What is the guide’s purpose?

The guide centralizes evidence, contact steps, and templates so victims and organizations can produce consistent records for creditors, the FTC, and law enforcement.

Can I sign the affidavit electronically?

Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, except for narrow state law exceptions such as wills or certain court filings.

Do I need a police report?

Many creditors and government agencies require a police report or incident number to process disputes; filing one is commonly recommended to support fraud claims.

How long should I keep records?

Retain documents at least three years for tax-related items (IRC §6501(a)) and six years for HIPAA-covered records (45 CFR §164.530(j)); longer retention may apply by state.

What authentication is appropriate?

Choose signer authentication based on sensitivity: email-only for low-risk, SMS or KBA for stronger assurance, and PKI or advanced methods where non-repudiation is required.

Is using a commercial eSignature platform acceptable?

Yes, provided the vendor supports ESIGN/UETA compliance and required controls; for HIPAA data handling, execute a BAA with the vendor and verify encryption and audit capabilities.

Electronic Signature
Templates
Other
Identity Theft Resource Guide

Identity Theft Resource Guide

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

What the Identity Theft Resource Guide Covers

The Identity Theft Resource Guide is a structured, practical reference for individuals and organizations responding to suspected identity theft. It collects the steps to document an incident, notify credit bureaus and affected institutions, gather supporting evidence, and escalate to law enforcement or federal agencies when needed. The guide explains typical forms and attestations, outlines timelines and retention expectations, and summarizes signature, notarization, and data-protection considerations relevant to U.S. federal and state rules.

Why a Centralized Guide Matters

A single resource reduces response time and improves consistency when addressing fraud. It helps victims preserve evidence, comply with reporting requirements, and reduce downstream consequences such as tax or credit reporting errors.

Who Uses an Identity Theft Resource Guide

Use by organizations helps standardize evidence collection and meet legal or regulatory obligations while reducing errors during investigation and remediation.

Individual victims managing recovery, credit freezes, and law enforcement reports.
Financial institutions that investigate account fraud and coordinate creditor notifications.
Legal or consumer advocacy professionals assisting with affidavits, disputes, and remediation.

Step-by-Step: Completing the Resource Guide

Follow these core steps to document and escalate an identity theft incident in a consistent order.

01

Collect Details: Record dates, account numbers, communications, and suspected fraudulent transactions.
02

Notify Agencies: File an FTC complaint and alert major credit bureaus.
03

Contact Institutions: Notify banks, card issuers, and other affected service providers.
04

File Police Report: Obtain a law enforcement report and incident number for creditors.

Where to Send Completed Sections of the Guide

Different parts of the guide have natural destinations: regulatory bodies, credit bureaus, creditors, and law enforcement.

Federal Complaint: Submit an FTC identity-theft complaint and retain the confirmation number.
Credit Bureaus: Send fraud alerts, credit freezes, and dispute forms to the three major bureaus.
Banks & Issuers: Provide account-specific evidence and the police report to impacted financial institutions.
Local Police: File a police report with local law enforcement and keep a copy for creditors and IRS.

Configuring an Electronic Workflow for the Guide

Set up fields, authentication, and retention to streamline eSubmission and auditability.

Field	Configuration
Identity Proofing	Enable ID verification or MFA for sensitive signers.
eSignature Method	Choose audit-trail e-signature or PKI-based signature as required.
Retention Settings	Configure immutable storage and export formats (PDF/A).
Notifications	Set recipient and admin alerts for completed submissions.

Technical Requirements for Digital Completion and Sharing

Preserve an immutable copy and export signed files in standard formats for long-term retention and legal defensibility.

Formats: PDF, DOCX, and fillable forms supported.
Integrations: Connectors for CRM, cloud storage, and case management.
Authentication: Email, SMS, KBA, or advanced methods available.

Time-Sensitive Actions and Typical Deadlines

Prioritize early notifications; some responses affect credit and tax reporting outcomes.

Immediate:

File an FTC complaint and notify involved lenders as soon as fraud is discovered.

Within 30 Days:

Dispute unauthorized transactions and request creditor investigations per their procedures.

When Applicable:

File a local police report to obtain an incident number for disputes.

Tax Year:

If tax-related identity theft occurred, follow IRS guidance and submit Form 14039 when required.

Monitoring:

Watch credit reports for at least 12 months; longer monitoring may be warranted.

Key Milestones During an Identity Theft Response

Track and document each milestone to build a coherent, time-stamped remediation record.

01

Discover Incident

Detect suspicious activity and log initial facts and dates.

02

Document Evidence

Gather statements, screenshots, and account statements for each fraud instance.

03

Notify Parties

Inform credit bureaus, banks, and the FTC using documented communication methods.

04

Resolve & Monitor

Work with creditors to remove fraudulent items and monitor accounts ongoingly.

Common Preparation Mistakes to Avoid

Incomplete account identifiers slow creditor matching and extend resolution time significantly.
Sending sensitive data via unsecured email exposes victims to additional phishing and data loss.
Failing to obtain a police report prevents many creditors from accepting fraud affidavits or removing charges.
Not preserving original documents or timestamps weakens evidence and complicates dispute resolution.

Essential Data Fields to Capture

Name: Full legal name

Identifier: SSN or TIN (as required)

Date of Birth: MM/DD/YYYY

Contact: Phone and secure email

Incident Summary: Concise description of fraudulent acts

Supporting Docs: Copies of bills, statements, and screenshots

Consequences of Incomplete or Incorrect Submissions

Delayed Resolution: Extended credit damage

IRS Complications: Tax-related identity theft affects filings

Account Liability: Possible customer liability for unresolved charges

Legal Exposure: Civil disputes with creditors

Data Breach Risk: Poor handling can trigger breach obligations

Regulatory Fines: Noncompliance with consumer-protection rules

Core Components of a Professional Identity Theft Resource Guide

A complete guide blends documentation templates, legal references, and a clear workflow for internal and external reporting.

Incident Log

A chronological record template for dates, transactions, and communications that supports disputes and investigations.

Fraud Affidavit

A sworn statement or affidavit template with space for notarization if required by creditors or authorities.

Notification Checklist

Stepwise list of parties to notify—credit bureaus, banks, creditors, and agencies—with suggested contact notes.

Evidence Inventory

A checklist for attachments and file naming conventions to maintain a clear audit trail of proof.

Legal Reference

Summaries of ESIGN, UETA, IRS identity-theft procedures, and relevant state reporting rules for practitioners.

Retention Policy

Documented storage and retention instructions aligned with federal and industry requirements.

Example Scenarios Where the Guide Helps

Two practical examples show how a standardized guide supports recovery and documentation.

Banking Fraud Response

A customer finds unauthorized wire transfers and logs transactions

The bank requires a police report and signed fraud affidavit
The guide’s affidavit template and evidence checklist accelerated dispute resolution and supported recovery.

Medical Identity Theft

A patient discovers erroneous claims on their health record

Provider requires identity verification and HIPAA-consistent disclosures
The resource guide aligned documentation, helped obtain corrections, and preserved HIPAA-required retention records.

eSignature Pricing: signNow and Common Alternatives

Compare baseline pricing and common feature availability for eSignature solutions used to complete identity-theft documentation.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	Varies by plan
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently Asked Questions

Answers to common questions about completing, signing, and submitting identity-theft documentation.

Need help? Contact support

What is the guide’s purpose?
The guide centralizes evidence, contact steps, and templates so victims and organizations can produce consistent records for creditors, the FTC, and law enforcement.
Can I sign the affidavit electronically?
Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted, except for narrow state law exceptions such as wills or certain court filings.
Do I need a police report?
Many creditors and government agencies require a police report or incident number to process disputes; filing one is commonly recommended to support fraud claims.
How long should I keep records?
Retain documents at least three years for tax-related items (IRC §6501(a)) and six years for HIPAA-covered records (45 CFR §164.530(j)); longer retention may apply by state.
What authentication is appropriate?
Choose signer authentication based on sensitivity: email-only for low-risk, SMS or KBA for stronger assurance, and PKI or advanced methods where non-repudiation is required.
Is using a commercial eSignature platform acceptable?
Yes, provided the vendor supports ESIGN/UETA compliance and required controls; for HIPAA data handling, execute a BAA with the vendor and verify encryption and audit capabilities.

Explore Templates

Oath of Office Disavowing Violation of Law Oath or Affirmation by Notary Public Oath of Office of Appointed Official Oath of Affirmation Receipt for Money Paid on Behalf of Children Affidavit of Naturalized Citizen for Lost Passport

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now