You may not realize your identity has been stolen right away. Watch for these warning signs:

• Bills or collection notices for accounts you never opened
• Charges on your bank or credit card statements you don’t recognize
• Calls from debt collectors about debts that aren’t yours
• You’re denied credit for no clear reason
• Your tax return is rejected because one was already filed using your Social Security number
• You receive a medical bill or insurance statement for services you never received
• Mail you normally receive stops arriving — a thief may have changed your address
• You receive alerts about new accounts or credit inquiries you didn’t make

If you notice any of these, take the steps below immediately.

A fraud alert tells lenders to take extra steps to verify your identity before opening any new credit in your name. It’s free and lasts one year.

You only need to contact one of the three credit bureaus — they are required by law to notify the other two:

• Equifax: equifax.com/personal/credit-report-services/credit-fraud-alerts or call 1-800-525-6285
• Experian: experian.com/fraud/center.html or call 1-888-397-3742
• TransUnion: transunion.com/fraud-alerts or call 1-800-680-7289

Tip: If you’re an identity theft victim, you can request an extended fraud alert that lasts seven years. You’ll need to provide an identity theft report (see Step 4).

A credit freeze is stronger than a fraud alert. It completely blocks anyone — including you — from opening new credit accounts in your name until you lift the freeze. This is free and does not affect your credit score.

Unlike a fraud alert, you must contact all three bureaus separately to freeze your credit:

• Equifax: 1-800-525-6285 or freeze online at equifax.com
• Experian: 1-888-397-3742 or freeze online at experian.com
• TransUnion: 1-800-680-7289 or freeze online at transunion.com

Each bureau will give you a PIN or password to lift the freeze later. Write these down and store them in a safe place. You’ll need them if you want to apply for credit in the future.

Fraud alert vs. credit freeze: A fraud alert warns lenders to verify your identity. A credit freeze blocks all access completely. For identity theft, doing both is recommended.

Check your credit reports from all three bureaus for accounts, inquiries, or addresses you don’t recognize.

Get your free credit reports at: AnnualCreditReport.com — this is the only official source for free reports. You can check all three bureaus for free every week.

What to look for:

• Accounts you didn’t open — credit cards, loans, phone plans
• Credit inquiries you didn’t make
• Addresses where you’ve never lived
• Employers you’ve never worked for
• Balances or late payments on unfamiliar accounts

If you find anything wrong, dispute it directly with the credit bureau. Each bureau has an online dispute process on their website.

Filing official reports creates a paper trail that protects your rights and helps you dispute fraudulent accounts.

File with the FTC:

• Go to IdentityTheft.gov — this is the federal government’s one-stop resource for identity theft.
• Answer the questions about what happened.
• The site will create a personal recovery plan with step-by-step instructions specific to your situation.
• It will also generate an official FTC Identity Theft Report you can use with creditors, banks, and the credit bureaus.

File a police report:

• Contact your local police department and file a report.
• Bring your FTC Identity Theft Report, a government-issued ID, proof of your address, and any evidence of the theft.
• Get a copy of the police report — some creditors and bureaus require it.

If accounts were opened in your name or existing accounts were compromised, contact each company directly.

Ask them to:

• Close or freeze any fraudulent accounts
• Remove fraudulent charges from your account
• Send you written confirmation that the fraudulent account has been closed and the debt cleared
• Stop reporting the fraudulent activity to credit bureaus

Ask to speak with the company’s fraud department. Have your FTC Identity Theft Report and police report ready — most companies have a process specifically for identity theft victims.

• Change passwords on all important accounts — email, banking, social media, healthcare. Use strong, unique passwords for each. See our password guide.
• Turn on two-factor authentication on all accounts that offer it. See our 2FA guide.
• Monitor your credit reports regularly for the next year at minimum. Check at least once a month through AnnualCreditReport.com.
• Monitor your bank and credit card statements weekly for unfamiliar charges.
• Consider an identity theft protection service if the breach was serious. Some are offered free by companies that experienced data breaches — check any notification letters you’ve received.
• Watch your mail. If you stop receiving expected mail, someone may have filed a change of address in your name. Contact your local post office immediately.

💳 Tax Identity Theft

If someone filed a tax return using your Social Security number, contact the IRS Identity Protection Specialized Unit at 1-800-908-4490. You’ll need to file IRS Form 14039 (Identity Theft Affidavit) and submit your return by paper mail.

🏥 Medical Identity Theft

If someone used your identity to get medical care or prescriptions, contact your health insurance company and each healthcare provider involved. Request copies of your medical records and ask for corrections. Inaccurate medical records can be dangerous — wrong blood types, allergies, or medications could end up in your file.

📱 Social Security Number Theft

If your Social Security number has been compromised, contact the Social Security Administration at 1-800-772-1213 to report misuse. Review your Social Security Statement at ssa.gov/myaccount for suspicious activity. In extreme cases, the SSA may issue a new number — but this is rare and comes with complications.