What to Do If You Are a Victim of Identity Theft

Everyone · How-to · Updated October 1, 2026 · LearnLife Editorial

What Do You Need Before Starting to Address Identity Theft?

Before beginning to resolve identity theft, compile essential materials to streamline communication with banks, credit bureaus, and law enforcement. Start with valid photo identification such as a driver’s license or passport to prove your identity. Have your Social Security number accessible, since it is often central to identity theft. Collect recent bank and credit card statements highlighting suspicious transactions or unfamiliar accounts. Secure copies of any credit reports you have obtained recently or plan to request. Also gather any communication from companies or creditors about fraudulent activity.

Organize these documents in a folder or digitally with password protection for ease of access. Prepare a list of all your financial accounts, including bank, credit cards, loans, and utilities, noting account numbers and contact information. Be ready to provide detailed descriptions such as dates, amounts, and merchant names related to suspicious charges. If you have already filed a police report or submitted an identity theft report to the Federal Trade Commission, keep those copies handy.

Having this information at hand before you call or write agencies saves time and avoids repeated requests. For example, when disputing a fraudulent charge with a credit card issuer, you can say exactly: “I am reporting an unauthorized $250 charge from April 10 at [Merchant]. I have already filed a police report under case number XYZ and filed a report with the FTC.” This preparedness makes your case more credible and helps speed up resolution.

What is Identity Theft and Why Does it Happen?

Identity theft means someone has stolen your personal information—like your Social Security number, credit card number, or bank account details—and used it without your permission. The thief might open credit accounts, take out loans, or make purchases in your name, leaving you with the bills and damaged credit. Sometimes identity theft is used to commit further crimes, such as tax fraud or employment fraud.

Criminals steal identities because personal data can be valuable and relatively easy to access. Common methods include phishing emails that trick you into revealing passwords, data breaches of companies where your information is stored, stealing mail or wallets, or even social engineering where a thief impersonates you to gain information. Sometimes identity theft happens through skimming devices on ATMs or gas pumps.

Understanding why identity theft happens helps you recognize warning signs and take action quickly. For example, if you suddenly receive bills for accounts you never opened or get calls about debts you don’t owe, these are red flags. Knowing that thieves often act fast after stealing information means your quick response can stop further damage.

What Are the Step-by-Step Actions to Take If Your Identity Is Stolen?

Here is a detailed, step-by-step plan to follow immediately if you discover you are a victim of identity theft, including the reasons for each action and sample wording you can use:

1. Place a Fraud Alert on Your Credit Reports Contact one of the three major credit bureaus—Equifax, Experian, or TransUnion—to request a fraud alert. This alert requires potential lenders to verify your identity before issuing credit. It lasts for one year but can be renewed. You only need to contact one bureau; they will notify the others. Example call script: “Hello, I believe I am a victim of identity theft. Please place a fraud alert on my credit report to prevent any new accounts from being opened without verification.”

1. Order and Review Your Credit Reports Thoroughly Obtain free copies of your credit reports from AnnualCreditReport.com. Review each report carefully for accounts you didn’t open, inquiries you didn’t authorize, or inaccurate information. Make notes of suspicious entries and dates. Tip: Download and save your reports as PDFs for easy reference.

1. Report the Identity Theft to the Federal Trade Commission Visit IdentityTheft.gov to file a report. This website guides you through a step-by-step recovery plan tailored to your situation and provides pre-written letters and forms to send to creditors and credit bureaus. Why: The FTC collects data to help law enforcement and provides you with important documentation.

1. File a Police Report with Your Local Law Enforcement Bring your FTC Identity Theft Report, personal identification, and evidence of fraud (credit reports, bank statements) to the police station. Obtain a copy of the police report for your records and to provide to creditors. Reason: Some companies require a police report to correct fraudulent accounts or refund money.

1. Contact Each Company Where Fraud Occurred Call the fraud or customer service department of each company involved. Tell them you are a victim of identity theft and request to close or freeze accounts with unauthorized activity. Ask them to send you a written confirmation of their actions. Example wording: “I recently discovered fraudulent charges on my account. Please close this account and remove all unauthorized transactions. I have filed a police report and an FTC report.”

1. Consider Placing a Credit Freeze on Your Reports A credit freeze restricts access to your credit report entirely, preventing any new credit from being opened until you lift the freeze. This is stronger than a fraud alert but requires you to unfreeze when applying for credit. How to do it: Contact each credit bureau individually via phone or website to request a credit freeze.

1. Secure Your Personal Information and Change Passwords Immediately change passwords for all financial and important online accounts, using strong, unique passwords. Enable two-factor authentication where possible. Shred sensitive documents before disposal, avoid sharing personal information online or by phone unless verified, and monitor mail carefully. Example password update: “Change password to a mix of uppercase, lowercase, numbers, and special characters, such as ‘T3x@5#B9w!’”

How Can You Tell If Your Efforts to Fix Identity Theft Worked?

After following these steps, monitor your progress over weeks and months. Signs that your identity has been restored include:

• Credit reports show no new unauthorized accounts or inquiries. Disputed fraudulent accounts are marked as “closed,” “disputed,” or removed altogether.
• Creditors and banks send you confirmation letters stating that fraudulent charges were removed and accounts are secured.
• You regain access to your accounts with new passwords and no further suspicious activity.
• You receive updated credit reports confirming corrections.
• You are no longer contacted by debt collectors about fraudulent debts.

To confirm, request a free credit report about 30 days after disputing errors to verify corrections. Continue to check reports every three months for at least a year, since some thieves take time to commit additional fraud.

What Should You Do If Identity Theft Recovery Goes Wrong?

Sometimes resolving identity theft is difficult. If companies refuse to remove fraudulent charges, credit bureaus don’t correct errors, or you keep seeing suspicious activity:

• Document all communications carefully, including dates, names, and summaries of conversations.
• Contact a consumer protection attorney or legal aid to understand your rights and get help drafting demand letters.
• File complaints with your state Attorney General’s office or consumer protection agencies. Many states have identity theft resources.
• Reach out to nonprofit credit counseling services for expert advice and support.
• Report the problem again to the FTC, updating your Identity Theft Report with new information.
• If tax fraud is involved, notify the IRS immediately using IRS Identity Theft Central resources.
• If Social Security number misuse is suspected, contact the SSA for guidance.

Persistence is essential. Keep copies of all reports and correspondence. If you feel overwhelmed or uncertain, ask a trusted family member or advocate for help managing calls and paperwork.

How Can These Steps Be Adapted for Different Audiences?

Identity theft recovery steps apply broadly but can be customized:

• Seniors: May need help from a trusted relative or legal guardian to make calls and track paperwork. Simplify tasks by writing down exact questions and information needed before calls. Use larger print or audio tools if vision or hearing is limited.
• Young Adults: Focus on education about prevention and early detection. Encourage setting up fraud alerts proactively and monitoring credit regularly. Teach safe online habits for passwords and personal data sharing.
• People with Limited Internet Access: Use phone calls to credit bureaus, local bank branches, or law enforcement. Request mail copies of reports and forms if online access is difficult.
• Non-English Speakers: Seek help from community organizations, translators, or multilingual hotlines when contacting agencies. Use translated materials provided by the FTC.
• People with Disabilities: Request accommodations such as accessible document formats, assistance with communication, or help from advocacy groups.

These adjustments ensure everyone can protect their identity and recover effectively if theft occurs.

Frequently asked questions

How soon should I report identity theft after noticing suspicious activity?

Report it immediately—within days if possible—to minimize damage. Early action prevents thieves from opening more accounts or causing additional harm.

Can I sue someone who stole my identity?

You may be able to pursue legal action if the thief is identified, but often identity thieves remain anonymous. Focus first on recovery and prevention; consult a lawyer for legal options.

Will identity theft affect my taxes?

It can. Thieves might file false tax returns to claim refunds. If this happens, notify the IRS promptly and follow their identity theft procedures.

Does identity theft only involve financial fraud?

No. It can include using your identity for medical fraud, employment fraud, or criminal activity. Each type requires different reporting and recovery steps.

How often should I check my credit reports to prevent identity theft?

Check at least once a year for free at AnnualCreditReport.com, but consider quarterly checks if you are concerned about fraud or have been a victim before.

What is a recovery plan from the FTC?

After reporting identity theft at IdentityTheft.gov, the FTC provides a personalized step-by-step recovery plan with forms, letters, and instructions tailored to your case.