How Credit Fraud Differs From Standard Identity Theft
Identity theft is one specific form of credit fraud — where someone uses your real Social Security number and personal information to open accounts. But there are several other fraud patterns that damage credit reports and require different responses:
- Synthetic identity fraud: A thief combines a real Social Security number (often a child's or a deceased person's) with fabricated personal details to create a "synthetic" consumer profile.
- Account takeover: A fraudster gains access to your existing accounts and changes the address, adds themselves as an authorized user, or maxes out the credit.
- Credit Profile Number (CPN) fraud: Some unscrupulous credit-repair operators sell "CPNs" — actually stolen SSNs — claiming they're a legal way to start over. Using one is a federal crime and often results in a fraudulent tradeline when caught.
- File merging: A credit bureau incorrectly merges your file with someone else's because of a similar name or shared address, importing their negative tradelines onto your report.
- Business identity theft: A thief uses your business's EIN to open commercial accounts, which can also show up on your personal report as a guarantor.
⚖️ Your Legal Tools Against Credit Fraud
- The Fair Credit Reporting Act §605B allows fraudulent information to be BLOCKED within four business days once an Identity Theft Report is filed
- FCRA §623(a)(6)(B) requires furnishers to STOP reporting a debt once notified by identity theft victim — this includes synthetic and takeover cases
- FCRA §609(e) entitles you to every application and transaction record for any fraudulent account, free of charge, regardless of whether you were the account holder
- Under the Fair Debt Collection Practices Act, a collector who continues to collect on a fraudulent debt after proper notification is subject to damages
- Under 18 U.S.C. §1028 (federal identity theft statute), identity fraud carries criminal penalties; victims can pursue prosecution
The Fraud Resolution Roadmap
Step 1 — File an Identity Theft Report at IdentityTheft.gov
Even if the fraud is synthetic or an account takeover, the FTC's Identity Theft Report serves as the foundational document. File at IdentityTheft.gov. It's free, takes 15 minutes, and unlocks every federal remedy described below.
Step 2 — File a Police Report
Some creditors require a local police report as evidence before they will remove a fraudulent account. Texas allows you to file an identity theft report with any local police department regardless of where the crime occurred. Keep the case number — you'll reference it repeatedly.
Step 3 — Request Bureau Blocks Under §605B
Send each bureau a written block request with your Identity Theft Report, government ID, and a clear list of every fraudulent entry. Four business days later, the bureau must block the information. Unlike a §611 dispute, the bureau cannot require the furnisher to verify first.
Step 4 — Demand Records From the Creditor
Under FCRA §609(e), send each creditor a written demand for all application documents, transaction records, and account histories related to the fraudulent account. The creditor must provide these within 30 days, free of charge. These documents often reveal critical evidence — a forged signature, a fake address, a fabricated employer — that accelerates removal.
Step 5 — File a Creditor Fraud Affidavit
Along with your records demand, send each creditor a completed fraud affidavit (the IdentityTheft.gov template is accepted nationwide). Most creditors close the account as fraud within 30 days and notify the bureaus to delete.
Step 6 — File a CFPB Complaint if Stalling Occurs
If a bureau or creditor is not responding within the legal timeline, file a free complaint at the CFPB complaint portal. The CFPB forwards the complaint with a response deadline and tracks the outcome publicly — this often resolves stalled cases within two weeks.
The File-Merging Problem
File merging — where a bureau incorrectly combines two consumers' files because of similar names, addresses, or SSN patterns — is increasingly common. The fix requires a written dispute that specifically identifies the mismerge: list the incorrect identifying information (wrong SSN suffix, wrong middle initial, wrong addresses) and demand the bureau unmerge the files. Include copies of your Social Security card, driver's license, and utility bills. Under FCRA §611, the bureau must investigate within 30 days.
What to Do About CPN Fraud
If you previously used a "Credit Profile Number" that turned out to be a stolen SSN, the resulting accounts are reported to the real SSN holder — making that person a fraud victim through you. Stop using the CPN immediately, close any accounts opened with it, and consult a consumer protection attorney. Operating under a CPN is a federal crime under 18 U.S.C. §1028 even if you purchased it in good faith.
Common Mistakes to Avoid
- Paying off a fraudulent account to make it go away. Paying is essentially admitting the debt is yours and can defeat the fraud claim.
- Disputing under §611 instead of blocking under §605B. §605B is faster and doesn't require investigation.
- Skipping the police report. Many creditors require one; its absence delays resolution by months.
- Not pulling all three reports after the cleanup. Fraud items sometimes reappear on a different bureau after being removed from the first.
- Trusting a "credit repair" service offering a CPN or EIN-for-SSN swap. Both are federal crimes.
Ready to Clear Fraud From Your Credit Report?
Call for a free evaluation. We'll identify every fraudulent entry and walk you through the FCRA block and creditor affidavit process.
📞 (832) 696-0755 Free ConsultationThis article is provided for educational purposes and is not legal advice. For questions about your specific situation, consult a licensed attorney or a credentialed credit counselor.