Someone opened a credit card in your name

You found it on your credit report, or a card arrived you didn't apply for, or a collections notice turned up for an account you've never heard of.

Someone used your identity to open credit. This guide is about that specific problem: getting the account off your file and finding out how it happened. If your identity has been misused more broadly, how to respond to identity theft covers the wider recovery, and how to freeze your credit covers the bureau steps in detail.

Two legal rights do most of the work here, and most people never use either.

Step 1: Freeze your credit at all three bureaus

Before anything else. A freeze blocks new accounts from being opened in your name, which stops the second and third card from following the first. It's free, it takes a few minutes at each bureau, and you can lift it temporarily when you need to.

Do all three: Equifax, Experian, and TransUnion. An application blocked at two bureaus and approved through the third helps nobody.

Step 2: Get an FTC Identity Theft Report

Go to IdentityTheft.gov and file. The report it generates is not paperwork for its own sake. It's the document the two rights below depend on, and without it you're asking for favors rather than exercising entitlements.

File a police report as well. Some issuers require one, and having it costs you an afternoon rather than an argument later.

Step 3: Call the issuer's fraud department, not customer service

Ask for the fraud department by name. Tell them the account is fraudulent, that you did not apply for it, and that you want it closed and reported as fraud rather than closed at your request. The distinction matters, because "closed by consumer" leaves a mark that "confirmed fraudulent" doesn't.

Ask for the fraud claim number and the name of the person you spoke to. Follow up in writing.

Step 4: Demand the application documents

This is the right almost nobody uses. Under the Fair Credit Reporting Act, a victim of identity theft can require the business that opened the account to hand over the application and transaction records, at no charge, within 30 days of a valid request.

Write to the issuer's fraud department and ask specifically for the application, any supporting documents, and the transaction records for the account, citing your right as an identity theft victim under FCRA section 609(e). Include your identity theft report and proof of identity.

What comes back is genuinely useful. The application will show the address, phone number, email, and often the employer used to open the account. Sometimes it's an address the attacker controls. Sometimes it's your own real address, which tells you how well-informed they were, and how they got there.

Step 5: Block the account from your credit file

The second underused right. A credit bureau must block information from your file that resulted from identity theft, once you give them an identity theft report, identification, and identification of the specific information. Bureaus generally have four business days to act.

This is stronger than a dispute. A dispute asks the bureau to investigate and hope the furnisher agrees. A block under FCRA section 605B compels removal on the strength of your report, and it stops the furnisher from selling the debt onward.

Send it in writing to each bureau that lists the account, by certified mail, and keep copies.

Step 6: Deal with collections separately

If the debt has already been sold, notify the collector in writing that the account is the result of identity theft and include your report. A collector who receives that notice must stop collecting until they've investigated, and must tell you what they find. They also can't keep reporting it to the bureaus as valid.

Step 7: Check what else was opened

One fraudulent card is rarely the whole picture. Pull all three credit reports free at annualcreditreport.com and read every account and every inquiry, not just the one you found. Inquiries show attempts that were declined, which tells you where else they tried.

How they had enough to apply

Opening credit in someone's name takes a specific set of facts: full legal name, current address, date of birth, and a Social Security number. The number usually comes from a breach. Everything else is published.

Data brokers and people-search sites publish full names alongside current and past addresses, ages and dates of birth, phone numbers, and relatives, compiled from public records and commercial sources and sold to anyone. That's the file an application asks for, minus one field.

It's also how the application survives verification. Identity checks often ask which of these streets you've lived on, or which of these people you're related to. Those answers are for sale.

Delist finds those listings, files the removals, and re-checks them, because brokers commonly repost profiles after they come down. It won't undo an account already opened. It reduces how much of the next application someone can fill in correctly. Run a free scan to see what's published about you.

Frequently asked questions

Am I liable for a credit card I didn't open?

No, when it's genuinely fraudulent and you report it. The work is proving it and getting it off your credit file, which is what the identity theft report, the fraud claim, and the block are for.

How long does it take to get it removed?

The bureau block generally takes four business days once they have a complete request. The issuer's own investigation can take longer, up to about 30 days. Keeping written records shortens every dispute that follows.

Should I freeze or just put a fraud alert on my file?

Freeze. A fraud alert asks lenders to take extra verification steps; a freeze blocks new accounts outright. Use both if you like, but the freeze is the one that stops the next application.

Can I really make them give me the application documents?

Yes. It's an established right for identity theft victims under the Fair Credit Reporting Act, and it's free. Send the request in writing with your identity theft report, and be specific about what you're asking for.

What if the card was opened at my own address?

That points to someone who had your details rather than a random attempt, and it can mean mail theft or someone known to you. Keep the paperwork, mention it in the police report, and consider a mail hold or a PO box while you sort it out.

Will this hurt my credit score?

It can while the account is on your file, which is why the block matters more than the dispute. Once removed, the effect should reverse. Check all three reports afterwards to confirm it actually came off everywhere.