Skip to content
Main Menu ID Theft Central Search
Secondary Navigation »


Thank you for using the Utah Attorney General’s ID Theft Central program! A great many hours of development and state resources has gone into this software, and it is our sincere hope that it will make a dramatic difference in the way your agency handles identity theft reports.

Top Frequently Asked Questions

What if I am being notified about identity theft reports, but there are no new reports on my Reporting screen in FATPOT?

1) Check to see if another officer in your agency who was assigned to receive IRIS reports using the FATPOT desktop software has already viewed the report. If this is the case, then the officer who viewed the report first has ownership over the report, and you will not be able to view the report from your computer. In order for the pop-up Notifier to stop notifying you of reports, the officer with ownership over the report will need to close the case from the FATPOT Reporting screen, and then Approve the report before the notifications stop.

2) If neither you or your coworker are able to see a report on your FATPOT Reporting screen, yet you are both receiving pop-up Notifications, it is possible the report was deleted from the Reporting screen rather than being Approved. In order to stop the pop-up notifications, you will need to contact the FATPOT Technical Support team to get this resolved. For FATPOT Technical Support call 801-397-3973.

How do I adjust the frequency of when I get pop-up notification of identity theft reports on my screen?

To adjust the frequency of when you receive pop-up Notification of New and Open reports, right click the IRIS Notifier icon located on your Toolbar in the lower right hand corner of your screen. If the IRIS Notifier is not displayed on your Toolbar, left click on the up arrow found to the left of your system clock on the Toolbar. Doing so will display all hidden icons. From the window that includes all hidden icons, right click on the IRIS Notifier icon (thumb print). From the pop-up options, click Settings, and then click on the Advanced Setting button. Under the Report Polling Interval, there are two drop down windows; one is New and the other is Opened. You can adjust the New and Opened pop-up notifications to appear anywhere between 1 to 6 hours depending on the selection you make. New reports are those that you have not reviewed, and the Open reports are those that have been reviewed.

My password has expired. How do I get it reset?

To reset your FATPOT password, please contact the FATPOT Technical Support at 801-397-3973.

How does my agency request training on IRIS, the FATPOT PortalOne software, and Identity Theft investigation techniques?

To schedule a training session, please contact Scott Morrill at 801-281-1218

I would like the FATPOT PortalOne software installed on my new computer, how do I arrange the installation?

Please contact Scott Morrill at 801-281-1218 to arrange the installation of the FATPOT PortalOne software onto your new computer.

Contact information:

FATPOT Technical Support: 801-397-3973

Attorney General Help: 801-281-1218

ID Theft Central Home Page

FATPOT beta/beta site

Do I have to give out my Social Security Number

Do I have to give out my Social Security Number?

Your employer and financial institution will likely need your SSN for wage and tax reporting purposes. Other businesses may ask you for your SSN to do a credit check, like when you apply for a loan, rent an apartment, or sign up for utilities. Sometimes, however, they simply want your SSN for general record keeping. You don’t have to give a business your SSN just because they ask for it. If someone asks for your SSN, ask the following questions:

  • Why do you need my SSN?
  • How will my SSN be used?
  • What law requires me to give you my SSN?
  • What will happen if I don’t give you my SSN?

Sometimes a business may not provide you with the service or benefit you’re seeking if you don’t provide your SSN. Getting answers to these questions will help you decide whether you want to share your SSN with the business. Remember – the decision is yours.

Source: FTC

Social Security Number Identity Theft

Social Security Number Identity Theft
If you suspect someone is using your Social Security Number or your child’s number for work purposes, you should file a Social Security Number Theft report at the Attorney General’s ID Theft Central. You should also consider contacting your local law enforcement agency to file a complaint. An investigator working your case should contact the Utah Department of Workforce Services in order to obtain a complete employment history of the compromised Social Security Number. Section 35A-4-312.5 of the Utah Code allows the department to share the history of work with law enforcement, if it involves identity theft.


Request a Social Security Statement

Request a Social Security Statement from the Social Security Administration to review your earned wages. Report any discrepancies to the Social Security Administration (Report Fraud: (800) 269-0271). If you discover that your Social Security number was used by someone else for employment purposes, file the appropriate Identity Theft report(s) on this web site.


How to Request a Social Security Statement?
You can request a Social Security Statement by going online at and submitting a Social Security Statement request form SSA-7050. The Social Security Administration will not send your Statement back on the Internet. Instead, you will receive your Statement through regular mail in about 2-4 weeks.
If you are not comfortable sending information to the Social Security Administration over the Internet, you may download the Social Security Statement request form SSA-7050 and mail it to the address on the form. You can also order your Personal Earnings and Benefits Statement by telephone at (800) 772-1213.


When You Request Your Social Security Statement, You Will Need:

  • Your name as shown on your Social Security Card
  • Your Social Security Number
  • Your date of birth
  • Your place of birth
  • Your mother’s maiden name – last name only (to help identify you)
  • Consent of Release of your Social Security Information

Certain situations may require you to provide proof of your Social Security Number. If you are unable to establish accounts with financial institutions, creditors, insurance agencies, or to obtain medical treatment because of identity theft, you should complete form SSA-3288. Request that your information be released to the organizations that are requesting proof of your Social Security Number. Make sure you provide each organizations name, address, and contact person.


Replacement Social Security Card
You can replace your Social Security card for free if it is lost or stolen. However, you are limited to three replacement cards in a year and 10 during your lifetime.
To get a replacement card:
Complete a Social Security Application
Show documents proving U.S. citizenship, and Identity.
Take your completed application and documents to your local Social Security office.
IRS Records Indicate You Received Wages From an Employer Unknown to You
The IRS has a toll-free number to assist identity theft victims. The IRS Identity Protection Specialized Unit will mark affected accounts so that identity theft issues may be resolved more quickly. Victims can call (800) 908-4490 and speak with a customer service rep Monday – Friday, from 8 a.m. – 8 p.m.

How to Remove a Fraud Alert

Fraud alerts will be removed from a consumer’s file prior to the required retention time only when requested in writing to the three credit reporting agencies.

Consumers should provide the following proof of ID when requesting the removal of a fraud alert:

  • Full name, including middle initial and generation, such as JR, SR, II, III.
  • Current mailing address and two proofs of the address such as copies of driver’s license, utility bill, bank or insurance statement, etc.
  • Social Security number.
  • Date of birth.


Mail requests to each of the three credit reporting companies.

TransUnion – Phone: 800-680-7289 P.O. Box 1000, Chester, PA 19016-1000

Experian – Phone: 888-EXPERIAN (888-397-3742) P.O. Box 9532, Allen TX 75013

Equifax – P.O. Box 740256, Atlanta, GA 30374


Remove a Consumer Security Freeze Online

Remove an Equifax Security Freeze

Remove an Experian Security Freeze

Remove a TransUnion Security Freeze

Child Identity Theft Credit File Search

If you suspect that identity thieves may have targeted your child, TransUnion can help. Please use TransUnion’s secure Child Identity Theft Inquiry Form to submit details about your concerns. You can also email Remember, do not email sensitive, identifying or account information.


The more detailed the information you provide, the more thoroughly TransUnion can investigate the existence of a potential credit file in your child’s name. Remember, you are initiating this communication with TransUnion, a trusted source of credit information. TransUnion will use this information only to conduct the search you request. TransUnion will not include this sensitive information in any return correspondence to you.


After TransUnion’s search is complete, they will respond to you at the email address you provide. If they locate a file in your child’s name, they will ask you for additional information in order to proceed with steps to protect your child from any impact associated with this fraudulent activity. The more promptly you respond to this request, the more quickly TransUnion can take action on your family’s behalf.

TransUnion’s Child Identity Theft Inquiry service

Instructions for Activating a 7 Year Fraud Alert

Instructions for activating a 7 year Fraud Alert:

Consumers should contact the three major credit reporting agencies and ask for an Extended Alert (7-year Alert), which stays in their credit file for seven years. If you ask for an Extended Alert, you will have to provide a copy of an identity theft report, which is a report you have filed with a federal, state or local law enforcement agency. An Extended Alert entitles you to two additional free credit reports from each credit reporting agency in a 12-month period following the placing of the alert.

Credit Reporting Agencies:




To place an extended 7 year Fraud alert, a credit reporting agency will require you to provide appropriate proof of your identity, which may include copies of your Social Security card, driver’s license, and/or utility bills. You may cancel the fraud alerts at any time.

  • Request must be submitted in writing to each of the three major credit reporting agencies.
  • Consumer must provide proof of identity (copies of driver’s license or other government-issued ID, utility bill, bank or insurance statements, etc.).
  • May be requested by the consumer or a representative (with legal documents proving authority over the consumer’s finances).
  • May include up to two phone numbers for potential creditors to contact consumer (plus extensions); consumer must provide proof of one of the phone numbers, such as the page of the phone bill that gives the consumer’s name, address and the phone number.
  • Consumers will be notified that they are eligible to request two free credit reports within 12 months after adding this alert. The report will be processed within 3 business days of the request.
  • Consumers will not be able to dispute online, but will be directed to a fraud expert for assistance by phone or mail.
  • Consumer will be opted out of prescreened offer mailing lists for five years.
  • The Fair And Accurate Credit Transactions Act (FACTA) gives all consumers the right to one free copy of their credit report each year from each of the credit reporting agencies. All three credit reporting agencies have additional information regarding identity theft and the FACTA on their web sites. Order your free credit reports online at
  • You may request that only the last four digits of your Social Security number appear on your credit report. In all communications with the credit reporting agencies, you will want to refer to the unique number assigned to your credit.

Review Your Credit Report

Check each credit report carefully when you receive it. Look for accounts that you have not opened; charges that you have not made; inquiries that you have not initiated; and default and delinquencies that you have not caused. Check that your name, address, and Social Security number is correct on all reports.

Monitor Your Credit Report

Check your credit report regularly. The federal FACTA law enables you to receive one free credit report per year from each of the three credit reporting agencies. These are in addition to the free reports you can order after you place a fraud alert on your credit file. Order your free credit reports online at

We recommend that you stagger the receipt of your credit reports, ordering one approximately every four months. Order your report from a different agency each time. That way you can review your credit report three times each year. If you see possible fraudulent activity on your credit report, notify the credit reporting agecny.

Instructions to Initiate a 90-Day Fraud Alert

Follow these instructions for initiating a 90 day Fraud Alert with one of the three Credit Reporting companies:

  1. Request online at Experian’s fraud victims assistance process or call 1 888 EXPERIAN (1-888-397-3742)
  2. May be requested by the consumer or a representative (with legal documents proving authority over the consumer’s finances).
  3. May include one phone number for potential creditors to contact consumer (plus extension); clients will be informed that the phone number has not been verified by Experian.
  4. Will be shared on the same day received with Equifax and TransUnion, who will also add the alert to the consumer’s file in their databases.
  5. Consumers who call/write will be notified that they are eligible to request a free credit report and will be given a special URL, toll-free phone number and address to make their requests. The report will be processed within 3 business days of the request.
  6. Consumers who add an alert via will be able to view free credit report online immediately. Experian is the only consumer credit reporting company that provides this service online for consumer convenience.
  7. Consumers will not be able to dispute online, but will be directed to Experian’s fraud experts for assistance by phone or mail.
  8. Consumer will be opted out of prescreened offer mailing lists for six months (by Experian policy only—not required by the FCRA or FACT Act).
  9. Experian will add an alert to a consumer’s file when notified by Equifax or TransUnion of the consumer’s request.
  10. Consumer will receive a Summary of Rights of Identity Theft Victims notice.




FBI’s NCIC Identity Theft File

The Federal Bureau of Investigation’s National Crime Information Center (NCIC) has a powerful weapon in the fight against identity theft. The weapon is the FBI’s NCIC Identity Theft File which was created to serve as a means for law enforcement to “flag” stolen identities and identify the imposter when encountered by law enforcement. However, this file may actually be an extremely important safeguard against false arrest for the victims of identity theft. Once a victim creates a profile in the FBI’s Identity Theft File, that victim is now protected nationally against false arrest. Therefore, when reporting an identity theft crime to law enforcement you should ask the police officer to have your profile added to the NCIC Identity Theft File. This will give you the much needed protection against crimes committed by identity thieves.


This is how the FBI’s NCIC Identity Theft File works: When an identity theft victim becomes aware that his/her identity has been stolen and reports the incident to law enforcement, the police officer should complete an incident report and collect pertinent information from the victim. This information is then used to create a victim profile that is entered into the Identity Theft File. Victims must however sign a waiver that states that they give permission for the information to be entered in the Identity Theft File. It also acknowledges that the victim may withdraw the consent by providing a written request to the entering agency. Once a withdrawal request is presented to an entering agency, at that time the record will be canceled from the file. This gives victims control over the handling of their personal information by the FBI.


Information provided by victims to create a profile will include name, date of birth, Social Security Number, and the type of identity theft. In return, the police officer will provide a password that will identify that person as the victim when the police report was filed. This password should be retained and used by the victim so that they may be correctly identified as the victim during any future police encounter. Therefore, during any subsequent encounters by law enforcement, including traffic stops, a person’s query into NCIC will automatically search the Identity Theft File. If positive, the officer will receive a response listing the victim’s profile, including the password, thereby providing the officer with the information necessary to verify that the person encountered is the victim, or that the person may be using a false identity. Keep in mind that other considerations, and additional information or circumstances surrounding the encounter will be considered before the officer takes action.


There are a couple of conditions that must be met in order to have a profile entered in the FBI’s Identity Theft File. First, each request must be supported by an official complaint record by a law enforcement agency. Secondly, documentation for the identity theft complaint must meet the following criteria before an entry can be made into the Identity Theft File:


  1. Someone is using a means of identification of the victim.
  2. The identity of the victim is being used without the victim’s permission.
  3. The victim’s identity is being used or intended to be used to commit an unlawful activity.
  4. The victim must sign a waiver prior to the information being entered into the Identity Theft File.

A Guide for Guarding Personal Information in the Workplace

It is a common practice for a company to store personal or private information in its files. This information can be as crucial and sensitive as credit card information, social security numbers and other data which directly expose the company’s employees or customers.

This type of information is required to complete critical business transactions such as payroll. However, if an unauthorized person gains access to it, it could result in a major loss of privacy and damage to the company and its employees.

Considering the financial, moral and psychological consequences of security violations, it is imperative to protect personal information at all times.

Read article…

Criminal Record Created Because of Identity Theft

Identity theft is very much a part of our world today, and is growing at an alarming rate. The Bureau of Criminal Identification (BCI) is aware that there are many victims of identity theft and our staff is willing to help those affected. Visit BCI for some steps that need to be taken to begin the process of removing your name or other identifying information from a criminal record at BCI.

Visit BCI…

Site SettingsSettings