A red flag is a pattern, practice, or specific activity that indicates the possible existence of identity theft. The Red Flags Rule requires financial institutions and creditors to develop and implement programs to detect, prevent, and mitigate identity theft.

“Red flags are patterns, practices, or specific activities that indicate the possible existence of identity theft.”

— FTC, Red Flags Rule: Identity Theft Prevention Program