What to do if my identity is stolen

Identity theft puts your Social Security number, financial accounts, and personal reputation at risk. Knowing what to do if your identity is stolen can stop unauthorized charges before they spiral and set you on a clear path toward cyber crime safety . This guide walks you through the immediate steps to take, which agencies to contact, and how to build a recovery plan that actually protects your credit.

What should I do immediately if my identity is stolen?

Speed matters. The moment you notice suspicious activity—an unfamiliar charge, a credit card you didn't open, or a tax return filed in your name—act.

Start by reporting the theft to the Federal Trade Commission at IdentityTheft.gov. This free service creates a personalized recovery plan and generates an official identity theft report you'll need for creditors, banks, and law enforcement. The FTC report carries legal weight and streamlines disputes with financial institutions.

Next, place a fraud alert with one of the three major credit bureaus: Equifax, Experian, or TransUnion. Contact only one bureau—they're required to notify the other two. A fraud alert flags your file for one year and requires businesses to verify your identity before opening new accounts. It's free and renewable.

Then contact every company where fraud occurred. This includes banks holding compromised accounts, credit card issuers reporting unauthorized charges, and any service provider showing fraudulent accounts under your name. Request account closures in writing and ask for written confirmation.

How do I report identity theft to the right agencies?

Filing with the FTC at IdentityTheft.gov is your baseline. But depending on what was stolen, you'll need to notify additional agencies.

If your Social Security number is compromised, contact the Social Security Administration immediately. They can monitor your account for misuse and, in extreme cases, issue a new number—though that's rare and requires documented proof of ongoing harm.

Tax fraud demands a separate step. If someone filed a return using your information, submit IRS Form 14039, the Identity Theft Affidavit. The IRS will flag your account and assign a unique PIN for future filings. Expect delays in processing legitimate refunds while the agency investigates.

Report the crime to your local police or the department where the theft occurred. Not every jurisdiction will take a report for identity theft, but having a police report strengthens your case with creditors and can help if criminal charges are filed in your name. Bring your FTC identity theft report, a government-issued ID, proof of address, and any evidence of fraudulent activity.

When to notify other government offices

If a thief misused your driver's license, alert your state's Department of Motor Vehicles. If your passport is stolen or used fraudulently, contact the U.S. Department of State. Each agency has distinct procedures, and delays can leave gaps in your recovery.

What is a fraud alert and how does it work?

A fraud alert is a free flag on your credit file that tells lenders to verify your identity before approving new credit. It's not a lock—businesses can still grant credit—but it raises the bar for verification.

There are three types. An initial fraud alert lasts one year and requires only a reasonable belief that you're an identity theft victim. Request it online, by phone, or by mail through Equifax, Experian, or TransUnion. One call triggers alerts at all three bureaus.

An extended alert lasts seven years and requires an FTC identity theft report. This version gives you two free credit reports from each bureau annually and removes your name from pre-approved credit offers for five years.

An active-duty alert is for military personnel deployed away from their usual station. It lasts one year and helps prevent new accounts opened while you're overseas.

Fraud alerts differ from credit freezes. A freeze blocks all access to your credit file unless you lift it with a PIN. A freeze is stronger but requires manual unlocking before you apply for credit, loans, or rental housing.

Do I need to file a police report for identity theft?

Filing a police report isn't always required, but it's often useful. Creditors and banks may ask for one when disputing charges or closing fraudulent accounts. Some employers and insurance companies also request a copy if the theft affects background checks or benefits.

Bring documentation: your FTC identity theft report, copies of unauthorized charges, account statements showing fraudulent activity, and any correspondence from creditors. If the theft involves mail, packages, or government benefits, you may also need to file a complaint with the U.S. Postal Inspection Service or the relevant agency's fraud office.

Not every police department accepts identity theft reports for crimes that occurred elsewhere. If yours declines, ask for a written refusal—it can substitute for the report in some creditor disputes.

How do I protect my credit after identity theft?

Monitoring alone won't undo damage, but it catches new fraud early. Request free credit reports from AnnualCreditReport.com and review every account, inquiry, and personal detail. Dispute anything unfamiliar with the credit bureau that lists it. Use the bureau's online dispute form or send a letter with supporting documents by certified mail.

Consider a credit freeze. Unlike a fraud alert, a freeze prevents anyone—including you—from accessing your credit file until you lift it. It's free and stays in place until you remove it. You'll receive a PIN or password to unlock your file when applying for credit.

Enroll in credit monitoring if your bank or employer offers it at no cost. Paid services rarely catch problems faster than vigilant manual checks, but automated alerts can flag new inquiries or accounts within days. Recovery requires equal attention to documentation and follow-through, and understanding how to prevent identity theft with stronger passwords and security practices reinforces your defenses. Keep every letter, email, and report in a dedicated file, physical or digital.

How do I close fraudulent accounts opened in my name?

Contact the fraud department of every company holding a fraudulent account. Explain that you're an identity theft victim and request immediate closure. Follow up in writing—many companies require a signed affidavit. The FTC's IdentityTheft.gov portal generates pre-filled letters for common scenarios, and learning how to prevent phishing attacks helps you avoid the compromises that lead to fraudulent accounts in the first place.

Send your letter by certified mail with return receipt. Include a copy of your FTC identity theft report and police report if you have one. Ask the company to confirm in writing that the account is closed, the debt is discharged, and that it will notify credit bureaus of the fraud.

If the company refuses to close the account or insists you're liable, file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards complaints to the company and tracks responses. It's not a court, but it creates a federal record and often prompts faster resolution.

Handling debt collectors

Debt collectors may contact you about fraudulent accounts. Do not pay. Send a written dispute within 30 days of the first contact, stating you're a victim of identity theft and the debt isn't yours. Include a copy of your identity theft report. The collector must stop collection efforts on that debt until they verify it.

What if someone uses my identity to commit crimes or access medical services?

Criminal identity theft happens when someone gives your name during an arrest or citation. You may learn about it through a background check, a court summons, or a warrant you didn't know existed. Contact the court or law enforcement agency involved and provide proof of your identity, your FTC report, and any alibi evidence. Some states allow you to request a certificate of innocence or clearance letter.

Medical identity theft contaminates your health records. If someone uses your insurance for treatment, their diagnoses and prescriptions merge with your file. Request a copy of your medical records and insurance explanation of benefits. Dispute errors with your insurance company and the provider. Under federal law, you can ask for an amendment to your record if information is incorrect.

At Universal Investigations Agency, we've worked with identity theft victims who discovered fraudulent medical claims only after being denied coverage for a pre-existing condition they never had. Correcting those records often requires legal help and can take months.

Should I change my Social Security number?

Changing your Social Security number is possible but rare. The Social Security Administration grants new numbers only when you can prove ongoing harm—repeated misuse after you've taken all reasonable steps to protect your identity. A new number won't erase your credit history; it starts fresh, which can hurt your score and complicate loan applications, employment verification, and tax filings.

Before requesting a new number, exhaust other remedies: fraud alerts, credit freezes, police reports, and account closures. If the misuse continues despite those efforts and you can document it, the SSA may approve your request.

How can professional investigators help with identity theft recovery?

Some cases demand more than forms and phone calls. If you suspect the thief is someone you know, if fraud spans multiple states, or if creditors refuse to cooperate despite proper documentation, a licensed investigator can trace the activity, gather evidence, and work with law enforcement.

Investigators also help when phishing schemes compromise your identity by conducting forensic analysis of email headers, server logs, and transaction records that most victims can't access alone. At Universal Investigations Agency, our team brings over 25 years of combined law enforcement and intelligence experience to cyber crime cases. We're part of a global network of investigators, which means we can coordinate across jurisdictions when identity theft crosses state or international lines. If you're facing complex fraud or institutional resistance, we can build the case creditors and prosecutors need to act.