Discovering that someone may be using your identity can feel chaotic, but the first steps are easier when you separate urgent containment from longer-term cleanup. Start by stopping active fraud, securing accounts an impostor could still access, and creating a record of what happened. Then work through credit, financial, and government reporting in a deliberate order.
Start by stopping any active fraud
If you see an unfamiliar charge, account, loan, phone line, or address change, contact the company through a trusted number from its official website, statement, or the back of your card. Ask for the fraud department, explain that the activity was unauthorized, and request that compromised accounts be closed, frozen, or restricted. If a card number was exposed, ask for a replacement number.
Change passwords, PINs, and security questions on affected accounts immediately. If the same password was used elsewhere, change it there too. Begin with your email account because email access can let an attacker reset passwords for banking and other services. Use unique passwords and turn on multi-factor authentication wherever available.
Keep an incident log. Record the date, company, reference number, what you reported, and what the company promised to do. Save confirmation emails, screenshots, letters, statements, and dispute documents. Good records make identity theft recovery easier if a fraudulent account reappears later.
Report identity theft and create a recovery record
For U.S. consumers, IdentityTheft.gov is the Federal Trade Commission’s central recovery site. You can report identity theft there and receive a recovery plan based on the type of misuse involved. Completing the report can also produce an FTC Identity Theft Report, which may help when asking credit bureaus or businesses to block fraudulent information.
Not every case needs the same paperwork. A stolen card number, a new loan opened in your name, tax identity theft, medical identity theft, and misuse of a Social Security number can require different follow-up steps. Use the FTC recovery plan as the core checklist, then follow instructions from affected institutions.
Protect your credit from new accounts
If someone has enough personal information to apply for credit, consider a credit freeze. A freeze limits access to your credit file, making it much harder for an identity thief to open new credit in your name. In the United States, placing or lifting a freeze is free and does not affect your credit score.
To freeze credit effectively, contact Equifax, Experian, and TransUnion separately. A freeze remains until you lift or remove it. When you legitimately need a lender to check your credit, you can temporarily lift the freeze and restore it afterward.
A fraud alert is another option. An initial fraud alert is free, lasts one year, and tells businesses to take extra steps to verify your identity before opening new credit. You only need to contact one nationwide credit bureau for an initial alert; that bureau must notify the other two. Eligible identity-theft victims can request an extended alert lasting seven years.
Review your credit reports for hidden damage
Identity theft often involves more than the transaction that first gets your attention. Review reports from all three credit bureaus for unfamiliar accounts, hard inquiries, collections, addresses, or personal details. U.S. consumers can obtain free reports through AnnualCreditReport.com, and current FTC guidance says reports can be checked weekly for free.
If you find fraudulent information, dispute it with the relevant credit bureau and the business that supplied it. An FTC Identity Theft Report can support a request to block identity-theft-related information. Keep checking your reports because fraudulent accounts or collections may appear later.
Secure the accounts that can unlock everything else
After financial accounts, focus on your primary email, mobile phone account, cloud storage, payment apps, and accounts holding tax or government information. Review recent sign-ins, recovery addresses, phone numbers, forwarding rules, connected devices, and authorized apps. Remove anything you do not recognize.
For example, suppose you discover a new credit-card inquiry you never made. You freeze your credit, but the thief still controls your email because an old reused password was exposed. They may still intercept password-reset messages or change alerts. That is why a strong fraud response combines credit protection with account-security cleanup.
Related reading on warning signs of identity theft, creating stronger passwords, and comparing a credit freeze with a fraud alert can help you close remaining security gaps.
Watch for tax and government-account misuse
If your Social Security number or tax information may have been exposed, consider additional protection. The IRS allows eligible taxpayers with a Social Security number or ITIN to request an Identity Protection PIN. This six-digit number helps the IRS verify that a federal tax return filed under your information is really yours, and a new IP PIN is issued each year.
If you receive an unexpected tax notice, benefit notice, employment record, or government letter connected to activity you did not perform, contact the agency through an official website or published phone number. Avoid contact details from unsolicited messages claiming to help with recovery.
Keep monitoring after the immediate crisis
Identity theft recovery is a process, not a single phone call. Review bank and card statements, credit reports, email security alerts, and account notifications for new activity. Keep your credit frozen if you do not expect to apply for new credit soon. If debt collectors contact you about fraudulent debts, respond promptly and keep copies of communications.
Be cautious of follow-up scams. Criminals may target fraud victims with fake recovery services, government impersonation calls, or requests for verification codes. Never give a one-time authentication code to an unsolicited caller.
Frequently asked questions
What should I do first after discovering identity theft?
Contact the companies where fraud occurred, secure affected logins, and stop further transactions or access. Then report the identity theft, protect your credit, and document every step.
Should I freeze my credit after identity theft?
A credit freeze is a strong option when an identity thief may have enough information to open new accounts. Place it separately with Equifax, Experian, and TransUnion, and lift it when you need legitimate access to credit.
Is a fraud alert the same as a credit freeze?
No. A fraud alert asks creditors to take extra steps to verify your identity, while a credit freeze restricts access to your credit file. A freeze generally provides stronger protection against new-account fraud.
How long should I monitor my accounts after identity theft?
There is no single cutoff date because misuse can appear later. Continue reviewing financial statements and credit reports regularly, keep recovery records, and maintain protective measures such as a credit freeze for as long as they remain useful.
Move from panic to a written recovery plan
The most effective response is layered: stop active fraud, secure access points, report identity theft, protect your credit, correct fraudulent records, and keep monitoring. You do not need to solve every problem in one sitting. A documented recovery plan gives you a sequence to follow and makes it easier to show banks, credit bureaus, and government agencies what happened and what has already been done.