Furnisher Direct Dispute and Identity Theft Block Request - New York

FURNISHER DIRECT DISPUTE AND IDENTITY THEFT BLOCK REQUEST

State of New York

SENT VIA CERTIFIED MAIL, RETURN RECEIPT REQUESTED

Date: [__/__/____]

From (Consumer/Consumer's Attorney):

Name: [________________________________]
Address: [________________________________]
City, State, ZIP: [________________________________]
Date of Birth: [__/__/____]
Last Four Digits of SSN: [____]
Telephone: [________________________________]
Email: [________________________________]
New York Bar Registration No. (if attorney): [________________________________]

To (Furnisher of Information):

Company Name: [________________________________]
Dispute Department / Compliance Department: [________________________________]
Address: [________________________________]
City, State, ZIP: [________________________________]

Re: Direct Dispute Under 15 U.S.C. § 1681s-2(a)(8) and Identity Theft Block Under 15 U.S.C. § 1681c-2 and New York Law
Account Number: [________________________________]
Type of Account: [________________________________]
Consumer Reporting Agencies Affected: ☐ Equifax ☐ Experian ☐ TransUnion ☐ Other: [____]

PART 1: DIRECT DISPUTE TO FURNISHER

Section 1.1: Legal Basis for Direct Dispute

This letter constitutes a formal direct dispute of the information you are furnishing to consumer reporting agencies regarding the above-referenced account. This dispute is made pursuant to:

• Federal: 15 U.S.C. § 1681s-2(a)(8) and 12 C.F.R. Part 1022, Subpart E
• New York: N.Y. Gen. Bus. Law §§ 380-a to 380-t (New York Fair Credit Reporting Act provisions) and N.Y. Gen. Bus. Law § 349 (deceptive business practices)

Your Obligations Upon Receipt of This Dispute

Under 15 U.S.C. § 1681s-2(a)(8) and 12 C.F.R. § 1022.43, upon receipt of this direct dispute, you must:

1. Conduct a reasonable investigation within 30 days of receipt (extendable by 15 days if the consumer provides additional relevant information);
2. Review all relevant information provided by the consumer;
3. Report the results of the investigation to the consumer;
4. If the information is inaccurate, incomplete, or unverifiable, correct, delete, or modify the information and notify each CRA;
5. If you determine the dispute is frivolous or irrelevant, notify the consumer within 5 business days with the reasons and identify information needed to investigate.

New York-Specific Obligations

Under New York law, furnishing known inaccurate information to a consumer reporting agency may constitute a deceptive business practice under N.Y. Gen. Bus. Law § 349, providing the consumer with a private right of action for actual damages, treble damages (up to $1,000), and attorney's fees.

Additionally, if you are a debt collector licensed by the NY Department of Financial Services, you are subject to the debt collection regulations in 23 NYCRR Part 1, which impose specific recordkeeping and accuracy requirements on your reporting activities.

IMPORTANT: You may NOT refuse to investigate this dispute on the grounds that it was submitted directly to you rather than through a CRA. The direct dispute right under § 1681s-2(a)(8) is separate from the CRA-mediated dispute process.

Section 1.2: Account Information Being Disputed

Account Number: [________________________________]
Name of Account Holder (as reported): [________________________________]
Type of Account: [________________________________]
Current Reported Balance: $[________________________________]
Date Opened (as reported): [__/__/____]
Date of Last Activity (as reported): [__/__/____]
Current Status (as reported): [________________________________]

Specific Items Being Disputed

☐ The account does not belong to me
☐ The reported balance is incorrect
☐ The reported payment history is inaccurate
☐ The account status is incorrect (e.g., reported as open when closed, reported as delinquent when current)
☐ The reported date of first delinquency is incorrect
☐ The account has been paid in full but is not reported as such
☐ The account has been settled but is not reported as settled
☐ The account was included in a bankruptcy discharge but is still being reported
☐ The reported credit limit is incorrect
☐ The account is being reported past the 7-year reporting period under 15 U.S.C. § 1681c(a)
☐ Unauthorized charges are included in the reported balance
☐ The account resulted from identity theft
☐ Other: [________________________________]

Detailed Explanation of Dispute

[________________________________]
[________________________________]
[________________________________]
[________________________________]
[________________________________]

Correct Information (if known)

The correct information for this account should be:

• Balance: $[________________________________]
• Payment Status: [________________________________]
• Account Status: [________________________________]
• Date of Last Activity: [__/__/____]
• Other corrections: [________________________________]

Section 1.3: Supporting Documentation

The following documents are enclosed to support this dispute:

☐ Copy of current credit report showing the disputed information (from ☐ Equifax ☐ Experian ☐ TransUnion)
☐ Proof of payment (canceled checks, bank statements, payment confirmations)
☐ Settlement agreement or payoff letter
☐ Bankruptcy discharge order and schedules (Case No. [________________________________])
☐ Account statements showing correct balance
☐ Correspondence with the creditor
☐ Court orders or judgments
☐ Proof of identity (government-issued photo ID)
☐ Proof of current address
☐ FTC Identity Theft Report (if applicable -- see Part 2)
☐ Police report (if applicable -- see Part 2)
☐ Other: [________________________________]

Section 1.4: Demand for Investigation and Correction

I hereby demand that you:

1. Conduct a reasonable investigation of each disputed item within 30 days of receipt.
2. Review all relevant information I have provided, including all enclosed documentation.
3. Provide written notice of the investigation results, including:
   - Whether each disputed item was found accurate, inaccurate, incomplete, or unverifiable
   - The specific actions taken (correction, deletion, modification, or verification)
   - If verified as accurate, the method of verification and documents relied upon
4. If information is inaccurate, incomplete, or unverifiable, correct, delete, or modify the information and notify each CRA.
5. Do not re-report the disputed information until the investigation is complete.
6. Report the account as "disputed" to all CRAs during and after the investigation.
7. Provide written confirmation of all corrections and CRA notifications.

PART 2: IDENTITY THEFT BLOCK REQUEST

NOTE: Complete this section ONLY if the disputed account resulted from identity theft.

Section 2.1: Identity Theft Declaration

☐ I declare that the account identified above resulted from identity theft. I did not open this account, I did not authorize anyone to open this account on my behalf, and I did not benefit from this account. The account was opened and/or used by an unauthorized person without my knowledge or consent.

Section 2.2: Legal Basis for Identity Theft Block

Federal Law

• 15 U.S.C. § 1681c-2 -- Block of information resulting from identity theft (4 business day CRA block requirement)
• 15 U.S.C. § 1681s-2(a)(6)-(7) -- Furnisher must cease reporting and prevent re-furnishing

New York State Law

New York provides multi-layered identity theft protections:

N.Y. Gen. Bus. Law § 380-s (Security Freeze and Identity Theft):

• Consumers may place a security freeze on their credit reports at no charge
• CRAs must place the freeze within the timeframes specified by statute
• Courts may impose civil penalties of up to $5,000 per violation of the security freeze provisions
• Certain parties retain access to frozen reports: existing creditors, debt collectors acting on behalf of existing creditors, government agencies enforcing child support, and entities with court orders

N.Y. Gen. Bus. Law § 380-l (Consumer Reports - Accuracy):

• Provisions regarding the accuracy of information in consumer reports
• Obligations of furnishers to ensure accuracy

N.Y. Penal Law §§ 190.77-190.84 (Criminal Identity Theft):

• § 190.77 -- Definitions: "Personal identifying information" includes name, address, telephone number, date of birth, driver's license number, social security number, place of employment, mother's maiden name, financial account numbers, credit/debit card numbers, and electronic serial numbers
• § 190.78 -- Identity Theft in the Third Degree: Knowingly and with intent to defraud, assumes the identity of another person, including using personal identifying information to obtain goods, money, property, services, or credit, or to cause financial loss to that person. This is a Class A misdemeanor (up to 1 year imprisonment)
• § 190.79 -- Identity Theft in the Second Degree: Same elements as third degree, plus either: (a) the value obtained exceeds $500, or (b) the person uses the stolen identity to commit or attempt a felony. This is a Class E felony (up to 4 years imprisonment)
• § 190.80 -- Identity Theft in the First Degree: Same elements plus the value obtained exceeds $2,000. This is a Class D felony (up to 7 years imprisonment)
• § 190.83 -- Unlawful Possession of Personal Identification Information in the Third Degree: Knowingly possessing personal identifying information of another person with intent to use it to commit a crime. Class A misdemeanor
• § 190.84 -- Unlawful Possession of Personal Identification Information in the Second Degree: Possessing 5 or more items of personal identifying information of 3 or more persons. Class E felony

N.Y. Gen. Bus. Law § 380-s (Civil Remedies):

• Identity theft victims may sue perpetrators directly for damages
• Actual damages may be trebled up to $1,000 for willful violations
• Attorney's fees may be awarded

N.Y. Gen. Bus. Law § 349 (Deceptive Business Practices):

• Continuing to furnish information known to result from identity theft may constitute a deceptive business practice
• Remedies: actual damages, treble damages up to $1,000, and attorney's fees
• No requirement of privity or reliance

Section 2.3: Identity Theft Report and Supporting Documentation

The following identity theft documentation is enclosed:

☐ FTC Identity Theft Report from IdentityTheft.gov (Reference No. [________________________________])

• Date filed: [__/__/____]

☐ Police Report (New York police reports are strongly recommended)

• Agency: ☐ NYPD ☐ New York State Police ☐ Other: [________________________________]
• Report No.: [________________________________]
• Date filed: [__/__/____]
• Precinct / Station: [________________________________]

New York Note: While the federal FTC Identity Theft Report has replaced the police report requirement for federal purposes, filing a police report in New York is strongly recommended. The NYPD has a dedicated Identity Theft Squad, and a police report supports criminal prosecution under Penal Law §§ 190.78-190.80, strengthens the victim's position in civil proceedings, and may be required for certain New York-specific protections.

☐ Proof of Identity

• ☐ Government-issued photo identification (New York driver's license, state ID, passport)
• ☐ Social Security card or documentation showing SSN

☐ Proof of Address

• ☐ Utility bill dated within last 60 days
• ☐ Bank or credit card statement dated within last 60 days
• ☐ Government correspondence showing current address

Section 2.4: Furnisher Obligations Under Federal and New York Law

Upon receipt of this identity theft report and supporting documentation, you are required to:

Under Federal Law (15 U.S.C. § 1681s-2(a)(6)-(7) and § 1681c-2):

1. Cease furnishing the disputed information to any CRA
2. Notify all CRAs to block the information
3. Never re-furnish the blocked information
4. Implement reasonable procedures to prevent re-furnishing

Under New York Law:

5. Cease all collection activity on the disputed account
6. Do not sell, assign, or transfer the disputed account
7. Cooperate with any law enforcement investigation (NYPD, NY State Police, or other agency)
8. If you are a DFS-licensed debt collector, comply with all 23 NYCRR Part 1 requirements regarding identity theft accounts
9. Provide written confirmation of all actions taken

WARNING: Continuing to furnish information or collect on a debt known to result from identity theft may constitute a deceptive business practice under N.Y. Gen. Bus. Law § 349, a violation of 23 NYCRR Part 1 (if you are a licensed debt collector), and a violation of FCRA § 1681s-2(a)(7). These violations expose you to actual damages, statutory damages, treble damages, attorney's fees, regulatory sanctions (including license revocation), and civil penalties.

Section 2.5: Security Freeze Request

In addition to the identity theft block, I am requesting / have already placed a security freeze on my credit files under N.Y. Gen. Bus. Law § 380-s. This freeze prevents you from opening any new accounts in my name. If you have received a credit application using my personal information, you must verify the applicant's identity through means other than a credit report before extending credit.

☐ I have already placed a security freeze with: ☐ Equifax ☐ Experian ☐ TransUnion
☐ I am in the process of placing a security freeze
☐ I request information about how to place a security freeze

PART 3: CONSEQUENCES OF NON-COMPLIANCE

Section 3.1: Federal Remedies Under FCRA

Willful Noncompliance (15 U.S.C. § 1681n)

• Actual damages or statutory damages of $100 to $1,000 per violation
• Punitive damages
• Attorney's fees and costs

Negligent Noncompliance (15 U.S.C. § 1681o)

• Actual damages
• Attorney's fees and costs

Section 3.2: New York State Remedies

N.Y. Gen. Bus. Law § 380-s (Security Freeze / Identity Theft Violations)

• Civil penalties of up to $5,000 per violation
• Actual damages, which may be trebled up to $1,000
• Attorney's fees

N.Y. Gen. Bus. Law § 349 (Deceptive Business Practices)

• Actual damages
• Treble damages up to $1,000
• Attorney's fees and costs
• Injunctive relief
• No privity requirement -- any person injured by a deceptive practice may sue

N.Y. DFS Regulatory Action (23 NYCRR Part 1)

• Administrative penalties and sanctions for licensed debt collectors
• License suspension or revocation
• Consumer restitution orders

NYC-Specific Remedies (for furnishers operating in NYC)

• NYC DCWP enforcement actions for licensed debt collectors
• Administrative fines up to $2,000 per violation under NYC Admin. Code § 20-493

Criminal Referral

• Continued collection on identity theft accounts, with knowledge of the fraud, may support a criminal complaint for larceny (N.Y. Penal Law § 155.25 et seq.) or scheme to defraud (N.Y. Penal Law § 190.60)

PART 4: PRACTICE TIPS FOR ATTORNEYS

New York-Specific Strategy

1. Multi-Layered Claims: New York's framework allows for claims under federal law (FCRA), state law (GBL §§ 380-s, 349), and potentially NYC law (DCWP rules). Build claims under all applicable layers.

2. GBL § 349 -- No Privity Required: N.Y. Gen. Bus. Law § 349 does not require privity between the consumer and the furnisher. Any person injured by a deceptive business practice may bring an action. This is broader than many states' consumer protection statutes.

3. Security Freeze Penalties: GBL § 380-s provides civil penalties of up to $5,000 per violation of security freeze provisions. If a furnisher or CRA fails to honor a security freeze, this is a significant damages source.

4. NYPD Identity Theft Squad: For NYC residents, the NYPD has a dedicated Identity Theft Squad that handles identity theft investigations. Filing a report with this squad strengthens the criminal and civil case.

5. DFS-Licensed Collectors: If the furnisher is a DFS-licensed debt collector, investigate compliance with 23 NYCRR Part 1 regulations. Regulatory violations provide additional leverage and may support a complaint to DFS.

6. Dual Filing Strategy: File this direct dispute with the furnisher AND simultaneous CRA disputes. The CRA-mediated dispute triggers § 1681s-2(b) obligations and preserves the private right of action that is not available under § 1681s-2(a).

7. Choice-of-Law Considerations: For accounts originated in other states, analyze whether New York's more protective identity theft laws apply based on the consumer's residence, the furnisher's location, or the place of the fraudulent activity.

Venue Considerations

• Federal FCRA claims: Eastern District of New York (Brooklyn, Long Island) or Southern District of New York (Manhattan, Bronx, Westchester)
• State claims: New York Supreme Court in the appropriate county
• Both federal districts have extensive FCRA jurisprudence
• For NYC residents, consider whether NYC-specific claims are available

PART 5: RESPONSE TRACKING AND FOLLOW-UP

Furnisher Response Deadline Tracker

If the Furnisher Does Not Respond or Fails to Investigate

1. Send a follow-up demand letter referencing this original dispute
2. File complaints with the CFPB (consumerfinance.gov/complaint) and FTC (ftc.gov/complaint)
3. File a complaint with the NY Attorney General's Consumer Protection Bureau
4. File a complaint with the NY Department of Financial Services (DFS) if the furnisher is a DFS-licensed entity
5. File a complaint with the NYC DCWP if the furnisher operates in NYC
6. If a CRA-mediated dispute was also filed, document the furnisher's failure for § 1681s-2(b) litigation
7. Consult with counsel regarding filing suit under FCRA § 1681n/§ 1681o and N.Y. GBL §§ 349, 380-s

SIGNATURE AND DELIVERY

By signing below, I affirm under penalty of perjury that the information in this letter is true and correct to the best of my knowledge. I understand that knowingly submitting false information may subject me to criminal penalties under both federal and New York law.

Consumer/Attorney Signature:

Signature: ________________________________________

Printed Name: [________________________________]

Date: [__/__/____]

New York Bar Registration No. (if attorney): [________________________________]

Method of Delivery:

☐ USPS Certified Mail, Return Receipt Requested
Tracking Number: [________________________________]

☐ USPS Priority Mail with Delivery Confirmation
Tracking Number: [________________________________]

☐ FedEx / UPS with Signature Confirmation
Tracking Number: [________________________________]

Date Sent: [__/__/____]

ENCLOSURES CHECKLIST

☐ Copy of credit report showing disputed information
☐ Proof of payment / settlement documentation
☐ Bankruptcy discharge order (if applicable)
☐ FTC Identity Theft Report (if applicable)
☐ NYPD / NY State Police report (if applicable)
☐ Government-issued photo identification
☐ Proof of current address
☐ Account statements or correspondence
☐ Security freeze confirmation (if applicable)
☐ Other supporting documentation: [________________________________]

SOURCES AND REFERENCES

• Fair Credit Reporting Act, 15 U.S.C. §§ 1681-1681x: https://www.law.cornell.edu/uscode/text/15/chapter-41/subchapter-III
• 15 U.S.C. § 1681s-2 (Furnisher Responsibilities): https://www.law.cornell.edu/uscode/text/15/1681s-2
• 15 U.S.C. § 1681c-2 (Identity Theft Block): https://www.law.cornell.edu/uscode/text/15/1681c-2
• 12 C.F.R. Part 1022, Subpart E (CFPB Furnisher Duties): https://www.ecfr.gov/current/title-12/chapter-X/part-1022/subpart-E
• N.Y. Gen. Bus. Law § 380-s (Security Freeze / Identity Theft): https://www.nysenate.gov/legislation/laws/GBS/380-S
• N.Y. Gen. Bus. Law §§ 380-a to 380-t (Fair Credit Reporting): https://www.nysenate.gov/legislation/laws/GBS/A29-H
• N.Y. Penal Law §§ 190.77-190.84 (Identity Theft): https://www.nysenate.gov/legislation/laws/PEN/190.77
• N.Y. Gen. Bus. Law § 349 (Deceptive Business Practices): https://www.nysenate.gov/legislation/laws/GBS/349
• 23 NYCRR Part 1 (NY DFS Debt Collection Regulations): https://www.dfs.ny.gov/
• CFPB Circular 2022-07 (Reasonable Investigation): https://www.consumerfinance.gov/compliance/circulars/consumer-financial-protection-circular-2022-07/
• NY Attorney General Consumer Protection: https://ag.ny.gov/consumer-frauds-bureau
• NYPD Identity Theft Resources: https://www.nyc.gov/site/nypd/services/victim-services/identity-theft.page
• FTC Identity Theft Resources: https://www.identitytheft.gov/
• CFPB Complaint Portal: https://www.consumerfinance.gov/complaint/