Fraud Records Request Policy page headline

The Fair Credit Reporting Act (FCRA) spells out rights for victims of identity theft, as well as responsibilities for businesses. Identity-theft victims are entitled to ask businesses for a copy of transaction records–such as applications for credit–relating to the theft of their identity.

Victims can authorize law enforcement officers to get the records or ask that Gateway send a copy of the records directly to a law enforcement officer. Gateway will provide copies of these records, free of charge, within 30 days of receiving the request for them in writing.

Procedure

  • All requests for records for fraud transactions will be fulfilled by Legal or authorized designee.
  • All requests for records for fraud transactions must be made in writing. Requests can be faxed to 605-232-2763 or mailed to 610 Gateway Drive, North Sioux City, SD 57049, attention Account Manager.
  • Requests for records by law enforcement on behalf of the victim must have authorization from the identity-theft victim. To help Gateway verify this authorization, relevant information must be received in the written request. This information must be one or all of the following:
    • Information pertaining to the fraudulent order or attempted order, to include transaction date, account number, or copy of the invoice.
    • A copy of the police report.
    • A copy of the FTC’s ID Theft Affidavit signed by the victim.
  • Victims may also request that transactional records be sent to law enforcement. The victim must provide authorization in writing and proof of identity. To verify proof of identity, requests must include one or all of the following:
    • Information pertaining to the fraudulent order or attempted order, to include transaction date, account number, or copy of the invoice.
    • A copy of the police report filed based on the victim’s complaint of fraud.
    • A copy of the FTC’s ID Theft Affidavit signed by the victim.
  • Transactional records will be provided to law enforcement within 30 days of receipt of the request.
  • Records provided will include applications and business transactional records maintained by Gateway that support any transaction alleged to be a result of identity theft. Such records may include credit applications, invoices, and shipment tracking numbers.
  • IP Addresses for those transactions that take place over the Web will not be provided as part of this process.
    • IP Address information will be provided only upon receipt of a subpoena when the IP Address is available for the transaction.
    • Subpoenas must be served at the Gateway headquarters located at: 7565 Irvine Center Drive, Irvine, CA 92618.