The first thing identity theft victims are told, almost universally, is that nothing can be done. The bank says talk to the police. The police say it happened online. The credit bureau sends a form letter saying the account was “verified.”
That advice is wrong, and it is expensive. Minnesota gives you a specific right that most victims never invoke, and it is the key that makes the rest of the process work.
Minnesota law enforcement must take your report
This is the provision worth knowing. Under Minn. Stat. § 609.527, a person who suspects they have been a victim of identity theft may contact a local law enforcement agency, and that agency “must prepare a police report of the matter, provide the complainant with a copy of that report,” and may then investigate or refer the case to the appropriate jurisdiction.
Must. Not may. If a Minnesota agency tells you they cannot take a report because the crime happened elsewhere or online, they are describing their investigative jurisdiction — not their reporting obligation.
Get the report. Everything downstream depends on it, because federal law conditions your strongest rights on having an identity theft report.
What Minnesota’s criminal statute covers
Identity theft occurs when a person “transfers, possesses, or uses an identity that is not the person’s own, with the intent to commit, aid, or abet any unlawful activity.” “Identity” is defined broadly — names, Social Security numbers, government identification, account numbers, and electronic identification information.
Penalties escalate by loss amount and by victim count, from a 90-day maximum for a single victim and $250 or less, up to 20 years for losses over $35,000 or eight or more victims.
And the restitution provision is unusual and worth citing: courts must order the offender to provide “restitution of not less than $1,000 to each direct victim” of identity theft. That is a statutory floor, independent of provable loss.
The steps, in the order that actually works
Sequence matters here. Most victims do these out of order and lose leverage.
1. Freeze your credit — today, all three bureaus
A security freeze blocks new accounts from being opened in your name. It is free, it is reversible, and it is the single most effective action available to you. Credit monitoring tells you after the fact; a freeze prevents the event.
Do this before anything else. It takes about twenty minutes.
2. Report to the FTC at IdentityTheft.gov
This generates an FTC Identity Theft Report and a recovery plan. Federal law gives that report real force with credit bureaus and furnishers.
3. Get the Minnesota police report
Per § 609.527, above. Together, the FTC report and the police report constitute the documentation the rest of the process runs on.
4. Dispute with the credit bureaus — in writing
Not by phone, and not through the app. Written disputes create the paper trail, and the Fair Credit Reporting Act obligates bureaus to conduct a reasonable reinvestigation. Send by certified mail and keep everything.
5. Notify each furnisher in writing
The bank, the card issuer, the lender. Under the FCRA the private remedy against a furnisher generally requires that you first dispute through a credit reporting agency — so step 4 is a precondition, not an alternative.
6. Demand the fraudulent application documents
Victims have the right to obtain records relating to accounts opened in their name. These documents are frequently decisive — a signature that is not yours, an address you never lived at, an email that is not yours, all in the creditor’s own file.
7. Keep an obsessive record
Every call: date, time, name, what was said. Every letter, with the certified mail receipt. This log becomes the evidence if litigation follows, and it is the thing victims most regret not keeping.
When the process fails — and what then
Here is the situation that brings people to a lawyer. You disputed. The bureau “investigated.” The account came back verified. It is still on your report, still blocking the mortgage, still generating collection calls.
That is not the end of the process. It is often the beginning of the claim.
The FCRA imposes obligations on both credit reporting agencies and furnishers, and it provides a private right of action — with actual damages, statutory and punitive damages for willful violations, and attorney fees, under 15 U.S.C. §§ 1681n and 1681o. Those fee provisions are what make an individual claim economically viable against a national bureau.
The recurring failure is that “reinvestigation” often means transmitting a code to the furnisher and accepting whatever comes back — which is not obviously a reasonable reinvestigation when the consumer supplied a police report and an FTC affidavit showing the account is fraudulent. We wrote about that dynamic in detail here.
Minnesota law adds a second track. Depending on the conduct, the private attorney general provision at Minn. Stat. § 8.31, subd. 3a may also shift fees, and debt collection conduct implicates the FDCPA and Minn. Stat. ch. 332. Stacking independent fee-shifting statutes is what changes a defendant’s posture.
Special situations
Criminal identity theft — someone was arrested or cited using your name. This is the worst variety, because the record follows you through background checks. It requires its own process and generally cannot be fixed with credit disputes alone.
Tax identity theft — a fraudulent return filed in your name. The IRS has a dedicated process, and an Identity Protection PIN is available.
Medical identity theft — someone obtained care in your name. This corrupts your medical record, which is a safety issue as well as a financial one.
Child identity theft — usually undiscovered for a decade, until the child applies for something. Minnesota parents can freeze a minor’s credit; almost nobody does.
Synthetic identity fraud — a fabricated identity using your real Social Security number with a different name and date of birth. Harder to detect and harder to unwind, because it may not surface on your report at all.
What not to do
- Do not pay the fraudulent debt to make it go away. Payment can be treated as acknowledgment and can restart limitations periods.
- Do not dispute only by phone. No record, no reasonable-reinvestigation trail, no case.
- Do not sign a release in exchange for a partial correction without understanding what you are giving up.
- Do not let it sit. FCRA claims have limitations periods, and evidence — application records, IP logs, call recordings — is destroyed on retention schedules.
- Do not assume a freeze fixes existing accounts. A freeze prevents new ones; the accounts already opened still have to be disputed individually.
The larger point
Identity theft is treated as a personal misfortune, like a stolen bicycle. It is not. It is the predictable output of a system in which credit is extended on thin verification because the losses are cheaper than the friction of preventing them, and the cost of that decision is distributed to the person whose name was used.
Which is why the remedies exist and why they shift fees. The statutes assume you will need a lawyer and are designed so that having one does not depend on the size of your loss.
Freeze your credit, get the report Minnesota requires them to give you, dispute in writing, and keep everything. If it still is not fixed, that failure is itself actionable.
Madgett Law, LLC represents Minnesota identity theft victims — FCRA claims against credit reporting agencies and furnishers, disputes that were “verified” and should not have been, and the collection and litigation exposure that follows fraudulent accounts. If your dispute has failed, send us a message or call 612-470-6529.
Sources: Minn. Stat. § 609.527 (identity theft; definition of identity; penalty tiers by loss amount and number of direct victims; mandatory restitution of not less than $1,000 to each direct victim; obligation of a law enforcement agency to prepare a police report and provide the complainant a copy); Minn. Stat. § 8.31, subd. 3a; Minn. Stat. ch. 332 (Minnesota Office of the Revisor of Statutes); Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq., including §§ 1681n and 1681o; Fair Debt Collection Practices Act, 15 U.S.C. § 1692 et seq.; Federal Trade Commission, IdentityTheft.gov. This article is general legal information, not legal advice, and reading it does not create an attorney–client relationship. No outcome is promised or implied.