← All articles

How-to

How to Handle Identity Theft: A Recovery Guide

10 min read

How to Handle Identity Theft: A Recovery Guide

Last Updated: October 23, 2026

Quick Summary

To handle identity theft, act immediately by documenting the fraud, contacting affected institutions, changing passwords, filing an Identity Theft Report through IdentityTheft.gov, and considering a fraud alert or credit freeze. The specific steps depend on the type of theft, whether it involves credit cards, taxes, medical records, government benefits, a child's information, or account takeover.

  • File an Identity Theft Report through IdentityTheft.gov to create an official record for disputing fraudulent accounts.
  • Contact your bank and credit card companies to dispute unauthorized transactions, close compromised accounts, and issue new cards.
  • Place a fraud alert or credit freeze with all three credit bureaus to prevent new accounts from being opened in your name.
  • Check your credit reports every four months through AnnualCreditReport.com and dispute any accounts or inquiries you don't recognize.
  • Monitor financial accounts weekly and enable multifactor authentication on email and banking to prevent further unauthorized access.

Table of Contents

Act Immediately: Your First Steps When Identity Theft Occurs

When you discover identity theft, act quickly to limit damage, but the right first steps to handle identity theft depend on the type.

Woman reviewing financial documents on a laptop to handle identity theft with concern at her desk
Woman reviewing financial documents on a laptop to handle identity theft with concern at her desk

General first steps (do these regardless of type):

  1. Document everything. Record the date you discovered the theft, the accounts or records affected, and the fraudulent activity you have seen.
  2. Contact the institutions involved. Ask your bank, credit card companies, or the provider where the fraud occurred to lock or close compromised accounts, reverse unauthorized charges, and issue new cards or account numbers.
  3. Change passwords and enable multifactor authentication on email, banking, and any account tied to the compromised information.
  4. File an Identity Theft Report through IdentityTheft.gov. This creates an official record you will use with creditors, bureaus, and agencies.
  5. Consider a fraud alert or credit freeze if new accounts may be opened in your name.

Now tailor the response to the type of theft.

Financial identity theft (credit cards, bank accounts, loans) Contact each financial institution, dispute every unauthorized transaction, and close compromised accounts.

Child identity theft A child's Social Security number can be used to open accounts or obtain benefits, and the misuse may go unnoticed for years.

Watch Out If you notice new accounts opened in your name, contact those institutions immediately. The longer fraudulent accounts stay open, the more damage they cause to your credit.
Pro Tip Not sure whether you are dealing with a data breach or confirmed identity theft? A breach means your information was exposed; identity theft means it has been misused. If you only received a breach notice, monitor accounts and consider a freeze. If you see unauthorized activity, treat it as identity theft and follow the steps above.

Steps to Report Identity Theft to the FTC

Reporting to the Federal Trade Commission creates an official record that helps you handle identity theft, critical for disputing fraudulent accounts and recovering.

The FTC handles identity theft reports through IdentityTheft.gov, the government's official identity theft reporting site. Go there and file a report. The process takes about 10 minutes.

When you file, you'll provide:

  • Personal information (name, address, date of birth)
  • Details about the theft (what was compromised, when you discovered it)
  • Accounts affected (credit cards, bank accounts, loans, utilities)
  • Steps you've already taken (password changes, account freezes)

The FTC generates an Identity Theft Report and a recovery plan tailored to your situation. Print both; you'll use them when contacting creditors and disputing fraudulent accounts. Banks and creditors recognize the report as proof of identity theft, which makes disputes easier.

Pro Tip Save your FTC report number. You'll reference it in every call to banks, creditors, and credit bureaus. Keep a copy in a safe place, both digital and printed.

Contact Your Financial Institutions and Dispute Fraudulent Activity

Now that you've reported the theft to the FTC, contact every financial institution where fraudulent activity occurred. Bring your FTC report number as proof. Start with your bank and ask them to dispute each unauthorized transaction, reverse fraudulent charges, close compromised accounts, and issue new cards or account numbers.

If fraudsters opened new accounts in your name (credit cards, loans, utilities), contact those institutions, explain the accounts were opened fraudulently, provide your FTC report, and ask them to close the accounts and remove them from your credit report.

Key Takeaway Fraudulent accounts damage your credit score. The sooner you close them and remove them from your credit report, the faster your credit recovers.

How to Freeze Credit Reports and Place a Fraud Alert

A credit freeze and a fraud alert both protect your credit, but they work differently. Understanding each helps you choose the right tool and avoid surprises when you need legitimate credit.

A fraud alert tells credit bureaus to take extra steps to verify your identity before opening new credit, often by calling you at a number you provide. There are three types:

  • Initial fraud alert (one year): For people who suspect misuse but have not confirmed it. Free, and one request with any of the three nationwide bureaus is supposed to trigger alerts at the other two.
  • Extended fraud alert (seven years): Requires an Identity Theft Report, such as the one generated through IdentityTheft.gov. Free, and it can include a phone number for lenders to reach you.
  • Active-duty alert: For service members, generally one year, with the option to request an extended version.

A common pattern is to place an initial fraud alert first if you suspect misuse, then upgrade to a freeze if the theft is confirmed or ongoing. You can also do both.

To place a fraud alert:

  1. Contact one of the three nationwide bureaus: Equifax, Experian, or TransUnion.
  2. Request an initial or extended fraud alert (an extended alert requires your Identity Theft Report).
  3. Provide the identifying details the bureau requests.
  4. Ask for written confirmation and note the date the alert expires.

To freeze your credit:

  1. Contact each of the three bureaus separately, online, by phone, or by mail. A freeze must be placed at each bureau; one request does not cover all three.
  2. Provide the identifying information each bureau requires.
  3. Keep the PIN, password, or account credentials each bureau issues. You will need them to lift the freeze.
  4. Get written confirmation and record the date.

To lift a freeze temporarily: Contact the bureau, provide your PIN or credentials, and specify the period or the creditor that should have access.

Pro Tip Keep a single recovery file with each bureau's freeze confirmation, PIN or credentials, and the date you placed or lifted the freeze. If you later need to thaw quickly for a loan application, you will not have to hunt for credentials under deadline pressure.
Watch Out A freeze is not a substitute for reviewing your reports. It restricts new-account pulls, but it does not stop misuse of accounts you already hold, and it does not correct errors already on your file. Pair a freeze with a review of all three reports and disputes for anything you do not recognize.

If a bureau will not place a freeze, asks for documents you cannot easily provide, or you believe your file contains fraudulent information, you can file a complaint with the Consumer Financial Protection Bureau. Keep records of every call, including the date, the representative's name if given, and any reference number.

How to Check Leaked Passwords and Secure Your Digital Accounts

If your personal information was exposed in a data breach, your passwords may be compromised too.

Use Have I Been Pwned, a free tool that checks if your email appears in known data breaches. Enter your email address.

If your email appears in breaches, change the password for that account right away.

Get Started Today →

Then check every account tied to that email. Fraudsters often use exposed credentials to access email, reset other passwords, and reach banking or shopping accounts.

Enable multifactor authentication on all accounts, especially email and banking. This prevents login even if someone has your password.

Watch Out Your email is the key to your digital life. If someone gains access to your email, they can reset passwords on every other account. Protect your email password fiercely.

Create an Identity Theft Report Template to Document Your Recovery

Keeping organized records is critical for identity theft recovery. Use this template to track every action, contact, and outcome:

IDENTITY THEFT RECOVERY LOG

Personal Information

  • Name: _______________
  • Social Security Number: _______________
  • Date Theft Discovered: _______________
  • FTC Report Number: _______________

Fraudulent Activity Discovered

  • Account Type: Bank / Credit Card / Loan / Utility / Other
  • Account Name: _______________
  • Fraudulent Amount: _______________
  • Date Discovered: _______________

Contacts Made

  • Institution: _______________
  • Contact Phone: _______________
  • Date Called: _______________
  • Person Spoken With: _______________
  • Actions Taken: _______________
  • Case Number: _______________
  • Follow-up Needed: Yes / No
  • Follow-up Date: _______________

Credit Bureau Actions

  • Bureau: Equifax / Experian / TransUnion
  • Fraud Alert Placed: Yes / No / Date: _______________
  • Credit Freeze Placed: Yes / No / Date: _______________
  • PIN Number: _______________
  • Free Credit Report Received: Yes / No / Date: _______________

Dispute Status

  • Account: _______________
  • Dispute Filed: Yes / No / Date: _______________
  • Dispute Resolution: _______________
  • Date Resolved: _______________

Print this template and fill it out as you take action. Keep copies of all correspondence, emails, letters, and receipts in a folder, both physical and digital.

Documentation protects you in disputes and tracks what's been resolved.

Monitor Your Recovery and Prevent Future Incidents

Identity theft recovery doesn't end when fraudulent accounts close. Monitor your credit for months to catch new fraud.

Check your credit reports regularly. You're entitled to one free report per year from each bureau through AnnualCreditReport.com.

Review each report carefully. Look for:

  • Accounts you didn't open
  • Hard inquiries you didn't authorize
  • Incorrect personal information
  • Negative marks from fraudulent activity

Dispute any errors. Contact the bureau in writing and provide proof (your FTC report, documentation of closed accounts). Bureaus must investigate within 30 days.

According to the Identity Theft Resource Center's 2026 Trends Report, one in four identity crime victims manage multiple incidents. The recovery system often fails those experiencing the greatest financial harm. This underscores why ongoing monitoring matters.

Monitor your financial accounts too. Check bank and credit card statements weekly for unauthorized activity, and set up institution alerts for large purchases, new devices, or password changes.

To reduce future risk:

  • Use strong, unique passwords everywhere
  • Enable multifactor authentication on all accounts
  • Never share your Social Security number unless absolutely necessary
  • Shred sensitive documents before discarding
  • Monitor your credit regularly
  • Be cautious with email and links from unknown senders
  • Keep software and devices updated
Key Takeaway Identity theft recovery takes time. Most cases resolve within a few months, but serious fraud can take a year or longer. Stay vigilant and patient.

Frequently Asked Questions

What should I do if my Social Security number has been compromised?

If your Social Security number is compromised, immediately report the identity theft to the FTC at IdentityTheft.gov. Contact your bank and credit card companies to report fraudulent activity. Place a fraud alert on your credit reports with the three major credit bureaus (Equifax, Experian, TransUnion), or consider a credit freeze. Monitor your credit reports for unauthorized accounts and dispute any fraudulent charges. Change passwords on all financial accounts and enable multifactor authentication where available.

What is the difference between a fraud alert and a credit freeze?

A fraud alert notifies creditors that you may be a victim of identity theft, requiring them to verify your identity before opening new accounts. It lasts one year and is free. A credit freeze restricts access to your credit report entirely, preventing new accounts from being opened in your name without your explicit permission. Freezes are also free and last until you remove them. Both are effective tools, but freezes offer stronger protection. You can place both simultaneously.

How do I know if my information was part of a data breach?

Check your email for breach notifications from companies where you have accounts. Use free tools like Have I Been Pwned to search your email address against known data breaches. Monitor your credit reports for unfamiliar accounts or inquiries. Review your bank and credit card statements for unauthorized charges. If you discover unauthorized activity, treat it as confirmed identity theft and follow the recovery steps outlined in this guide.

How long does it take to recover from identity theft?

Recovery timelines vary depending on the type and extent of identity theft. Simple cases may resolve in weeks, while complex fraud involving multiple accounts or accounts opened in your name can take months or longer. The Identity Theft Resource Center reports that one in four identity crime victims manage multiple incidents, and the recovery system can fail those experiencing the greatest financial harm. Stay organized, follow up regularly with creditors and agencies, and keep detailed records of all communications.

Handling identity theft is stressful, but you're not alone. Millions recover every year by following these steps systematically. The key is to act fast, document everything, and monitor your recovery. At cybersweep analytics, we help reduce your exposure to data brokers and monitor for breaches so you can catch threats early. Take control of your identity recovery today.

Get Started Today