The Red Flags rule was developed under the Fair and Accurate Credit Transactions Act (FACTA), in which Congress directed the FTC and other agencies to develop regulations requiring creditors and financial institutions with covered accounts to develop written programs to assist in identifying potential identity thefts.