Identity theft is one of the fastest-growing crimes in California, with over 300,000 residents affected annually. When your personal information is stolen, acting quickly makes the difference between containing the damage and facing years of financial fallout.
At Bontrager Law, we’ve helped countless Californians navigate identity theft reporting and recovery. This guide walks you through filing reports with the right agencies, documenting your case, and protecting yourself from further harm.
What Identity Theft Means in California
California Penal Code Section 530.5 defines identity theft as the unauthorized use of someone else’s personal identifying information to obtain credit, goods, services, or medical information. This definition is broader than many people realize. You don’t have to suffer financial loss for identity theft to occur. A criminal can steal your Social Security number, driver’s license number, or financial account data and use it to commit crimes in your name, damage your credit, or drain your accounts. The FTC reported over 1.1 million identity theft incidents in 2022, and California consistently ranks among the states with the highest rates.
Thieves exploit victims in multiple ways: using existing credit lines, opening new accounts in your name, taking out loans, fraudulently billing medical or insurance services, charging utilities, activating phone services, or filing false tax returns. Some perpetrators are people you know. Others operate through data breaches, phishing schemes, mail theft, or purchasing stolen information on the dark web. The moment you notice unauthorized accounts, inquiries on your credit report, or bills for services you never opened, you’re likely facing identity theft.
Alert the Credit Bureaus Within Hours
Speed is everything when identity theft strikes. Contact all three major credit bureaus immediately: Equifax at 1-800-525-6285, Experian at 1-888-397-3742, and TransUnion at 1-800-680-7289. Place a fraud alert on your file, which forces creditors to contact you before extending new credit. A standard fraud alert lasts 90 days, but you can extend it to seven years by submitting a written request with a police report.
File a Police Report
Next, file a police report with your local law enforcement agency or the California Attorney General’s office. Obtain a copy of that report immediately; you’ll need it for creditors and credit bureaus. This document becomes your foundation for disputing fraudulent accounts and proving your case to financial institutions.
Secure Your Bank Accounts and Cards
Close any compromised bank accounts and open new ones with strong passwords. If your debit card was stolen, contact your bank right away. Your liability is limited to $50 if reported within two business days, but delays increase your exposure significantly. For stolen checks or account information, notify check verification services TeleCheck at 1-800-710-9898 and Certegy at 1-800-437-5120.
Protect Your Mail
If mail theft occurred, contact the U.S. Postal Inspector to investigate and protect your future mail. These initial actions (police report, fraud alerts, account closures, and mail protection) form the backbone of your recovery. With these steps completed, you’re ready to move forward with the formal reporting process that law enforcement and credit agencies require.
Filing Your Identity Theft Report
The moment you alert credit bureaus and file a police report, you need to understand which agencies process identity theft reports and what documentation each one requires. Many Californians submit reports to the wrong offices or fail to include the specific forms these agencies demand, which delays their case and weakens their position with creditors. The California Attorney General’s office, local law enforcement, and credit bureaus operate under different procedures, and getting this right the first time matters.
Start With Local Law Enforcement
File your report with your local police department or sheriff’s office, not the state attorney general. Most agencies now accept reports online through their websites, though filing in person strengthens your case. Bring your driver’s license, Social Security card if you still have it, and any documentation showing fraudulent activity: unauthorized credit card statements, bills for accounts you didn’t open, collection notices, or suspicious inquiries on your credit report. The police will generate an official report number and provide you with a copy immediately. This police report becomes your most valuable document for the next 18 months. You’ll submit copies to credit bureaus, creditors, and check verification services.
Obtain Your Free Credit Reports and File With the FTC
California law entitles identity theft victims to up to 12 free credit reports in the 12 months following the police report. Obtain yours through annualcreditreport.com and review them carefully for unfamiliar accounts and inquiries. Simultaneously, file a complaint with the Federal Trade Commission at IdentityTheft.gov or by calling 1-877-438-4338. The FTC maintains a national database used by law enforcement agencies, and this complaint creates an official record that strengthens your credibility when disputing fraudulent items.
Complete the Identity Theft Affidavit and Contact Credit Bureaus
The FTC provides the Identity Theft Affidavit, a standardized form accepted by all three major credit bureaus and most creditors. Complete this form in writing, attach copies of your police report, and send it to Equifax, Experian, and TransUnion via certified mail with return receipt requested. Keep copies of everything you send. When contacting individual creditors about fraudulent accounts, include your police report and the Identity Theft Affidavit with each dispute letter. Creditors are required to investigate and respond within 30 days.
Handle Debt Collector Communications
If a debt collector contacts you about identity theft-related debt, immediately dispute the debt in writing, inform them you’re a victim, and cite California Civil Code section 1798.93 within 30 days. This prevents collectors from reporting the debt to credit bureaus while your case proceeds.
Document Everything Meticulously
Maintain a written log of every phone call, email, and piece of correspondence related to your identity theft. Document the date, time, person spoken with, phone number, and what was discussed. This log becomes evidence if creditors or credit bureaus fail to act on your dispute or if you need to escalate your case. With your police report filed, FTC complaint submitted, credit bureaus notified, and documentation organized, you’ve established the foundation for recovery. The next phase involves protecting yourself from further harm and strengthening your position with creditors and financial institutions.
Reclaim Your Credit Reports and Challenge Every Fraudulent Entry
Your credit reports are the battlefield where identity theft cases are won or lost. After filing your police report and alerting credit bureaus, you must obtain all three credit reports and scrutinize them line by line. California law gives identity theft victims access to up to 12 free credit reports in the 12 months following the police report, so use this advantage immediately. Order through annualcreditreport.com and examine each report for unfamiliar accounts, inquiries you didn’t authorize, and incorrect personal information. Many victims miss accounts because they scan too quickly or assume they’ve already seen everything. Slow down. Look for variations of your name, addresses from years ago where fraud might have occurred, and inquiries from lenders you never contacted. When you find fraudulent items, document the account number, creditor name, date opened, and current balance. This becomes your dispute roadmap.
Dispute Fraudulent Accounts in Writing
Dispute fraudulent accounts in writing using certified mail with return receipt requested. Send your dispute letter to each credit bureau separately, even if the fraud appears on multiple reports. Include copies of your police report and the FTC Identity Theft Affidavit with every dispute. Credit bureaus have 30 days to investigate, but most take longer. Send follow-up letters at 45 days and 60 days if the item remains on your report. Contact the creditor directly as well, not just the credit bureau. Tell them the account was opened fraudulently, cite your police report number, and demand they close the account and report it as closed at your request rather than charged-off or delinquent. Creditors often respond faster to direct contact than to credit bureau disputes. If a creditor refuses to remove a fraudulent account after 60 days, escalate to your state attorney general’s office. California’s Attorney General investigates unlicensed lending and fraudulent credit practices, and a complaint from you strengthens enforcement action. Track every dispute letter, every response, and every date. Create a spreadsheet with the fraudulent account, date disputed, bureau or creditor contacted, and current status. This documentation is critical if you later need to sue for damages under the Fair Credit Reporting Act.
Organize Your Evidence With Precision
Your case depends on organization. Law enforcement and creditors need consistency across all documents. Create a master file with your police report number, case officer’s name and phone number, and FTC complaint number at the top. Attach copies of your police report, FTC Identity Theft Affidavit, initial fraud alert confirmation letters from all three credit bureaus, and your first credit report showing the fraudulent items. Keep a detailed log with every phone call you make or receive related to identity theft. Write the date, time, person’s name and title, organization, phone number, and a summary of what was discussed. If someone promises to remove an account, note that promise. If a creditor denies your dispute, note the reason. This log becomes evidence if you need to prove that creditors or credit bureaus failed to investigate properly or acted in bad faith. Maintain separate folders for each fraudulent account, each credit bureau, and each creditor. When you dispute with Equifax, keep that entire exchange in one folder. When you dispute with the creditor who opened the fraudulent account, keep that in another. This prevents you from losing critical documents and makes it easy to reference your history if you need to escalate. Store originals in a safe place and keep digital copies as backup. If your case requires legal action, your organized file will save thousands in attorney fees because attorneys won’t have to reconstruct your timeline from scattered documents.
Coordinate With Law Enforcement and Push for Action
After filing your initial police report, contact the investigating officer every 30 days with updates on fraudulent accounts you’ve discovered. Many identity theft cases go dormant because victims stop communicating with police. Send your officer copies of new fraudulent accounts, credit report disputes, and creditor responses. This keeps your case active and shows law enforcement that you’re serious about resolution. If your local police department drags its feet or takes months to assign an officer, escalate to the Commercial Crimes Division if your city has one, or contact the California Attorney General’s Identity Theft Unit. The Attorney General’s office can coordinate with local agencies and apply pressure when cases stall. Provide them with your police report number, the types of fraud you’ve discovered, and the dollar amount of unauthorized accounts. If you have a particularly aggressive identity thief who opened multiple accounts or committed crimes in your name, request that law enforcement contact the Social Security Administration and the IRS. The SSA maintains earnings records, and if someone used your Social Security number to work or file taxes, the SSA needs to know. The IRS can flag your account to prevent fraudulent tax refund theft, which is increasingly common. These federal agencies move slowly, but initiating contact early prevents worse problems later. We’ve seen cases where victims waited months to contact federal agencies, only to discover that fraudsters had filed false tax returns claiming refunds in the victim’s name. Early coordination with SSA and IRS prevents this outcome.
Final Thoughts
Identity theft reporting in California requires speed, documentation, and persistence. You’ve learned how to file police reports, alert credit bureaus, dispute fraudulent accounts, and coordinate with law enforcement. The difference between victims who recover quickly and those who struggle for years comes down to one factor: taking action immediately and following through consistently. Your police report serves as your foundation, your credit reports become your battlefield, and your documentation provides your proof.
Contact police and the three major credit bureaus on the same day you discover identity theft. File your FTC complaint within 48 hours and dispute fraudulent accounts in writing within one week. This compressed timeline prevents criminals from opening additional accounts while you’re still gathering information. Many Californians handle identity theft recovery alone and succeed, but others hit roadblocks when creditors refuse to remove fraudulent accounts or credit bureaus ignore disputes.
If you’ve followed every step in this guide and creditors or credit bureaus still won’t act after 60 days, legal representation becomes necessary. At Bontrager Law, we represent Californians across the state in identity theft disputes and credit reporting errors, and we know what pressure points force creditors and credit bureaus to act. Contact Bontrager Law for a free case review if your identity theft reporting California case stalls or creditors refuse to cooperate.