The pattern our clients describe: a thief uses your Social Security number at an AT&T store or online checkout, finances new phones or equipment under your name, has the devices shipped wherever they please — and the installment plan, the service bill, and eventually a collection agency all come looking for you. If an AT&T account was opened in your name, you are dealing with identity theft that touches several systems at once, and federal law gives you rights in every one of them.
Where the fraud actually lands
The carrier bill itself does not appear on your credit reports — but what follows it does. When the fraudulent balance goes unpaid, it is charged off and handed to a collection agency, and that collection lands on your Equifax, Experian, and TransUnion files as if it were your debt. The account history can also reach NCTUE, the telecom and utility exchange most people never check — and one a credit freeze at the big three does not cover — where it quietly raises deposit demands on your next legitimate account. And the thief’s shipping address can attach to your file. Each of those is a separate record, held by a separate company, and each one is disputable.
AT&T’s own process — use it, and paper it
AT&T’s identity theft support pages tell victims to report the fraud to its Global Fraud Management group — the pages describe the situation as someone having used your personal information, or sent devices or equipment to another address — with separate lines by service type: 877-844-5584 for wireless fraud and 877-379-2319 for home phone or internet fraud. The same pages point victims to the FTC’s IdentityTheft.gov to report the theft and build a recovery plan. File the claim, keep every confirmation number and letter, and do not stop there — the carrier’s investigation does not clean up the bureaus, the collector, or NCTUE.
The federal rights that reach every copy of the fraud
Start at IdentityTheft.gov — the FTC report is the key that unlocks the rest. Under FCRA Section 605B, once a consumer reporting agency receives your identity theft report, proof of identity, and a statement that the account is not yours, it must block the fraudulent information no later than four business days after receipt — at the credit bureaus, and at specialty bureaus like NCTUE. Dispute the collection in writing per our credit dispute letter guide with the identity theft report attached; a collector told the debt is fraud has its own federal duties, covered in our guide to collections that are not yours. And check the personal-information section of your reports — a thief’s delivery address on your file is how these cases drift into a mixed credit file.
When it becomes a legal claim
If you handed them the identity theft report and the collection survived — or was deleted and came back, or the block was refused — those are specific FCRA failures by specific companies, and the statute makes them compensable: actual damages for the credit denials, the deposits, and the hours, statutory and punitive damages where the violation is willful, and attorney’s fees, which is why we handle these cases on contingency through our identity theft practice. The same playbook covers a T-Mobile or Verizon account opened in your name. The thief got the devices. The file about you still has to be true.
Rated by the Clients We Represent
Richard Kim is rated 10.0 out of 10 on Avvo, with 35 client reviews averaging 5.0 out of 5 stars (as of September 2026) — read the reviews on Avvo. Admitted in Pennsylvania and New Jersey; available to appear pro hac vice in other federal courts. You pay nothing unless we win.
Published by The Kim Law Firm, LLC — about attorney Richard Kim. Last updated September 2026.