Fraudulent accounts can be blocked from a credit report in 4 business days. That is the statutory deadline in Section 605B of the Fair Credit Reporting Act, codified at 15 U.S.C. 1681c-2. Everything that stretches a case into months is document gathering, mail transit, and how fast the consumer reacts.
The Federal Trade Commission recorded 1,135,291 identity theft reports in 2024, which is 17.5% of all 6,471,708 reports filed with its Consumer Sentinel Network that year. Credit card identity theft was the largest single type at 449,032 reports, of which 406,110 involved a brand new account opened in someone else’s name, up 7% from 2023. New fraudulent accounts are exactly what Section 605B was written to remove.
The one deadline that matters
FCRA Section 605B, codified at 15 U.S.C. 1681c-2(a), requires a credit bureau to block information resulting from identity theft “not later than 4 business days after the date of receipt” of four specific items:
- Appropriate proof of the identity of the consumer
- A copy of an identity theft report
- The identification of such information by the consumer
- A statement by the consumer that the information is not information relating to any transaction by the consumer
Four business days. Not 30. Not “a reasonable time.” For comparison, an ordinary accuracy reinvestigation under FCRA Section 611, 15 U.S.C. 1681i(a)(1)(A), gives the credit bureau 30 days, extendable to 45 days under 1681i(a)(1)(B) if the consumer sends relevant additional information during that first 30 day window.
The catch sits in the statutory word receipt. The 4 business day clock does not start when you file at IdentityTheft.gov or drop the envelope in the box. It starts when a complete package containing all four items lands at the credit bureau. That single fact explains almost every slow identity theft case.
The realistic timeline
For a straightforward identity theft case, 3 to 5 weeks from discovery to updated credit reports is realistic. The statutory block under FCRA Section 605B accounts for only 4 business days of that total. The remaining 20 or so days are document assembly, certified mail transit, and bureau file processing, all of which sit outside the statute.
| Day | Step | Who controls it | Governing rule |
|---|---|---|---|
| 1 | Pull all three credit reports, list every fraudulent item | You | Free weekly reports at AnnualCreditReport.com |
| 1 | File at IdentityTheft.gov, get the FTC Identity Theft Report | You | Required item 2 under 15 U.S.C. 1681c-2(a) |
| 1 | Place a fraud alert, consider a security freeze | You, minutes | Fraud alert 1 year, extended alert 7 years, 15 U.S.C. 1681c-1 |
| 2 | Assemble three packages, copy ID and proof of address | You | Required items 1, 3 and 4 under 15 U.S.C. 1681c-2(a) |
| 2 | Mail certified with return receipt to each bureau | You | FTC guidance on disputing credit report errors |
| 3 to 7 | Mail transit | The postal service | No statute |
| 7 to 11 | Statutory 4 business day block window | The law | 15 U.S.C. 1681c-2(a) |
| 11 to 18 | Bureau blocks and notifies the furnisher | The bureau | 15 U.S.C. 1681c-2(b) |
| 14 to 21 | Updated credit reports show the block | The bureau | No fixed statutory deadline |
Realistic range for a clean identity theft case: 3 to 5 weeks from discovery to updated reports. The rest is you and the postal service.
Where the time is actually lost
Most of the delay in removing a fraudulent account comes from the consumer’s own paperwork, not from a stalling credit bureau. In its December 2025 report under FCRA Section 611(e)(5), the Consumer Financial Protection Bureau found the share of complaining consumers reporting a previous dispute “has hovered around 90% since 2020 for all three” nationwide credit bureaus, while Equifax’s own confirmation rate “hovered around 37% from 2024 through mid-2025” and TransUnion stayed near 30%. A paper trail the bureau does not acknowledge is worth the same as none at all.
Sending an incomplete package
A Section 605B package missing any of the four items listed in 15 U.S.C. 1681c-2(a) is not a slow package. It is a package that never started the 4 business day clock, and it is the most common failure by a wide margin.
The usual gaps in a 605B identity theft block package:
- Proof of address that does not match. If you moved recently, send proof for both the old and the new address
- Accounts not identified specifically. “All fraudulent accounts” is not identification under 15 U.S.C. 1681c-2(a)(3). Give creditor name, account number as shown, date opened and amount, per item
- No signed statement. The sworn sentence required by 15 U.S.C. 1681c-2(a)(4) is a separate required item, not something implied by the identity theft report
Using an ordinary dispute instead of a block
Sending an ordinary accuracy dispute instead of a Section 605B identity theft block is the single most expensive wrong turn, because it swaps a 4 business day deadline for a 30 day one, plus 5 business days after the reinvestigation ends to send written results under 15 U.S.C. 1681i(a)(6)(A).
The structural difference matters more than the calendar. A Section 611 reinvestigation asks the furnisher a question and accepts its answer. A Section 605B block under 15 U.S.C. 1681c-2 issues an instruction to the credit bureau. For identity theft, use the block.
No proof of delivery
Certified mail with return receipt is what converts “I sent it” into a legally provable receipt date, and the receipt date is the exact date the 4 business day deadline in 15 U.S.C. 1681c-2(a) starts running. The Federal Trade Commission tells consumers to “send your letter by certified mail and pay for a ‘return receipt’ so you have a record the credit bureau got it.”
The Federal Trade Commission publishes these mailing addresses for written credit bureau correspondence:
| Credit bureau | Mailing address the FTC publishes |
|---|---|
| Equifax | Equifax Information Services LLC, P.O. Box 740256, Atlanta, GA 30348 |
| Experian | Experian, P.O. Box 4500, Allen, TX 75013 |
| TransUnion | TransUnion LLC Consumer Dispute Center, P.O. Box 2000, Chester, PA 19016 |
Confirm each bureau’s current address before mailing, because a block and an accuracy dispute are not always routed to the same desk.
Not escalating
If the 4 business days pass and nothing happens, escalate the same week. Waiting three more weeks “to be polite” is the most expensive thing you can do. A CFPB complaint is free, and the CFPB states that “companies generally respond in 15 days” and that “in some cases, the company will let you know their response is in progress and provide a final response in 60 days.”
Set expectations honestly for the three nationwide bureaus specifically. The CFPB’s December 2025 FCRA Section 611(e)(5) report found that the bureaus “have 60 days to respond to consumers’ complaints” and that “in the most recent months, all three NCRAs have average response times that exceed 50 days.”
The route still works. In its 2025 Consumer Response Annual Report, published March 2026, the CFPB reported approximately 5,806,800 credit or consumer reporting complaints in 2025, which is 88% of all complaints it received, and that companies responded to 99.9% of those sent to them, closing 40% with non-monetary relief, 51% with an explanation, and 0.02% with monetary relief.
What blocking does and does not do
A Section 605B block removes the fraudulent accounts from your credit file and stops the furnisher from reporting them again. It does not create good credit.
Once a credit bureau blocks information under 15 U.S.C. 1681c-2(a), subsection (b) requires it to “promptly notify the furnisher” that the information may be a result of identity theft, that a block has been requested, and of the effective dates of the block. Separately, 15 U.S.C. 1681s-2(a)(6)(B) provides that once a consumer submits an identity theft report to a furnisher at its designated address, that furnisher “may not furnish such information that purports to relate to the consumer to any consumer reporting agency, unless the person subsequently knows or is informed by the consumer that the information is correct.”
A block is not permanent by right. Under 15 U.S.C. 1681c-2(c), a credit bureau may decline or rescind a block if it reasonably determines the block was made in error, was based on a material misrepresentation by the consumer, or that the consumer obtained goods, services or money from the transaction.
What blocking cannot do is manufacture a score. We cannot tell you how many points removing fraudulent accounts will move your credit score, and nobody honestly can. It depends on how much of your file was fraudulent, which scoring model a lender pulls, and what your real history looks like underneath. Accurate negative information that genuinely belongs to you is not removable by a 605B block, because it is not identity theft.
What is measurable is which factors carry the most weight. FICO states that payment history is “approximately 35%” and amounts owed “approximately 30%” of the score calculation, so removing fraudulent late payments and fraudulent balances addresses the two largest components directly.
Complications that extend it
Three complications reliably push a Section 605B timeline past 5 weeks: fraud spread across several account types, a furnisher that keeps reporting after the block, and a package the credit bureau rules incomplete. The Federal Trade Commission found that in 2024, 14% of identity theft reports included more than one type of identity theft, so multi-front cases are the norm.
Loan and lease fraud sprawls most. The FTC recorded 176,400 loan or lease identity theft reports in 2024. A single report can name more than one subtype, so the subtype counts below do not add up to that total.
| Loan or lease identity theft subtype | 2024 reports to the FTC | Change from 2023 |
|---|---|---|
| Business or personal loan | 95,689 | up 18% |
| Auto loan or lease | 60,188 | up 16% |
| Apartment or house rented | 17,790 | up 35% |
| Non-federal student loan | 12,747 | up 17% |
| Real estate loan | 8,489 | up 12% |
| Federal student loan | 7,487 | up 10% |
The other complications, and what each costs you:
- A furnisher that keeps reporting. After a 605B block the bureau must notify the furnisher under 15 U.S.C. 1681c-2(b), and 15 U.S.C. 1681s-2(a)(6)(B) bars that furnisher from re-reporting. If it reappears, that is a separate and more serious violation. See when a creditor will not remove a fraudulent account
- Accounts in collections. A debt collector is a separate company with separate FCRA duties. Send it the FTC Identity Theft Report as well
- A bureau ruling the package incomplete. Ask exactly what was missing, fix exactly that, resend certified. Do not rebuild from scratch
- Fraud that is old. Accounts opened years ago are harder to document, but 15 U.S.C. 1681c-2 sets no time limit on the block
Credit bureaus and information furnishers were the most complained-about category in the FTC’s 2024 data, with 1,353,175 reports, the top entry among all “Other” categories that year. Slow handling is the norm, not bad luck, which is why escalating on schedule matters.
How to compress it
The fastest identity theft recoveries do five things, and all five happen in the first 48 hours.
- Pull all three credit reports before filing anything. Specific identification is a required item under 15 U.S.C. 1681c-2(a)(3). The FTC confirms all three nationwide bureaus “have permanently extended a program that lets you check your credit report from each once a week for free at AnnualCreditReport.com”
- File at IdentityTheft.gov the same day. The FTC Identity Theft Report is required item 2 under 15 U.S.C. 1681c-2(a), so nothing else can start without it
- Place the fraud alert or freeze immediately. An initial fraud alert lasts 1 year and an extended alert 7 years under 15 U.S.C. 1681c-1. A security freeze must be placed within 1 business day of a toll free telephone or secure electronic request under 15 U.S.C. 1681c-1(i)(2)(A), and lifted within 1 hour under 1681c-1(i)(3)(C). The FTC confirms there is “no cost to place or lift a credit freeze”
- Do not wait for a police report to mail your 605B packages. You generally do not need one for the bureaus. Get it in parallel if you need it for an extended fraud alert. See Identity Theft Report vs police report
- Certified with return receipt, and diary day 4 and day 10. The receipt proves the date the 4 business day clock started. Escalate on schedule rather than on feeling
After the fraud is cleared
Once the fraudulent accounts are blocked, what remains is your real credit file, and rebuilding it runs on a far slower clock than the 4 business day block. No paperwork step substitutes for time and payment behavior.
For context on where a rebuilt file is heading, FICO reported the national average FICO Score at 715 as of February 2025, down one point from January 2025 and two points from April 2024, and average credit card utilization at 36.1% in February 2025, above the pre pandemic level of 35.0% in January 2020. The Federal Reserve Bank of New York reported that as of the end of June 2026, 4.7% of all outstanding household debt was in some stage of delinquency, against a total household debt balance of $18.77 trillion. A clean file is worth more in that environment, not less.
Rebuilding credit after identity theft covers what actually works from that point, and is honest about what authorized user tradelines can and cannot do.
The short version
- The legal step for removing a fraudulent account is 4 business days under 15 U.S.C. 1681c-2, not 30
- An ordinary accuracy reinvestigation under 15 U.S.C. 1681i is 30 days, extendable to 45, which is why the block is the right tool for identity theft
- The clock starts when a complete package is received, not when it is sent
- Realistic end to end for a clean case: 3 to 5 weeks
- Certified mail with return receipt, always, because the receipt sets the deadline
- Escalate to the CFPB on schedule. The three nationwide bureaus have 60 days and recently averaged more than 50
- Blocking restores the truth in your file. It does not manufacture a score
Every legal clock that applies to a fraudulent account
These are the deadlines that govern identity theft removal from a US credit report. Every figure is quoted from the statute or agency named in the same row.
| Action | Deadline | Source |
|---|---|---|
| Credit bureau blocks identity theft information | 4 business days after receipt of all four required items | 15 U.S.C. 1681c-2(a) |
| Credit bureau notifies the furnisher of the block | Promptly, no fixed number of days | 15 U.S.C. 1681c-2(b) |
| Furnisher barred from re-reporting blocked information | On receipt of the identity theft report at its designated address | 15 U.S.C. 1681s-2(a)(6)(B) |
| Ordinary accuracy reinvestigation | 30 days | 15 U.S.C. 1681i(a)(1)(A) |
| Extension when the consumer sends more information | 15 additional days, 45 total | 15 U.S.C. 1681i(a)(1)(B) |
| Written notice of reinvestigation results | 5 business days after completion | 15 U.S.C. 1681i(a)(6)(A) |
| Initial fraud alert duration | 1 year | 15 U.S.C. 1681c-1(a) |
| Extended fraud alert duration | 7 years | 15 U.S.C. 1681c-1(b) |
| Security freeze placed after phone or secure electronic request | 1 business day | 15 U.S.C. 1681c-1(i)(2)(A) |
| Security freeze lifted after phone or secure electronic request | 1 hour | 15 U.S.C. 1681c-1(i)(3)(C) |
| Company response to a CFPB complaint | Generally 15 days, final response in 60 | CFPB, Complaint process |
| Recent nationwide credit bureau average response to a CFPB complaint | More than 50 days | CFPB, FCRA 611(e)(5) report, December 2025 |
The day ranges earlier on this page are an estimate of how a clean case usually runs. The counts, percentages and legal deadlines are not estimates.
Credit Booster AI reads all three credit reports, flags what looks fraudulent, and drafts each bureau’s Section 605B package with the four items required by 15 U.S.C. 1681c-2(a), so the first envelope you send starts the 4 business day clock.
Sources
Statutory deadlines come from 15 U.S.C. 1681c-1, 1681c-2, 1681i and 1681s-2. Identity theft counts come from the FTC Consumer Sentinel Network Data Book 2024. Complaint figures come from the CFPB 2025 Consumer Response Annual Report, published March 2026, and the CFPB FCRA Section 611(e)(5) report, published December 2025. Score figures come from FICO’s April 2025 analysis by Tommy Lee. Household debt figures come from the Federal Reserve Bank of New York, 2026 Q2. Check them yourself.
- 15 U.S.C. 1681c-2, Block of information resulting from identity theft
- 15 U.S.C. 1681i, Procedure in case of disputed accuracy
- 15 U.S.C. 1681c-1, Identity theft prevention; fraud alerts and active duty alerts
- 15 U.S.C. 1681s-2, Responsibilities of furnishers of information
- FTC, Consumer Sentinel Network Data Book 2024
- CFPB, 2025 Consumer Response Annual Report (March 2026)
- CFPB, Annual report of credit and consumer reporting complaints, FCRA Section 611(e)(5) (December 2025)
- CFPB, How the complaint process works
- FTC, Disputing errors on your credit reports
- FTC, Credit freezes and fraud alerts
- FTC, Free credit reports
- FTC, IdentityTheft.gov
- FICO, Student Loan Delinquencies Lower the Average FICO Score to 715 (April 2025)
- Federal Reserve Bank of New York, Quarterly Report on Household Debt and Credit, 2026 Q2
- CFPB, Submit a complaint
Loving This Info? You'll Love Our App.
Everything you just read, plus AI-powered tools to understand and master your credit. 7 day free trial.
Get the AppFrequently Asked Questions
How fast can fraudulent accounts legally be removed?
The block itself is 4 business days. FCRA Section 605B requires a credit bureau to block information resulting from identity theft no later than 4 business days after it receives proof of your identity, a copy of an identity theft report, your identification of the information, and your statement that it is not yours. The rest of the timeline is paperwork and mail, not law.
Can I really clear fraud from my credit in 30 days?
For a straightforward case where the accounts are clearly fraudulent and you send complete packages promptly, 3 to 5 weeks from discovery to updated reports is realistic. Complications extend it: a bureau ruling a package incomplete, a furnisher that keeps reporting, or fraud spread across many creditors.
Does removing fraudulent accounts raise my credit score?
It removes their effect, which can be significant if the fraudulent accounts carried missed payments or large balances. How much your score moves depends entirely on what is left underneath. We cannot promise a specific number of points, and anyone who does is not being straight with you.
Why do some people take six months?
Almost always one of four things: they used ordinary dispute letters instead of a 605B block, their package was incomplete so the clock never started, they had no proof of delivery when the bureau said nothing arrived, or a furnisher kept re-reporting and they did not escalate.
What is the single biggest thing that speeds this up?
Sending a complete package the first time. The 4 business day clock only starts when all four required items arrive. Most delays are not the bureau stalling, they are a package that was missing proof of address or did not identify accounts specifically enough.

