Section 1788.18.
Cal. Civil Code - CIV § 1788.18.
in effect(a)
Upon receipt from a debtor of all of the following, a debt collector shall cease collection activities until completion of the review provided in subdivision (d):
(1)
A copy of a Federal Trade Commission (FTC) identity theft report, completed and signed by the debtor. The debtor may choose, instead, to send a copy of a police report filed by the debtor alleging that the debtor is the victim of an identity theft crime, including, but not limited to, a violation of Section 530.5 of the Penal Code, for the specific debt being collected by the debt collector; however, the debt collector shall not also require a police report if the debtor submits an FTC identity theft report.
(2)
The debtor’s written statement that the debtor claims to be the victim of identity theft with respect to the specific debt being collected by the debt collector.
(b)
The written statement described in paragraph (2) of subdivision (a) shall consist of either of the following:
(1)
A written statement that contains the content of the Identity Theft Victim’s Fraudulent Account Information Request offered to the public by the California Office of Privacy Protection.
(2)
A written statement that certifies that the representations are true, correct, and contain no material omissions of fact to the best knowledge and belief of the person submitting the certification.
A person submitting the certification who declares as true any material matter pursuant to this subdivision that they know to be false is guilty of a misdemeanor. The statement shall contain or be accompanied by the following, to the extent that an item listed below is relevant to the debtor’s allegation of identity theft with respect to the debt in question:
(A)
A statement that the debtor is a victim of identity theft.
(B)
A copy of the debtor’s driver’s license or identification card, as issued by the state.
(C)
Any other identification document that supports the statement of identity theft.
(D)
Specific facts supporting the claim of identity theft, if available.
(E)
Any explanation showing that the debtor did not incur the debt.
(F)
Any available correspondence disputing the debt after transaction information has been provided to the debtor.
(G)
Documentation of the residence of the debtor at the time of the alleged debt. This may include copies of bills and statements, such as utility bills, tax statements, or other statements from businesses sent to the debtor, showing that the debtor lived at another residence at the time the debt was incurred.
(H)
A telephone number for contacting the debtor concerning any additional information or questions, or direction that further communications to the debtor be in writing only,
with the mailing address specified in the statement.
(I)
To the extent the debtor has information concerning who may have incurred the debt, the identification of any person whom the debtor believes is responsible.
(J)
An express statement that the debtor did not authorize the use of the debtor’s name or personal information for incurring the debt.
(K)
The certification required pursuant to this paragraph shall be sufficient if it is in substantially the following form:
“I certify the representations made are true, correct, and
contain no material omissions of fact.
(Date and Place)
(Signature)
”
(c)
If a debtor notifies a debt collector orally that they are a victim of identity theft, the debt collector shall notify the debtor, orally or in writing, that the debtor’s claim must be in writing. If a debtor notifies a debt collector in writing that they are a victim of identity theft,
but omits information required pursuant to subdivision (a) or, if applicable, the certification required pursuant to paragraph (2) of subdivision (b), if the debt collector does not cease collection activities, the debt collector shall provide written notice to the debtor of the additional information that is required, or the certification required pursuant to paragraph (2) of subdivision (b), as applicable, or send the debtor a copy of the Federal Trade Commission’s identity theft form.
(d)
Within 10 business days of receiving the complete statement and information described in subdivision (a), the debt collector shall, if it furnished adverse information about the debtor to a consumer credit reporting agency, notify the consumer credit reporting agency that the account is disputed, and initiate a review considering all of the information
provided by the debtor and other information available to the debt collector in its file or from the creditor. The debt collector shall send notice of its determination to the debtor no later than 10 business days after concluding the review. The debt collector may recommence debt collection activities only upon making a good faith determination that the information does not establish that the debtor is not responsible for the specific debt in question. The debt collector’s determination shall be made in a manner consistent with the provisions of subsection (1) of Section 1692f of Title 15 of the United States Code, as incorporated by Section 1788.17 of this code. The debt collector shall notify the debtor in writing of that determination and the basis for that determination before proceeding with any further collection activities. The debt collector’s determination shall be based on all of
the information provided by the debtor and other information available to the debt collector in its file or from the creditor.
(e)
No inference or presumption that the debt is valid or invalid, or that the debtor is liable or not liable for the debt, shall arise if the debt collector decides after the review described in subdivision (d) to cease or recommence the debt collection activities. The exercise or nonexercise of rights under this section is not a waiver of any other right or defense of the debtor or debt collector.
(f)
The statement and supporting documents that comply with subdivision (a) may also satisfy, to the extent those documents meet the requirements of, the notice requirement of paragraph (5) of subdivision (c) of Section 1798.93.
(g)
A debt collector who ceases collection activities under this section and does not recommence those collection activities shall do both of the following:
(1)
If the debt collector has furnished adverse information to a consumer credit reporting agency, notify the agency to delete that
information no later than 10 business days after making its determination.
(2)
Notify the creditor no later than 10 business days after making its determination that debt collection activities have been terminated based upon the debtor’s claim of identity theft.
(h)
A debt collector who has possession of documents that the debtor is entitled to request from a creditor pursuant to Section 530.8 of the Penal Code is authorized to provide those documents to the debtor.
(i)
Notwithstanding subdivision (h) of Section 1788.2, for the purposes of this section, “debtor” means a natural person, firm, association, organization, partnership, business trust, company, corporation, or limited liability company from
which a debt collector seeks to collect a debt that is due and owing or alleged to be due and owing from the person or entity. The remedies provided by this title shall apply equally to violations of this section.
References
referencesCal. Penal Code - PEN § 530.5.
referencesCal. Penal Code - PEN § 530.8.
referencesCal. Civil Code - CIV § 1788.17.
referencesCal. Civil Code - CIV § 1798.93.
referencesCal. Civil Code - CIV § 1788.2.
Source: CA Legislative Counsel Bulk DataURL: https://downloads.leginfo.legislature.ca.gov/pubinfo_2025.zipFetched: 6/27/2026