Filing a Police Report for Identity Theft

Filing a police report for identity theft is a formal law enforcement step that creates an official record of the crime, enabling victims to dispute fraudulent accounts, satisfy creditor requirements, and access enhanced federal protections. This page covers the definition and scope of identity theft police reports, the procedural mechanics of filing, the scenarios in which a report is typically required, and the boundaries that determine when a police report is sufficient versus when additional federal or state filings are necessary.

Definition and scope

An identity theft police report is a formal complaint submitted to a local or state law enforcement agency documenting that a named individual's personal identifying information — including Social Security numbers, financial account credentials, or government-issued identifiers — was used without authorization to commit fraud or other crimes. Under federal law, identity theft is defined at 18 U.S.C. § 1028, which covers the knowing transfer, possession, or use of another person's means of identification.

The legal weight of a police report in the identity theft context extends beyond criminal prosecution. The Federal Trade Commission's consumer-facing recovery platform, IdentityTheft.gov, distinguishes between an FTC Identity Theft Report (generated through the federal portal) and a local police report. Each serves a different function: the FTC report activates specific statutory rights under the Fair Credit Reporting Act (15 U.S.C. § 1681), while a police report is required by a larger subset of creditors, collection agencies, and government benefit programs before they will investigate disputed fraudulent accounts.

All 50 states have enacted identity theft statutes that classify the offense at the state level, meaning a police report may trigger both federal and state-level investigative processes depending on the jurisdiction and the nature of the theft. For context on how this regulatory landscape is structured, see the Identity Protection Providers on this provider network.

How it works

The process of filing a police report for identity theft follows a structured sequence. Deviation from this sequence can delay creditor responses or invalidate eligibility for protections under the FCRA.

1. Gather documentation — Collect evidence of the fraudulent activity: account statements showing unauthorized transactions, collection notices for unrecognized debts, IRS notices of duplicate tax filings, or government benefit denial letters. Copies of the victim's government-issued ID are required at filing.

2. File an FTC Identity Theft Report first — The FTC recommends filing at IdentityTheft.gov before approaching local law enforcement. The FTC report generates a pre-filled complaint document that law enforcement agencies accept as a supporting statement.

3. Contact the local law enforcement agency — The report must be filed with the police department or sheriff's office in the jurisdiction where the victim resides, or in the jurisdiction where the fraud occurred if different. Some agencies now accept online or phone-based reports for identity theft; others require an in-person visit.

4. Request a copy of the filed report — Victims are entitled to a copy of the completed police report. This copy is the operative document presented to credit bureaus, the three of which — Equifax, Experian, and TransUnion — are subject to FCRA obligations when presented with a valid identity theft report.

5. Submit the report to relevant institutions — Present the police report number and copy to creditors, debt collectors, and the Social Security Administration if a Social Security number was compromised. The IRS Identity Protection Specialized Unit (reachable via IRS Identity Theft Central) requires its own Form 14039 in addition to a police report for tax-related identity theft.

6. Request an extended fraud alert or credit freeze — Under 15 U.S.C. § 1681c-1, a victim who files an identity theft report with a consumer reporting agency may request a 7-year extended fraud alert, compared to the 1-year initial fraud alert available without a police report.

Professionals navigating these procedures on behalf of clients operate within the frameworks described in the .

Common scenarios

Identity theft police reports are filed across a range of fraud typologies, each with different downstream documentation requirements.

Financial account fraud — Unauthorized credit accounts, loan applications, or bank account openings represent the most common category. Creditors are obligated under 15 U.S.C. § 1681s-2(a)(6) to block reporting of information resulting from identity theft when presented with a valid identity theft report.

Tax identity theft — When a fraudulent return is filed using a victim's Social Security number, the IRS requires Form 14039 (Identity Theft Affidavit) alongside the police report. The IRS Identity Protection PIN (IP PIN) program is the primary mitigation tool.

Government benefits fraud — Fraudulent claims for unemployment insurance, Medicaid, or Social Security benefits require reporting to the relevant administering agency in addition to local law enforcement. The Social Security Administration's Office of the Inspector General maintains a dedicated fraud reporting channel.

Medical identity theft — Fraudulent use of health insurance or Medicare credentials requires reporting to the Department of Health and Human Services Office for Civil Rights under HIPAA, in addition to the police report.

Criminal identity theft — When a thief uses a victim's identity during a law enforcement encounter, a police report at the local level may need to be supplemented by a petition to the relevant court to establish an identity theft passport or certificate, a mechanism available in 30 states as documented by the National Conference of State Legislatures.

Decision boundaries

Not every identity theft situation warrants — or benefits equally from — a local police report. The following distinctions govern the appropriate filing pathway.

Police report vs. FTC report only — For lower-severity cases involving a single disputed account with a cooperative creditor, an FTC Identity Theft Report alone may satisfy the creditor's requirements. A local police report becomes necessary when creditors or collection agencies refuse to accept the FTC report, when criminal prosecution is sought, when government benefit fraud is involved, or when the victim needs an extended 7-year fraud alert under FCRA.

Jurisdiction of filing — Filing in the wrong jurisdiction does not invalidate the report, but agencies outside the relevant jurisdiction may decline to investigate. The FTC guidance published at IdentityTheft.gov directs victims to file in the jurisdiction where they live or where the fraud originated.

Law enforcement refusal — Some agencies decline to file identity theft reports when no local nexus exists or when the financial threshold falls below an internal priority threshold. In these cases, the FTC Identity Theft Report and a signed affidavit serve as the functional equivalent for FCRA purposes, as outlined in 15 U.S.C. § 1681a(q)(4).

Minors and deceased individuals — Child identity theft and posthumous identity theft require guardianship or executor documentation alongside the police report. The FTC's IdentityTheft.gov platform provides distinct recovery plans for both scenarios.

Professionals and individuals researching the full scope of identity theft recovery services and referral resources can review the structured providers available through How to Use This Identity Protection Resource.