Finding a credit card you never opened on your credit report is a stomach-dropping moment. The good news: the federal government built a single online tool that turns the next 30 minutes into a clear, repeatable process. The Federal Trade Commission's IdentityTheft.gov is the official place to file, and the report it produces unlocks legal protections that most people do not realize they have until they need them.
Here is exactly how to file, what to gather first, and what happens after you hit submit.
Why the FTC Report Matters
The FTC Identity Theft Report is your legal proof that fraud happened. With it in hand you can:
- Place an extended seven-year fraud alert with the credit bureaus instead of the standard one-year alert.
- Force credit bureaus to permanently block fraudulent items from your credit report under the Fair Credit Reporting Act.
- Stop debt collectors from continuing to chase debts that are not yours.
- Add a 10-year extended fraud alert if the theft is severe.
Most banks, card issuers, and collection agencies will not take a fraud claim seriously without this report number. Filing it should be the first thing you do, even before you call your bank.
What to Gather Before You Start
The form takes 20 to 30 minutes if you have your information ready. Pull these things together first:
- Government-issued ID (driver's license, state ID, or passport)
- Your Social Security number
- Your most recent credit reports from Experian, Equifax, and TransUnion (free at AnnualCreditReport.com)
- Statements or screenshots showing the fraudulent accounts or charges
- A list of every account that looks unfamiliar, including issuer name, partial account number, and the dates and amounts of the disputed charges
- A police report number if you have already filed one (not required to start)
Step 1: Go to IdentityTheft.gov
Open IdentityTheft.gov in a browser. The site is run directly by the FTC and is free. Click "Get Started." You do not need to create an account to file, but creating one lets you save your progress and track your recovery plan, so most people should sign up.
The site will ask what kind of identity theft you are dealing with. Common categories:
- Someone opened a new account in your name
- Someone used an existing account of yours
- Someone filed a tax return using your SSN
- Someone took over your account
- A data breach exposed your information
Pick the closest match. You can add other categories later in the same report.
Step 2: Enter the Details
The form walks you through a series of questions covering what happened, when you discovered it, and which companies and accounts are involved. Three rules to keep things smooth:
- Be specific with dates. "Around March 2026" is fine if you do not know the exact day. Vague answers lead to weaker recovery letters.
- Add every account, even small ones. A single $11 charge on a fraudulent card matters as much as a $4,000 personal loan when you are trying to prove a pattern.
- List every company involved. The FTC will use those names later to auto-generate dispute letters.
For each fraudulent account or charge, the system will ask for the company, account number, type of fraud, and approximate dollar amount. If you do not have the full account number, the last four digits are usually enough.
Step 3: Review and Submit
The FTC will show you a draft of the report before you submit. Read it carefully. Once submitted, you will get a unique FTC Identity Theft Report Number that looks something like 1234567. Save it. Print or download a PDF of the report itself, because every bank, bureau, and creditor you call afterward will ask for that number.
Step 4: Use the Personal Recovery Plan
After you file, IdentityTheft.gov generates a custom recovery plan. It is a checklist of next steps that may include:
- Pre-filled letters to send to credit bureaus to block fraudulent items
- Pre-filled dispute letters to send to creditors
- Calls to make to specific banks or card issuers
- Whether to file a police report (most states require it for severe cases)
- How to place a fraud alert or full credit freeze
The plan updates as you check items off. This is the part most people skip and it is also the part that gets your credit cleaned up the fastest.
After You File: The 24-Hour Action List
Within 24 hours of filing, do these in order:
- Place a free fraud alert with one of the three bureaus (the one you call must notify the other two by law). Not sure which to use? See credit freeze vs fraud alert.
- Consider a credit freeze with all three bureaus. A freeze is stronger than a fraud alert and free in every state.
- Call each fraudulent account's issuer and quote your FTC report number. Ask them to close the account and remove it.
- File a police report if any individual loss exceeds $1,000 or your state requires it.
- Sign up for free credit monitoring through a tool like Creditship so any new fraudulent activity surfaces fast.
- Consider a paid recovery service like Dovly or Lexington Law if the fallout is widespread and you want help drafting dispute letters.
What If You Already Made Some Progress?
File anyway. Even if you have already called your bank, you still need the FTC report number to invoke the strongest legal protections. You can update an existing report at IdentityTheft.gov as new fraud surfaces.
Frequently Asked Questions
Is IdentityTheft.gov free?
Yes. The FTC operates it directly. You will never be asked for a payment. If a site is asking you to pay to file an identity theft report, it is not the FTC.
Do I need a police report to file with the FTC?
No. The FTC report is its own document. Some banks may still ask for a police report on top of the FTC report, especially for losses over $1,000, but you can start the FTC process without one.
How long does the FTC keep my report on file?
The report stays in your IdentityTheft.gov account indefinitely. You can download it, print it, or update it years later if new fraudulent items surface.
Can I file an FTC report for someone else?
Yes, with their permission. Common cases include filing on behalf of an elderly parent or a minor child. The form has a section for filing as an authorized representative.
