These two documents get treated as interchangeable, and they are not. Confusing them costs people weeks, usually by sending them to a police station before they send anything to the credit bureaus.
Here is the difference, and which one each party will actually accept.
The short answer
| Identity Theft Report | Police report | |
|---|---|---|
| Where you get it | IdentityTheft.gov, free, online | Local law enforcement |
| How long it takes | Same day, about 30 minutes | 1 day to several weeks |
| Accepted by credit bureaus | Yes | Yes |
| Triggers the 605B 4 day block | Yes | Yes |
| Required for a 1 year fraud alert | No, no report needed | No |
| Required for a 7 year extended fraud alert | No | Yes |
| Accepted by every creditor | Most | Most, and some insist on this one |
| Can a department refuse to give it | No | Yes, and they often do |
File the Identity Theft Report first. It is free, immediate, and it is what unblocks the fastest legal remedy you have.
What an Identity Theft Report actually is
“Identity theft report” is a defined term in the Fair Credit Reporting Act, not a plain English phrase. That is the source of most of the confusion.
When you file at IdentityTheft.gov, you answer questions about what happened and the FTC generates two things: your Identity Theft Report and a personalised recovery plan.
The FTC is explicit that this report is an official report to law enforcement and that it is sufficient documentation to resolve issues with the credit bureaus and most companies.
That is what makes it the workhorse. FCRA Section 605B requires a copy of an identity theft report as one of four items that start a mandatory 4 business day block. The IdentityTheft.gov report satisfies that requirement without you ever speaking to a police officer.
Full instructions for completing it correctly are in how to fill out the FTC Identity Theft Affidavit.
What a police report adds
A police report does four things the FTC report does not.
1. It unlocks the extended fraud alert. An initial fraud alert lasts 1 year and requires no report at all. An extended fraud alert lasts 7 years and requires a police report. If you want seven years of creditors being required to take reasonable steps to verify your identity before opening credit in your name, you need the police report.
2. It satisfies creditors with rigid policies. Some companies demand a police report regardless of what federal law says. Arguing costs more time than complying.
3. It creates a real investigation when there is a suspect. If you know who did this, a police report is the only route that leads anywhere.
4. It documents non-credit crimes. Stolen mail, a stolen wallet, a break in. Those are separate offences and belong in a police report.
The sequence that saves you two weeks
The mistake is treating these as sequential when they are parallel.
Day 1
- Pull all three credit reports and list every fraudulent account
- File at IdentityTheft.gov, get your Identity Theft Report
- Place a fraud alert with any one bureau, it must tell the other two
- Consider a freeze, which is stronger. See how to freeze your credit
Day 2
- Send 605B packages to all three bureaus, certified with return receipt
- Then go to the police station, if you need to
The statutory 4 business day clock starts when the bureau receives a complete package. Every day you spend waiting on a police department before mailing is a day added to the front of that clock for no reason.
Where each one is required
Credit bureaus take the Identity Theft Report. That is the FTC’s own position and it is what makes 605B usable in a week rather than a month.
Most creditors and collectors take the Identity Theft Report. Send the police report too if you have it, because it costs nothing to include and forecloses an argument.
Extended fraud alert requires the police report. No substitute.
Some individual companies have internal policies demanding a police report. This is not a legal requirement they are enforcing, it is their own process. Get one rather than fight it.
When you cannot get a police report
Departments refuse these more often than people expect, usually because the crime happened elsewhere and there is no suspect.
If that happens:
- You are not stuck. The Identity Theft Report satisfies the bureaus by itself
- Ask for the refusal in writing. Then any creditor demanding a police report is demanding something you were formally refused, which is useful
- Use a freeze instead of an extended alert. A freeze blocks new accounts entirely and is free, which is arguably stronger protection than the 7 year alert anyway
- Try another agency: county sheriff, state police, or online filing
Full detail on getting past a refusal is in how to file a police report for identity theft.
One warning about both
Both documents are sworn statements. The FTC affidavit is signed under penalty of perjury, and filing a false police report is a crime.
The FCRA also lets a credit bureau decline or rescind a 605B block where it was based on a material misrepresentation of the facts, or where you obtained goods, services, or money from the transaction.
So both documents must contain fraud and only fraud. Adding a real account you cannot pay does not just risk that item, it can undermine the block on the accounts that genuinely were fraudulent.
The short version
- They are different documents with different jobs
- The Identity Theft Report from IdentityTheft.gov is free, immediate, and satisfies the credit bureaus
- The police report is required only for the 7 year extended fraud alert, a rigid creditor, a known suspect, or a separate crime
- File the FTC report first and mail your 605B packages before you visit a police station
- If police refuse, get it in writing and use a freeze instead
- Both are sworn. Fraud only, never real debt
Credit Booster AI reviews all three bureaus and assembles the itemized account list both documents ask for, so you gather the facts once and use them everywhere.
Loving This Info? You'll Love Our App.
Everything you just read, plus AI-powered tools to understand and master your credit. 7 day free trial.
Get the AppFrequently Asked Questions
Is an Identity Theft Report the same as a police report?
No. An Identity Theft Report is the filing you generate at IdentityTheft.gov, which the FTC describes as an official report to law enforcement and states is sufficient documentation to resolve issues with the credit bureaus and most companies. A police report is a separate document taken by a local law enforcement agency.
Which one do the credit bureaus require for a 605B block?
FCRA Section 605B requires a copy of an identity theft report. The FTC states the Identity Theft Report from IdentityTheft.gov is sufficient for the credit bureaus and most companies, so you generally do not need a police report to trigger the 4 business day block.
When do I actually need the police report?
For an extended fraud alert, which lasts 7 years, for any creditor whose internal policy demands one, when you know who the thief is, and when a separate crime occurred such as a stolen wallet or stolen mail.
Can I get both?
Yes, and it is the strongest position. File at IdentityTheft.gov first so your 605B packages can go out immediately, then get the police report in parallel. Do not let the police station delay a 4 business day statutory clock.
What if my police department will not take a report?
Your Identity Theft Report still works with the credit bureaus on its own. You lose access to the 7 year extended fraud alert, and you can use the initial 1 year alert or a credit freeze instead. Ask for the refusal in writing so you can show it to any creditor demanding a police report.

