What to Do If Your Identity Is Stolen: A Complete Recovery Guide

Discovering that someone has stolen your identity can feel overwhelming and scary. You might notice strange charges on your credit card, get bills for accounts you never opened, or receive calls about debts that aren't yours. Identity theft happens when someone uses your personal information (like your Social Security number, bank account, or credit card) without permission to commit fraud or other crimes.

Every year, millions of Americans fall victim to identity theft. The good news is that you can recover from it, and there are specific steps you can take right now to protect yourself and fix the damage. The faster you act, the better your chances of minimizing the harm to your finances and credit score.

This guide will walk you through everything you need to do after discovering identity theft. We'll explain each step in plain language and give you the exact actions to take. Whether you're dealing with credit card fraud, someone filing taxes in your name, or medical identity theft, these steps will help you get your life back on track.

Immediate Actions to Take Right Now

When you first realize someone has stolen your identity, time is critical. The actions you take in the first 24 to 48 hours can make a huge difference in limiting the damage. Don't panic, but do act quickly.

Place a Fraud Alert on Your Credit Reports

Your first step should be contacting one of the three major credit bureaus to place a fraud alert. The three bureaus are Equifax, Experian, and TransUnion. You only need to call one of them because they're required to notify the other two.

A fraud alert is free and lasts for one year. It tells businesses that they need to verify your identity before opening new accounts in your name. Here's how to do it:

• Equifax: Call 1-888-766-0008 or visit their website
• Experian: Call 1-888-397-3742 or visit their website
• TransUnion: Call 1-800-680-7289 or visit their website

When you place the alert, you'll receive confirmation and free credit reports from all three bureaus. Review these reports carefully for any accounts or activity you don't recognize.

Contact Your Banks and Credit Card Companies

Call the fraud department at every bank, credit union, and credit card company where you have accounts. Tell them you're a victim of identity theft. They will:

• Close or freeze compromised accounts
• Issue new account numbers and cards
• Remove fraudulent charges from your accounts
• Set up extra security measures on your accounts

Have your account numbers ready when you call, and ask for confirmation numbers or reference numbers for each report you make. Write down the name of every person you speak with and the date and time of your calls.

Change Your Passwords and PINs

If you suspect someone has accessed your online accounts, change all your passwords immediately. This includes:

• Email accounts (start here, as these often control password resets for other accounts)
• Banking and financial accounts
• Shopping websites like Amazon
• Social media accounts
• Any account containing personal or financial information

Create strong, unique passwords for each account. A strong password includes uppercase and lowercase letters, numbers, and symbols, and is at least 12 characters long. Consider using a password manager to keep track of them all.

File Official Reports and Documentation

Creating an official paper trail is essential for proving you're a victim of identity theft. These documents will help you dispute fraudulent charges and accounts.

Report the Theft to the Federal Trade Commission

The FTC is the federal agency that handles identity theft cases. Visit IdentityTheft.gov or call 1-877-438-4338 to file a report. The website will walk you through the process step by step.

Your FTC report creates an official Identity Theft Report, which gives you specific legal rights, including:

• Extended fraud alerts on your credit reports (lasting seven years instead of one)
• The right to get fraudulent information removed from your credit reports
• The right to stop debt collectors from contacting you about fraudulent debts
• Protection from being held responsible for fraudulent charges

The FTC will give you a personalized recovery plan based on your specific situation. Print this plan and follow it carefully. Keep a copy of your FTC Identity Theft Report for your records.

File a Police Report

Go to your local police department and file an identity theft report. Bring:

• A copy of your FTC Identity Theft Report
• A government-issued photo ID
• Proof of your address (utility bill, lease, etc.)
• Any evidence of the identity theft (fraudulent bills, credit reports showing unauthorized accounts, etc.)

Some police departments are more familiar with identity theft than others. If an officer seems uncertain about taking your report, politely explain that you need it to dispute fraudulent accounts with creditors. The police report, combined with your FTC report, creates your official Identity Theft Report.

Get several copies of the police report. You'll need to send copies to banks, creditors, and credit bureaus as you work to clear your name.

Document Everything

Create a dedicated folder (physical or digital) for all identity theft documents. Keep detailed records of:

• All phone calls you make (date, time, person's name, what was discussed)
• Letters you send and receive
• Emails related to the theft
• Account statements showing fraudulent activity
• Copies of all reports you file

Take photos of any physical evidence, like mail you received for fraudulent accounts. This documentation will be invaluable as you work through the recovery process.

Protect Your Credit and Prevent Future Fraud

Once you've taken the immediate steps, you need to protect your credit and make it harder for thieves to strike again.

Consider a Credit Freeze

A credit freeze (also called a security freeze) is stronger than a fraud alert. It completely locks your credit reports so no one can access them to open new accounts. Even you can't open new credit accounts without temporarily lifting the freeze.

Freezes are free and last until you remove them. You'll need to contact all three credit bureaus separately:

• Create online accounts with Equifax, Experian, and TransUnion
• Request a credit freeze through each bureau's website or by phone
• Save the PIN or password each bureau gives you (you'll need it to lift the freeze)

A credit freeze is the most effective way to prevent someone from opening new accounts in your name. The small inconvenience of lifting the freeze when you need to apply for credit is worth the protection it provides.

Monitor Your Credit Reports Regularly

You're entitled to free credit reports from all three bureaus once per year at AnnualCreditReport.com. As an identity theft victim, you can get additional free reports. Check them every few months for at least a year after the theft.

Look for:

• Accounts you didn't open
• Credit inquiries you didn't authorize
• Incorrect personal information
• Addresses where you've never lived
• Employers you've never worked for

If you find errors, dispute them immediately with the credit bureau. Use your Identity Theft Report to support your dispute.

Sign Up for Credit Monitoring

Many banks and credit card companies offer free credit monitoring services. These services alert you whenever there's activity on your credit reports, like new accounts or credit inquiries.

Some identity theft victims choose to pay for more comprehensive monitoring services that include:

• Monitoring of all three credit bureaus
• Dark web monitoring for your personal information
• Identity theft insurance
• Recovery assistance from specialists

While not necessary for everyone, these services can provide peace of mind, especially in the months following identity theft.

Close Fraudulent Accounts and Dispute Charges

Now comes the detailed work of cleaning up the mess the identity thief created.

Contact Companies Where Fraudulent Accounts Were Opened

For each fraudulent account, you need to contact the company directly. This might include:

• Credit card companies
• Banks and loan companies
• Utility companies
• Phone and cable companies
• Retailers
• Healthcare providers

Use the FTC's sample letters at IdentityTheft.gov to write to each company. In your letter:

• Explain that you're a victim of identity theft
• State that you didn't open the account or make the charges
• Include copies (never originals) of your Identity Theft Report
• Request that the account be closed and the charges removed
• Ask for written confirmation that the fraudulent debt has been discharged

Send letters by certified mail with return receipt requested. This proves the company received your letter.

Dispute Fraudulent Information with Credit Bureaus

If fraudulent accounts appear on your credit reports, dispute them with each credit bureau that lists them. You can dispute online, by phone, or by mail, but mail gives you the best documentation.

In your dispute letter:

• Identify each fraudulent item on the report
• Explain that it resulted from identity theft
• Include a copy of your Identity Theft Report
• Request that the information be removed

The credit bureau must investigate within 30 days and remove information they can't verify. If they don't remove the fraudulent information, send a follow-up letter with additional documentation.

Deal with Debt Collectors

If debt collectors contact you about fraudulent debts, don't ignore them. Send them a letter within 30 days stating:

• You're a victim of identity theft
• The debt is fraudulent
• You're attaching a copy of your Identity Theft Report
• They must stop collection activities on this debt

Debt collectors are legally required to stop collection efforts once you provide an Identity Theft Report. If they continue, file a complaint with the FTC and your state attorney general's office.

Handle Special Types of Identity Theft

Different types of identity theft require additional specific actions.

Tax Identity Theft

If someone files a tax return using your Social Security number, you'll usually find out when you try to file your legitimate return and it's rejected. Immediately:

• Complete IRS Form 14039 (Identity Theft Affidavit)
• Mail or fax it to the IRS following the instructions on the form
• Continue to file your taxes, even if you must file by paper
• Respond to all IRS notices promptly

The IRS will investigate and may issue you an Identity Protection PIN for future tax filings. This six-digit number proves your identity when filing returns.

Medical Identity Theft

If someone uses your health insurance to get medical care, it can result in incorrect information in your medical records and insurance problems. Take these steps:

• Contact your health insurance company immediately
• Request a list of all benefits paid in your name
• Review the list for services you didn't receive
• Request corrections to your medical records
• File a complaint with your state's insurance commissioner if needed

Incorrect information in medical records can be dangerous if it affects your treatment. Work with your healthcare providers to ensure your records are accurate.

Social Security Number Misuse

If someone is using your Social Security number for employment or benefits, contact the Social Security Administration at 1-800-772-1213. You may also need to:

• Contact the IRS if the misuse affects your taxes
• Report it to your state labor department if someone is collecting unemployment benefits in your name
• Consider requesting a new Social Security number in extreme cases (though this is rare and can create its own complications)

Summary: Your Recovery Roadmap

Recovering from identity theft takes time and patience, but you can get through it. Remember these key points:

Act immediately when you discover the theft. Place fraud alerts, contact your financial institutions, and change your passwords right away.

Create an official record by filing reports with the FTC and local police. These documents are your proof that you're a victim and give you important legal rights.

Protect your future with credit freezes, regular credit monitoring, and strong security practices. Prevention is easier than recovery.

Clean up systematically by contacting every company involved, disputing fraudulent items on your credit reports, and keeping detailed records of all your actions.

Stay vigilant for at least a year after the theft. Identity thieves sometimes hold onto stolen information and use it later.

Most people fully recover from identity theft within a few months to a year. While the process can be frustrating, taking these steps will help you reclaim your identity and financial security. Don't hesitate to ask for help from family members, friends, or professional identity theft recovery services if you need support. You're not alone, and you will get through this.