the victim of identity theft and who has submitted to the consumer reporting agency a valid police report, an investigative report, or a complaint that the consumer has filed with a law enforcement agency. (3) A consumer may be charged a reasonable fee, not to exceed $5, if the consumer fails to retain the original personal identification number, password, or other device provided by the consumer