Identity Theft Rights
Written in plain language for general understanding. This is educational content, not legal advice. Based on federal statutes and official sources.
What is this right?
If someone uses your personal information — your Social Security number, credit card number, or other identifying data — to open accounts, make purchases, or commit fraud in your name, you are a victim of identity theft. Federal law gives you specific rights to recover.
Under the Fair Credit Reporting Act (FCRA) and the Identity Theft and Assumption Deterrence Act, you can place fraud alerts and credit freezes on your credit reports for free, dispute fraudulent accounts, and get fraudulent debts blocked from your credit report. The FTC's IdentityTheft.gov website walks you through a personalized recovery plan.
When does it apply?
This right applies when:
- You discover accounts, loans, or credit cards opened in your name that you did not authorize
- You receive bills or collection notices for debts you do not owe
- You find unfamiliar charges on your bank or credit card statements
- You are denied credit, a job, or insurance due to information on your credit report that is not yours
Common misconceptions:
- "Identity theft only happens online" — It also happens through stolen mail, lost wallets, data breaches, and even people you know accessing your information.
- "I'm responsible for debts opened in my name by a thief" — No. Under federal law, you are not liable for fraudulent debts. You have the right to dispute them and have them removed from your credit report.
- "A fraud alert and a credit freeze are the same thing" — No. A fraud alert tells lenders to verify your identity before opening new accounts. A credit freeze completely blocks access to your credit report, which is stronger protection.
What should you do?
Step 1: Go to IdentityTheft.gov (the FTC's official site) and report the theft. The site creates a personalized recovery plan and generates an Identity Theft Report, which gives you specific legal rights.
Step 2: Place a fraud alert on your credit report by contacting any one of the three major credit bureaus (Equifax: 800-525-6285, Experian: 888-397-3742, TransUnion: 800-680-7289). That bureau must notify the other two. An initial fraud alert lasts one year.
Step 3: Place a credit freeze with all three bureaus. A freeze is free and blocks anyone from opening new accounts using your credit report. You can temporarily lift it when you need to apply for credit.
Step 4: File a report with your local police department. Bring your FTC Identity Theft Report, proof of your identity, and evidence of the fraud. A police report strengthens your disputes with creditors.
Step 5: Contact each company where fraudulent accounts were opened. Send them your Identity Theft Report and a letter disputing the account. Under federal law, they must stop collection efforts and investigate.
Step 6: Dispute fraudulent information on your credit reports with all three bureaus. Include your Identity Theft Report. The bureaus must block the fraudulent information within 4 business days.
What should you NOT do?
Don't delay. The sooner you act, the less damage the thief can do. File your FTC report, place your fraud alert, and freeze your credit as soon as you discover the theft.
Don't pay debts you did not create. Even if a collector is pressuring you, you are not responsible for fraudulent accounts. Dispute them formally using your Identity Theft Report.
Don't give personal information to anyone who contacts you claiming to be from a bank or credit bureau. Scammers sometimes pose as fraud departments. Always call the company directly using the number on their official website or your card.
Don't forget to check your credit reports regularly after the theft. Identity thieves may try again. Monitor your reports for at least a year, and consider keeping your credit frozen until you need to use it.
How Florida differs from federal law
Florida has robust identity theft protections including the state's Identity Theft Passport program:
- Criminal identity theft (Fla. Stat. § 817.568): Identity theft is a third-degree felony in Florida (up to 5 years). Using the identity of someone 60+ or obtaining $5,000+ is a second-degree felony (up to 15 years).
- Identity Theft Passport: The Florida AG issues an Identity Theft Passport — a card that verifies you are an identity theft victim. Present it to law enforcement if you're wrongfully connected to crimes committed using your identity.
- FIPA (Fla. Stat. § 501.171): The Florida Information Protection Act requires data breach notification within 30 days — one of the strictest deadlines nationally. Businesses must also notify the FL Department of Legal Affairs if 500+ residents are affected.
- Security freeze: Free credit security freezes for all Florida consumers under Fla. Stat. § 501.005. Victims of identity theft get additional protections.
Additional Steps in Florida
Report to the Florida AG at myfloridalegal.com or call (866) 966-7226. Request an Identity Theft Passport from the FL AG. File a report at identitytheft.gov (FTC). Place fraud alerts/security freezes with all three credit bureaus. File a police report locally.
Relevant Law: Fla. Stat. § 817.568 (criminal identity theft), Fla. Stat. § 501.171 (FIPA), Fla. Stat. § 501.005 (security freeze)
Legal Resources
We may earn a commission if you use these services — at no extra cost to you. This supports our mission to make legal information free for everyone.