Discovering identity theft is stressful. You might spot an unfamiliar account on your credit report, receive a bill for something you did not buy, get a denial for credit you did not expect or receive a notice that a tax return was already filed in your name. Acting quickly and methodically limits the damage.
This guide outlines common recovery steps in the United States. It is general information, not legal advice. For your specific situation, consult official resources such as the Federal Trade Commission’s IdentityTheft.gov and, if needed, a qualified professional.
Step 1: Contact the Companies Involved
Call the fraud department of each company where fraud occurred, such as a bank, card issuer or lender. Explain that someone stole your identity, ask them to close or freeze fraudulent accounts and change logins and PINs on your legitimate accounts. Write down who you spoke with and when.
Step 2: Place a Fraud Alert
Contact one of the three nationwide credit bureaus to place a fraud alert. That bureau must tell the other two. A fraud alert asks lenders to take extra steps to verify your identity. Identity theft victims may qualify for an extended fraud alert.
Step 3: Freeze Your Credit
A freeze offers stronger protection against new accounts. Freeze at all three bureaus. See how to freeze your credit.
Step 4: Report to the FTC
The FTC’s IdentityTheft.gov lets you report identity theft and get a personalized recovery plan. The report can serve as an Identity Theft Report, which helps when disputing fraudulent accounts with businesses and credit bureaus.
Step 5: Consider a Police Report
Some situations call for a police report, such as when you know the thief or a creditor requires one. Bring your FTC report and documentation.
Step 6: Review Your Credit Reports
Get your credit reports from all three bureaus through the official free annual report program. Look for accounts, inquiries and addresses you do not recognize. Dispute errors with the bureaus.
Step 7: Secure Your Accounts
- Change passwords on email, banking and other key accounts
- Use a password manager to create unique passwords. See the password manager guide.
- Turn on two-factor authentication. See two-factor authentication setup.
- Check email forwarding rules and recovery options for changes you did not make
- Ask your mobile carrier about account protections against SIM swapping
Step 8: Address Specific Types of Fraud
| Type | Where to start |
|---|---|
| Tax identity theft | The IRS |
| Medical identity theft | Your health insurer and providers |
| Government benefits fraud | The relevant agency |
| Mail fraud or address change | The postal service |
| Child identity theft | The credit bureaus |
Step 9: Keep Records
Keep a log of calls, letters, dates and reference numbers. Save copies of reports and correspondence. Send important letters in a trackable way.
Step 10: Monitor Going Forward
- Review bank and card statements regularly
- Set up account alerts
- Check credit reports periodically
- Watch for unexpected mail or bills
Beware of Recovery Scams
Scammers target identity theft victims, promising to fix problems for a fee or pretending to be government agencies. Government agencies generally do not call demanding payment. See phishing red flags.
Emotional Toll
Identity theft can be exhausting. Break the process into steps, keep notes and ask for help from trusted friends or family.
Common Mistakes
- Waiting to act
- Not keeping records
- Securing financial accounts but not email
- Trusting unsolicited help offers
A Note on Documentation
Recovery often involves proving who you are and showing which accounts or charges are not yours. Keep copies of your ID, recent bills and statements in a secure place so you can provide them quickly. When disputing debts, send written disputes and keep copies. A simple folder, physical or digital, with dated notes saves time.
A Note on Debt Collectors
If a debt collector contacts you about a debt you did not incur, tell them in writing that you are an identity theft victim and the debt is not yours. Include a copy of your FTC report. Federal law gives you rights in disputing debts, and official consumer protection resources explain them.
Questions to Ask Companies
- Can you close or freeze the fraudulent account?
- What documents do you need from me?
- Can you send written confirmation the debt is not mine?
- Can you flag my account for extra verification?
Starting Small
Break recovery into one call or task per day. Progress steadily rather than trying to fix everything at once.
A Note on Children and Deceased Relatives
Identity thieves sometimes target children’s and deceased relatives’ information because no one is watching their credit. Parents can request freezes for minors. Families settling an estate can notify the credit bureaus and relevant agencies of a death, following each organization’s process, to help prevent misuse.
Final Recovery Checklist
- Affected companies contacted
- Fraud alert placed
- Credit frozen at all three bureaus
- FTC report filed
- Credit reports reviewed and errors disputed
- Email and key accounts secured
- Records organized
A Note on Getting Help
Legal aid organizations and consumer protection offices may help with complex cases. Identity theft resources from the FTC list next steps for many specific situations.
Frequently Asked Questions
What should I do first?
Contact companies where fraud occurred and place a fraud alert or freeze.
Do I need a police report?
Not always; the FTC report is often sufficient, but some situations require one.
Will identity theft affect my credit score?
Fraudulent accounts can, which is why disputing them matters.
How long does recovery take?
It varies widely.
Should I buy identity theft protection?
Some services help with monitoring and recovery. Many core steps are free.
The Bottom Line
Act quickly: contact affected companies, place a fraud alert and freeze, report to the FTC, review credit reports, secure email and key accounts and keep thorough records.
Editorial note: Lock and Login is independent and reader-supported. This guide is based on research into manufacturer documentation, published specifications and widely accepted best practices; we have not been paid to mention any product. If we add affiliate links in the future, they will be clearly disclosed per our Affiliate Disclosure.
