Steps to Recovering From Identity Theft

Quick answer

• Act immediately: Report the theft to the relevant authorities and companies.
• Place fraud alerts and consider credit freezes on your credit reports.
• Document everything: Keep records of all communications and actions taken.
• Dispute fraudulent charges and accounts with credit bureaus and creditors.
• Monitor your credit reports closely for any new suspicious activity.
• Change passwords and security questions for all your online accounts.

Who this is for

• Individuals who have discovered unauthorized activity on their financial accounts.
• People who have received bills or notices for accounts they did not open.
• Anyone concerned about their personal information being compromised and misused.

What to check first (before you act)

Goal and timeline

Your primary goal is to regain control of your identity and finances, and to prevent further damage. The timeline for recovery can vary significantly, from a few weeks for minor incidents to several months or even longer for complex cases. Be prepared for a marathon, not a sprint.

Current cash flow

Understand your current financial situation. Where does your money come from, and where does it go? This will help you identify any discrepancies caused by the theft and manage any immediate financial strain while you work on recovery.

Emergency fund or safety buffer

Do you have an emergency fund? This is crucial. Identity theft can lead to unexpected expenses, such as legal fees or fees for credit monitoring services. A robust emergency fund can absorb these shocks without derailing your recovery efforts. If you don’t have one, or it’s depleted, prioritize rebuilding it.

Debt and interest rates

Identify any fraudulent debts or accounts that have been opened in your name. Note the associated interest rates and the companies involved. This information is vital for disputing the debt and understanding the potential financial impact.

Credit impact

Understand how identity theft affects your credit. It can lead to incorrect negative information on your credit reports, lowering your credit score and making it harder to obtain loans, rent an apartment, or even get a job. Your recovery plan must address these credit report inaccuracies.

Step-by-step (simple workflow)

1. Recognize the Signs

• What to do: Be vigilant about monitoring your financial statements, credit reports, and mail for any unusual activity. This could include unfamiliar transactions, bills for services you didn’t use, or credit inquiries you didn’t authorize.
• What “good” looks like: You proactively review your financial information regularly and notice suspicious activity early.
• A common mistake and how to avoid it: Ignoring small, seemingly insignificant anomalies. Avoid this by treating every discrepancy as a potential sign of theft until proven otherwise.

2. Gather Information

• What to do: Collect all evidence of the identity theft. This includes fraudulent bills, collection notices, bank statements showing unauthorized transactions, and any communication with suspected fraudsters.
• What “good” looks like: You have a well-organized folder or digital file containing all relevant documents and details.
• A common mistake and how to avoid it: Not keeping records. Avoid this by creating a dedicated system for storing all identity theft-related paperwork and digital files from the outset.

3. Contact the Fraud Department of Affected Companies

• What to do: For each company where fraudulent activity occurred (e.g., your bank, credit card company), contact their fraud department directly. Report the unauthorized activity and ask them to close or freeze the fraudulent account.
• What “good” looks like: The company acknowledges your report, provides a case or reference number, and takes immediate steps to secure the account.
• A common mistake and how to avoid it: Only contacting customer service instead of the dedicated fraud department. Always ask to be transferred to the fraud or security team for faster and more effective resolution.

4. File a Police Report

• What to do: Report the identity theft to your local police department. This creates an official record of the crime, which is often required by creditors and credit bureaus.
• What “good” looks like: You receive a police report number and a copy of the report.
• A common mistake and how to avoid it: Believing it’s not necessary. A police report is a critical piece of evidence that can legitimize your claims and expedite the recovery process.

5. File a Complaint with the Federal Trade Commission (FTC)

• What to do: Report the identity theft to the FTC at IdentityTheft.gov. This is a crucial step as it provides you with a recovery plan and creates a federal record of the incident.
• What “good” looks like: You receive an FTC case number and a personalized recovery plan.
• A common mistake and how to avoid it: Skipping this step. The FTC’s website is a central hub for identity theft victims and provides invaluable resources and guidance.

6. Place a Fraud Alert on Your Credit Reports

• What to do: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place an initial fraud alert on your credit report. The bureau you contact is required to notify the other two.
• What “good” looks like: You receive confirmation that a fraud alert has been placed and understand its duration (typically one year for initial alerts).
• A common mistake and how to avoid it: Not realizing that a fraud alert is free and protects you from further fraudulent activity by requiring companies to verify your identity before opening new credit.

7. Consider a Credit Freeze

• What to do: For stronger protection, consider placing a credit freeze (also known as a security freeze) with each of the three credit bureaus. This restricts access to your credit report, preventing new accounts from being opened in your name.
• What “good” looks like: You have control over who can access your credit report and can temporarily lift the freeze when you apply for credit yourself.
• A common mistake and how to avoid it: Forgetting you have a freeze in place when you need to apply for credit. Remember to temporarily lift the freeze when you are legitimately applying for loans or credit cards.

8. Dispute Fraudulent Information with Credit Bureaus

• What to do: Review your credit reports from all three bureaus and dispute any incorrect or fraudulent information. Provide copies of your FTC report, police report, and any other supporting documents.
• What “good” looks like: The credit bureaus investigate your disputes and remove the fraudulent entries from your report.
• A common mistake and how to avoid it: Not disputing with all three bureaus. You must file a separate dispute with Equifax, Experian, and TransUnion to ensure all reports are corrected.

9. Change Passwords and Security Information

• What to do: Update passwords for all your online accounts, especially financial and email accounts. Use strong, unique passwords for each service and enable two-factor authentication (2FA) wherever possible.
• What “good” looks like: Your online accounts are secured with strong, unique passwords and 2FA, making them much harder for fraudsters to access.
• A common mistake and how to avoid it: Reusing passwords or using weak, easily guessable passwords. This makes it easy for thieves to regain access if they obtain even one of your credentials.

10. Monitor Your Accounts and Credit Reports Regularly

• What to do: Continue to monitor your financial accounts and credit reports closely for several months after the initial recovery. Look for any new fraudulent activity or errors.
• What “good” looks like: You maintain a vigilant watch and catch any residual or new fraudulent activity promptly.
• A common mistake and how to avoid it: Becoming complacent after the initial cleanup. Ongoing monitoring is essential as some identity theft schemes can be long-term.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Delaying action	More fraudulent activity, harder recovery, potential financial loss.	Act immediately upon discovering any suspicious activity.
Not keeping records	Difficulty proving your case, slower resolution with companies and bureaus.	Maintain a detailed log of all communications, documents, and actions taken.
Not filing a police report	Lack of official documentation, which may be required by creditors or bureaus.	File a police report as soon as possible after discovering the theft.
Forgetting to notify all three credit bureaus	Inconsistent credit reports, leading to continued inaccuracies and credit score damage.	Place fraud alerts and freezes with Equifax, Experian, and TransUnion.
Not disputing fraudulent charges with creditors	You may be held liable for unauthorized debts.	File formal disputes with each creditor involved in fraudulent activity.
Reusing passwords	If one account is compromised, all accounts with the same password become vulnerable.	Use unique, strong passwords for every online account and enable 2FA.
Not monitoring credit reports regularly	Fraudulent accounts or inquiries may go unnoticed, further damaging your credit.	Review your credit reports from all three bureaus at least annually, or more often if recovering from theft.
Assuming the problem is solved after initial cleanup	Residual fraud or new attempts by the same thieves can occur.	Continue monitoring accounts and credit reports for an extended period.
Not informing your employer if your work information was compromised	Potential for workplace fraud or further data breaches affecting your colleagues.	Notify your employer’s HR or IT security department if you suspect your work credentials or data were stolen.

Decision rules (simple if/then)

• If you see an unauthorized transaction on your bank statement, then immediately contact your bank’s fraud department because they can secure the account and potentially reverse the charge.
• If you receive a bill for a credit card you did not apply for, then contact that credit card company’s fraud department and place a fraud alert on your credit reports because this is a clear sign of new account fraud.
• If you have placed a fraud alert, then remember that it typically lasts for one year, and you may need to renew it or upgrade to a credit freeze for longer-term protection.
• If you are applying for a new loan or credit card, then temporarily lift any credit freezes you have in place because lenders cannot access your credit report to approve your application with a freeze active.
• If you find fraudulent information on your credit report, then dispute it with the specific credit bureau reporting it and provide supporting documentation like your FTC recovery plan or police report because this is how you get inaccuracies removed.
• If you suspect your Social Security number has been compromised, then consider placing a credit freeze and monitoring your Social Security statement for any unusual activity because this is a critical piece of your identity.
• If you are a victim of medical identity theft, then contact the healthcare provider and your insurance company to report the issue and ask for a correction because this can affect your medical records and billing.
• If your employer’s systems are breached and your personal information is exposed, then notify your employer’s HR and IT departments and monitor your credit reports closely because this could lead to various forms of fraud.
• If you have been a victim of identity theft, then change all your online passwords and enable two-factor authentication whenever possible because this significantly reduces the risk of further account takeovers.
• If you are unsure about a specific step or feel overwhelmed, then consult with a reputable identity theft protection service or a legal professional specializing in consumer rights because they can provide expert guidance.

FAQ

How long does it take to recover from identity theft?

The recovery time varies widely. Simple cases might be resolved in weeks, while complex or widespread identity theft can take many months or even over a year to fully resolve.

What is the difference between a fraud alert and a credit freeze?

A fraud alert warns creditors to verify your identity before opening new credit. A credit freeze goes further by blocking access to your credit report entirely, preventing new credit from being opened without you temporarily lifting the freeze.

Do I need to pay to place a fraud alert or credit freeze?

No, placing an initial fraud alert is free. Credit freezes are also generally free, though some states may have specific rules. You can get a free credit report from each of the three major bureaus annually.

What if the identity theft involves my Social Security number?

If your Social Security number is compromised, it’s critical to report it to the Social Security Administration and the FTC. You may need to take extra steps to protect your credit and future benefits.

Can identity theft affect my job prospects?

Yes, if fraudulent accounts or negative information appear on your credit report, it can impact your ability to get hired, especially for positions requiring a credit check or security clearance.

What is the FTC’s role in identity theft recovery?

The FTC provides a recovery plan at IdentityTheft.gov, which guides you through the steps to report and recover from identity theft. They also maintain a database of identity theft incidents.

Should I close all my bank and credit card accounts?

It’s often best to work with the affected institutions to secure existing accounts or open new ones with different account numbers, rather than closing everything immediately, which can impact your credit history.

What is medical identity theft?

This occurs when someone uses your personal information to receive medical services or prescription drugs. It can lead to incorrect information in your medical records and billing errors.

What this page does NOT cover (and where to go next)

• Specific legal recourse or lawsuits: If you believe you have grounds for legal action due to negligence or significant damages, consult with an attorney specializing in consumer law.
• Detailed instructions for specific company disputes: While the general process is outlined, each company may have unique dispute procedures. Check their websites or contact them directly for specifics.
• International identity theft implications: This guide focuses on recovery within the United States. If your identity was compromised by international actors or affects accounts abroad, you may need specialized assistance.
• Proactive identity theft prevention strategies: While recovery is the focus, exploring robust prevention measures like identity theft protection services or advanced cybersecurity practices can be a valuable next step.
• Navigating complex tax-related identity theft: Issues involving fraudulent tax returns or benefits may require direct engagement with the IRS and potentially a tax professional.