7 min read · Last updated September 21, 2026
- A collection notice you don’t recognize carries a real 30-day clock: dispute it in writing within 30 days of the first notice, and the collector must stop collecting until it mails you verification.
- A credit-score drop caused by your own balance going up has no dispute right and no deadline, because there’s nothing inaccurate to correct. A score drop caused by a reporting error does carry a deadline: bureaus must reinvestigate within 30 days, extendable to 45.
- An initial fraud alert lasts one year and an extended alert with a police report or a Federal Trade Commission (FTC) identity theft report lasts seven years. A security freeze has no expiration and has been free nationwide since a federal law took effect on September 21, 2018.
- A charge you didn’t make on an account you already have carries a 60-day dispute window measured from the date of the statement that first showed it, not from when you noticed it.
Of the five common credit-monitoring alerts, only a new collection notice and a reporting-error dispute carry a countable legal deadline. A balance-driven score drop carries none, and an unfamiliar inquiry or account triggers a bureau-side block clock rather than a deadline on you.
In this article
- Sorting the noise from the clock
- The alert that actually has a deadline
- The alerts that mean “start assembling a report”
- The address change and the score drop
- Which protective tool to reach for
- Frequently asked questions
Four alerts hit her phone in one week: a hard inquiry she didn’t request, a new collection account she’d never heard of, an address change on her file, and a 40-point score drop. Only one of them had an actual deadline attached to it.
Sorting the noise from the clock
Not every credit alert deserves the same reaction. Some genuinely start a countdown with legal consequences if you miss it. Others are informational, meaning there’s nothing to dispute and nothing you’re at risk of losing by waiting a few days to look into it. The mistake goes both ways: treating a real deadline as noise costs you a right you can’t get back, and treating noise as an emergency burns your attention on alerts that don’t need it.
The alert that actually has a deadline: an unfamiliar collection account
If a collection account shows up that you don’t recognize, the Fair Debt Collection Practices Act (FDCPA) gives you a specific, real window. This is the moment to open that 30-day dispute letter, not the pay-or-settle decision that comes later once a debt’s validity is already confirmed. Under 15 U.S.C. § 1692g, a collector’s first written notice must tell you that unless you dispute the debt in writing within 30 days of receiving it, the debt “will be assumed to be valid.” Dispute within that window and the collector “shall cease collection of the debt” until it mails you verification, per the same statute.
Miss the 30 days and you can usually still dispute the debt later, but you lose the automatic right to have collection paused while it’s being verified. The Consumer Financial Protection Bureau (CFPB) confirms the same 30-day figure directly: “you have 30 days to dispute all or part of the debt, if you don’t believe that you owe it.” Put the dispute in writing, keep a copy, and send it before day 30, not on day 30.
The alerts that mean “start assembling a report,” not “you have a set number of days”
A hard inquiry you didn’t authorize or a new account you never opened are both signs of possible identity theft, but neither one comes with a countable statutory deadline for you to act. What has a real clock is the block your credit bureaus can apply once you give them the right paperwork under 15 U.S.C. § 1681c-2: once a bureau receives your proof of identity, a copy of your identity theft report, and identification of the fraudulent item, the statute requires the block “not later than 4 business days after the date of receipt.” The CFPB’s own guidance puts it more plainly: credit reporting companies “must block fraudulent information from your credit report within four business days after receiving your request.” The bottleneck isn’t a deadline on you, it’s how fast you can put together the identity theft report that starts that four-day clock, so file one at IdentityTheft.gov the same day you spot the inquiry or account.
One narrower deadline does apply if the unfamiliar activity is a specific unauthorized charge on an account you already have, rather than an entirely new account: the Fair Credit Billing Act (FCBA) gives you 60 days to dispute it in writing, measured from the date the statement showing the charge was sent, according to the Federal Trade Commission (FTC).

The address change and the score drop: usually noise, sometimes not
An address change alert by itself isn’t automatically alarming. Plenty of legitimate reasons put a new address on your file. What turns it into something worth acting on is the same thing that turns any of these alerts into something worth acting on: you didn’t make the change yourself. If that’s the case, treat it exactly like the inquiry and new-account alerts above, and file the same identity theft report.
A score drop is where the two alert types that look identical are actually opposite in urgency. If your score dropped because your reported balance actually went up, there is nothing to dispute. myFICO’s own explainer describes amounts owed as 30% of your score, framed entirely as a predictive factor with no dispute mechanism attached, because an accurate balance isn’t an error. But if your score dropped because of information on your report that’s wrong, you do have a real deadline under the Fair Credit Reporting Act (FCRA): under 15 U.S.C. § 1681i, once you file a dispute, the credit bureau must complete its reinvestigation “before the end of the 30-day period,” extendable to 45 days total only if you send the bureau more supporting information during that first 30 days.
| Alert type | Real deadline? | The clock | What starts it |
|---|---|---|---|
| Unfamiliar hard inquiry or new account | Bureau-side, not yours | Bureau must block within 4 business days of receiving your report | Filing an identity theft report at IdentityTheft.gov |
| Unauthorized charge on an existing account | Yes | 60 days to dispute in writing | Date the statement showing the charge was sent |
| New collection account you don’t recognize | Yes | 30 days to dispute in writing | Date you received the collector’s first written notice |
| Score drop from your own balance | No | None, nothing to dispute | Not applicable |
| Score drop from a reporting error | Yes | 30 days, extendable to 45 | Date the bureau receives your dispute |
| Address change you didn’t make | Treat as identity theft | Same 4-business-day block once reported | Filing an identity theft report |
Which protective tool to reach for, and for how long it lasts
If any of this traces back to identity theft, you have three tools with three different durations, confirmed directly by the Federal Trade Commission: an initial fraud alert lasts one year, an extended fraud alert backed by a police report or FTC identity theft report lasts seven years, and a security freeze has no expiration at all and costs nothing to place or lift, a change that’s been in effect nationwide since September 21, 2018. Also worth knowing before you file anything: the CFPB now requires you to dispute directly with the credit bureau before it will accept a related complaint. The agency has said consumers “must first exhaust their dispute rights directly with consumer reporting agencies before coming to the Bureau.”
Frequently asked questions
Do I have 30 days to dispute a hard inquiry I didn’t authorize? No, that 30-day figure applies to disputing a collection account, not an inquiry. An unfamiliar inquiry has no countable statutory deadline for you, but the fix (a fraud block on your report) depends on how fast you file an identity theft report, since bureaus must block the item within four business days of receiving that report.
What happens if I miss the 30-day window on a collection notice? You can typically still dispute the debt after 30 days, but you lose the automatic right that forces the collector to pause collection while it verifies the debt. Disputing inside the window is what guarantees the pause; disputing after it is a weaker position.
Is a credit freeze better than a fraud alert? They do different jobs. A freeze blocks new accounts from being opened in your name at all and never expires until you lift it. A fraud alert doesn’t block anything, it just requires lenders to verify your identity before extending credit, and it expires after one year unless you have a police or FTC report, which extends it to seven.
Should I worry about a score drop if I know I ran up a balance? No. A balance-driven score change reflects real, accurate information, and there’s no dispute right attached to an accurate balance. Save your attention for a score drop tied to information on your report that’s actually wrong, which does carry a real 30-to-45-day investigation deadline once you dispute it.
Can I go straight to the CFPB if a credit bureau won’t fix an error? Not first. The CFPB’s own current policy requires you to dispute directly with the credit reporting agency before it will accept a related complaint. File your dispute with the bureau itself, keep your documentation, and escalate to the CFPB only if the bureau doesn’t resolve it inside its deadline.
Free credit monitoring flags these alerts before they become a 30-day countdown
Credit Karma tracks new accounts, inquiries, and score changes in one place, so you see a collection notice or unfamiliar inquiry the moment it posts.
Check your credit for free
