Identity Theft: What to Do Immediately and How to Recover Your Credit

Warning Signs You May Be a Victim

Identity theft often starts silently. By the time most people notice, the damage is already significant. Watch for these red flags:

First 48 Hours: Your Urgent Checklist

Time is critical. Here is exactly what you need to do, in order, as fast as possible:

1. 1
   Place a fraud alert with one credit bureau (it extends to all three) Contact Equifax, Experian, or TransUnion — whichever you reach first. They are required by law to notify the other two. A fraud alert requires lenders to verify your identity before opening new credit. This is your fastest first step and takes about 5 minutes online or by phone.
2. 2
   Get free credit reports from all three bureaus and review every line Go to AnnualCreditReport.com — the only federally authorized site. Download all three reports (Equifax, Experian, TransUnion) and review every account, inquiry, and address. Flag anything unfamiliar. This is your map of the damage.
3. 3
   File an FTC Identity Theft Report at IdentityTheft.gov This free federal report is your most powerful legal tool. It creates a personalized recovery plan, and you can use the report to dispute fraudulent accounts, block debts, and legally require businesses to stop reporting fraudulent information. Do this before contacting creditors.
4. 4
   Freeze your credit at all three bureaus — right now A credit freeze locks your credit file so no one can open new credit without unfreezing it first. It's free, it's permanent until you lift it, and it is the single most effective tool to stop further damage. Freeze at Equifax, Experian, and TransUnion separately.
5. 5
   Contact every financial institution where fraud occurred Call the fraud department (not general customer service) for every bank, credit card issuer, or lender with a fraudulent account. Request that fraudulent accounts be closed, disputed, and flagged. Ask for written confirmation. Change passwords and PINs on all legitimate accounts.
6. 6
   File a police report if criminals used your identity for serious fraud A police report is often required for certain disputes and insurance claims. It's especially important if someone committed crimes in your name, obtained a driver's license in your name, or if you need to show law enforcement documentation to creditors.

Fraud Alert vs. Credit Freeze: What's the Difference?

Many people confuse fraud alerts and credit freezes. They're very different tools, and for confirmed identity theft victims, you want both:

How to Dispute Fraudulent Accounts

Once you have your FTC Identity Theft Report, you have the legal right to dispute fraudulent accounts directly with the credit bureaus and to require businesses to block that information from your credit file.

Step 1: Dispute with the Credit Bureaus

Send a dispute letter to Equifax, Experian, and TransUnion for each fraudulent account. Include:

• A copy of your FTC Identity Theft Report
• A copy of your government-issued ID
• Proof of your address (utility bill, bank statement)
• A clear written statement identifying each fraudulent account and explaining why it is fraudulent

Bureaus must investigate within 30 days and block the fraudulent information within four business days of receiving your identity theft report. See our guide on disputing credit report errors for letter templates and bureau contact details.

Step 2: Contact the Creditors Directly

Don't rely only on bureau disputes. Contact each creditor directly with your FTC report and request that they close the account, remove charges, and furnish corrected information to the bureaus. Get everything in writing — confirmation numbers, representative names, and follow up by certified mail.

Step 3: Send a Debt Validation Letter if Collectors Call

If a debt collector calls about a fraudulent account, send a debt validation letter within 30 days demanding they prove the debt is yours. Under the Fair Debt Collection Practices Act (FDCPA), they must stop collection until they can validate — and if the account is fraudulent, they can't. Use our free debt validation letter generator to create one instantly.

FTC Identity Theft Report: What It Unlocks

Your FTC Identity Theft Report is not just a complaint — it's a legal instrument. Under federal law (15 U.S.C. 1681c-2), an identity theft report gives you the right to:

• Block fraudulent information from your credit reports — bureaus must block it within four business days of receiving your report
• Stop businesses from reporting fraudulent debts — creditors cannot send fraudulent accounts to collections once they receive your FTC report
• Obtain copies of records related to the fraudulent accounts — you can request transaction records from the businesses that were defrauded
• Place an extended seven-year fraud alert — only available to confirmed identity theft victims with an FTC report on file

Filing at IdentityTheft.gov takes about 10 minutes, generates a personalized recovery plan, and produces a printable identity theft report you can attach to every dispute, police report, and creditor letter.

Tax Identity Theft: Someone Filed Taxes in Your Name

Tax identity theft happens when a thief uses your Social Security number to file a fraudulent tax return and claim a refund before you do. You typically find out when your own legitimate tax return is rejected by the IRS as a duplicate — or when you receive an unexpected IRS notice.

Tax identity theft cases can take one to two years for the IRS to fully resolve, but your rightful refund will eventually be issued once the investigation concludes. Keep documentation of every communication. The IRS will not penalize you for a fraudulent return filed under your name.

Medical Identity Theft: Someone Used Your Insurance

Medical identity theft occurs when a thief uses your name and insurance information to receive healthcare, prescription drugs, or medical equipment. It's one of the most dangerous forms of identity theft because it can corrupt your medical records with false diagnoses, medications, or procedures — potentially affecting your future care.

How to Detect It

• Bills from doctors, hospitals, or clinics you've never visited
• Explanation of Benefits (EOB) statements from your insurer for services you didn't receive
• Your health insurer says you've reached your annual benefit limit even though you haven't used your insurance
• A debt collector contacts you about a medical bill you don't recognize
• Your insurance application is denied due to conditions you don't have

What to Do

• Request a copy of your medical records from any provider named in the fraudulent bills and identify incorrect entries — HIPAA gives you this right.
• File a complaint with your health insurer's fraud department and request an accounting of all disclosures of your medical information.
• Ask each provider to correct or annotate fraudulent entries in your medical record.
• File an FTC identity theft report and dispute fraudulent medical debts on your credit report.
• Contact your state insurance commissioner if the insurer is unresponsive.

Synthetic Identity Fraud: A Harder-to-Detect Threat

Synthetic identity fraud is different from traditional identity theft. Instead of fully stealing your identity, criminals combine your real Social Security number with a fake name, address, and date of birth to create a fictional identity. Because the name doesn't match yours, you may never get collection calls or notices — the fraudulent file appears to be a completely different person.

This is particularly common with children's SSNs (which go unused for years) and with SSNs of elderly individuals who rarely apply for credit. Many victims don't discover it until they apply for a loan or a job and something doesn't match.

How to Detect Synthetic Identity Fraud

• You are denied a job or benefit because your SSN is associated with another person's name in government databases.
• The Social Security Administration's earnings record shows income you didn't earn — check at ssa.gov/myaccount.
• IRS notices about income associated with your SSN that you didn't report.
• A credit bureau has a file associated with your SSN but attached to a different name.

If you suspect synthetic fraud, contact the Social Security Administration's Office of Inspector General and file an FTC report. Request that all three bureaus search for any file associated with your SSN, regardless of the name attached to it.

How Long Does Recovery Take? A Realistic Timeline

There is no single answer — recovery depends on the scope of the theft, how quickly you acted, and how cooperative creditors and bureaus are. Here is a realistic timeline for most victims:

Preventing Future Identity Theft

Once you've recovered, these steps dramatically reduce your risk of it happening again:

Keep Your Credit Frozen Permanently

After recovery, leave your credit frozen at all three bureaus as a permanent state. Unfreeze temporarily only when you need to apply for credit, then refreeze immediately. This is the strongest protection available. See: How to Freeze Your Credit.

Use Credit Monitoring

Free monitoring is available through many credit cards and services like Credit Karma. Paid services add dark web monitoring, Social Security number alerts, and real-time notifications. Check your full reports at AnnualCreditReport.com at least twice per year even with automatic monitoring active.

Protect Your Social Security Number

• Never carry your Social Security card in your wallet.
• Don't provide your SSN unless it is legally required — ask why it's needed and what it will be used for.
• Shred all documents containing your SSN before discarding them.
• Use a locked mailbox or P.O. box if mail theft is a risk in your area.

Guard Against Phishing and Data Breaches

• Use unique, strong passwords for every financial account — use a password manager to keep track of them.
• Enable two-factor authentication on every account that supports it.
• Never click links in unexpected emails or texts about your accounts — go directly to the official website instead.
• Check HaveIBeenPwned.com periodically to see if your email has appeared in known data breaches.

File Your Taxes Early Every Year

File your tax return as early as possible each year. The IRS accepts only one return per SSN, so filing first eliminates the window for tax identity theft. If you've been a tax fraud victim previously, request an IRS Identity Protection PIN (IP PIN) — this adds a required six-digit code to every future filing under your SSN.

Frequently Asked Questions