1. Authorization Determines Whether an Account Was Misused
An application does not prove who submitted it. Ask who used the information, what permission existed, and whether the disputed transactions exceeded that permission.
Prior Access Does Not Establish Continuing Consent
A relative or former partner may have known your password or held identification documents. That does not necessarily authorize a new loan or transfer. Messages, password changes, and alerts help establish when consent ended or was limited.
Identify disputed transactions. A shared device may complicate attribution but does not establish consent.
New York Criminal Law Has Specific Elements
Penal Law § 190.78 addresses knowingly assuming another person's identity with intent to defraud and obtaining property or credit, causing financial loss, or committing a qualifying offense. Sections 190.79 and 190.80 cover additional circumstances, including higher amounts or specified crimes.
Suspicious activity neither identifies a perpetrator nor proves a crime. Consumer remedies need not await an arrest.
2. Account Records Help Identify the Actual User
Compare business records with your authorization. Connect each account to its application, verification method, and transactions; no single record necessarily identifies the user.
Different Records Answer Different Questions
| Record | May Establish | Does Not Alone Prove |
|---|---|---|
| Application | Information used to open the account | Who entered it |
| Transaction history | Dates, amounts, and charges | Who approved them |
| Access records | Device or authentication events | The person's identity |
| Messages | Permission, objections, or timing | Authenticity without context |
A familiar IP address may be shared; an unfamiliar one does not conclusively identify a user.
Federal Law Permits Requests for Transaction Records
The Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681g(e), lets qualifying victims request application and business transaction records linked to alleged identity theft. A covered business generally must provide responsive records without charge within 30 days after a qualifying written request, subject to verification and exceptions.
Send the request to its designated address and identify available dates and account numbers. The business may ask for proof of identity, a police report, and an identity-theft affidavit. The statute does not require creation of missing records or disclosure of every security log. Other reporting rights fall under the Fair Credit Reporting Act.
Preserve the Records That Establish Timing
Save statements, alerts, messages, and screenshots. Record discovery and notification dates. Ask the institution to preserve application and authentication records, although that request does not itself extend statutory retention obligations.
Keep originals and distinguish acknowledgments from final decisions.
3. Credit Reporting and Debt Collection Require Separate Responses
Fraudulent credit entries, disputed debts, and unauthorized charges involve different procedures. One complaint may not notify every institution.
Identity Theft Credit Blocks Have Conditions
Under 15 U.S.C. § 1681c-2, a consumer reporting agency generally must block information resulting from alleged identity theft within four business days after receiving proof of identity, an identity theft report, identification of the entry, and a statement that the transaction was not yours.
The agency may decline or rescind a block on statutory grounds, including material misrepresentation or error. A block does not cancel the underlying debt. Other inaccurate entries may require separate credit repair disputes.
State Law Addresses Collection of Identity Theft Debts
Under New York General Business Law § 604-a, a covered principal creditor must suspend collection while reviewing a qualifying claim. Required documentation includes a valid police report or completed, signed FTC identity-theft report and the prescribed written statement about the specific debt.
An oral complaint alone does not meet this process; the creditor must explain missing information when the law requires it. Collection may resume only after the statutory good-faith review and required written notice. That outcome does not determine whether the debt is valid. Save collection letters and responses; debt collection violations can raise distinct legal issues.
Existing Charges Have Separate Notice Deadlines
Report unauthorized charges promptly to the bank or issuer. For a covered credit-card billing error, federal Regulation Z generally requires written notice within 60 days after the issuer sent the first statement showing the charge. Use the issuer's designated billing-dispute address.
Debit-card and electronic-transfer disputes follow Regulation E's different rules. A police or FTC report does not replace notice to the financial institution.
4. Reporting and Court Procedures Depend on Location
Federal and state rules generally apply across Nassau and Suffolk. Local differences concern police and court jurisdiction.
Ftc and Police Reports Have Different Roles
An IdentityTheft.gov report creates an FTC Identity Theft Report and recovery plan. The FTC does not decide individual debt disputes.
The New York Attorney General advises victims to report suspected crime to the appropriate local law enforcement agency. Provide identification, account notices, and a dated timeline. Keep the report number and copies. Broader recovery steps appear in identity theft protection.
Nassau and Suffolk Use Different Local Court Structures
Both counties are in New York's Tenth Judicial District. Nassau has a District Court. Suffolk's District Court covers Babylon, Brookhaven, Huntington, Islip, and Smithtown; Town and Village Justice Courts handle designated matters elsewhere.
The nature of the claim, jurisdictional requirements, and requested relief determine the appropriate court. A police report does not initiate a civil lawsuit.
Review Unresolved Records before Choosing Legal Action
Compare applications, authentication details, charges, and responses. Identify what remains unresolved: identity, permission, credit reporting, or debt liability.
An identity theft lawyer on Long Island can assess those specific questions and applicable deadlines. Criminal prosecution and civil litigation are not automatic steps in resolving every identity-theft complaint.
28 Oct, 2026
