information within four business days of receiving a proper block request. Standard dispute investigations under § 1681i take 30 days, extended to 45 days with additional documentation. However, removing all consequences of credit fraud - multiple fraudulent accounts, inquiries, and secondary effects on your credit profile - typically requires 60 to 180 days of active case management depending on the complexity of the fraud.

Credit Fraud Removal: Remove Fraudulent Accounts and Inquiries From Your Credit Report

By Joeziel Vazquez, CEO & Founder - Credlocity Business Group LLC
FCRA Certified · BCCC · CCSC · CCRS · 17 Years · 79,000+ Clients · Philadelphia, PA

Credit fraud is a broad category that encompasses any unauthorized use of your personal or financial information to obtain credit, goods, services, or money under your name. The most common forms affecting credit reports include: data breaches in which your Social Security number and other personal identifiers were stolen and used to open new accounts; account takeover fraud in which a criminal gains access to an existing account and changes the contact information; synthetic identity fraud in which criminals combine your real Social Security number with a fabricated name and date of birth to create a new identity; and traditional identity theft in which your complete identity is used to apply for credit across multiple lenders. Any of these fraud types can result in fraudulent accounts, unauthorized hard inquiries, fraudulent addresses and employers, and in some cases fraudulent public records appearing on your credit report. This page covers how to identify fraudulent items on your report, document them, place protective freezes, and coordinate removal. For a complete overview of your rights under the FCRA, including the full dispute process and how remedies for violations work, see our complete FCRA consumer rights guide.

How Credit Fraud Happens and What Appears on Your Report

Data breaches have exposed billions of consumer records over the past decade, including Social Security numbers, dates of birth, addresses, and financial account credentials. Criminals use this data to apply for credit cards, auto loans, personal loans, and other financial products in victims' names. When a fraudulent account is opened, it appears on the victim's credit report as a new tradeline - often with immediate delinquency because the criminal has no intention of making payments. The victim may not discover the account until they apply for legitimate credit and are denied, or until they pull their own credit report. Meanwhile, the fraudulent account accrues negative payment history, the creditor may charge it off, and a collection agency may then also report the same debt. Multiple hard inquiries from the fraudulent applications appear in the inquiry section. Fraudulent addresses - wherever the criminal had statements and cards sent - appear in the address history section. All of this must be systematically identified and removed using the FCRA tools designed for exactly this purpose.

Identifying Fraudulent Accounts on Your Credit Report

Before you can remove fraudulent accounts, you need to identify exactly what is fraudulent. Pull all three of your credit reports from AnnualCreditReport.com and review each section systematically. In the accounts section, look for any tradeline you do not recognize: an account you never opened, an account at a lender you never applied to, or an account with a balance, credit limit, or open date that does not match your records. In the inquiry section, look for hard inquiries from lenders you never applied with. Hard inquiries appear when a lender pulls your credit file in connection with a credit application, so an inquiry you did not authorize indicates someone applied for credit using your identity. In the personal information section, look for addresses you never lived at, employers you never worked for, or variations of your name you have never used. These personal information entries were often added to your file when fraudulent applications were submitted with altered contact details so the criminal could receive statements and cards without you knowing. Document every suspicious item with the account name, account number, bureau where it appears, date first reported, and balance. This inventory becomes the foundation for your § 605B block requests and your documentation package. For the step-by-step procedure for filing a § 605B block once you have identified the fraudulent items, see our dedicated guide on FCRA Section 605B identity theft block requests.

Placing Fraud Alerts and Security Freezes to Stop Future Fraud

While the § 605B block request removes fraudulent items that already appear on your report, fraud alerts and security freezes are protective measures designed to prevent new fraudulent accounts from being opened going forward. A fraud alert under FCRA § 605A instructs lenders to take additional steps to verify your identity before granting new credit. You place an initial one-year fraud alert at any one of the three bureaus - that bureau is then required by law to notify the other two, and all three must place the alert. For confirmed identity theft victims who file an identity theft report, an extended fraud alert lasting seven years is available. A security freeze is more restrictive. It blocks all access to your credit file so that new lenders cannot pull your report at all, making it impossible for a criminal to open new fraudulent accounts in your name through the normal credit application process. Security freezes have been free since 2018 and must be placed separately at Equifax, Experian, and TransUnion, as well as at specialty consumer reporting agencies like ChexSystems, LexisNexis Risk Solutions, and Innovis if you are also concerned about banking fraud, insurance fraud, or alternative credit reporting.

Coordinating With the FTC and Law Enforcement

In addition to the FCRA dispute process, credit fraud victims should file a report at IdentityTheft.gov, which is the FTC's dedicated identity theft reporting platform. The FTC generates a personal recovery plan and creates the formal FTC identity theft report that bureaus require for § 605B block requests. In cases of severe fraud, also file a police report with your local law enforcement agency. Some creditors require a police report - not just an FTC report - before they will close fraudulent accounts and clear balances from your liability. Keep copies of all reports. When contacting creditors directly to dispute fraudulent accounts opened in your name, reference your FTC report number and, where applicable, your police report case number. Creditors are required under FCRA § 623(a)(6) to block re-reporting of information that has been blocked under § 605B after receiving notification from the bureau.

How Credlocity Can Help With Credit Fraud Removal

Credlocity Business Group LLC, founded in 2008 by Joeziel Vazquez in Philadelphia, PA, has helped more than 79,000 clients dispute and remove negative items from their credit reports. Joeziel Vazquez holds FCRA certification, Board Certified Credit Consultant (BCCC), Certified Credit Score Consultant (CCSC), and Certified Credit Repair Specialist (CCRS) credentials. With 17 years of hands-on FCRA dispute experience, Credlocity's fraud dispute team assists clients with § 605B block requests, fraud alert placement, security freeze coordination, direct furnisher disputes under § 1681s-2(b), and ongoing monitoring to catch re-reported fraudulent accounts before they compound damage to the client's credit profile.

Once you have identified the fraudulent items on your report, see our step-by-step guide on filing an FCRA Section 605B identity theft block to have bureaus act within 4 business days. For the full legal framework governing your rights throughout this process, including dispute procedures and remedies for violations, see our complete FCRA consumer rights guide. To work with FCRA-certified specialists who manage § 605B block requests, creditor coordination, and ongoing monitoring for re-reported fraud, start your free 30-day credit repair trial with no upfront fees under Credlocity's CROA-compliant service agreement.

Frequently Asked Questions

What is the difference between a fraud alert and a security freeze?: A fraud alert instructs lenders to verify your identity before granting credit but does not block report access. A security freeze blocks all new lender access to your report, preventing new fraudulent accounts entirely. Both are free.
How do I remove a fraudulent account?: File an identity theft report at IdentityTheft.gov and submit an FCRA § 605B block request to each bureau. The bureau must block the information within four business days of receiving your complete request.
Can I dispute fraud online?: You can initiate some disputes online, but for fraud cases involving § 605B block requests and required documentation, certified mail provides a stronger legal record and fewer limitations on documentation submission.
How long does credit fraud removal take?: § 605B blocks must occur within four business days. Full removal of all fraud consequences across multiple accounts and bureaus typically takes 60 to 180 days of active management.