The FCRA provides consumers the right to demand all business records in the possession of a creditor that relate to an asserted identity theft.
The consumer must send the creditor a copy of a police report in order to impose the required disclosure.
See FCRA 609(e), which provides:
"FCRA 609 ( e ) Information Available to Victims
- (1) In general. For the purpose of documenting fraudulent transactions resulting from identity theft, not later than 30 days after the date of receipt of a request from a victim in accordance with paragraph (3), and subject to verification of the identity of the victim and the claim of identity theft in accordance with paragraph (2), a business entity that has provided credit to, provided for consideration products, goods, or services to, accepted payment from, or otherwise entered into a commercial transaction for consideration with, a person who has allegedly made unauthorized use of the means of identification of the victim, shall provide a copy of application and business transaction records in the control of the business entity, whether maintained by the business entity or by another person on behalf of the business entity, evidencing any transaction alleged to be a result of identity theft to –
- (A) the victim"
