Recognizing the Signs of Identity Theft

Quick answer

• Regularly review your bank and credit card statements for unauthorized transactions.
• Monitor your credit reports for new accounts or inquiries you didn’t make.
• Be wary of unexpected bills or collection notices for debts you don’t owe.
• Watch for mail that stops arriving or new accounts opened in your name.
• Notice unusual activity on your online accounts, like changed passwords or login alerts.
• If you suspect identity theft, act immediately by contacting financial institutions and relevant agencies.

Who this is for

• Individuals concerned about protecting their personal financial information.
• Consumers who want to understand the common indicators of identity theft.
• Anyone who has experienced a data breach or lost sensitive documents.

What to check first (before you act)

Goal and timeline

What are you trying to achieve by monitoring for identity theft? Is it general peace of mind, or are you reacting to a specific concern like a data breach notification? Knowing your goal will help you prioritize your efforts. Your timeline might be immediate if you suspect an incident, or ongoing for regular vigilance.

Current cash flow

Understanding your normal spending patterns is crucial. If you see a charge that doesn’t fit your usual budget or habits, it’s a red flag. This doesn’t mean you need to be a budgeting expert, but you should have a general idea of what you spend money on each month.

Emergency fund or safety buffer

While not directly related to detecting identity theft, having a financial cushion can significantly mitigate the damage if theft occurs. If unauthorized transactions drain your accounts, an emergency fund can prevent immediate financial crisis.

Debt and interest rates

Familiarize yourself with any outstanding debts you have. If you start receiving bills for accounts you never opened, or if your existing debt amounts suddenly change without explanation, it’s a strong indicator of fraudulent activity. High interest rates on debt can make the impact of identity theft even more severe if not addressed promptly.

Credit impact

Identity theft can severely damage your credit score. Any fraudulent accounts opened in your name can lead to missed payments and defaults, which will appear on your credit report. Recognizing signs of theft early can help you dispute fraudulent activity before it has a lasting negative impact on your creditworthiness.

Step-by-step (simple workflow)

Step 1: Review Bank and Credit Card Statements

• What to do: Regularly examine every transaction on your checking accounts, savings accounts, and credit cards. Do this at least once a week, or more often if you have high transaction volume.
• What “good” looks like: All transactions are familiar and match your spending.
• A common mistake and how to avoid it: Ignoring small, suspicious charges. Avoid this by scrutinizing every single line item, no matter how small. A thief might test an account with a tiny charge before attempting larger ones.

Step 2: Monitor Your Credit Reports

• What to do: Obtain your free credit reports from Equifax, Experian, and TransUnion at least annually. You can get them from AnnualCreditReport.com.
• What “good” looks like: Your reports accurately reflect only accounts and credit inquiries that you have opened or authorized.
• A common mistake and how to avoid it: Waiting too long between checks. Avoid this by scheduling annual reviews and setting reminders for yourself. Some people even stagger their checks (e.g., check one bureau every four months).

Step 3: Watch for Unexplained Mail or Lack of Mail

• What to do: Be alert if mail stops arriving (e.g., bills, bank statements) or if you receive mail for new accounts or services you didn’t sign up for.
• What “good” looks like: You receive all your expected mail, and no unsolicited mail for new accounts appears.
• A common mistake and how to avoid it: Assuming a missed bill is just an oversight. Avoid this by contacting the company directly if a regular bill doesn’t arrive. A thief may have changed your mailing address.

Step 4: Check for Unexpected Bills or Collection Notices

• What to do: Pay attention to any bills or collection letters that arrive for debts you don’t recognize.
• What “good” looks like: You only receive notices for debts you know you’ve incurred.
• A common mistake and how to avoid it: Discarding them as junk mail. Avoid this by opening all mail and carefully reading its contents, especially anything from collection agencies.

Step 5: Monitor Online Account Activity

• What to do: Log in to your online banking, investment, and other important accounts regularly. Look for unusual login alerts, changed passwords, or modified personal information.
• What “good” looks like: Your account details and activity logs show only your own actions.
• A common mistake and how to avoid it: Using weak or reused passwords. Avoid this by using strong, unique passwords for each account and enabling two-factor authentication (2FA) whenever possible.

Step 6: Be Wary of Unsolicited Communications

• What to do: Be suspicious of unexpected phone calls, emails, or text messages asking for personal information, especially if they claim to be from your bank, a government agency, or a company you do business with.
• What “good” looks like: You only share sensitive information after initiating contact or verifying the sender’s identity through a trusted channel.
• A common mistake and how to avoid it: Clicking links or responding to suspicious messages. Avoid this by never clicking on links or downloading attachments from unknown sources. If you’re unsure, contact the company directly using a phone number from their official website or your statement.

Step 7: Check for Unexpected Tax Issues

• What to do: Be alert for any notices from the IRS or your state’s tax agency about income you don’t recognize or issues with tax returns filed in your name.
• What “good” looks like: Your tax filings are accurate and free of any fraudulent activity.
• A common mistake and how to avoid it: Not filing your taxes promptly. Avoid this by filing your taxes early. If a fraudulent return is filed first, it can complicate your legitimate filing process.

Step 8: Look for Unusual Activity on Business Accounts (if applicable)

• What to do: If you own a business, monitor all business accounts, including bank accounts, credit lines, and vendor accounts, for any unauthorized transactions or changes.
• What “good” looks like: All business financial activity is legitimate and authorized by you or your designated employees.
• A common mistake and how to avoid it: Delegating without oversight. Avoid this by implementing strong internal controls and regularly auditing financial records, even when employees are trustworthy.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Not reviewing statements regularly	Unauthorized transactions can go unnoticed for months, increasing the financial loss and making it harder to dispute.	Set a recurring reminder to review all financial statements (bank, credit card, investment) at least weekly.
Ignoring small, suspicious charges	A thief might test an account with small amounts before making larger fraudulent purchases. These small charges can accumulate and lead to significant losses.	Treat every unauthorized charge, no matter the amount, as a potential sign of identity theft and investigate immediately.
Failing to monitor credit reports	Fraudulent accounts or inquiries can negatively impact your credit score, making it difficult to get loans, rent an apartment, or even get a job, without you knowing why.	Obtain your free credit reports annually from AnnualCreditReport.com and review them thoroughly for any unfamiliar accounts or credit checks.
Not securing personal documents and devices	Sensitive information left unsecured can be easily accessed and used by identity thieves. This includes physical documents and digital devices.	Shred sensitive documents before discarding them. Use strong passwords and encryption on your devices, and be cautious about public Wi-Fi.
Clicking on suspicious links or attachments	Phishing attempts can lead to malware installation or direct you to fake websites designed to steal your login credentials, ultimately compromising your accounts.	Never click on links or download attachments from unknown or suspicious emails, texts, or social media messages. Verify the sender through a separate, trusted channel.
Using weak or reused passwords	If one account is compromised, thieves can use the same credentials to access all other accounts that share that password, leading to widespread account takeovers.	Use strong, unique passwords for every online account. Consider using a password manager to help generate and store them securely. Enable two-factor authentication (2FA) whenever available.
Not updating contact information with creditors	If an identity thief changes your contact information, you might not receive important notices about account activity or collection efforts, allowing the fraud to escalate.	Ensure your contact information is up-to-date with all financial institutions and service providers. Regularly check that your address and phone number are correct on your accounts.
Believing “it won’t happen to me”	Complacency can lead to a lack of vigilance, making you a more vulnerable target for sophisticated identity thieves.	Recognize that identity theft can happen to anyone. Stay informed about common scams and proactively implement security measures to protect yourself.
Not reporting suspected identity theft promptly	Delays in reporting can allow thieves to incur more debt, inflict more damage to your credit, and make it more difficult for you to resolve the fraudulent activity.	If you suspect identity theft, report it immediately to the affected financial institutions and consider filing a report with the Federal Trade Commission (FTC) and your local law enforcement.
Overlooking medical identity theft signs	Fraudulent medical claims can lead to incorrect medical records, potentially affecting your future care, and can result in unexpected bills or collection notices for services you never received.	Review Explanation of Benefits (EOB) statements from your health insurer carefully for services you didn’t receive. Be aware of any unfamiliar medical providers listed on your statements.

Decision rules (simple if/then)

• If you see a transaction on your bank statement that you don’t recognize, then immediately contact your bank to dispute the charge and investigate potential fraud because unauthorized activity is a primary indicator of identity theft.
• If your credit report shows a new account or inquiry you didn’t authorize, then place a fraud alert on your credit file and contact the credit bureau to dispute the information because this prevents further fraudulent accounts from being opened.
• If you stop receiving expected bills or statements in the mail, then contact the company directly to verify your mailing address and inquire about any unusual activity because a change of address is a common tactic used by identity thieves.
• If you receive a collection notice for a debt you don’t owe, then contact the collection agency and the original creditor to dispute the debt and report potential identity theft because this can prevent the fraudulent debt from impacting your credit.
• If you receive an unusual notification from a company about a change to your account (e.g., password reset, change of email), then immediately log in to your account (using a known, secure method) to verify the changes and secure your account because this could indicate a takeover attempt.
• If you get a notification from your credit monitoring service about suspicious activity, then investigate the alert immediately and take appropriate action because these services are designed to catch potential fraud early.
• If you receive a notice from the IRS or state tax agency about an issue with a tax return filed in your name, then contact the agency immediately to report identity theft because a fraudulent tax return can have serious financial and legal consequences.
• If you notice unfamiliar medical services or charges on your health insurance Explanation of Benefits (EOB), then contact your health insurer and the provider to report potential medical identity theft because this can affect your medical records and lead to fraudulent billing.
• If you find your Social Security number has been used to open accounts, then file a report with the Social Security Administration’s Office of the Inspector General in addition to other identity theft reporting steps because this is a critical component of addressing SSN misuse.
• If you are targeted by a phishing attempt (suspicious email, text, or call), then do not click any links or provide any information, and instead, delete the message or verify the request through a trusted channel because responding can compromise your personal data.

FAQ

What are the most common signs of identity theft?

The most common signs include unauthorized transactions on your financial accounts, unexpected bills for debts you don’t owe, new accounts opened in your name, and mail that stops arriving or contains unfamiliar information.

How often should I check my credit reports for signs of identity theft?

It’s recommended to check your credit reports at least once a year. You can get free reports from each of the three major credit bureaus (Equifax, Experian, TransUnion) annually at AnnualCreditReport.com.

Can identity theft affect my medical records?

Yes, medical identity theft occurs when someone uses your personal information to receive medical services or file fraudulent insurance claims. This can lead to incorrect entries in your medical history and unexpected medical bills.

What should I do if I find an unauthorized transaction on my credit card?

Immediately contact your credit card company to report the transaction as fraudulent. They will typically have procedures in place to investigate, reverse charges, and issue you a new card.

Is it important to monitor my online accounts for suspicious activity?

Absolutely. Regularly logging into your online banking, investment, and other sensitive accounts allows you to spot unusual login attempts, changes to your profile, or unexpected transactions promptly.

What is a “soft inquiry” versus a “hard inquiry” on my credit report?

A soft inquiry happens when you check your own credit or when a company checks your credit for pre-approved offers; it doesn’t affect your score. A hard inquiry occurs when you apply for new credit, and it can slightly lower your score temporarily.

How can I protect myself from identity theft?

Key protective measures include using strong, unique passwords, enabling two-factor authentication, shredding sensitive documents, being cautious of phishing scams, and regularly monitoring your financial accounts and credit reports.

What is the difference between identity theft and data breaches?

A data breach is when your personal information is compromised from a company’s system. Identity theft is the act of using that compromised information to commit fraud or other crimes in your name.

What this page does NOT cover (and where to go next)

• Detailed steps for recovering from specific types of identity theft (e.g., tax identity theft, medical identity theft).
• Legal recourse options if you are a victim of identity theft.
• Advanced cybersecurity measures for protecting digital assets.
• How to dispute fraudulent charges with merchants directly (beyond contacting your financial institution).
• The process of filing a police report for identity theft.