Few collection experiences are more maddening than being pursued for an account you never opened. Identity theft puts you in the strange position of proving a negative — and doing it fast enough to stop calls, lawsuits, and credit damage. Fortunately, federal and California law give identity theft victims specific, enforceable tools. This article lays out the steps to follow.
Step one: create the official record
Everything downstream depends on two documents:
- An FTC identity theft report. File at IdentityTheft.gov. The resulting report functions as your sworn account of the theft and is accepted by creditors, collectors, and credit bureaus.
- A police report. File with your local law enforcement agency and get a copy or report number. In California, several statutory protections are triggered specifically by a police report.
Prepare both before you argue with anyone. A collector's representative can dismiss a phone call; a documented victim with a report number is a different conversation.
Step two: dispute with the collector in writing
If a third-party collector contacted you, respond in writing within 30 days after receiving its validation notice and state that the debt is not yours because of identity theft. Under the FDCPA, 15 U.S.C. § 1692g, a timely written dispute requires the collector to cease collection until it obtains verification of the debt and mails it to you. Send the letter by certified mail and enclose copies — never originals — of your FTC and police reports.
California adds a sharper tool. Under Civil Code § 1788.18, part of the Rosenthal Act, when you provide a debt collector with a copy of a police report on the identity theft plus a written statement with specified identifying information, the collector must review its file and cease collection until it completes that review and makes a good-faith determination that the information does not establish that you are not responsible for the debt. A violation can expose the collector to liability under Civil Code § 1788.30, including actual damages, a statutory penalty for a willful and knowing violation, and attorney's fees. Our debt validation page covers dispute mechanics in more depth.
Step three: block the account from your credit reports
The Fair Credit Reporting Act gives victims a dedicated remedy. Under 15 U.S.C. § 1681c-2, when you provide a credit bureau with appropriate proof of identity, your identity theft report, identification of the fraudulent information, and a statement that the information does not relate to a transaction by you, the bureau must block that information from your file within four business days and notify the furnisher, which then may not continue reporting it. Separately, § 1681i entitles you to dispute inaccurate items, obligating the bureau to conduct a reasonable reinvestigation, generally within thirty days. Dispute with each of the three national bureaus — Equifax, Experian, and TransUnion — and keep copies of everything. While you are at it, place a fraud alert or, better, a security freeze; freezes are free under both federal law and California law.
Step four: if you have been sued
Identity theft does not defend itself — a lawsuit on a fraudulent account still produces a default judgment if you ignore it. In California you generally have 30 days after service to respond. File an answer denying the debt and asserting identity theft, and force the plaintiff to prove account origination, not just a balance. Debt buyers face heightened pleading and proof requirements under the Fair Debt Buying Practices Act, Civil Code §§ 1788.58 and 1788.60, and few things unravel a bulk-purchased file faster than a genuine identity theft defense. If a judgment was already entered against you without your knowledge, California law provides paths to set it aside — but timing rules apply, so act quickly and consider counsel experienced in civil litigation.
Keep a victim's file
- FTC report, police report, and every dispute letter with proof of mailing
- All collector correspondence, envelopes included, plus a call log
- Credit reports before and after your disputes, showing what was blocked or corrected
- Notes on each conversation: date, company, representative, and what was said
The file serves two purposes. It can help get the fraudulent account shut down, and it can become the evidence for affirmative claims if a collector or bureau ignores its statutory duties — FDCPA, Rosenthal Act, and FCRA claims all carry fee-shifting, which is why counsel can often take strong cases without upfront cost.
Expect repeat appearances
Fraudulent accounts are sold like any other charged-off debt, so a blocked account may resurface under a new collector's letterhead a year later. Do not start over from scratch: send the new collector the same police report and § 1788.18 statement, demand validation, and re-dispute any new credit reporting. Persistence, backed by the paper trail, can help put an end to these accounts.
Talk to a California business attorney
If collectors are pursuing an account an identity thief opened in your name, a free consultation can map the fastest route to stopping collection and repairing your credit file. Schedule a free consultation or call (949) 418-2113.
This article is attorney advertising and provides general information only. It is not legal advice and does not create an attorney–client relationship. Facts matter; consult a lawyer about your specific situation.
