If you’ve just discovered signs of identity theft, time matters more than anything else. The faster you act, the more damage you can prevent—and in many cases you can stop fraud in its tracks. This emergency guide walks you step by step through what to do right now to protect your money, your credit, and your good name.
Step 1: Confirm It’s Really Identity Theft
Before you panic, make sure what you’re seeing truly indicates identity theft and not a simple mistake or glitch.
Common red flags
Watch for warning signs like:
- Charges on your bank or credit card statement you don’t recognize
- New credit accounts or loans you didn’t open
- Collection calls or letters for debts that aren’t yours
- Alerts that your information appeared in a data breach
- Mail you usually receive suddenly stopping (possible mail theft)
- Notifications that your username/password or Social Security number was found on the dark web
Pull your recent statements and carefully scan them. If you see even a single suspicious charge or account, act as if it’s real identity theft until proven otherwise. Fraudsters often start with a small “test” transaction.
Step 2: Lock Down Your Accounts Immediately
Your first emergency action is to stop ongoing access to your money.
Contact your bank and card issuers
Call the fraud department printed on the back of each card or on your statement. Tell them you suspect identity theft and:
- Ask them to freeze or close compromised accounts
- Dispute unauthorized charges
- Request new card numbers with different CVV codes and PINs
- Ask them to place a high-security alert or password on your profile
Get the name of every representative you speak with and write down:
- Date and time
- Summary of what you discussed
- Any case or reference numbers
Change passwords and enable two-factor authentication (2FA)
Change passwords—starting with the most sensitive accounts:
- Email accounts (these often control password resets)
- Banking and credit cards
- PayPal, Venmo, Cash App, and other payment apps
- Shopping accounts with stored cards (Amazon, Walmart, etc.)
- Password manager (if you use one)
Turn on 2FA everywhere you can. Prefer app-based codes (like Google Authenticator or Authy) or a hardware key instead of SMS when possible.
Step 3: Place a Fraud Alert and Check Your Credit Reports
Identity theft is most dangerous when criminals open new credit in your name. You can slow or stop that with a fraud alert and close review of your credit reports.
How to place a fraud alert
Contact one of the three major credit bureaus. That bureau must notify the other two:
- Equifax: 1-800-685-1111 or online
- Experian: 1-888-397-3742 or online
- TransUnion: 1-800-680-7289 or online
Ask for a one-year fraud alert. This tells lenders they must take extra steps to verify your identity before opening new credit. It’s free and does not hurt your credit score.
Get your free credit reports
Next, pull your credit reports from all three bureaus via:
AnnualCreditReport.com – the only federally authorized free credit report service in the U.S. (source)
Review each report carefully for:
- Accounts you don’t recognize
- Credit inquiries you didn’t authorize
- Personal information that isn’t yours (addresses, employers, etc.)
- Collections or late payments that don’t match your history
Highlight or list everything that looks suspicious—you’ll need this for disputes and police reports.
Step 4: Consider a Credit Freeze for Stronger Protection
A credit freeze (also called a security freeze) is stronger than a fraud alert. It blocks new lenders from pulling your credit report entirely, which usually prevents new credit accounts from being opened in your name.
When to use a credit freeze
Choose a freeze if:
- Someone has your Social Security number
- You see new accounts on your credit report
- You’ve been part of a serious data breach
- You’re not planning to apply for new credit soon
You must contact each bureau individually to freeze your credit:
- Equifax
- Experian
- TransUnion
It’s free in the U.S. and does not affect your credit score. If you need new credit later (e.g., mortgage, car loan), you can temporarily “thaw” the freeze with a PIN or password.
Step 5: Report Identity Theft to the Authorities
Documenting what happened gives you legal protections and makes it easier to clear fraudulent accounts later.
File an identity theft report with the FTC (U.S.)
In the United States, go to IdentityTheft.gov (Federal Trade Commission). You’ll:
- Answer questions about what happened
- Get a personal recovery plan
- Receive an Identity Theft Report and pre-filled letters to send to creditors
This report is powerful: by law, companies must treat it like a police report and help you remove fraudulent information.
File a police report (and when it matters most)
Contact your local police department—often you can start the process online. Bring:
- A copy of your FTC Identity Theft Report
- Photo ID and proof of address
- Any evidence (statements, collection letters, breach notices, screenshots)
A police report is especially important if:
- Someone used your identity in a crime
- Your wallet, ID, or mail was physically stolen
- A creditor or collector refuses to clear fraudulent debt without it
Keep copies of both reports in a safe place.
Step 6: Dispute Fraudulent Accounts and Charges
Now that you’ve stopped the bleeding, it’s time to clean up the financial mess left by identity theft.
Disputing unauthorized charges
For credit and debit cards:
- You already notified the bank; follow up in writing.
- Send a certified letter with return receipt to the card issuer’s fraud department.
- Include copies (not originals) of statements, your FTC report, and police report.
For Electronic Funds Transfers (like ATM or online banking):
- Act quickly—your liability may increase after 2 business days.
- Ask your bank about provisional credit while they investigate.
Removing fraudulent accounts from your credit report
Write to each credit bureau reporting the fraudulent data. Include:
- A clear explanation of which accounts or inquiries are fraudulent
- Copies of your FTC Identity Theft Report and police report
- Proof of your identity (government ID, utility bill)
Ask them to:
- Block fraudulent information from your credit report
- Remove any related inquiries
- Send you written confirmation when complete
Send everything via certified mail and keep copies of what you send.
Step 7: Secure Compromised IDs and Credentials
Identity theft isn’t only about credit cards. If key pieces of your identity are compromised, lock them down or replace them.
If your Social Security number (SSN) is exposed
In the U.S.:
- Contact the Social Security Administration if someone is using your SSN for employment or benefits.
- Monitor your earnings statement and benefits accounts.
- Strongly consider a long-term credit freeze.
If your driver’s license or state ID is stolen
Visit or contact your state’s DMV:
- Report your license as stolen
- Request a new license number if your state permits it
- Ask them to flag your file for possible fraud
If your email is compromised
- Change the password immediately on every email account.
- Check “forwarding” and “recovery” settings for any suspicious changes.
- Log out all active sessions if your provider allows (e.g., Gmail’s “Sign out of all other web sessions”).
Step 8: Protect Yourself from Future Identity Theft
Once you’re through the emergency phase, put stronger defenses in place so this is less likely to happen again.
Upgrade your security habits
Consider these long-term protections:
- Use a password manager to create and store strong, unique passwords.
- Turn on 2FA everywhere—email, banking, cloud storage, social media.
- Avoid reusing passwords across sites.
- Be cautious with public Wi-Fi—use a VPN for sensitive activity.
- Shred documents with personal information before discarding.
- Opt out of unnecessary data sharing and marketing lists where possible.
Watch your accounts and credit regularly
Build a simple routine:
- Check bank and card activity weekly.
- Set up account alerts for large or unusual transactions.
- Pull a credit report from one bureau every four months (rotating among the three, if available in your country).
If you see anything strange in the future, you’ll catch it while it’s still small and easier to fix.
Quick Checklist: What To Do in the First 24 Hours
Use this list to stay organized when you’re under stress:
- Confirm suspicious activity on accounts and statements.
- Call your bank and card issuers to freeze or replace cards.
- Change critical passwords and enable 2FA (email, banking, payment apps).
- Place a fraud alert with one credit bureau.
- Get your credit reports and list all suspicious items.
- Consider a credit freeze with all three bureaus if your SSN or key data is exposed.
- File a report at IdentityTheft.gov and follow the recovery plan.
- File a police report and keep copies of all documentation.
- Dispute fraudulent charges and accounts in writing.
- Set up alerts and monitoring to catch any further misuse early.
FAQ: Handling and Preventing Identity Theft
What should I do first after discovering identity theft?
The first steps are to secure your financial accounts and change your passwords. Call your bank and card issuers right away to freeze or close compromised accounts and dispute unauthorized charges. Then place a fraud alert, pull your credit reports, and follow up by filing an official report with the proper authorities.
How long does it take to recover from stolen identity?
Recovery from identity theft can take anywhere from a few weeks to many months, depending on the extent of the damage. Simple unauthorized card charges may be reversed within one or two billing cycles, while cleaning up multiple fraudulent loans or accounts from your credit report can take several months of back-and-forth with creditors and bureaus.
How can I prevent identity fraud in the future?
You can’t eliminate all risk, but you can greatly reduce it by using strong, unique passwords with a password manager, enabling two-factor authentication, shredding sensitive documents, limiting what you share online, and regularly reviewing your financial statements and credit reports. Consider a long-term credit freeze if your Social Security number or other core identifiers have been exposed.
Acting quickly and methodically is your best defense against identity theft. If you suspect your information has been misused, start with the steps in this emergency guide today—make the calls, place the alerts, and document everything. Once you’ve contained the damage, take the time to harden your defenses so you control your identity, not the criminals. If you’re feeling overwhelmed, begin with the first three steps right now; each small action you take immediately reduces your risk and puts you back in charge of your financial life.