What Should You Do If You Suspect Your Identity Has Been Stolen: 2026 Guide

Identity theft is terrifying. Someone has your information and might be using it right now to open accounts, make purchases, or commit crimes in your name.

If you suspect identity theft, act immediately. The faster you respond, the less damage thieves can do. This guide walks you through exactly what to do, step by step, starting right now.

Immediate Actions: What to Do in the First 24 Hours

Confirm the Warning Signs

Before you panic, verify that identity theft actually occurred. Common warning signs include:

• Unfamiliar charges on your bank or credit card statements
• Bills for accounts you didn’t open
• Calls from debt collectors about debts you don’t recognize
• Missing mail or unexpected mail about new accounts
• Denied credit applications you didn’t submit
• Tax return rejection because someone already filed using your Social Security number
• Medical bills for treatments you never received
• Notifications from your bank about suspicious activity

One suspicious item might be a mistake. Multiple red flags mean you need to act now.

Place a Fraud Alert on Your Credit Reports

A fraud alert is free and tells creditors they must verify your identity before opening new accounts.

How to place a fraud alert:

1. Contact one of the three major credit bureaus (you only need to contact one, they’ll notify the others)
2. Request a one-year fraud alert
3. Provide your contact information

The three credit bureaus:

• Equifax: 1-888-766-0008 or equifax.com
• Experian: 1-888-397-3742 or experian.com
• TransUnion: 1-800-680-7289 or transunion.com

The fraud alert lasts one year. You can renew it. If you have proof of identity theft (like a police report), you can request an extended seven-year alert.

Get Your Free Credit Reports

You’re entitled to free credit reports from all three bureaus. Review them immediately for accounts you didn’t open or inquiries you didn’t authorize.

Visit AnnualCreditReport.com (the only official site for free credit reports). Don’t use other sites that charge fees or require credit card information.

What to look for:

• Accounts you don’t recognize
• Credit inquiries from companies you never contacted
• Personal information that’s incorrect (wrong address, misspelled name)
• Collections or charge-offs you didn’t cause

Document everything suspicious. Take screenshots or print the reports.

File a Report with the FTC

The Federal Trade Commission manages IdentityTheft.gov, which creates your official Identity Theft Report.

Steps to file:

1. Go to IdentityTheft.gov
2. Click “Get Started”
3. Answer questions about what happened
4. Provide details about fraudulent accounts or charges
5. Print your Identity Theft Report and personal recovery plan

This report is crucial. It gives you legal rights when dealing with creditors, debt collectors, and credit bureaus. According to the Federal Trade Commission, this report helps you dispute fraudulent debts and get fraudulent information removed from your credit reports.

Keep multiple copies of this report. You’ll need it repeatedly.

Contact Your Financial Institutions

Call every bank, credit union, and credit card company where you have accounts.

What to tell them:

• You’re a victim of identity theft
• You need to review recent transactions
• You want to close or freeze compromised accounts
• You need new account numbers and cards

For checking and savings accounts:

• Close compromised accounts immediately
• Open new accounts with new numbers
• Set up new online banking credentials
• Enable two-factor authentication

For credit cards:

• Cancel compromised cards
• Dispute unauthorized charges in writing
• Request new cards with different numbers
• Update automatic payments before old cards stop working

Most banks have dedicated fraud departments. Ask to speak with them directly.

Create a Security Freeze on Your Credit

A security freeze is stronger than a fraud alert. It completely blocks access to your credit reports, preventing anyone (including you) from opening new credit accounts.

How Security Freezes Work

When your credit is frozen, lenders can’t pull your credit report. This stops identity thieves from opening new accounts in your name. You control who can access your credit by temporarily lifting the freeze when you need to apply for credit.

Freezing your credit:

1. Contact all three credit bureaus separately (unlike fraud alerts, you must contact each one)
2. Provide personal information to verify your identity
3. Create a PIN or password for each freeze
4. Save these PINs securely (you’ll need them to lift the freeze)

Security freezes are free. They stay in place until you remove them.

When to Lift Your Freeze Temporarily

You’ll need to lift your freeze when:

• Applying for a new credit card
• Applying for a loan (mortgage, auto, personal)
• Renting an apartment (if landlord checks credit)
• Applying for certain jobs that require credit checks
• Setting up utilities at a new address

You can lift the freeze temporarily (for a specific time period) or permanently. Most people lift it temporarily, then re-freeze after the credit check.

Freeze comparison table:

Feature	Fraud Alert	Security Freeze
Cost	Free	Free
Duration	1 year (renewable)	Until you remove it
How to set up	Contact one bureau	Contact all three bureaus separately
Effect	Creditors get warning	Blocks all credit report access
Best for	Suspected theft, prevention	Confirmed theft, maximum protection

File a Police Report

Not all police departments handle identity theft reports enthusiastically, but you need one anyway.

Why you need a police report:

• Some creditors require it to remove fraudulent charges
• Extended fraud alerts require it
• It creates an official record
• You may need it for legal proceedings

How to file effectively:

1. Bring your FTC Identity Theft Report
2. Bring documentation of fraudulent accounts or charges
3. Bring identification
4. Ask specifically for an “identity theft report”
5. Get the report number and officer’s name
6. Request copies of the report

If your local police won’t take a report, file where the identity theft occurred (if you know). Some states allow online filing for identity theft.

Keep the police report with your FTC report. You’ll reference both frequently.

Contact Affected Companies and Creditors

For every fraudulent account or charge, you need to contact the company directly.

Fraudulent Credit Card Accounts

Steps for each fraudulent card:

1. Call the fraud department
2. Explain you’re an identity theft victim
3. Request they close the account
4. Ask them to send you a letter confirming the account was fraudulent
5. Dispute the charges in writing
6. Send your Identity Theft Report and police report

Never pay charges you didn’t make. You’re not responsible for fraudulent debts.

Fraudulent Loans or Bank Accounts

Contact the bank’s fraud department immediately. Send a written dispute with:

• Your Identity Theft Report
• Police report
• Letter explaining you didn’t open the account
• Request for written confirmation that the account was fraudulent

Keep copies of everything you send.

Utility and Phone Companies

If someone opened utilities or phone accounts in your name:

1. Contact the company’s fraud department
2. Provide your identity theft documentation
3. Request account closure
4. Dispute any charges sent to collections
5. Get written confirmation

These companies sometimes report to credit bureaus. Ensure fraudulent accounts don’t damage your credit.

Collection Agencies

If fraudulent debts went to collections:

1. Send a debt validation letter within 30 days of first contact
2. Include your Identity Theft Report
3. Explain you’re a victim of identity theft
4. Request they stop collection efforts
5. Ask them to notify the original creditor

Debt collectors must stop contacting you about fraudulent debts once you provide an Identity Theft Report.

Monitor Your Credit and Accounts Continuously

Identity theft isn’t a one-time event. Thieves often return months or years later with the same stolen information.

Set Up Credit Monitoring

Free credit monitoring options:

• Many credit card companies offer free credit monitoring
• Some banks provide it for checking account holders
• Credit Karma offers free monitoring (though not as comprehensive as paid services)

What credit monitoring does:

• Alerts you to new accounts
• Notifies you of hard inquiries
• Warns about significant score changes
• Tracks suspicious activity

Review Your Credit Reports Regularly

Even with monitoring, manually check your credit reports every three to four months. Stagger requests from the three bureaus so you’re checking one every four months.

Create a schedule:

• January: Request Experian report
• May: Request Equifax report
• September: Request TransUnion report

This gives you year-round coverage.

Monitor Your Bank and Credit Card Statements

Check your accounts weekly, minimum. Look for:

• Small test charges (thieves often start small)
• Unfamiliar merchant names
• Charges from different states or countries
• Duplicate charges
• Subscriptions you didn’t authorize

Enable account alerts for transactions over a certain amount. Many banks let you set custom thresholds.

Check Your Medical Records

Medical identity theft is growing. Someone using your insurance can affect your medical records and create dangerous situations.

How to check:

1. Request your medical records from your insurance company
2. Review “Explanation of Benefits” statements
3. Look for treatments or prescriptions you didn’t receive
4. Verify addresses and phone numbers are correct

If you find medical identity theft, contact your insurance company’s fraud department immediately. Incorrect medical information in your records could affect future treatment.

Handle Tax-Related Identity Theft

Tax identity theft happens when someone files a tax return using your Social Security number to claim your refund.

Signs of Tax Identity Theft

• IRS rejection of your tax return because one was already filed
• IRS notice about suspicious activity
• IRS letter about income from an employer you don’t recognize
• Tax transcript showing unfamiliar information

What to Do for Tax Identity Theft

Immediate steps:

1. Complete IRS Form 14039 (Identity Theft Affidavit)
2. Attach it to your paper tax return
3. Mail it to the IRS address for your state
4. Call the IRS Identity Protection Specialized Unit: 1-800-908-4490

Follow-up actions:

• Respond to all IRS letters promptly
• Keep detailed records of all IRS communications
• Consider getting an Identity Protection PIN (IP PIN) from the IRS

An IP PIN is a six-digit number that prevents fraudulent tax returns. You’ll need it to file taxes. The IRS assigns these to confirmed identity theft victims, and you can request one proactively.

The IRS Identity Theft Central page provides detailed guidance and updates on tax-related identity theft.

Protect Yourself Going Forward

Once you’ve dealt with immediate identity theft, focus on prevention.

Strengthen Your Passwords

Weak passwords helped the thief access your accounts.

Password best practices:

• Use unique passwords for every account
• Make passwords at least 12 characters
• Include uppercase, lowercase, numbers, and symbols
• Avoid personal information (birthdays, pet names, addresses)
• Use a password manager to track them

Enable Two-Factor Authentication Everywhere

Two-factor authentication (2FA) requires two forms of verification to access accounts. Even if someone has your password, they can’t get in without the second factor.

Enable 2FA on:

• Email accounts
• Banking and credit card accounts
• Social media
• Shopping accounts
• Any account containing personal information

Use authenticator apps (like Google Authenticator or Authy) instead of SMS when possible. SMS codes can be intercepted.

Secure Your Mail

Thieves steal mail to get personal information, credit card offers, and financial statements.

Mail security steps:

• Use a locking mailbox
• Collect mail promptly
• Sign up for Informed Delivery (USPS service that emails you images of incoming mail)
• Opt out of pre-approved credit offers at OptOutPrescreen.com
• Go paperless for sensitive documents when possible

Shred Sensitive Documents

Shred anything containing:

• Social Security numbers
• Account numbers
• Medical information
• Tax documents
• Credit card offers
• Bank statements

Get a cross-cut shredder. Don’t just tear documents and throw them away.

Be Careful What You Share Online

Identity thieves harvest information from social media.

What not to share publicly:

• Full birthdate
• Address
• Phone number
• Vacation plans (tells thieves when you’re away)
• Photos of credit cards, IDs, or documents
• Answers to common security questions (mother’s maiden name, pet’s name, first car)

Review privacy settings on all social media accounts. Limit who can see your information.

Protect Your Social Security Number

Your Social Security number is the key to your identity.

SSN protection rules:

• Never carry your Social Security card in your wallet
• Only provide your SSN when legally required
• Ask why companies need it and if there’s an alternative
• Don’t provide it over the phone unless you initiated the call
• Question requests for your SSN

Many companies ask for your SSN out of habit, not necessity. You can often use alternative identifiers.

Review Your Credit Card and Bank Statements Monthly

Make this a regular habit. Set a calendar reminder for the same day each month to review all financial statements.

What to check:

• Every transaction
• Merchant names you don’t recognize
• Amounts that seem wrong
• Transactions from suspicious locations

Report discrepancies immediately. Most credit cards have zero liability for unauthorized charges if you report them promptly.

Special Situations in Identity Theft

Child Identity Theft

Thieves target children because the theft often goes undetected for years.

Check if your child is a victim:

• Request a credit report for your child (children shouldn’t have credit reports unless they’re identity theft victims)
• Watch for signs like denied government benefits, IRS letters, or debt collection calls about your child
• Monitor your child’s Social Security number

If your child is a victim:

• Follow the same steps as adult identity theft
• Contact the credit bureaus to place a freeze on your child’s credit
• File an FTC report and police report
• Keep detailed records for when your child turns 18

Deceased Loved Ones’ Identity Theft

Thieves steal identities of deceased people because families often don’t monitor their credit.

Protect a deceased person’s identity:

• Notify the three credit bureaus of the death
• Request a “deceased alert” on credit reports
• Send death certificates to financial institutions
• Notify the Social Security Administration
• Cancel credit cards and close accounts
• Monitor credit reports for the deceased person for at least a year

Immigration-Related Identity Theft

Someone may use your Social Security number for employment.

Signs of employment identity theft:

• IRS notices about unreported income
• Social Security Administration showing wages you didn’t earn
• Unemployment or workers’ compensation claims you didn’t file

What to do:

• File Form 14039 with the IRS
• Contact the Social Security Administration’s Fraud Hotline: 1-800-269-0271
• File an FTC Identity Theft Report
• Consider legal assistance if the situation is complex

Common Identity Theft Mistakes to Avoid

Don’t Ignore Small Charges

Thieves often test stolen information with tiny charges ($1-$5). If these go unnoticed, they make larger purchases.

Report every unauthorized charge, no matter how small.

Don’t Assume It’s Handled After One Call

Identity theft requires persistent follow-up. Companies lose paperwork, don’t process requests, or need additional information.

Create a tracking system:

• Keep a log of every call (date, time, person’s name, what was discussed)
• Note reference numbers
• Set follow-up reminders
• Keep copies of all letters and emails
• Document everything

Don’t Pay Fraudulent Debts

Some victims pay fraudulent charges out of embarrassment or pressure. Don’t do this. Paying implies the debt is yours.

You have legal protections against fraudulent debts. Use them.

Don’t Give Up If Companies Don’t Help Immediately

Some companies make disputing fraudulent charges difficult. They might request excessive documentation or delay responses.

If a company isn’t helpful:

• Document their resistance
• Send certified letters with tracking
• File complaints with the Consumer Financial Protection Bureau (consumerfinance.gov/complaint)
• Contact your state Attorney General’s office
• Consider consulting an attorney

Don’t Close Legitimate Accounts Unnecessarily

Closing old accounts can hurt your credit score. Only close accounts that were compromised or fraudulent.

If thieves accessed a legitimate account but you caught it quickly, you might only need to change passwords and monitor it closely.

Long-Term Recovery and Documentation

Keep Detailed Records

Create an identity theft file with:

• All reports (FTC, police)
• Credit reports showing fraud
• Letters to and from creditors
• Notes from phone calls
• Proof that you sent certified letters
• Confirmation letters from companies

Keep these records for at least seven years. You may need them for legal purposes or credit disputes years later.

Understand Your Rights

Fair Credit Reporting Act (FCRA) protections:

• Right to free credit reports after identity theft
• Right to dispute inaccurate information
• Right to have fraudulent information removed
• Right to add statements to your credit report

Fair Debt Collection Practices Act (FDCPA) protections:

• Debt collectors must validate debts
• They must stop contacting you about fraudulent debts when you provide an Identity Theft Report
• They can’t harass or threaten you

Identity Theft and Assumption Deterrence Act:

• Makes identity theft a federal crime
• Provides legal basis for prosecution

Consider Legal Help

Most identity theft cases don’t require attorneys. But consider legal help if:

• Creditors won’t remove fraudulent debts
• You’re facing criminal charges for crimes committed in your name
• The theft is complex with many fraudulent accounts
• Companies aren’t following legal requirements

Many attorneys offer free consultations for identity theft cases. Some work on contingency (they only get paid if you win).

Know When to Request an Extended Fraud Alert

After filing a police report, you can request an extended seven-year fraud alert. This is free and provides stronger protection than the standard one-year alert.

Benefits of extended alerts:

• Lasts seven years instead of one
• Removes you from credit card and insurance offer lists for five years
• Requires more stringent verification before opening accounts
• Free credit reports from all three bureaus (two per year for seven years)

Request this if you have confirmed, documented identity theft.

FAQs About Identity Theft

How long does it take to recover from identity theft?

Recovery time varies widely. Simple cases (one fraudulent credit card) might resolve in weeks. Complex cases (multiple fraudulent accounts, loans, or criminal activity in your name) can take months or years. The average victim spends 6-12 months fully resolving all issues. Persistence and organization speed up recovery.

Will identity theft ruin my credit score?

Not necessarily. Fraudulent accounts and charges can be removed from your credit reports, which restores your score. While disputes are pending, your score might temporarily drop. Once fraudulent information is removed and you maintain good credit habits with legitimate accounts, your score recovers. Most victims see their scores return to normal within 6-12 months.

Can I find out who stole my identity?

Usually no. Police rarely investigate individual identity theft cases unless they involve large amounts of money or are part of a bigger operation. The investigation burden falls on you and the companies involved. Focus your energy on stopping the damage and protecting yourself rather than finding the thief.

Should I close all my accounts and start over?

No. Only close compromised accounts. Closing all accounts can hurt your credit score (by reducing credit history length and increasing credit utilization). Close fraudulent accounts immediately, but keep legitimate uncompromised accounts open. Change passwords and add security features to legitimate accounts instead of closing them.

What if companies won’t remove fraudulent charges?

If a company refuses to remove fraudulent charges after you’ve provided an Identity Theft Report and police report, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. Also contact your state Attorney General’s office. Document all refusals in writing. You may need to consult an attorney if the company continues refusing, as they may be violating federal law.

Conclusion: Take Action Now

Identity theft feels overwhelming, but you can fix this. The key is acting immediately and staying organized.

Your action plan:

1. Place fraud alerts and security freezes today
2. Get your credit reports and review them carefully
3. File your FTC and police reports
4. Contact every affected company in writing
5. Monitor everything continuously
6. Document every step

You didn’t cause this. You’re not responsible for fraudulent debts. You have legal protections and rights.

Start with the first 24-hour actions listed in this guide. Work through each step methodically. Keep records. Follow up persistently.

Most identity theft victims fully recover. With quick action and consistent follow-through, you will too. The thieves win only if you do nothing. Take control of your identity back, starting right now.