Written & reviewed by External Legal AI · Updated June 26, 2026
Finding an account you never opened is identity theft, and the law is more on your side than the panic suggests: you're generally not responsible for debts a thief created in your name, and federal law gives you specific tools to shut the account down and scrub it from your credit reports. Speed matters mostly because each open door invites the next account.
The issuer can close or freeze the account immediately, mark it as fraud, and tell you what was used to open it. A follow-up letter or secure message confirming the call creates the paper trail. If a collector is the one who surfaced the account, the same statement — 'this account is identity theft, I'm disputing it' — goes to them in writing.
Federal law caps liability for unauthorized credit-card charges at $50, and issuers almost universally waive even that. For an account opened entirely by a thief, the debt was never yours — creditors and collectors generally can't hold you to it once you've documented the identity theft.
The FTC's IdentityTheft.gov generates an official identity theft report plus a step-by-step recovery plan and pre-filled dispute letters. That report is the key that unlocks the other legal tools, and for most disputes it works in place of a police report.
A fraud alert is free, lasts one year (seven with an identity theft report), and placing it with one bureau obligates that bureau to notify the other two; it tells lenders to verify identity before opening accounts. A credit freeze is stronger — it blocks new-account credit pulls entirely until you lift it — and it's also free at all three bureaus.
Under 15 U.S.C. § 1681c-2, once a credit bureau receives your identity theft report, proof of identity, and a statement that the account isn't yours, it must block the fraudulent account and related collection entries from your report within four business days — a much faster lane than an ordinary accuracy dispute.
A police report becomes worth the trip when a creditor insists on one, when you know who the thief is, or when accounts keep appearing. Bring the FTC identity theft report and the account details; some departments take these online.
More on this topic: the Scams & Fraud hub
NotALawyer.com provides general legal information, not legal advice.