Filing a Police Report for Identity Theft

Filing a police report for identity theft is a formal legal step that creates an official record of a crime — a record that creditors, credit bureaus, and federal agencies require before taking corrective action. This page covers the mechanics of the reporting process, the categories of identity theft that typically require a police report, and the contexts in which a local report is sufficient versus those requiring federal filing. The process intersects with FTC procedures, credit bureau dispute rights, and victim remediation pathways.

Definition and scope

A police report for identity theft is a formal complaint submitted to a law enforcement agency — typically a municipal police department or county sheriff's office — documenting that an individual's personal identifying information was used without authorization to commit fraud or another crime. The report generates a case number, which functions as a verifiable credential throughout the victim's recovery process.

Under the Fair Credit Reporting Act (FCRA), specifically 15 U.S.C. § 1681c-2, a consumer who provides an identity theft report to a consumer reporting agency is entitled to block fraudulent information from appearing on their credit file. The statute defines "identity theft report" to include both a report filed with a federal, state, or local law enforcement agency and an FTC Identity Theft Report. Both documents carry legal weight, but they serve different functions. For a detailed breakdown of the federal reporting pathway, see FTC IdentityTheft.gov Guide and the broader Identity Theft Reporting Process.

The scope of a police report is geographically and jurisdictionally bounded. A local police report documents the crime from the victim's standpoint; it does not compel investigation. Most departments lack the forensic resources to actively pursue individual identity theft cases, but the documentation itself carries statutory force independent of any investigation outcome.

How it works

The process of filing a police report for identity theft follows a structured sequence that varies modestly by jurisdiction but adheres to a consistent framework:

Generate an FTC Identity Theft Report first. The FTC's IdentityTheft.gov platform produces a pre-formatted report and a personal recovery plan. Printing this document before visiting a police station gives officers a structured complaint to work from and satisfies the federal reporting component simultaneously.
Locate the appropriate law enforcement agency. Identity theft is typically reported to the police department in the city or county where the victim resides. Some jurisdictions also accept reports from the jurisdiction where the fraud occurred. If the theft involved mail, the U.S. Postal Inspection Service (USPIS) holds concurrent jurisdiction.
Gather supporting documentation. Officers will require proof of identity (government-issued photo ID), proof of address, and documentation of the fraudulent activity — account statements, collection notices, or credit report entries showing unauthorized accounts. See Reading Your Credit Report for guidance on identifying fraudulent tradelines.
File the report and obtain the case number. Departments are required to accept identity theft reports under most state laws; refusal to file is not legally permissible. The victim should request a copy of the completed report and confirm the assigned case number at the time of filing.
Submit the police report to relevant parties. Creditors, credit bureaus (Equifax, Experian, TransUnion), and the Social Security Administration may each require a copy. The FCRA gives victims the right to send a copy to consumer reporting agencies to initiate a block of fraudulent information upon receipt.
Retain multiple copies. The report will be referenced repeatedly — during disputes with creditors, applications for extended fraud alerts, and in any subsequent civil or criminal proceedings.

Common scenarios

Identity theft incidents that most commonly require a police report fall into distinct categories, each with its own downstream implications:

Financial identity theft — unauthorized use of an individual's name, Social Security number, or financial account credentials to open credit lines, drain accounts, or obtain loans. This is the most reported category and the primary driver of FCRA-based credit report disputes. See Financial Identity Theft for the full classification framework.

Tax identity theft — fraudulent filing of a federal or state tax return using another person's SSN to claim a refund. The IRS Identity Protection Specialized Unit (IPSU) requires IRS Form 14039 (Identity Theft Affidavit) in addition to a police report. Review Tax Identity Theft for the IRS-specific filing sequence.

Criminal identity theft — the use of another person's identity during an arrest or criminal proceeding. This category requires a police report as the foundational step for clearing a false criminal record; the process involves court orders and coordination with state repositories of criminal history. For the full scope of this variant, see Criminal Identity Theft.

Medical identity theft — use of another person's identity to obtain healthcare services or prescription drugs. The HHS Office for Civil Rights (OCR) and the FTC share oversight of healthcare fraud, and a police report is frequently required by insurance providers and healthcare billing departments to initiate record corrections.

Child identity theft — fraudulent use of a minor's SSN, often undetected for years. A police report filed by a parent or legal guardian initiates the same FCRA protections. The FTC and the Consumer Financial Protection Bureau (CFPB) both document this variant as underreported.

Decision boundaries

Not every identity theft incident requires a local police report. The appropriate reporting pathway depends on the nature of the fraud, the parties requiring documentation, and the remediation steps involved.

Police report required vs. FTC report sufficient:

An FTC Identity Theft Report alone satisfies the FCRA's definition of "identity theft report" for purposes of credit bureau blocking under 15 U.S.C. § 1681c-2. A local police report becomes necessary when:
- A creditor or collection agency specifically demands law enforcement documentation before stopping collection activity
- The victim is disputing a criminal record tied to their identity
- The victim needs to establish a record for insurance claims under an identity theft insurance policy
- The fraud involves a specific physical crime scene (mail theft, wallet theft) where local jurisdiction is clear

Federal agency reports vs. local police:

Certain identity theft variants are primarily federal in character. Fraudulent use of a Social Security number requires notification to the Social Security Administration (SSA) Inspector General's fraud hotline in addition to any local report. Mail theft triggering identity fraud falls under USPIS jurisdiction (18 U.S.C. § 1708). Tax fraud routes through the IRS. Local police reports remain useful supplementary documents even in these cases, but federal agency reports carry primary investigative weight.

When local police decline to file:

If a local department refuses to take a report — citing lack of local jurisdiction or insufficient evidence — the victim retains recourse through the state attorney general's office, the Internet Crime Complaint Center (IC3) operated by the FBI, or through the FTC report alone, which carries independent statutory force. The IC3 accepts reports at ic3.gov for fraud involving interstate or electronic communications.

Documentation threshold: Consumer reporting agencies require that the identity theft report be specific — identifying the fraudulent accounts or transactions — not a generic crime report. A report stating only that identity theft occurred, without referencing specific fraudulent tradelines or account numbers, may not satisfy FCRA § 1681c-2 blocking standards.

References

📜 4 regulatory citations referenced · 🔍 Monitored by ANA Regulatory Watch · View update log

Explore This Site

Regulations & Safety Regulatory References Tools & Calculators Password Strength Calculator