What to Do If You're a Victim of Identity Theft

If you find an account you never opened, a hard inquiry you didn't authorize, or other signs someone has used your identity, acting quickly limits the damage. Here's the order that generally works best.

1. Report it at IdentityTheft.gov

The Federal Trade Commission's IdentityTheft.gov walks you through reporting the theft and generates a personal recovery plan and an official FTC Identity Theft Report — a document many creditors and credit bureaus will ask for.

2. Place a fraud alert or credit freeze

A fraud alert (free, renewable, lasts one year) tells lenders to take extra steps to verify your identity before opening new credit. A credit freeze (also free) blocks new accounts from being opened in your name at all until you lift it. You only need to contact one bureau to place a fraud alert — it must notify the other two — but a freeze has to be requested from each bureau separately (Equifax, Experian, TransUnion).

3. Review all three credit reports

Pull your reports from AnnualCreditReport.com and note every account or inquiry you don't recognize. You'll need this list for the next step.

4. Dispute the fraudulent items

Dispute each fraudulent account directly with the credit reporting company and the business that reported it, including a copy of your FTC Identity Theft Report. Under the FCRA, information resulting from identity theft must be blocked once you provide that report.

5. Keep records of everything

Save every letter, confirmation number, and reference ID. Identity theft recovery often takes multiple rounds of correspondence, and a clear paper trail is your strongest tool if an item resurfaces later.

This article is educational and general in nature — it isn't legal advice about your specific situation. If your identity theft involves a crime in progress or immediate financial risk, also contact your bank and local law enforcement.