<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>68386</law_id><section_number>18.2-186.3:1</section_number><catch_line>Identity fraud; consumer reporting agencies; police reports</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="18.2">Crimes and Offenses Generally</unit><unit label="chapter" level="2" order_by="1" identifier="6">Crimes Involving Fraud</unit><unit label="article" level="3" order_by="1" identifier="5">False Representations to Obtain Property or Credit</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> A consumer may report a case of identity theft to the <span class="dictionary">law</span>-enforcement agency in the <span class="dictionary">jurisdiction</span> where he resides. If a consumer, as defined by the Fair Credit Reporting Act, 15 U.S.C. &#xA7; 1681 et seq., submits to a consumer reporting agency, as defined by the Fair Credit Reporting Act, 15 U.S.C. &#xA7; 1681 et seq., a copy of a valid police report, the consumer reporting agency shall, within 30 days of receipt thereof, block the reporting of any information that the consumer alleges appears on his credit report, as defined by the Fair Credit Reporting Act, 15 U.S.C. &#xA7; 1681 et seq., as a result of a violation of &#xA7; <a class="law" title="Identity theft; penalty; restitution; victim assistance" href="/18.2-186.3/">18.2-186.3</a>. The consumer reporting agency shall promptly notify the furnisher of the information that a police report has been filed, that a block has been requested, and the effective date of the block. <a id="paragraph-247628" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Consumer reporting agencies may decline to block or may rescind any block of consumer information if, in the exercise of good faith and reasonable <span class="dictionary">judgment</span>, the consumer reporting agency believes that: (i) the information was blocked due to a misrepresentation of a <span class="dictionary">material</span> <span class="dictionary">fact</span> by the consumer; (ii) the information was blocked due to <span class="dictionary">fraud</span>, in which the consumer participated, or of which the consumer had knowledge, and which may for purposes of this section be demonstrated by <span class="dictionary">circumstantial evidence</span>; (iii) the consumer agrees that portions of the blocked information or all of it were blocked in error; (iv) the consumer knowingly obtained or should have known that he obtained <span class="dictionary">possession</span> of goods, services, or moneys as a result of the blocked transaction or transactions; or (v) the consumer reporting agency, in the exercise of good faith and reasonable <span class="dictionary">judgment</span>, has substantial reason based on specific, verifiable <span class="dictionary">facts</span> to doubt the authenticity of the consumer&#x2019;s report of a violation of &#xA7; <a class="law" title="Identity theft; penalty; restitution; victim assistance" href="/18.2-186.3/">18.2-186.3</a>. <a id="paragraph-247629" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> If blocked information is unblocked pursuant to this section, the consumer shall be notified in the same manner as consumers are notified of the reinsertion of information pursuant to the Fair Credit Reporting Act at 15 U.S.C. &#xA7; 1681i, as amended. The prior presence of the blocked information in the consumer reporting agency&#x2019;s file on the consumer is not evidence of whether the consumer knew or should have known that he obtained <span class="dictionary">possession</span> of any goods, services, or moneys. <a id="paragraph-247630" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#C"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> A consumer reporting agency shall accept the consumer&#x2019;s version of the disputed information and correct the disputed item when the consumer submits to the consumer reporting agency documentation obtained from the source of the item in dispute or from public records confirming that the report was inaccurate or incomplete, unless the consumer reporting agency, in the exercise of good faith and reasonable <span class="dictionary">judgment</span>, has substantial reason based on specific, verifiable <span class="dictionary">facts</span> to doubt the authenticity of the documentation submitted and notifies the consumer in writing of that decision, explaining its reasons for unblocking the information and setting forth the specific, verifiable <span class="dictionary">facts</span> on which the decision is based. <a id="paragraph-247631" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#D"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> A consumer reporting agency shall delete from a consumer credit report inquiries for credit reports based upon credit requests that the consumer reporting agency verifies were initiated as a result of a violation of &#xA7; <a class="law" title="Identity theft; penalty; restitution; victim assistance" href="/18.2-186.3/">18.2-186.3</a>. <a id="paragraph-247632" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#E"><i class="fa fa-link"/></a></p></section>
						<section id="F"><p><span class="prefix-number">F.</span> The provisions of this section do not apply to (i) a consumer reporting agency that acts as a reseller of credit information by assembling and merging information contained in the databases of other consumer reporting agencies, and that does not maintain a permanent database of credit information from which new consumer credit reports are produced, (ii) a check services or <span class="dictionary">fraud</span> prevention services company that <span class="dictionary">issues</span> reports on incidents of <span class="dictionary">fraud</span> or authorizations for the purpose of approving or processing negotiable instruments, electronic funds transfers, or similar payment methods, or (iii) a demand deposit account information service company that <span class="dictionary">issues</span> reports regarding account closures due to <span class="dictionary">fraud</span>, substantial overdrafts, automatic teller machine abuse or similar negative information regarding a consumer to inquiring banks or other financial institutions for use only in reviewing a consumer request for a demand deposit account at the inquiring bank or financial institution. <a id="paragraph-247633" class="section-permalink" href="https://vacode.org/18.2-186.3_1/#F"><i class="fa fa-link"/></a></p></section></text><history>2003, cc. 914, 918; 2006, c. 298.</history><metadata></metadata></law>
