You find an account you never opened. Or a collector calls about a debt that is not yours. Two documents come up fast: an Identity Theft Report and a police report. They sound alike. The federal sources we reviewed treat them as separate things, and they stop short of saying when each one is required.
What identity theft looks like first
The Consumer Financial Protection Bureau defines identity theft as someone using your personal information without permission to commit fraud. That can mean your name, your Social Security or Medicare number, or your credit card number. Thieves may rent apartments, open credit cards, collect government benefits or tax refunds, or start other accounts in your name (CFPB).
Most people learn about it the plain way. A credit card statement shows charges you did not make. A credit report lists accounts you never opened. Or a debt collector contacts you about something unfamiliar. Statements and credit reports are the usual discovery points, so a quick read of both is a sensible habit.
The Identity Theft Report: what it is
The Federal Trade Commission runs IdentityTheft.gov, the federal one-stop place to report identity theft. Filing there produces an Identity Theft Report and a personal recovery plan. The CFPB points victims to the same site (CFPB).
The recovery plan matters as much as the report. It gives you an ordered set of steps instead of a pile of worries. The FTC also notes that you can request records from companies that were used to commit the theft, which may help you learn who stole your identity (FTC).
The police report: where it fits
The CFPB advises victims to report the theft to local police and to IdentityTheft.gov. It lists both. It does not rank them, and it does not say the police report replaces the FTC document or the other way around.
That is where the sources go quiet. They do not clearly say when a police report is required rather than an Identity Theft Report. They do not say whether a police report is needed to get a credit bureau block. They also give nothing on how creditors use the Identity Theft Report, and nothing on police procedures that vary by state. If a bank or credit bureau asks you for one document in particular, ask them to name it and tell you why. Do not guess.
A side-by-side scorecard
Here is what the sources support, and what they leave open.
- Identity Theft Report: produced through IdentityTheft.gov, comes with a recovery plan, and is described as separate from a police report.
- Police report: recommended by the CFPB in addition to the FTC report. The sources do not say when it is mandatory.
- Open question: which one a given creditor or bureau will accept for a block or dispute.
The turn in this scorecard is the last line. Neither document is shown to be the one that settles everything. The safer reading is to file both and keep copies.
Protect your credit while you sort it out
The CFPB says to close compromised accounts and contact the security or fraud departments at your financial institutions. It also says to place fraud alerts or security freezes on your credit reports. You can start by contacting any one of the three nationwide credit reporting companies. These companies can also help with placing alerts or freezes and with blocking or removing fraudulent debts (CFPB).
The FTC explains both tools on its page about credit freezes and fraud alerts (FTC). The sources we reviewed do not lay out the forms or timelines for each. They also do not say what freezes or alerts cost, or how long a fraud alert lasts. Check the FTC page and each bureau directly for current terms before you decide.
Scam red flags during recovery
Victims make good targets for a second scam. Callers have posed as the FTC, the CFPB, other agencies, law enforcement and banks. The FTC never threatens you. It never asks you to move money to protect it, buy gold or withdraw cash. Any call, email or text that does is a scam.
If a bank or card issuer contacts you, do not use the number or link in that message. Look up the official website or phone number yourself and verify first. Then share information only if the contact checks out.
Questions to ask yourself
- Which accounts were opened or used in my name, and have I closed the compromised ones?
- Have I contacted the fraud departments at my financial institutions?
- Have I placed a fraud alert or security freeze on my credit reports?
Answer those, file at IdentityTheft.gov, and report to local police. Keep every confirmation. This is general information, not legal advice, and no step here promises a particular credit outcome.
