What to Do Immediately If Your Identity Is Stolen
Your card gets declined on a random Tuesday, and by Friday there are three new credit cards “you” supposedly opened. That’s identity theft, and waiting a week to deal with it can cost you thousands and years of credit headaches. The fastest way to stop the damage is to lock things down, create a paper trail, and then work through cleanup in a specific order.
If you’re asking “what do I do right now?”, here’s the short version:
- Document what you’re seeing (screenshots, letters, emails, texts).
- Shut off the thief’s access (freeze credit, lock cards, change logins).
- Create official records (FTC + police reports).
- Then clean up your credit reports and accounts.
The rest of this guide walks through those steps with exact actions and wording you can actually use on the phone and in letters.
Spotting Identity Theft Early
The earlier you catch identity theft, the cheaper and less painful it is to fix. The problem is that most of the warning signs look like minor annoyances at first.
Red flags that usually mean more than “a glitch”:
- Charges or accounts you don’t recognize on your credit report or bank statements
- A loan or credit card denial when your credit has always been solid
- Mail for accounts you never opened, or bills from companies you don’t use
- Collection calls about debts that clearly aren’t yours
- IRS letters about tax returns or wages you don’t recognize
- A sudden, unexplained drop in your credit score
If you’re even 30% suspicious, treat it like real identity theft until you prove otherwise. It’s easier to undo a credit freeze than to untangle six fraudulent accounts.
A simple safeguard that saves a lot of drama: set up free alerts with the major bureaus (Equifax, Experian, TransUnion) and your main bank/credit card apps so any new account, big purchase, or address change triggers a notification.
Lock Down and Report the Theft
Once you suspect your identity’s been used, the goal is to stop new damage first, then document what already happened. Don’t worry about being “overly dramatic” with companies; they see this all the time.
1. Freeze Your Credit (This Comes First)
A credit freeze blocks new creditors from pulling your credit file, which makes it very hard for someone to open new loans or cards in your name.
Contact each bureau directly and request a credit freeze:
- Equifax: 1-800-349-9960 | equifax.com
- Experian: 1-888-397-3742 | experian.com
- TransUnion: 1-888-909-8872 | transunion.com
What to say when you call or submit online:
“I believe I’m a victim of identity theft and I want to place a security freeze on my credit file. Please confirm when the freeze is active and how I can lift it temporarily when I apply for credit.”
Freezes are free under federal law. You’ll get a PIN or password for each bureau—store those like you’d store your passport.
2. File an FTC Identity Theft Report
This is the document that makes creditors and bureaus take you seriously. It’s also something you can refer to instead of retelling your story 20 times.
Go to IdentityTheft.gov and follow the prompts. At the end, you’ll get:
- An official Identity Theft Report
- A customized recovery plan and sample letters
Save the report as a PDF, print a copy, and keep the confirmation number handy. You’ll attach this to most of your disputes.
3. File a Local Police Report
Is a police report always required? Not always. But it helps in two situations:
- A creditor or collector refuses to remove a fraudulent account
- The thief is someone you know (ex-partner, roommate, relative, coworker)
Call your local non-emergency line and ask how they handle identity theft reports. Bring:
- Your FTC Identity Theft Report
- Government ID and proof of address
- Printouts or screenshots of suspicious accounts or letters
Ask for a copy of the report and the report number. Keep it with the FTC report.
Clean Up Your Accounts and Credit Reports
Once the fire is contained with freezes and reports, you move into cleanup mode. This part isn’t glamorous, but it’s how you get your credit and sanity back.
4. Call Banks, Card Issuers, and Any Affected Companies
Start with the accounts where you see fraud, then move outward.
- Lock or close compromised debit and credit cards
- Ask for new account numbers and cards (not just a new card on the same number)
- Review recent transactions line by line and flag any you don’t recognize
- Turn on alerts for every purchase, transfer, and login
Sample wording when you call:
“I’m reporting suspected identity theft on this account. These charges aren’t mine. I’ve filed an FTC Identity Theft Report and a police report. I need this account secured, the unauthorized charges removed, and documentation of your fraud investigation.”
After phone calls, send a short follow-up letter or secure message confirming what they agreed to. You’re building a record in case something falls through the cracks.
5. Pull Your Credit Reports and Flag the Fraud
Next, you need to see the full damage, not just the one card or loan where you noticed trouble.
Go to AnnualCreditReport.com and download your Experian, Equifax, and TransUnion reports. (After confirmed identity theft, you’re allowed extra free copies.)
On each report, mark these items:
- Accounts you didn’t open
- Hard inquiries you don’t recognize
- Addresses, phone numbers, or employers that aren’t yours
- Late payments or collections resulting from the fraud
Then dispute them with each bureau that’s reporting the error. You can do this online, by mail, or both. Mailed disputes are slower but create a cleaner paper trail.
What to include in a mailed dispute:
- A short letter clearly identifying the items you’re disputing
- Copies (not originals) of your FTC report and police report
- Copy of your ID and a utility bill or bank statement showing your address
Under the Fair Credit Reporting Act, bureaus generally have 30 days to investigate and respond. Mark that date on your calendar and follow up if you don’t hear back.
6. Use the Law to Your Advantage
You don’t have to be a lawyer to use the protections that already exist. A few that matter most in identity theft cases:
- FCRA (Fair Credit Reporting Act) – Gives you the right to:
- Get free credit reports after you place a fraud alert or freeze
- Dispute information and have it removed if it can’t be verified
- ECOA (Equal Credit Opportunity Act) – Lets you request copies of any credit applications submitted in your name, which can show forged signatures or wrong info.
- Red Flags Rule – Requires banks and many businesses to have programs to spot and respond to identity theft. Mentioning “Red Flags Rule” on calls signals you know they have obligations here.
When you write or call creditors, a simple sentence like this helps:
“I’m disputing these items under the Fair Credit Reporting Act as the result of documented identity theft. Please remove or block the fraudulent information and send written confirmation.”
Prevent Repeat Fraud and Rebuild Your Credit
Once you’ve put out the immediate fire, your focus shifts to two things: making yourself a harder target going forward, and repairing any hit your credit took.
7. Tighten Security Going Forward
A lot of identity theft starts with one weak point—a reused password, a phishing email, mail stolen from an unlocked box. You can’t eliminate all risk, but you can make yourself much harder to impersonate.
- Turn on multi-factor authentication (MFA) for banks, email, and any account with payment info
- Use a password manager so every account has a unique, strong password
- Shred or securely dispose of anything with your SSN, account numbers, or full date of birth
- Opt out of pre-approved credit offers at OptOutPrescreen.com so fewer “easy” offers land in your mailbox
- Be skeptical of texts and emails asking you to “verify” info—go directly to the company’s website instead of clicking links
8. Watch for Tax and Medical Identity Theft
Not all identity theft shows up on a credit report. Two annoying but serious flavors:
- Tax identity theft – Someone files a tax return in your name for a refund.
- Medical identity theft – Someone uses your info to get treatment or prescriptions.
If you get odd IRS letters or your e-filed return is rejected as “already filed,” go to the IRS’s identity theft resources at irs.gov/identity-theft and follow their process. For medical issues, request an accounting of benefits and medical records from your insurer or provider and flag anything that’s not yours.
9. Rebuild Your Credit (Without Getting Scammed Again)
Once the fraudulent accounts and late payments are removed, your credit might still look a bit rough, especially if you had to close long-standing cards.
To rebuild:
- Confirm that all fraudulent items are actually gone from all three credit reports
- Use a secured credit card or a credit-builder loan with a bank or credit union you trust
- Keep your credit utilization under about 30% of your limit (10–20% is even better)
- Pay every bill on time—set up autopay or reminders if you need to
If the damage was severe or you’re juggling other debt at the same time, it’s worth talking to a nonprofit credit counseling agency (look for NFCC-affiliated organizations, not random “fix your credit fast” ads). They can help you prioritize and avoid high-fee, low-value “credit repair” outfits. For more guidance on managing debt during recovery, see Debt freedom roadmap: from overwhelmed to in control.
Identity Theft Recovery at a Glance
| Action | Who Does It | When |
|---|---|---|
| Freeze credit with all three bureaus | You | Same day you suspect theft |
| File FTC Identity Theft Report | You | Same day or next day |
| File local police report | You + Police | Within a week |
| Lock/close affected bank and card accounts | You + Banks/Creditors | Immediately |
| Dispute fraudulent items on credit reports | You + Credit Bureaus | Within a few days |
| Monitor reports and statements | You | Monthly for at least 12 months |
Disclaimer: This article is for general information only and isn’t financial, legal, or tax advice. Identity theft laws and options vary by state and change over time. Talk to a qualified professional or legal aid organization for advice on your specific situation.
