Consumer complaint received 2023-10-22
Product: Vehicle loan or lease — Loan
Issue: Repossession — Company explaining amount owed
Company: CAPITAL ONE FINANCIAL CORPORATION (PA)

My information was used without me knowing case of identity theft. 
CAPITAL ONE AUTO FINAN # XXXX FCRA 609 ( e ) ( 15 U.S.C. 1681g ( e ) ) DiSCloSUReS to ConSUmeRS inFoRmAtion AvAilAble to viCtimS ( e ) Information available to victims ( 1 ) In general. For the purpose of documenting fraudulent transactions resulting from identity theft, not later than 30 days after the date of receipt of a request from a victim in accordance with paragraph ( 3 ), and subject to verification of the identity of the victim and the claim of identity theft in accordance with paragraph ( 2 ), a business entity that has provided credit to, provided for consideration products, goods, or services to, accepted payment from, or otherwise entered into a commercial transaction for consideration with, a person who has allegedly made unauthorized use of the means of identification of the victim, shall provide a copy of application and business transaction records in the control of the business entity, whether maintained by the business entity or by another person on behalf of the business entity, evidencing any transaction alleged to be a result of identity theft to -- ( A ) the victim ; ( B ) any Federal, State, or local government law enforcement agency or officer specified by the victim in such a request ; or ( C ) any law enforcement agency investigating the identity theft and authorized by the victim to take receipt of records provided under this subsection. 
( 2 ) Verification of identity and claim. Before a business entity provides any information under paragraph ( 1 ), unless the business entity, at its discretion, otherwise has a high degree of confidence that it knows the identity of the victim making a request under paragraph ( 1 ), the victim shall provide to the business entity -- ( A ) as proof of positive identification of the victim, at the election of the business entity -- ( i ) the presentation of a government-issued identification card ; ( ii ) personally identifying information of the same type as was provided to the business entity by the unauthorized person ; or ( iii ) personally identifying information that the business entity typically requests from new applicants or for new transactions, at the time of the victims request for information, including any documentation described in clauses ( XXXX ) and ( ii ) ; and ( B ) as proof of a claim of identity theft, at the election of the business entity -- ( i ) a copy of a police report evidencing the claim of the victim of identity theft ; and ( ii ) a properly completed -- ( I ) copy of a standardized affidavit of identity theft developed and made available by the Commission ; or ( II ) an [ FN1 ] affidavit of fact that is acceptable to the business entity for that purpose. 
( 3 ) Procedures. The request of a victim under paragraph ( 1 ) shall -- ( A ) be in writing ; ( B ) be mailed to an address specified by the business entity, if any ; and ( C ) if asked by the business entity, include relevant information about any transaction alleged to be a result of identity theft to facilitate compliance with this section including -- ( i ) if known by the victim ( or if readily obtainable by the victim ), the date of the application or transaction ; and ( ii ) if known by the victim ( or if readily obtainable by the victim ), any other identifying information such as an account or transaction number. 

( 4 ) No charge to victim. Information required to be provided under paragraph ( 1 ) shall be so provided without charge. 
( 5 ) Authority to decline to provide information. A business entity may decline to provide information under paragraph ( 1 ) if, in the exercise of good faith, the business entity determines that -- ( A ) this subsection does not require disclosure of the information ; ( B ) after reviewing the information provided pursuant to paragraph ( 2 ), the business entity does not have a high degree of confidence in knowing the true identity of the individual requesting the information ; ( C ) the request for the information is based on a misrepresentation of fact by the individual requesting the information relevant to the request for information ; or ( D ) the information requested is Internet navigational data or similar information about a persons visit to a website or online service. 
( 6 ) Limitation on liability. Except as provided in section 1681s of this title, sections 1681n and 1681o of this title do not apply to any violation of this subsection. 
( 7 ) Limitation on civil liability. No business entity may be held civilly liable under any provision of Federal, State, or other law for disclosure, made in good faith pursuant to this subsection. 
( 8 ) No new recordkeeping obligation. Nothing in this subsection creates an obligation on the part of a business entity to obtain, retain, or maintain information or records that are not otherwise required to be obtained, retained, or maintained in the ordinary course of its business or under other applicable law. 
( 9 ) Rule of construction ( A ) In general. No provision of subtitle A of title V of Public Law 106-102, prohibiting the disclosure of financial information by a business entity to third parties shall be used to deny disclosure of information to the victim under this subsection. 
( B ) Limitation. Except as provided in subparagraph ( A ), nothing in this subsection permits a business entity to disclose information, including information to law enforcement under subparagraphs ( B ) and ( C ) of paragraph ( 1 ), that the business entity is otherwise prohibited from disclosing under any other applicable provision of Federal or State law. 
( 10 ) Affirmative defense. In any civil action brought to enforce this subsection, it is an affirmative defense ( which the defendant must establish by a preponderance of the evidence ) for a business entity to file an affidavit or answer stating that -- ( A ) the business entity has made a reasonably diligent search of its available business records; and ( B ) the records requested under this subsection do not exist or are not reasonably available. 
( 11 ) Definition of victim. For purposes of this subsection, the term victim means a consumer whose means of identification or financial information has been used or transferred ( or has been alleged to have been used or transferred ) without the authority of that consumer, with the intent to commit, or to aid or abet, an identity theft or a similar crime. 
( 12 ) Effective date. This subsection shall become effective 180 days after XXXX XXXX XXXX 
( 13 ) Effectiveness study. Not later than 18 months after XXXX XXXX XXXX, the Comptroller General of the United States shall submit a report to Congress assessing the effectiveness of this provision. 


FC

RA 605B ( 15 U.S.C. 1681c-2 ) ( a ) Block. Except as otherwise provided in this section, a consumer reporting agency shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than 4 business days after the date of receipt by such agency of ( 1 ) appropriate proof of the identity of the consumer ; ( 2 ) a copy of an identity theft report ; ( 3 ) the identification of such information by the consumer; and ( 4 ) a statement by the consumer that the information is not information relating to any transaction by the consumer. ( b ) Notification. A consumer reporting agency shall promptly notify the furnisher of information identified by the consumer under subsection ( a ) of this section ( 1 ) that the information may be a result of identity theft ; ( 2 ) that a
n identity theft report has been filed ; ( 3 ) that a block has been requested under this section; and ( 4 ) of the effective dates of the block. 
( c ) Authority to decline or rescind.

( 1 ) In general. A consumer reporting agency may decline to block, or may rescind any block, of information relating to a consumer under this section, if the consumer reporting agency reasonably determines that ( A ) the information was blocked in error or a block was requested by the consumer in error ; ( B ) the information was blocked, or a block was requested by the consumer, on the basis of a material misrepresentation of fact by the consumer relevant to the request to block ; or ( C ) the consumer obtained possession of goods, services, or money as a result of the blocked transaction or transactions. 
( 2 ) Notification to consumer. If a block of information is declined or rescinded under this subsection, the affected consumer shall be notified promptly, in the same manner as consumers are notified of the reinsertion of information under section 1681i ( a ) ( 5 ) ( B ) of this title. 
( 3 ) Significance of block. For purposes of this subsection, if a consumer reporting agency rescinds a block, the presence of information in the file of a consumer prior to the blocking of such information is not evidence of whether the consumer knew or should have known that the consumer obtained possession of any goods, services, or money as a result of the block. 
( d ) Exception for resellers. 
( 1 ) No reseller file. This section shall not apply to a consumer reporting agency, if the consumer reporting agency ( A ) is a reseller ; ( B ) is not, at the time of the request of the consumer under subsection ( a ) of this section, otherwise furnishing or reselling a consumer report concerning the information identified by the consumer ; and ( C ) informs the consumer, by any means, that the consumer may report the identity theft to the Bureau to obtain consumer information regarding identity theft. 
( 2 ) Reseller with file. The sole obligation of the consumer reporting agency under this section, with regard to any request of a consumer under this section, shall be to block the consumer report maintained by the consumer reporting agency from any subsequent use, if ( A ) the consumer, in accordance with the provisions of subsection ( a ) of this section, identifies, to a consumer reporting agency, information in the file of the consumer that resulted from identity theft ; and ( B ) the consumer reporting agency is a reseller of the identified information. 
( 3 ) Notice. In carrying out its obligation under paragraph ( 2 ), the reseller shall promptly provide a notice to the consumer of the decision to block the file. Such notice shall contain the name, address, and telephone number of each consumer reporting agency from which the consumer information was obtained for resale. 
( e ) Exception for verification companies. The provisions of this section do not apply to a check services company, acting as such, which issues authorizations for the purpose of approving or processing negotiable instruments, electronic fund transfers, or similar methods of payments, except that, beginning 4 business days after receipt of information described in paragraphs ( 1 ) through ( 3 ) of subsection ( a ) of this section, a check services company shall not report to a national consumer reporting agency described in section 1681a ( p ) of this title, any information identified in the subject identity theft report as resulting from identity theft. 
( f ) Access to blocked information by law enforcement agencies. No provision of this section shall be construed as requiring a consumer reporting agency to prevent a Federal, State, or local law enforcement agency from accessing blocked information in a consumer file to which the agency could otherwise obtain access under this subchapter. 

NOTICE TO FURNISHERS OF INFORMATION : OBLIGATIONS OF FURNISHERS UNDER THE FCRA The federal Fair Credit Reporting Act ( FCRA ), 15 U.S.C. 1681-1681y, imposes responsibilities on all persons who furnish information to consumer reporting agencies ( CRAs ). These responsibilities are found in Section 623 of the FCRA, 15 U.S.C. 1681s-2. State law may impose additional requirements on furnishers. All furnishers of information to CRAs should become familiar with the applicable laws and may want to consult with their counsel to ensure that they are in compliance. The text of the FCRA is set forth in full at the Bureau of Consumer Financial Protection 's website at consumerfinance.gov/learnmore. A list of the sections of the FCRA cross-referenced to the U.S. Code is at the end of this document. 
Section 623 imposes the following duties : Accuracy Guidelines The banking and credit union regulators and the CFPB will promulgate guidelines and regulations dealing with the accuracy of information provided to CRAs by furnishers. The regulations and guidelines issued by the CFPB will be available at consumerfinance.gov/learnmore when they are issued. Section 623 ( e ).

General Prohibition on Reporting Inaccurate Information The FCRA prohibits information furnishers from providing information to a CRA that they know or have reasonable cause to believe is inaccurate. However, the furnisher is not subject to this general prohibition if it clearly and conspicuously specifies an address to which consumers may write to notify the furnisher that certain information is inaccurate. Sections 623 ( a ) ( 1 ) ( A ) and ( a ) ( 1 ) ( C ).

Duty to Correct and Update Information If at any time a person who regularly and in the ordinary course of business furnishes information to one or more CRAs determines that the information provided is not complete or accurate, the furnisher must promptly provide complete and accurate information to the CRA. In addition, the furnisher must notify all CRAs that received the information of any corrections, and must thereafter report only the complete and accurate information. Section 623 ( a ) ( 2 ).

Duties After Notice of Dispute from Consumer If a consumer notifies a furnisher, at an address specified by the furnisher for such notices, that specific information is inaccurate, and the information is, in fact, inaccurate, the furnisher must thereafter report the correct information to CRAs. Section 623 ( a ) ( 1 ) ( B ).

If a consumer notifies a furnisher that the consumer disputes the completeness or accuracy of any information reported by the furnisher, the furnisher may not subsequently report that information to a CRA without providing notice of the dispute. Section 623 ( a ) ( 3 ).

The federal banking and credit union regulators and the CFPB will issue regulations that will identify when an information furnisher must investigate a dispute made directly to the furnisher by a consumer. Once these regulations are issued, furnishers must comply with them and complete an investigation within 30 days ( or 45 days, if the consumer later provides relevant additional information ) unless the dispute is frivolous or irrelevant or comes from a credit repair organization. The CFPB regulations will be available at consumerfinance.gov. Section 623 ( a ) ( 8 ).

Duties After Notice of Dispute from Consumer Reporting Agency If a CRA notifies a furnisher that a consumer disputes the completeness or accuracy of information provided by the furnisher, the furnisher has a duty to follow certain procedures. The furnisher must : Conduct an investigation and review all relevant information provided by the CRA, including information given to the CRA by the consumer. Sections 623 ( b ) ( 1 ) ( A ) and ( b ) ( 1 ) ( B ).

Report the results to the CRA that referred the dispute, and, if the investigation establishes that the information was, in fact, incomplete or inaccurate, report the results to all CRAs to which the furnisher provided the information that compile and maintain files on a nationwide basis. Sections 623 ( b ) ( 1 ) ( C ) and ( b ) ( 1 ) ( D ). 
Complete the above steps within 30 days from the date the CRA receives the dispute ( or 45 days, if the consumer later provides relevant additional information to the CRA ). Section

623 ( b ) ( 2 ). Promptly modify or delete the information, or block its reporting. Section 623 ( b
) ( 1 ) ( E ). 

Duty to Report Voluntary Closing of Credit Accounts If a consumer voluntarily closes a credit account, any person who regularly and in the ordinary course of business furnishes information to one or more CRAs must report this fact when it provides information to CRAs for the time period in which the account was closed. Section 623 ( a ) ( 4 ). 
Duty to Report Dates of Delinquencies If a furnisher reports information concerning a delinquent account placed for collection, charged to profit or loss, or subject to any similar action, the furnisher must, within 90 days after reporting the information, provide the CRA with the month and the year of the commencement of the delinquency that immediately preceded the action, so that the agency will know how long to keep the information in the consumer 's file. Section 623 ( a ) ( 5 ). 
Any person, such as a debt collector, that has acquired or is responsible for collecting delinquent accounts and that reports information to CRAs may comply with the requirements of Section 623 ( a ) ( 5 ) ( until there is a consumer dispute ) by reporting the same delinquency date previously reported by the creditor. If the creditor did not report this date, they may comply with the FCRA by establishing reasonable procedures to obtain and report delinquency dates, or, if a delinquency date can not be reasonably obtained, by following reasonable procedures to ensure that the date reported precedes the date when the account was placed for collection, charged to profit or loss, or subjected to any similar action. Section 623 ( a ) ( 5 ). 
Duties of Financial Institutions When Reporting Negative Information Financial institutions that furnish information to nationwide consumer reporting agencies, as defined in Section 603 ( p ), must notify consumers in writing if they may furnish or have furnished negative information to a CRA. Section 623 ( a ) ( 7 ). The Consumer Financial Protection Bureau has prescribed model disclosures, 12 CFR Part 1022, App. B. 
Duties When Furnishing Medical Information A furnisher whose primary business is providing medical services, products, or devices ( and such furnisher 's agents or assignees ) is a medical information furnisher for the purposes of the FCRA and must notify all CRAs to which it reports of this fact. Section 623 ( a ) ( 9 ). This notice will enable CRAs to comply with their duties under Section 604 ( g ) when reporting medical information. 
Duties when ID Theft Occurs All furnishers must have in place reasonable procedures to respond to notifications from CRAs that information furnished is the result of identity theft, and to prevent refurnishing the information in the future. A furnisher may not furnish information that a consumer has identified as resulting from identity theft unless the furnisher subsequently knows or is informed by the consumer that the information is correct. Section 623 ( a ) ( 6 ). If a furnisher learns that it has furnished inaccurate information due to identity theft, it must notify each consumer reporting agency of the correct information and must thereafter report only complete and accurate information. Section 623 ( a ) ( 2 ). When any furnisher of information is notified pursuant to the procedures set forth in Section 605B that a debt has resulted from identity theft, the furnisher may not sell, transfer, or place for collection the debt except in certain limited circumstances. Section 615 ( f ). 
The Consumer Financial Protection Bureau website, consumerfinance.gov/learnmore, has more information about the FCRA. Citations for FCRA sections in the U.S. Code, 15 U.S.C. 1681 et seq. : Section 603 Section 604 Section 605 Section 605A Section 605B Section 606 Section 607 Section 608 Section 609 Section 610 Section 611 Section 612 Section 613 Section 614 15 U.S.C. 1681 15 U.S.C. 1681a 15 U.S.C. 1681b 15 U.S.C. 1681c 15 U.S.C. 1681c-1 15 U.S.C. 1681c-2 15 U.S.C. 1681d 15 U.S.C. 1681e 15 U.S.C. 1681f 15 U.S.C. 1681g 15 U.S.C. 1681h 15 U.S.C. 1681i 15 U.S.C. 1681j 15 U.S.C. 1681k 15 U.S.C. 1681l Section 615 Section 616 Section 617 Section 618 Section 619 Section 620 Section 621 Section 622 Section 623 Section 624 Section 625 Section 626 Section 627 Section 628 Section 629 15 U.S.C. 1681m 15 U.S.C. 1681n 15 U.S.C. 1681o 15 U.S.C. 1681p 15 U.S.C. 1681q 15 U.S.C. 1681r 15 U.S.C. 1681s 15 U.S.C. 1681s-1 15 U.S.C. 1681s-2 15 U.S.C. 1681t 15 U.S.C. 1681u 15 U.S.C. 1681v 15 U.S.C. 1681w 15 U.S.C. 1681x 15 U.S.C. 1681y