Identity Stolen? Here’s Exactly What to Do (Step-by-Step)

Stay Calm and Act Quickly — Here’s Exactly What to Do

Identity theft can feel overwhelming, but there’s a clear set of steps that minimizes damage and starts the recovery process. Speed matters: the sooner you act, the less damage thieves can do with your information.

Step 1: File a Report at IdentityTheft.gov

The FTC’s identitytheft.gov is the official starting point. Filing here creates an Identity Theft Report, which is a legally recognized document that gives you specific rights when dealing with credit bureaus, creditors, and debt collectors. The site also generates a personalized recovery plan based on your specific situation.

Step 2: Place a Fraud Alert or Credit Freeze

Call one of the three major credit bureaus to place an initial fraud alert — they’re required to notify the other two. An initial alert lasts one year. If you’re a confirmed victim, place an extended alert (7 years). Better yet, place a full credit freeze at all three bureaus to prevent any new accounts from being opened until you’ve sorted everything out.

Step 3: Review All Three Credit Reports

Go to AnnualCreditReport.com and pull reports from Equifax, Experian, and TransUnion. Look for accounts you didn’t open, inquiries you didn’t initiate, addresses you’ve never lived at, or incorrect personal information. Note every suspicious item — you’ll need this list for the next steps.

Step 4: Dispute Fraudulent Accounts

Contact each credit bureau in writing (keep copies) to dispute any accounts opened fraudulently. You have the right to have fraudulent accounts blocked from your credit report as an identity theft victim. The bureaus must block these accounts within four business days of receiving your Identity Theft Report.

Step 5: Contact Each Affected Institution Directly

For every fraudulent account or unauthorized transaction, contact the financial institution’s fraud department directly. Ask them to close the account, remove your liability, and send you a written confirmation. Keep records of every call, including the date, time, rep name, and what was discussed. Follow up in writing.

Step 6: File a Police Report If Needed

A police report is helpful — and sometimes required — when disputing fraudulent charges, especially for large amounts. Some states allow you to file online; others require an in-person visit. Bring your FTC Identity Theft Report as supporting documentation.

Step 7: Secure Your Accounts

Change passwords on all financial accounts, email, and social media. Use unique, strong passwords for each account (a password manager makes this manageable). Enable two-factor authentication everywhere it’s offered. Check whether your email address or phone number has been changed without your knowledge.

Ongoing Recovery: What to Monitor

• Check all three credit reports monthly during recovery
• Set up transaction alerts on all financial accounts
• Watch for unexpected bills, collection notices, or IRS correspondence (tax identity theft is common)
• Consider subscribing to an identity protection service for ongoing monitoring
• Document everything throughout recovery — you may need records for insurance or legal purposes