Key Takeaways
What You're Dealing With and Why Speed Matters
Identity theft occurs when someone uses your personal information — Social Security number, financial account details, or other identifying data — without your permission, typically for financial gain. The Federal Trade Commission (FTC) receives millions of identity theft reports annually, making it one of the most common consumer fraud issues in the United States.
The damage can range from a single fraudulent credit card charge to years of accumulated debt, damaged credit, and even criminal records filed under your name. The severity depends heavily on how quickly the victim responds. Early action can limit which accounts are compromised and how deeply fraudulent activity embeds itself in your credit history.
Act Within 24–48 Hours If Possible
The sooner you respond to identity theft, the more effectively you can limit financial and legal damage. Delaying action — even by a few days — can allow a thief to open additional accounts, drain funds, or file fraudulent tax returns. Treat the first 48 hours as critical. Pause non-urgent tasks and work through the steps below in order.
To understand what may have happened before your information was misused, see what happens after your data is exposed in a breach.
What You'll Need Before You Start
Before working through the steps below, gather the documents and tools that will be needed throughout the process. Having these on hand reduces delays when contacting institutions and filing reports.
What you will need
IdentityTheft.gov (FTC)
The official federal portal for filing an identity theft report and generating a personalized recovery plan.
AnnualCreditReport.com
The federally authorized source for free credit reports from all three major bureaus — Equifax, Experian, and TransUnion.
PACER or local police department
Used to file or obtain a police report, which may be required by some creditors during the dispute process.
Secure document scanner or scanner app
Digitizes paper documents for secure storage and sharing during disputes.
Keep a Recovery Log From Day One
Use a dedicated notebook or document to record every phone call, submission, and letter — including the date, name of the representative, and any case or reference number provided. This log becomes invaluable if disputes escalate or require follow-up. Courts and creditors may also request documentation of your recovery efforts.
Step-by-Step Recovery Instructions
Follow these steps in order. Some — like placing a fraud alert and filing with the FTC — should happen within the first 24 to 48 hours. Others, such as disputing accounts and monitoring your reports, are ongoing tasks that extend through the recovery period.
Place a Fraud Alert With a Credit Bureau
Contact any one of the three major credit bureaus — Equifax, Experian, or TransUnion — to place an initial fraud alert on your credit file. That bureau is legally required to notify the other two. A standard fraud alert lasts one year and requires lenders to take extra steps to verify your identity before opening new credit in your name.
If you have documentation of the theft, you may qualify for an extended fraud alert, which lasts seven years and entitles you to two free credit reports per bureau per year during the alert period.
Consider a Credit Freeze
A credit freeze (also called a security freeze) is stronger protection than a fraud alert. It prevents new creditors from accessing your credit report entirely, making it nearly impossible for a thief to open new accounts in your name. Unlike a fraud alert, you must contact each bureau individually to place and later lift a freeze.
Freezes are free under federal law and do not affect your existing credit accounts or credit score. You will need to temporarily lift a freeze any time you apply for legitimate new credit, so plan ahead if you anticipate a loan or rental application.
Pull and Review All Three Credit Reports
Visit AnnualCreditReport.com to request your free reports from Equifax, Experian, and TransUnion. Review each one carefully for accounts you did not open, inquiries you do not recognize, addresses unfamiliar to you, and any public records such as judgments or liens.
Flag every suspicious item — you will need this list for formal disputes in the next steps. For a detailed walkthrough of how to read each section of your report, see Reading Your Credit Report Without Getting Lost.
File an Identity Theft Report With the FTC
Go to IdentityTheft.gov and complete an identity theft report. The FTC will generate a personalized recovery plan and an official Identity Theft Report document. This document carries legal weight: creditors are required to block fraudulent information from appearing on your credit report when presented with it.
Print or save your FTC report and reference number. You may also be prompted to file a local police report — doing so adds another layer of documentation that some financial institutions require before removing fraudulent accounts.
Notify Affected Financial Institutions
Contact the fraud department of every bank, credit card issuer, or lender connected to a compromised or fraudulent account. Ask each institution to:
- Close or freeze the affected account immediately
- Issue new account numbers and cards where applicable
- Reverse fraudulent transactions after investigation
- Flag your file to prevent address changes without verification
Get confirmation of each action in writing. Keep every case number and the name of each representative you speak with.
Dispute Fraudulent Accounts With the Credit Bureaus
Submit a formal dispute to each bureau that shows a fraudulent account. Include a copy of your FTC Identity Theft Report, a government-issued ID, and a written explanation identifying each item you are disputing. Bureaus are generally required to investigate and respond within 30 days.
If the bureau does not remove a fraudulent item after your dispute, you can escalate by submitting your dispute directly to the creditor that reported it. The Consumer Financial Protection Bureau (CFPB) also accepts complaints if a bureau fails to respond appropriately.
Secure Your Accounts and Harden Your Digital Profile
Change passwords on all accounts — starting with email, banking, and government portals — and enable multi-factor authentication wherever available. Use unique, strong passwords for each account. Review connected apps and revoke access to any you do not recognize.
For a structured approach to hardening your overall digital security, the Digital Security Audit checklist is a practical resource. Also consider reviewing why strong passwords alone aren't always enough to understand where gaps commonly occur.
Do Not Pay Fraudulent Debts
You are generally not legally responsible for debts incurred through identity theft. Paying even a small amount on a fraudulent account can complicate your dispute and may be interpreted as acknowledgment of the debt. Instead, dispute every unauthorized account in writing and keep copies of all correspondence.
Monitoring Your Recovery and Staying Protected
Identity theft recovery is rarely a single event — it is a process. After completing the immediate steps, continue checking your credit reports every few months for new fraudulent activity. Bureaus may add new negative items even after your initial disputes are resolved, particularly if the thief sold your information to other parties.
The Credit hub offers additional guidance on managing and understanding your credit as you work through recovery. If fraudulent accounts were covered by home or renters insurance with an identity theft rider, review how the insurance claims process works for context on what to expect when filing.
Stay vigilant about phishing attempts that may follow a theft — fraudsters sometimes use stolen data to impersonate banks or government agencies in follow-up scams. If you receive unsolicited contact claiming to be from a creditor or the IRS, verify independently through official contact numbers before sharing any information.
This article provides general informational guidance on identity theft recovery steps in the United States and does not constitute legal, financial, or professional advice. For complex situations involving fraud litigation, credit disputes that remain unresolved, or suspected criminal identity theft, consult a licensed attorney or a certified identity theft recovery specialist.