Identity Theft Rights
Written in plain language for general understanding. This is educational content, not legal advice. Based on federal statutes and official sources.
What is this right?
If someone uses your personal information — your Social Security number, credit card number, or other identifying data — to open accounts, make purchases, or commit fraud in your name, you are a victim of identity theft. Federal law gives you specific rights to recover.
Under the Fair Credit Reporting Act (FCRA) and the Identity Theft and Assumption Deterrence Act, you can place fraud alerts and credit freezes on your credit reports for free, dispute fraudulent accounts, and get fraudulent debts blocked from your credit report. The FTC's IdentityTheft.gov website walks you through a personalized recovery plan.
When does it apply?
This right applies when:
- You discover accounts, loans, or credit cards opened in your name that you did not authorize
- You receive bills or collection notices for debts you do not owe
- You find unfamiliar charges on your bank or credit card statements
- You are denied credit, a job, or insurance due to information on your credit report that is not yours
Common misconceptions:
- "Identity theft only happens online" — It also happens through stolen mail, lost wallets, data breaches, and even people you know accessing your information.
- "I'm responsible for debts opened in my name by a thief" — No. Under federal law, you are not liable for fraudulent debts. You have the right to dispute them and have them removed from your credit report.
- "A fraud alert and a credit freeze are the same thing" — No. A fraud alert tells lenders to verify your identity before opening new accounts. A credit freeze completely blocks access to your credit report, which is stronger protection.
What should you do?
Step 1: Go to IdentityTheft.gov (the FTC's official site) and report the theft. The site creates a personalized recovery plan and generates an Identity Theft Report, which gives you specific legal rights.
Step 2: Place a fraud alert on your credit report by contacting any one of the three major credit bureaus (Equifax: 800-525-6285, Experian: 888-397-3742, TransUnion: 800-680-7289). That bureau must notify the other two. An initial fraud alert lasts one year.
Step 3: Place a credit freeze with all three bureaus. A freeze is free and blocks anyone from opening new accounts using your credit report. You can temporarily lift it when you need to apply for credit.
Step 4: File a report with your local police department. Bring your FTC Identity Theft Report, proof of your identity, and evidence of the fraud. A police report strengthens your disputes with creditors.
Step 5: Contact each company where fraudulent accounts were opened. Send them your Identity Theft Report and a letter disputing the account. Under federal law, they must stop collection efforts and investigate.
Step 6: Dispute fraudulent information on your credit reports with all three bureaus. Include your Identity Theft Report. The bureaus must block the fraudulent information within 4 business days.
What should you NOT do?
Don't delay. The sooner you act, the less damage the thief can do. File your FTC report, place your fraud alert, and freeze your credit as soon as you discover the theft.
Don't pay debts you did not create. Even if a collector is pressuring you, you are not responsible for fraudulent accounts. Dispute them formally using your Identity Theft Report.
Don't give personal information to anyone who contacts you claiming to be from a bank or credit bureau. Scammers sometimes pose as fraud departments. Always call the company directly using the number on their official website or your card.
Don't forget to check your credit reports regularly after the theft. Identity thieves may try again. Monitor your reports for at least a year, and consider keeping your credit frozen until you need to use it.
How New Jersey differs from federal law
New Jersey provides strong protections for identity theft victims:
- NJ Identity Theft Prevention Act (N.J.S.A. 56:11-44 et seq.): Provides victims with the right to place security freezes and extended fraud alerts on their credit reports for free.
- Data breach notification: Under N.J.S.A. 56:8-163, businesses must notify New Jersey residents of data breaches involving personal information. The notification must be made in the most expedient time possible and without unreasonable delay.
- Criminal penalties: Identity theft is a crime in New Jersey (N.J.S.A. 2C:21-17). Penalties range from a fourth-degree crime (if the benefit obtained is less than $500) to a second-degree crime (if the benefit exceeds $75,000 or involves 20+ victims).
- Victim rights: NJ law allows identity theft victims to obtain copies of fraudulent records from businesses and requires creditors to stop collection on fraudulent accounts once they receive an identity theft report.
Additional Steps in New Jersey
File a report with your local police department and the NJ Division of Consumer Affairs at njconsumeraffairs.gov or call (800) 242-5846. Contact NJ Legal Services at (888) 576-5529 for free legal assistance in resolving identity theft issues.
Relevant Law: N.J.S.A. 56:11-44 et seq. (Identity Theft Prevention Act), N.J.S.A. 2C:21-17 (identity theft crime), N.J.S.A. 56:8-163 (data breach notification)
Legal Resources
We may earn a commission if you use these services — at no extra cost to you. This supports our mission to make legal information free for everyone.