Your Identity Was Just Stolen—Here's Your Action Plan
Identity theft doesn't announce itself. One day you're scrolling through your bank app and notice a charge you didn't make. Or worse, you get a call from a collection agency about a credit card account you never opened. That sinking feeling is real, and it happens to hundreds of thousands of people every year.
The good news: identity theft is recoverable. The bad news: recovery takes time, effort, and vigilance. But if you move fast and stay organized, you can minimize damage and reclaim your financial life. Here's exactly what to do.
Act Within the First 24 Hours
Time is your most valuable asset right now. The sooner you respond, the less damage a thief can do.
Start by placing a fraud alert with the three major credit bureaus. A fraud alert tells creditors to verify your identity before opening new accounts in your name. You only need to contact one bureau—they're required to notify the other two. This alert lasts one year and can be renewed.
If you believe your information is still actively being exploited, you can request a credit freeze instead. This is more aggressive: it prevents anyone from accessing your credit report without your explicit permission. It costs nothing and takes about 15 minutes per bureau to set up.
Next, check your credit reports from all three bureaus. Look for accounts you don't recognize, inquiries you didn't authorize, or personal information that's wrong. You're legally entitled to free reports once a year from each bureau.
Document Everything
Create a file—digital or physical—and keep it all in one place. Record:
- The date you discovered the fraud
- Exactly what was compromised (account numbers, dates of unauthorized transactions)
- Names of people you spoke with at financial institutions
- Case/reference numbers from any reports you file
- Dates and times of calls and emails
This documentation becomes your roadmap and proof if disputes arise later.
Contact Your Banks and Credit Card Companies
Call the fraud department (not the general customer service line) at every financial institution where you have accounts or where fraudulent activity occurred. This is not a text or email situation—use the phone.
Tell them your identity has been compromised. They'll likely:
- Freeze or close the affected accounts
- Cancel cards and issue new ones
- Reverse unauthorized charges (though this process varies)
- Flag your account for suspicious activity
Get a case number for each call. Ask what their fraud liability policy is—most legitimate issuers won't hold you responsible for unauthorized charges, but policies differ.
File an Official Report
File a report with the Federal Trade Commission using their online complaint form. This creates an Identity Theft Report, which is a legally recognized document that helps you dispute fraudulent accounts and debts.
You may also want to file a police report with your local law enforcement agency. While police often can't investigate individual identity theft cases, having a report on file strengthens your position when disputing fraudulent accounts.
Dispute Fraudulent Accounts and Charges
Once you've identified fraudulent accounts or charges, initiate disputes formally. Here's the typical process:
| Type of Fraud | Who to Contact | Timeframe |
|---|---|---|
| Unauthorized credit card charges | Card issuer's fraud department | 60 days from statement date |
| Fraudulent bank account activity | Your bank's fraud department | 60 days from statement date |
| Accounts opened in your name | The creditor directly + credit bureaus | No hard deadline, but act fast |
| Inaccurate info on credit report | All three credit bureaus (in writing) | 30 days to investigate |
Send disputes in writing whenever possible. Keep copies of everything.
Address Specific Fraud Types
Unauthorized accounts opened in your name require different handling than fraudulent charges on existing accounts. You'll need to send written dispute letters to the creditor stating you didn't authorize the account. Include copies of your fraud report and police report if applicable. The creditor must investigate and respond within 30 days.
Fraudulent tax returns filed in your name are serious. Contact the IRS immediately if you suspect this. You'll likely need to file your return on paper and include a copy of your police report.
Compromised Social Security number calls for extra vigilance. Monitor your credit closely for years. Consider setting up credit monitoring or annual freeze reviews.
Monitor Going Forward
Your identity is now a target. Thieves who succeeded once might try again, and your information is floating in dark corners of the internet.
Set phone or email alerts on your bank and credit card accounts. Review statements monthly—not just a quick glance, but line by line. Pull your credit report every four months, rotating through the three bureaus. Look for new accounts, inquiries, or changes you didn't authorize.
Consider placing an extended fraud alert (usually available for 7 years) if the theft was serious. Some people prefer ongoing credit monitoring, though this isn't mandatory.
What Not to Do
Don't ignore it hoping it goes away. Don't use email alone for disputes with creditors (follow up with official written correspondence). Don't pay debts resulting from identity theft without first disputing them. Don't assume one check of your credit report is enough.
Moving Forward
Identity theft recovery is a marathon, not a sprint. You might discover fraudulent activity months later. Stay patient, keep records, and respond promptly to anything suspicious.
The system is built with consumer protections for exactly this scenario. Use them. You didn't cause this, and with documented action, you won't bear the financial burden for it either.
