Finding a debt in your name that you never created is alarming, and the first question is almost always: am I on the hook for it? The short answer is no. A debt that resulted from identity theft is not yours to pay, and federal law is built to put the burden on the thief and on the businesses that let the fraud happen — not on you. This page is about liability. Once you know you are not legally responsible, the practical work is proving the fraud and getting the accounts blocked, which the law lets you do for free.
You are not liable for a debt an identity thief opened
If someone opened an account or ran up charges in your name without your authorization, the legal obligation belongs to the criminal who incurred it, not to you. You did not agree to the account, so you are not the borrower on it. This is true whether it’s a credit card someone opened in your name, a loan, a utility account, or charges on an account you do recognize. The same principle covers the related worry — “am I liable for a debt opened in my name by someone else?” The answer turns on authorization: if you didn’t authorize it, it isn’t your legal responsibility. Your job is not to negotiate or settle a fraudulent debt; it’s to document that it’s fraud and assert the rights below. If you’re genuinely unsure whether a debt is fraud or just unfamiliar, start with what to do about a debt you don’t recognize before treating it as identity theft.
The proof path: IdentityTheft.gov and the FTC Identity Theft Report
To exercise your rights, you need to document the fraud, and the federal system for that is free. Report the theft at the FTC’s IdentityTheft.gov (or by phone at 1-877-438-4338). Based on the details you enter, the site generates your FTC Identity Theft Report — the affidavit that proves to businesses and bureaus that you were a victim — and walks you through a personal recovery plan, pre-filling letters to creditors, collectors, and the credit bureaus. With that report in hand, notify the fraud department of each business where an account was opened, and dispute the fraudulent entries with the credit bureaus. The FTC Identity Theft Report is what triggers the strongest protections in the Fair Credit Reporting Act, so generating it is the pivotal first step. For the full walk-through, see someone opened a credit card in my name.
The FCRA lets you block the fraudulent items — for free
Under the Fair Credit Reporting Act, § 605B (Fair Credit Reporting Act, 15 U.S.C. § 1681c-2), a credit bureau must block information in your file that you identify as resulting from identity theft. Once you give the bureau appropriate proof of your identity, a copy of your identity theft report, identification of the fraudulent information, and a statement that it doesn’t relate to any transaction you made, the bureau must block that information from your report no later than four business days after it receives the request. You do not pay for this, and you do not settle anything — the point is to remove a debt that was never yours, not to pay it down. For the mechanics of clearing your report, see how to remove fraudulent accounts from your credit report, and you can track the dispute and reporting windows with the credit-report timeline tool.
A collector told it’s identity theft can’t keep selling or collecting it
The law also reaches the businesses chasing the debt. Under the Fair Credit Reporting Act, § 615(f) (15 U.S.C. § 1681m(f)), once a person has been notified under § 605B that a debt resulted from identity theft, that person may not sell, transfer for consideration, or place that debt for collection. In plain terms: when you put a creditor or collector on notice with your identity theft report, it is not supposed to pass the fraudulent debt down the chain or keep pursuing it as if it were valid. If a collector ignores your notice and keeps calling, you can also use your separate right to stop the calls in writing and dispute the debt. The CFPB has taken enforcement action against collectors that failed to investigate identity-theft reports, so these rules have teeth.
Don’t just ignore it — silence is the real risk
Not being liable is not the same as being safe if you do nothing. People sometimes ask, “what happens if I ignore a collection for a debt that isn’t mine?” The danger is that a collector can file a lawsuit, and if you don’t respond to the court papers by the deadline in the summons — often around 20 to 30 days — the court can enter a default judgment against you on a debt you never owed. A judgment can lead to wage garnishment or a bank levy. So the answer to ignoring it is not to pay; it’s to document the fraud — file the IdentityTheft.gov report, dispute and block the accounts, and notify the creditor and collector in writing, keeping copies of everything. If you are actually served with a lawsuit, do not let the deadline pass: see can you be sued for a debt from identity theft?
Bottom line and where to get free help
You do not have to pay a debt that came from identity theft, and you should not try to “settle” one — settling implies the debt is yours, which it isn’t. Instead, lean on the free federal tools: generate your FTC Identity Theft Report at IdentityTheft.gov, notify each creditor’s fraud department, and use the Fair Credit Reporting Act § 605B block to clear the fraudulent items from your credit file at no cost. If a collector keeps pursuing a debt after you’ve sent your identity theft report, or if you’re sued, you can file a complaint with the CFPB or FTC and, where the stakes are high, talk to a consumer-protection attorney. Once the fraud is documented and the items are blocked, you can turn to repairing your credit yourself.