Identity Theft: What to Do, Report to FTC, Freeze Credit & Recover Your Identity 2026
- Feb 23
- 25 min read
You just received a credit card bill for purchases you never made. Or the IRS sent a letter saying someone already filed a tax return in your name. Maybe debt collectors are calling about accounts you never opened. Or you discovered your bank account was drained overnight. Perhaps you applied for a job and were told there's a warrant for your arrest – for a crime someone else committed using your identity.
Your stomach drops. Your hands shake. You feel violated, angry, scared, and helpless. Someone has stolen your identity and is destroying your credit, draining your accounts, and ruining your life. You don't know where to start or what to do first.
Here's the reality: Identity theft is one of the fastest-growing crimes in America. Over 14 million Americans are victims every year. The average victim spends 100+ hours and thousands of dollars recovering their identity. The emotional toll is devastating. And if you don't act quickly and correctly, the damage gets exponentially worse.
But here's what you need to know: You can recover from identity theft. There are specific steps, taken in a specific order, that will stop the damage, reverse the harm, and restore your identity. The FTC has created a comprehensive recovery system. Credit bureaus have tools to protect you. Law enforcement can help. And federal law gives you powerful rights against identity thieves.
This comprehensive guide will walk you through everything you need to do right now if you're a victim of identity theft in 2026. From the immediate actions you must take today, to reporting to the FTC and filing a police report, freezing your credit with all three bureaus, disputing fraudulent accounts and charges, recovering your tax identity and Social Security number, monitoring your credit, and rebuilding your identity – we'll cover it all step-by-step in clear, actionable language.
Whether your identity was just stolen or you've been fighting this for months, whether it's credit card fraud or full synthetic identity theft, this guide will help you take back control and recover your identity.
What is Identity Theft?
Before you can fight identity theft, you need to understand exactly what it is and the forms it takes.
Definition
Identity theft occurs when someone uses your personal information without permission to commit fraud or other crimes.
Personal information includes:
Social Security number
Driver's license number
Bank account numbers
Credit card numbers
Passwords and PINs
Date of birth
Mother's maiden name
Medical records
Tax identification numbers
Email addresses and usernames
What identity thieves do with your information:
Open credit cards and loans in your name
Drain your bank accounts
File tax returns to steal your refund
Get medical treatment using your insurance
Rent apartments or buy cars
Get jobs (working under your identity)
Commit crimes (leading to warrants in your name)
Sell your identity on the dark web to other criminals
Types of Identity Theft
Financial identity theft (most common):
Credit card fraud
Bank account takeover
Loan fraud
Wire transfer fraud
Check fraud
Cryptocurrency theft
Tax identity theft:
Filing fraudulent tax returns to steal refunds
Usually discovered when you file your legitimate return
IRS notifies you that a return was already filed
Medical identity theft:
Using your insurance to get medical care
Obtaining prescription drugs
Billing fraudulent procedures
Can contaminate your medical records with wrong information
Criminal identity theft:
Giving your name when arrested
Warrants issued in your name
Criminal record created under your identity
Can affect employment, housing, travel
Child identity theft:
Stealing children's Social Security numbers
Opening accounts before child reaches adulthood
Often goes undetected for years
Devastating impact when discovered
Synthetic identity theft:
Combining real information (your SSN) with fake information (fake name, DOB)
Creating a new identity
Building credit under synthetic identity
Hard to detect and resolve
Social media identity theft:
Creating fake profiles using your photos and information
Scamming your friends and family
Destroying your reputation
Employment identity theft:
Someone works using your Social Security number
Their earnings reported under your number
Can affect your Social Security benefits and taxes
Used by undocumented workers or people with criminal records
How Identity Theft Happens
Common ways thieves steal your information:
Data breaches:
Company databases hacked (Equifax, Target, OPM, etc.)
Millions of records stolen at once
You may not know your data was compromised
Phishing:
Trick you into providing personal information
"Your account has been locked, click here"
"IRS says you owe money, call this number"
Skimming:
Devices on ATMs or gas pumps that steal card information
Card information copied when swiped
Hard to detect
Physical theft:
Stolen wallet or purse
Stolen mail (checks, credit cards, tax forms)
Dumpster diving (going through your trash)
Stolen documents from home or car
Social engineering:
Thieves call pretending to be your bank, IRS, tech support
Convince you to give them access or information
"Grandparent scam" – "Grandma, it's me, I need money"
Public Wi-Fi:
Hackers intercept data on unsecured networks
Banking on public Wi-Fi = huge risk
Insider theft:
Employee at a company steals customer data
Family member or friend with access to your information
Dark web purchases:
Criminals buy stolen data packages
Your information from old breaches sold and resold
Malware:
Keyloggers capturing your passwords
Ransomware stealing your files
Trojan horses giving criminals remote access
The average American's personal information has been compromised in multiple data breaches. It's not a question of if, but when you'll be targeted.
Warning Signs of Identity Theft
How do you know if you're a victim? Warning signs:
Financial red flags:
Charges on your credit or debit card you didn't make
Withdrawals from your bank account you didn't authorize
Bills for accounts you didn't open
Calls from debt collectors about debts that aren't yours
Denied credit applications (when your credit should be good)
Credit report shows accounts you didn't open
Your credit score drops unexpectedly
Tax-related signs:
IRS letter saying more than one tax return filed in your name
IRS letter about wages from employer you don't work for
Tax transcript shows income you didn't earn
Medical signs:
Medical bills for treatments you didn't receive
Health insurance denies coverage saying limit reached (when you haven't used it)
Medical collection notices for services you didn't get
Wrong information in your medical records
Government benefits:
Social Security Administration says benefits claimed in your name
Unemployment benefits claimed when you didn't file
Criminal/legal:
Notification of arrest warrant for crimes you didn't commit
Court summons for cases you know nothing about
Police contact about crimes committed under your name
Other signs:
Mail stops coming (address changed without your knowledge)
IRS sends notice saying business was registered in your name
Notification that your data was part of a breach
Can't file electronic tax return because one was already filed
Job application denied due to background check issues you didn't know about
If you notice any of these, act immediately.
Immediate Actions: First 24-48 Hours
If you discover identity theft, take these actions RIGHT NOW. Speed is critical.
Step 1: Secure Your Accounts
If financial accounts are compromised:
Contact banks and credit card companies immediately:
Call the fraud department
Report the theft
Close or freeze compromised accounts
Change PINs and passwords
Get new account numbers
Request new cards
Use phone numbers on back of your card or bank website – don't use numbers from suspicious emails or texts.
If someone drained your bank account:
Report it immediately (within 2 days for maximum protection under federal law)
File fraud claim
Bank investigates
You may be reimbursed (depending on circumstances)
Change passwords:
Bank accounts
Credit card accounts
Email (critical – your email is the key to everything)
Investment accounts
Retirement accounts
PayPal, Venmo, Zelle
Cryptocurrency accounts
Any account with financial information
Use strong, unique passwords for each account:
12+ characters
Mix of letters, numbers, symbols
Not based on personal information
Use password manager
Enable two-factor authentication (2FA):
On every account that offers it
Preferably authenticator app, not SMS (SMS can be hijacked)
Step 2: Place Fraud Alert
Place a fraud alert with one credit bureau (only need to do one, they notify the others):
What a fraud alert does:
Alerts potential creditors that you may be an identity theft victim
Creditors must verify your identity before granting credit
Free
Lasts 1 year (renewable)
Extended fraud alerts available for confirmed identity theft victims (7 years)
How to place fraud alert:
Call one of these (only need one):
Equifax: 800-685-1111 or equifax.com/personal/credit-report-services/credit-fraud-alerts
Experian: 888-397-3742 or experian.com/fraud
TransUnion: 800-680-7289 or transunion.com/fraud
What you need:
Your name and contact information
Description of fraud
May need to provide documentation for extended alert
The bureau you contact notifies the other two automatically.
Fraud alert vs. credit freeze (we'll cover freezes in detail later):
Fraud alert: Doesn't prevent new accounts, just requires extra verification
Credit freeze: Completely blocks access to your credit report (stronger protection)
Do BOTH: Place fraud alert now, then credit freeze
Step 3: Check Your Credit Reports
Get free credit reports from all three bureaus:
The ONLY authorized website for free credit reports
Beware of imposters
Get reports from Equifax, Experian, and TransUnion
Free reports (normally once per year, but pandemic allowed weekly checks – check current availability)
Or call: 877-322-8228
Or mail: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281
Review every line of your reports:
Look for accounts you didn't open
Look for inquiries you didn't authorize (applications for credit)
Look for addresses you didn't live at
Look for employers you didn't work for
Note everything suspicious
Make a list of fraudulent accounts and inquiries.
You'll need this list for:
FTC report
Police report
Disputing with creditors
Take screenshots or download reports for your records.
Step 4: File FTC Report at IdentityTheft.gov
This is the cornerstone of your recovery.
Go to IdentityTheft.gov (run by the Federal Trade Commission)
What this does:
Creates an official Identity Theft Report
Provides personalized recovery plan
Gives you an affidavit creditors must accept
Provides legal protections under federal law
Free service
How to file:
Go to IdentityTheft.gov
Click "Get Started"
Answer questions about what happened
Provide details of theft:
What information was stolen
How you discovered it
What accounts were affected
Timeline of events
System generates report and recovery plan
Print and save your Identity Theft Report
What you get:
Identity Theft Report (official document)
Personalized recovery plan with step-by-step actions
Letters you can send to creditors and bureaus
Tracking of your progress
This report gives you legal rights:
Extended fraud alerts (7 years)
Block fraudulent information on credit reports
Prevent debt collectors from collecting fraudulent debts
Get copies of fraudulent transaction records
Keep this report safe – you'll need it throughout recovery.
Timeline: Do this within 24-48 hours of discovering theft.
Step 5: File Police Report
File a report with your local police department.
Why:
Creates official record
Required by some creditors and bureaus
Necessary for extended fraud alerts
Helps with criminal prosecution
Some identity theft victims need police report to clear criminal records
What to bring:
FTC Identity Theft Report
Proof of identity (driver's license)
Proof of address
Any evidence you have (fraudulent bills, credit reports, etc.)
Where to file:
Your local police department
Or police where the theft occurred (if known)
Or online in some jurisdictions
What to expect:
Some police departments are reluctant to take identity theft reports
They may say it's a civil matter
Insist on filing a report
Federal law requires them to take a report if you provide FTC Identity Theft Report
Get a copy of the police report
If police refuse:
Ask for supervisor
Show them FTC Identity Theft Report
Explain you need it for your recovery
File complaint with department if necessary
Try another jurisdiction if you must
Online reporting:
Some states allow online identity theft reports
Check your state's website
The police report, combined with FTC report, is your "Identity Theft Report" under federal law – giving you maximum legal protections.
Step 6: Contact Affected Companies
Contact every company where fraud occurred:
Credit card companies:
Report fraud
Close accounts or get new numbers
Dispute charges (zero liability protection)
Get provisional credit while investigating
Banks:
Close accounts
Open new accounts
File fraud claim
Change online banking credentials
Utilities:
If fraudulent accounts opened
Close accounts
Dispute charges
Phone/Internet providers:
Report fraud
Close fraudulent accounts
Secure your accounts with passwords
Retailers:
If accounts opened in your name
Close accounts
Dispute charges
What to say: "I'm a victim of identity theft. Someone opened/used this account fraudulently. I'm sending you an FTC Identity Theft Report and requesting [closure/dispute/blocking of information]."
Send written notice:
Certified mail with return receipt
Include copy of FTC Identity Theft Report
Include police report
Detail what you want (close account, dispute charges, etc.)
Keep copies of everything
Companies must:
Investigate
Not report to credit bureaus as legitimate debt
Not sell debt to collection agencies
Provide you with records of fraudulent transactions
Federal law protects you from liability for most identity theft-related debts.
Freezing Your Credit: The Most Important Protection
A credit freeze is your strongest weapon against identity theft.
What is a Credit Freeze?
Credit freeze (also called security freeze):
Restricts access to your credit report
Prevents new creditors from seeing your credit
Makes it nearly impossible for identity thieves to open new accounts in your name
How it works:
When creditor tries to check your credit, they're blocked
Cannot see your report
Cannot approve new credit
Identity thief cannot open credit cards, loans, etc.
What it does NOT affect:
Doesn't hurt your credit score
Doesn't prevent you from using existing accounts
Doesn't prevent you from getting your own credit report
Doesn't prevent you from applying for jobs
Doesn't block prescreened credit offers (need to opt out separately)
When to freeze:
Immediately if you're an identity theft victim
Or proactively to prevent theft (recommended for everyone)
Cost:
FREE (as of 2018, all credit freezes are free)
Used to cost up to $10, now completely free
How to Freeze Your Credit
You must freeze with ALL THREE credit bureaus separately (each is independent):
Equifax:
Website: equifax.com/personal/credit-report-services/credit-freeze/
Phone: 800-349-9960
By mail: Equifax Security Freeze, P.O. Box 105788, Atlanta, GA 30348
Experian:
Website: experian.com/freeze
Phone: 888-397-3742
By mail: Experian Security Freeze, P.O. Box 9554, Allen, TX 75013
TransUnion:
Website: transunion.com/credit-freeze
Phone: 888-909-8872
By mail: TransUnion LLC, P.O. Box 2000, Chester, PA 19016
What you'll need:
Name, address, date of birth
Social Security number
Email and phone number
Security question answers
Online process (fastest):
Go to bureau's freeze website
Provide your information
Create account (if you don't have one)
Request freeze
Receive PIN or password
Save this PIN – you need it to unfreeze
Timeline:
Freeze is in place immediately or within 1 business day
Confirmation:
You'll receive confirmation by email or mail
Keep this confirmation
PINs:
You get a unique PIN from each bureau
You need this PIN to temporarily or permanently lift the freeze
Store PINs securely (password manager, safe place)
If you lose PIN, you can reset it but it's a hassle
Unfreezing Your Credit
When you need to unfreeze:
Applying for new credit (credit card, loan, mortgage)
Renting an apartment (landlords check credit)
Certain job applications
Opening new bank account (sometimes)
How to unfreeze:
Temporary lift:
Lift freeze for specific timeframe (1 day, 7 days, 30 days, etc.)
Use PIN from each bureau
Can do online (instant) or by phone
Freeze automatically reinstates after timeframe
Permanent lift:
Remove freeze entirely
Use PIN
Only do this if identity theft risk has passed
Creditor-specific lift:
Some bureaus allow you to lift freeze for specific creditor only
That creditor can see your report, but no one else
Good option if you know which creditor will pull your credit
Process:
Contact bureau (online or phone)
Provide PIN
Request temporary lift
Specify timeframe or creditor
Freeze lifts immediately or within 1 hour
If applying for credit:
Ask the lender which bureau they use
Lift freeze only at that bureau
Lifts are instant online, or within 1 hour by phone
Plan ahead by a day if possible
Example:
Applying for a mortgage
Lender says they pull Equifax and TransUnion
Lift freeze at Equifax and TransUnion for 7 days
Keep Experian frozen
After mortgage approved, Equifax and TransUnion freeze automatically reinstates
Credit Freeze for Children
Your children's identities are valuable targets:
Clean credit history
Social Security number that won't be used for years
Theft often goes undetected until child turns 18 and applies for credit
You can freeze your child's credit:
Process:
Contact each of three bureaus
Request freeze for minor
Provide documentation:
Child's birth certificate
Your ID
Proof you're parent or guardian
Social Security cards
Each bureau has specific forms and requirements
Check their websites for exact process
This prevents:
Identity thieves from opening credit in child's name
Building fraudulent credit history under child's identity
Highly recommended for all children, especially if:
Your identity was stolen (thieves may target family)
Child's Social Security number was compromised in a breach
You suspect fraud
Fraud Alert vs. Credit Freeze
Many people confuse these. Here's the difference:
Feature | Fraud Alert | Credit Freeze |
What it does | Alerts creditors to verify identity | Blocks access to credit report |
Protection level | Moderate (creditors can still issue credit, just must verify) | Strong (creditors cannot see report at all) |
Duration | 1 year (renewable); 7 years for ID theft victims | Indefinite (until you lift it) |
Cost | Free | Free |
Coverage | Automatically applies to all three bureaus | Must apply to each bureau separately |
Ease of applying for credit | Easier (creditor just needs to verify) | More hassle (must unfreeze each time) |
Best for | Initial quick protection | Long-term strong protection |
Recommendation: Do BOTH.
Fraud alert first (quick, easy, automatic coverage)
Credit freeze immediately after (strongest protection)
Disputing Fraudulent Accounts and Charges
Now that you've stopped new fraud, it's time to fix the damage.
Disputing Fraudulent Credit Card Charges
You have strong protections under federal law:
Fair Credit Billing Act:
Limits your liability to $50 per card
Most card issuers have zero-liability policies (you pay nothing)
Must report within 60 days of statement date for protection
But report immediately for best protection
How to dispute:
Step 1: Contact credit card company
Call fraud department
Dispute charges
Company must investigate
Step 2: Follow up in writing
Send dispute letter within 60 days
Certified mail, return receipt
Include:
Your account information
List of fraudulent charges (dates, amounts, merchants)
Statement that you didn't make the charges
Statement that you're a victim of identity theft
Copy of FTC Identity Theft Report
Copy of police report
Request that charges be removed
Step 3: Card company investigates
Timeline: Must respond within 30 days of receiving dispute
Must resolve within 90 days (usually)
Cannot report you as delinquent for disputed amounts during investigation
Step 4: Provisional credit
Many card companies give provisional credit immediately (charges removed while investigating)
Step 5: Resolution
If company determines fraud: Charges removed permanently
If company determines legitimate: They must notify you, give you a chance to respond
You can appeal
Step 6: If company won't remove charges
File complaint with Consumer Financial Protection Bureau (CFPB): consumerfinance.gov/complaint
File complaint with FTC: ftc.gov/complaint
Consider legal action (consumer protection attorney)
Most credit card fraud disputes are resolved in favor of the consumer.
Disputing Fraudulent Bank Account Activity
Electronic Fund Transfer Act protects you:
Report unauthorized withdrawals within 2 days: Maximum $50 liability
Report within 60 days: Maximum $500 liability
After 60 days: Could be liable for all losses
Report immediately for best protection
How to dispute:
Step 1: Contact bank immediately
Call and report fraud
File fraud claim
Close account if necessary
Open new account
Step 2: Submit written fraud claim
Bank provides forms
Detail unauthorized transactions
Include FTC Identity Theft Report
Include police report
Step 3: Bank investigates
Timeline: Must complete investigation within 10 business days (usually)
Can take up to 45 days for new accounts or complex cases
Must provisionally recredit your account within 10 days (while investigating)
Step 4: Resolution
If bank finds fraud: Money returned permanently
If bank finds legitimate: Must notify you, you can appeal
Step 5: If bank won't return money
File complaint with CFPB
File complaint with bank regulator:
National banks: Office of the Comptroller of the Currency (OCC)
State banks: FDIC or state banking department
Credit unions: National Credit Union Administration (NCUA)
Consider legal action
Your liability is limited by federal law if you report promptly.
Closing Fraudulent Accounts
For accounts opened in your name:
Step 1: Contact the company (creditor, utility, phone service, etc.)
Fraud department
Explain you're identity theft victim
Request account closure
Step 2: Send Identity Theft Report
Mail certified letter
Include FTC Identity Theft Report
Include police report
Request:
Close account immediately
Send you letter confirming closure
Provide copies of fraudulent applications and transaction records
Do not report as delinquent debt to credit bureaus
Do not sell debt to collection agency
Sample language: "I'm a victim of identity theft. This account was opened fraudulently. Under the Fair Credit Reporting Act, I'm providing you with my Identity Theft Report and requesting that you close this account, provide me with copies of application and transaction records, and block any negative information from being reported to credit bureaus."
Step 3: Follow up
If company doesn't respond within 30 days, follow up
If company refuses to close or disputes your claim:
File complaint with FTC and CFPB
Escalate to supervisor
Consider legal action
Companies must:
Not try to collect fraudulent debt from you
Not report it to credit bureaus
Not sell it to collection agencies
Disputing Fraudulent Information on Credit Reports
You can block fraudulent information from appearing on your credit reports.
Under Fair Credit Reporting Act:
Identity theft victims can request credit bureaus block fraudulent information
Must provide Identity Theft Report
Bureau must block within 4 business days
What can be blocked:
Fraudulent accounts
Fraudulent inquiries (credit applications you didn't make)
Fraudulent personal information (addresses, employers)
How to dispute:
Step 1: Identify all fraudulent information
Review credit reports from all three bureaus
Make list of everything fraudulent
Step 2: File dispute with each bureau
Online:
Experian: experian.com/disputes
TransUnion: transunion.com/credit-disputes
By mail (better for identity theft):
Send certified letter to each bureau
Include:
Copy of FTC Identity Theft Report
Copy of police report
Copy of credit report with fraudulent items highlighted
Letter explaining what's fraudulent and requesting blocking
Proof of identity
Addresses:
Equifax: P.O. Box 740256, Atlanta, GA 30374
Experian: P.O. Box 9701, Allen, TX 75013
TransUnion: P.O. Box 2000, Chester, PA 19016
Step 3: Bureau investigates
Timeline: Must block information within 4 business days (if you provide Identity Theft Report)
Or within 30 days for standard disputes
May contact creditor to verify fraud
Step 4: Bureau sends results
Confirmation that information was blocked/removed
Or notification of what wasn't removed and why
Updated credit report
Step 5: Check that it's actually removed
Get new credit report after 30-45 days
Verify fraudulent information is gone
If not, follow up or escalate
If bureau refuses to remove:
File complaint with CFPB and FTC
You can add 100-word statement to your credit report explaining fraud
Consider legal action
Fraudulent information removed from your credit report helps restore your credit score.
Dealing with Debt Collectors
If debt collectors contact you about fraudulent debts:
Your rights under Fair Debt Collection Practices Act:
Debt collectors cannot harass you
You can request they stop contacting you
You can dispute debts
They must verify debts
If contacted:
Step 1: Don't pay or admit to the debt
Don't make payments (even small ones)
Don't agree it's your debt
Say: "I'm a victim of identity theft. This is not my debt."
Step 2: Request debt validation
Within 30 days of first contact, send written request for debt validation
Collector must provide:
Amount of debt
Name of creditor
Verification it's your debt
Certified mail
Step 3: Send Identity Theft Report
Along with validation request
Include FTC Identity Theft Report
Include police report
Explain this is identity theft
Request they cease collection and notify creditor of fraud
Step 4: Collector must stop collection
While verifying debt
If they determine it's identity theft, must stop permanently
Step 5: If collector continues
File complaint with FTC and CFPB
File complaint with your state Attorney General
Consider suing collector (you can recover damages)
Federal law protects you from paying fraudulent debts.
Recovering Specific Types of Identity Theft
Different types of identity theft require specialized actions.
Tax Identity Theft Recovery
If someone filed a tax return using your SSN:
Step 1: File Form 14039 (Identity Theft Affidavit)
Download from IRS.gov
Complete and mail or fax to IRS
Or call IRS: 800-908-4490
This alerts IRS that you're identity theft victim
Step 2: File your legitimate tax return on paper
Cannot e-file if fraudulent return already filed
Mail your return with Form 14039
Explain the situation in a cover letter
Step 3: Respond to IRS letters
IRS will send you letters asking for identity verification
Respond promptly with requested documents
May need to verify your identity in person at IRS office
Step 4: Wait for resolution
IRS investigates
Can take 6 months to 1 year (or longer)
IRS will eventually issue your refund
Step 5: Get IP PIN
IRS Identity Protection PIN
IRS will offer you a 6-digit PIN
Must be included on future tax returns
Prevents fraudulent filing in your name
Step 6: Monitor your IRS account
Create account at IRS.gov
Monitor for suspicious activity
Check wage and income transcripts
If your refund was stolen:
IRS will reissue legitimate refund
But it takes time
File as early as possible each year to beat thieves
Prevention:
File early (January/February)
Get IP PIN from IRS
Monitor credit and IRS account
Social Security Number Fraud
If someone is using your SSN:
Step 1: Report to Social Security Administration
Call: 800-772-1213
Visit local SSA office
Report that your SSN is being misused
They'll investigate
Step 2: File fraud report
SSA fraud hotline: 800-269-0271
Or online: oig.ssa.gov
Step 3: Request earnings review
Someone working under your SSN will have their earnings reported under your number
Request your earnings record
Identify earnings that aren't yours
Request correction
This can affect your future Social Security benefits
Step 4: Check for fraudulent benefit claims
Has someone claimed Social Security benefits in your name?
Check your Social Security statement
Step 5: Get new SSN (rare)
SSA rarely issues new SSNs
Only if you can prove ongoing harm despite taking all protective measures
Must show evidence
New SSN doesn't erase old credit history
Last resort
SSN fraud is serious because SSN is key to so many systems.
Medical Identity Theft Recovery
If someone used your insurance or identity to get medical treatment:
Step 1: Contact your health insurance company
Report fraud
Request claims review
Identify fraudulent claims
Dispute them
Step 2: Request accounting of disclosures
Under HIPAA, you can request list of everyone who received your medical records
Identify unauthorized recipients
Step 3: Review your medical records
Request full medical records from all providers
Look for treatments you didn't receive
Wrong diagnoses
Wrong medications
Wrong medical history
Step 4: Request corrections
Send written requests to correct your medical records
Under HIPAA, you have right to amend errors
Document everything
Step 5: File complaint
HHS Office for Civil Rights: hhs.gov/hipaa
FTC: ftc.gov/complaint
State health department
Step 6: Notify insurance company
Send Identity Theft Report
Request fraudulent claims be removed
Request your insurance limits be restored
Why this matters:
Wrong information in medical records can lead to wrong treatment
Can affect your ability to get insurance
Can affect life insurance applications
Fraudulent claims can hit your insurance maximums
Medical identity theft is dangerous – it can literally kill you if your records are wrong.
Criminal Identity Theft Recovery
If someone committed crimes using your identity:
Step 1: Get your arrest record
Contact arresting agency
Request copy of arrest record
Verify if you're in their database
Step 2: File police report
Explain someone impersonated you
Provide any evidence you weren't there (alibi, photos, etc.)
Step 3: Get court records
Obtain records of criminal case
Need to prove it wasn't you
Step 4: Work with prosecutor/court
Contact prosecutor's office
Explain identity theft
Provide evidence (photo ID showing you're not the person arrested, fingerprints, etc.)
May need court hearing
Step 5: Get case records corrected
Court order stating you're victim of identity theft
Records corrected to show not you
May require multiple steps
Step 6: Clear criminal databases
Contact state criminal justice agency
Request removal of your name from records
May need court order
Step 7: Expunge warrants
If warrants issued in your name
Need court to recall/expunge them
May need attorney
Step 8: Get certificate of clearance
Document showing you were victim of criminal identity theft
Carry with you in case of future issues
This type of identity theft can be very complex – consider hiring a criminal defense attorney to help.
Employment Identity Theft Recovery
If someone is working using your SSN:
Step 1: Check your Social Security earnings record
Request at SSA.gov or local office
Look for employers you didn't work for
Wages reported that aren't yours
Step 2: Report to Social Security Administration
Call or visit SSA
Report fraudulent earnings
Request correction
Step 3: Report to IRS
Someone else's earnings will appear on your tax transcript
IRS will expect taxes on income you didn't earn
File Form 14039
Provide documentation
Step 4: Contact employer (if known)
Report that someone is using your identity
They should investigate
Step 5: Report to state agencies
State unemployment office (fraudulent unemployment claims)
State tax agency
This affects:
Your tax liability
Your Social Security benefits calculation
Your unemployment eligibility
Credit Monitoring and Ongoing Protection
Recovery isn't over after initial steps. You need ongoing monitoring.
Free Credit Monitoring Options
Annual credit reports:
Free reports from each bureau once per year (used to be once per year per bureau, now check if still weekly)
Stagger them: Equifax in Jan, Experian in May, TransUnion in Sept
Credit Karma:
Free credit scores and monitoring
Updates weekly
Shows accounts and inquiries
Alerts for new accounts
Uses TransUnion and Equifax
Credit Sesame:
Similar to Credit Karma
Free monitoring
Bank/credit card monitoring:
Many banks and credit cards offer free credit score and monitoring
Discover, Capital One, Chase, others
Check your account benefits
Experian free monitoring:
Experian offers free monitoring of your Experian report
Identity theft protection through other services:
Some employers offer free identity theft monitoring
Some insurance policies include it
Check what you already have
Paid Credit Monitoring Services
Major services:
LifeLock
IdentityForce
Identity Guard
Experian IdentityWorks
PrivacyGuard
myFICO
Cost:
$10-$30 per month typically
$100-$300+ per year
What they offer:
Three-bureau credit monitoring
Dark web monitoring (scanning for your info on dark web)
Social Security number monitoring
Public records monitoring
Identity theft insurance ($25,000-$1 million)
Resolution services (assistance with recovery)
Alerts for suspicious activity
Some offer credit freezes management
Are they worth it?
Debatable
You can do most of this yourself for free
Credit freezes (free) are more effective than monitoring
But convenient if you don't want to monitor yourself
Insurance and resolution services can be valuable
If identity theft victim:
Company that caused breach may offer free monitoring
Take advantage of this (usually 1-2 years free)
Set calendar reminder to cancel before paid period starts
If you use paid monitoring:
Compare services
Read fine print on insurance
Understand what's actually monitored
Don't rely solely on it – still check your own reports
Setting Up Account Alerts
Enable alerts on all financial accounts:
Bank account alerts:
Large withdrawals
Online purchases
International transactions
Low balance
Address or password changes
Credit card alerts:
Every transaction (yes, every one)
Transactions over certain amount
International transactions
Address or phone changes
Investment account alerts:
Withdrawals
Password changes
Beneficiary changes
Email alerts:
Login from new device or location
Password changes
Phone alerts:
SIM card changes (SIM swapping is common fraud)
Alerts help you detect fraud immediately instead of finding out weeks later.
Monitoring Your Credit Report Regularly
Even with alerts and monitoring, check manually:
Every 4 months:
Get free report from one bureau
Rotate through three bureaus
Check for:
New accounts
Hard inquiries
Changed addresses
Changed employers
Collection accounts
Public records
Late payments
What to look for:
Accounts you don't recognize
Inquiries you didn't authorize
Wrong personal information
Anything suspicious
If you find something:
Dispute immediately
Don't wait
This catches fraud early before it becomes a major problem.
Protecting Your Information Going Forward
Prevention is better than recovery:
Secure your Social Security number:
Don't carry card in wallet
Only give when absolutely necessary
Ask why they need it (often they don't)
Use alternative identifiers when possible
Secure your mail:
Use locked mailbox
Collect mail promptly
Hold mail when traveling
Opt out of pre-screened credit offers: optoutprescreen.com
Shred documents:
Bank statements
Credit card offers
Medical bills
Tax documents
Anything with personal information
Use strong passwords:
Unique password for each account
12+ characters
Password manager
Enable 2FA everywhere
Be wary of phishing:
Don't click links in emails
Don't give information to unsolicited callers
Verify directly with company (call number on their website)
IRS, SSA, banks don't call asking for personal info
Secure devices:
Antivirus software
Keep software updated
Don't use public Wi-Fi for banking
Use VPN if you must use public Wi-Fi
Monitor accounts:
Check bank and credit card accounts weekly
Review statements carefully
Report suspicious activity immediately
Check credit reports:
At least every 4 months
More often if you're identity theft victim
Keep credit frozen:
Leave freeze in place
Only unfreeze when applying for credit
Refreeze immediately after
Long-Term Recovery and Timeline
Identity theft recovery takes time. Here's what to expect.
Recovery Timeline
Immediate (Days 1-7):
Secure accounts
Place fraud alert
File FTC report
File police report
Contact affected companies
Freeze credit
Short-term (Weeks 1-4):
Dispute fraudulent charges
Close fraudulent accounts
Dispute credit report errors
Set up monitoring
Change passwords
Deal with immediate damage
Medium-term (Months 1-6):
Follow up on disputes
Monitor credit reports
Continue disputing errors
Deal with debt collectors
Resolve tax issues
Correct medical records
Rebuild credit
Long-term (Months 6-12+):
Continue monitoring
Final disputes resolved
Credit score recovers
Tax issues resolved
New normal established
Full recovery:
Can take 100-200 hours of your time
6 months to 2+ years
Depends on severity and type of theft
Some cases more complex
Most straightforward cases:
Resolved within 6-12 months
Credit card fraud typically fastest
Complex cases:
Tax identity theft: 1-2 years
Criminal identity theft: Years
Medical identity theft: Months to years
Full synthetic identity theft: Very complex
Credit Score Recovery
How identity theft affects your score:
Fraudulent accounts: Lowers score
Fraudulent inquiries: Slight impact
Maxed out fraudulent cards: Lowers score
Missed payments on fraudulent accounts: Severely lowers score
Collections: Severely lowers score
Once fraudulent information is removed:
Score should recover
May take 1-3 months for score to update after accounts removed
Depends on what else is on your report
Rebuilding your credit:
Keep existing accounts in good standing
Pay all bills on time
Keep balances low
Don't apply for credit unnecessarily
Let good payment history rebuild
Typical recovery:
If score dropped from 750 to 550 due to fraud
Once fraud removed: Back to 700-750 within 3-6 months
Assuming no other negatives on report
Get credit score for free:
Many credit cards provide
Credit Karma
AnnualCreditReport.com (free reports, but scores may cost)
Emotional and Psychological Impact
Identity theft is traumatic:
Common feelings:
Violation ("Someone stole my identity")
Anger
Helplessness
Anxiety and stress
Depression
Fear (Will this happen again? What else will happen?)
Shame or embarrassment (even though it's not your fault)
These feelings are normal.
Coping strategies:
Take it one step at a time (don't be overwhelmed by all steps)
Celebrate small victories (account closed, dispute resolved)
Talk to supportive friends/family
Join support groups (online or in-person for identity theft victims)
Consider counseling if it's significantly impacting your life
Practice self-care
It gets better:
Most victims recover
The worst is usually the first few weeks
As you take action, you feel more in control
Eventually you'll get through this
When to Hire Professional Help
Most identity theft can be resolved on your own using this guide and FTC resources.
But consider hiring help if:
Identity theft attorney:
Complex case (criminal identity theft, extensive fraud)
Companies refusing to remove fraudulent accounts
Need to sue creditors or bureaus
Thousands of dollars in fraudulent debt
Cost: Varies, some work on contingency
Identity theft resolution service:
You don't have time to handle it yourself
Case is overwhelming
Want professionals to manage recovery
Cost: $1,000-$5,000+ depending on service
Some credit monitoring services include this
Financial advisor:
Extensive financial damage
Need help rebuilding financially
Therapist:
Emotional impact is severe
Affecting your daily life
Need professional support
Most cases don't require paid help – FTC resources and persistence are sufficient. But don't hesitate to get help if you need it.
Preventing Future Identity Theft
Once you've recovered, prevention becomes critical.
Best Practices
Already covered but worth repeating:
Keep credit frozen except when needed
Enable 2FA on all accounts
Use strong, unique passwords
Monitor accounts and credit reports
Secure your mail
Shred documents
Be wary of phishing
Don't overshare on social media
Additional steps:
Limit information sharing:
Don't give SSN unless absolutely necessary
Ask if alternative ID can be used
Understand why they need it
Secure important documents:
Social Security card, birth certificate, passport in safe place
Not in wallet or purse
Consider safe or safe deposit box
Be careful with phones:
Lock with PIN, password, or biometric
Don't save passwords in browsers
Use encrypted messaging for sensitive info
Be wary of public charging stations (use your own charger)
Monitor children's credit:
Freeze children's credit
Check annually for fraudulent accounts
Children's SSNs are prime targets
Check background periodically:
Google yourself
See what information is publicly available
Request removal of personal info from data broker sites
Review account statements:
Don't ignore bank and credit card statements
Review every line
Question anything unfamiliar
Limit access to your information:
Don't give SSN to every company that asks
HIPAA and FERPA give you rights over medical and educational records
Opt out of data sharing where possible
What to Do After Data Breach
If you're notified your data was in a breach:
Step 1: Determine what was compromised
Credit card numbers only?
SSN?
Full personal info?
Severity determines response
Step 2: Take company's offered services
Free credit monitoring (usually 1-2 years)
Identity theft resolution services
Take advantage even if you have your own monitoring
Step 3: Change passwords
For breached account
For any accounts using same password
Step 4: Monitor accounts closely
Watch for fraud
Check credit reports
Step 5: Consider credit freeze
If SSN was compromised
Strong protection
Step 6: Watch for phishing
Scammers may target breach victims
Don't click links in breach notification emails
Go directly to company website
Major breaches in recent years:
Equifax (2017): 147 million Americans
Many others: Target, Home Depot, OPM, Yahoo, Marriott, Capital One, T-Mobile, etc.
Assume your data has been breached somewhere – act accordingly with prevention measures.
Conclusion: You Can Recover
Identity theft is violating, stressful, and time-consuming. But you can recover.
Key takeaways:
Immediate actions:
Secure accounts
Fraud alert
FTC report (IdentityTheft.gov)
Police report
Contact companies
Freeze credit with all three bureaus
Short-term actions:
Dispute fraudulent charges
Close fraudulent accounts
Dispute credit report errors
Set up monitoring
Long-term actions:
Monitor credit reports regularly
Keep credit frozen
Practice prevention
Rebuild credit
Emotional recovery
Your most powerful tools:
FTC Identity Theft Report (IdentityTheft.gov)
Police report
Credit freezes (free, at all three bureaus)
Fair Credit Reporting Act rights
Fair Credit Billing Act rights
Persistence
Timeline:
Immediate actions: Days 1-7
Short-term recovery: Weeks 1-4
Medium-term recovery: Months 1-6
Long-term recovery: Months 6-12+
Full recovery: 6 months to 2+ years (varies)
Resources:
IdentityTheft.gov – Start here
AnnualCreditReport.com – Free credit reports
CFPB complaint database – File complaints
FTC complaint assistant – Report fraud
Local police – File report
Credit bureaus – Freeze, dispute, monitor
Remember:
You're not alone – 14+ million Americans annually
It's not your fault
You have legal rights and protections
Most cases resolve successfully
Take it one step at a time
Prevention is critical:
Credit freeze (strongest protection)
Monitor accounts and credit
Strong passwords and 2FA
Be wary of phishing
Secure personal information
If you're dealing with identity theft right now:
Take a deep breath
Follow the steps in this guide
Start with IdentityTheft.gov
Be persistent
Keep detailed records
Don't give up
You will get through this. Your identity can be recovered. Your credit can be restored. You will feel safe again.
Take the first step today. Visit IdentityTheft.gov and start your recovery.
Comments