Skip to main content
U.S. flag
An official website of the United States government
Dot gov
The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.
The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.
Financial Institution Letter

Identity Theft Red Flags, Address Discrepancies, And Change of Address Regulations Frequently Asked Questions

Summary: The FDIC, along with the other federal financial institution regulatory agencies and the Federal Trade Commission, has issued the attached frequently asked questions (FAQs) on identity theft "red flags," address discrepancies, and change of address requests.


  • On November 15, 2007, the FDIC issued a final rule and guidelines addressing identity theft red flags, address discrepancies, and change of address requests (see FIL-100-2007 , dated November 15, 2007).
  • The FDIC has published the attached FAQs to assist financial institutions in conforming with the regulation and guidelines.
  • The FAQs are divided into four sections and include answers to questions concerning:
    • the scope of the regulation,
    • the definition of "covered account," the definition of "service provider,"
    • types of notices of address discrepancy that trigger the rule, and
    • furnishing a confirmed address to a consumer reporting agency.

FDIC-Supervised Banks (Commercial and Savings)

Suggested Routing:
Chief Compliance Officer
Chief Information Security Officer

FDIC financial institution letters (FILs) may be accessed from the FDIC's Web site at

To receive FILs electronically, please visit .

Paper copies of FDIC financial institution letters may be obtained through the FDIC's Public Information Center, 3501 Fairfax Drive, E-1002, Arlington, VA 22226 (1-877- 275-3342 or 703-562-2200).

Last Updated: June 11, 2009