Discovering your identity has been stolen is alarming, but quick, organized action limits the damage. Following a systematic recovery process helps you reclaim your identity and protect against further harm. This checklist guides you through essential steps.
Step 1: Document Everything
Start a written record immediately. Create a folder or file for all identity theft documents. Note the date you discovered the theft, what accounts or information were compromised, everyone you contact (names, dates, reference numbers), and copies of all correspondence.
This documentation proves invaluable when dealing with creditors, credit bureaus, and law enforcement.
Step 2: Report to the FTC
File a report at IdentityTheft.gov, the FTC's identity theft recovery portal. This creates your official Identity Theft Report—a crucial document for your recovery. The site generates personalized recovery plans and pre-filled letters for creditors.
Keep your FTC report number. You'll need it for credit bureaus and creditors.
Step 3: Contact Credit Bureaus
Place fraud alerts with all three credit bureaus—Equifax, Experian, and TransUnion. You only need to contact one; they must notify the others. An initial fraud alert lasts one year.
Consider placing a credit freeze, which provides stronger protection by blocking new account openings. Freezes are free and can be lifted temporarily when needed.
Request free copies of your credit reports and review them for unauthorized accounts.
Step 4: File a Police Report
Report the identity theft to your local police. Bring your FTC Identity Theft Report, proof of your identity, proof of your address, and any evidence of the theft. Get a copy of the police report—some creditors and bureaus require it.
Some police departments may be reluctant to take reports. Persist—you have the right to file a report and need documentation.
Step 5: Contact Affected Companies
Notify every company where fraud occurred. Call fraud departments, explain the situation, and follow up in writing. Request that fraudulent accounts be closed and that you receive written confirmation of fraudulent charges being removed.
Send letters by certified mail with return receipt. Include copies (not originals) of your FTC report and police report.
Step 6: Review and Dispute Credit Reports
Dispute every fraudulent account and inquiry on your credit reports. Write to each credit bureau identifying the fraudulent information. Include your FTC report. Bureaus must investigate and remove information they cannot verify.
Follow up if disputes aren't resolved within 30 days.
Step 7: Secure Your Accounts
Change passwords on all online accounts, especially email, banking, and social media. Enable two-factor authentication everywhere possible. Review security questions—thieves may have obtained answers.
Contact your bank and credit card companies about enhanced security measures.
Step 8: Check for Other Damage
Look beyond credit cards. Check for medical identity theft by requesting your medical records and insurance statements. Verify your tax returns weren't compromised by contacting the IRS. Check your Social Security Statement for unauthorized earnings.
Step 9: Consider Additional Protections
After identity theft, consider extended fraud alerts (seven years for confirmed victims), identity theft protection services, regular credit monitoring, and keeping credit freezes in place.
Ongoing Monitoring
Identity theft recovery isn't a one-time event. Monitor your credit regularly for years afterward. Thieves may hold onto stolen information and use it later. Stay vigilant about suspicious contacts or unfamiliar accounts.
Tax Identity Theft
If someone filed a tax return using your information, contact the IRS Identity Protection Specialized Unit. File Form 14039 (Identity Theft Affidavit). Response times are long, but the IRS will eventually resolve the issue.
Getting Legal Help
If companies or credit bureaus don't cooperate with your recovery efforts, an attorney may help. Consumers have rights under the Fair Credit Reporting Act and other laws when bureaus fail to correct fraudulent information.