Technically, a fraud alert is only imposed if requested by the consumer or his authorized representative. FCRA 605A.
However, the CRAs generally interpret any assertion of any identity-theft or other anauthorized use of a consumer's identity to inherently be a request from the consumer for an initial fraud alert. That is, in my opinion, a prudent and helpful CRA policy interpretation that helps protect consumers.
Any fraud alert can be rescinded at any time provided the consumer sends the CRA a rescision notice, accompanied by proof of identity.
Thus, since at inferred reqeust for a fraud alert can always be explicitly rescinded by the named consumer, it is not a problem.
An initial fraud alert is effective for only 90-days, and requires only an assertion of suspected identity theft or fraud..
An extended fraud alert lasts for years, but requries the additional submission by the consumer of a police ("identity theft") report that asserts and actual act of identity theft.
The CRA thus does not impose an extended fraud alert based on inferred identity theft issues, as it requires the consumer to provide a police report.
I would generally let an initial fraud alert expire on its own after 90-days unless you have specific need for earlier removal.
