How To Recover From Identity Theft

Identity theft recovery is not a single step. It’s a process that can take weeks, months, or in complex cases, years. The sooner you start, the less damage compounds. This article is a phase-by-phase action plan for what to do after theft has already happened.

If you’re trying to prevent theft rather than recover from it, see How To Protect Yourself After A Data Breach and How To Spot Financial Scams.

Phase 1: Immediate Containment

The first hours and days matter. Your goal is to stop the bleeding before more damage is done.

Place a Fraud Alert

A fraud alert tells creditors to take extra steps to verify your identity before opening new credit in your name. It’s free, lasts one year (or seven years if you file an extended fraud alert after completing a police report), and you only need to contact one bureau — they’re required to notify the other two.

Contact any one of:

• Equifax: equifax.com/personal/credit-report-services/credit-fraud-alerts/
• Experian: experian.com/fraud/center.html
• TransUnion: transunion.com/credit-help/fraud-victim-resource/place-fraud-alert

Freeze Your Credit at All Three Bureaus

A fraud alert asks creditors to verify identity. A credit freeze blocks new credit entirely. It’s the stronger protection and the right move if you know your information has been stolen.

Freezes are free at all three bureaus. You’ll need to contact each one separately:

A freeze stays in place until you lift it. You can temporarily thaw it when you need to apply for credit, then refreeze it.

Also consider freezing your credit with ChexSystems (for bank accounts) and the NCTUE (for utility accounts) if those services were affected.

Change Passwords on Compromised Accounts

If any financial accounts were accessed, change the passwords immediately. Enable two-factor authentication where available. Do not reuse passwords across accounts.

Phase 2: Document Everything

Recovery requires paperwork. The documentation you create now will be used for months in disputes and follow-ups.

File a Report at IdentityTheft.gov

IdentityTheft.gov is the Federal Trade Commission’s official identity theft recovery tool. Filing here does several things:

• Creates an official FTC Identity Theft Report (accepted by most creditors in place of a police report)
• Generates a personalized step-by-step recovery plan based on exactly what happened to you
• Pre-fills dispute letters and forms you can send to creditors and debt collectors
• Tracks your recovery progress

Go to IdentityTheft.gov and walk through the intake. This is the single most useful step in the recovery process. It takes 15–30 minutes and does a lot of the organizational work for you.

Pull Your Credit Reports

Pull your free credit reports from all three bureaus at AnnualCreditReport.com. Review every account, inquiry, and address. Flag:

• Accounts you didn’t open
• Hard inquiries you didn’t authorize
• Addresses where you’ve never lived
• Employers you’ve never worked for
• Balances, late payments, or collections on accounts that aren’t yours

Write down every discrepancy with the account name, account number, date reported, and bureau it appeared on. You’ll need this list for disputes.

Keep a Recovery Log

Open a document (or use the IdentityTheft.gov tracker) and log every action you take:

• Date
• Who you contacted (institution, bureau, agency)
• What you did (called, sent letter, filed dispute)
• What they said
• Reference or confirmation numbers
• Next steps or follow-up dates

This log will save you when a creditor says they have no record of your previous contact.

Phase 3: File a Police Report if Needed

An FTC Identity Theft Report is sufficient for most disputes. But some creditors and institutions require a police report. If the theft involved significant fraud (large amounts, tax fraud, criminal use of your identity), a police report also creates a stronger legal record.

File with your local police department. Bring:

• A copy of your FTC Identity Theft Report
• A government-issued ID
• Proof of your address
• Any documentation of the fraud (account statements, letters, screenshots)

Ask for a copy of the police report with the case number. Some departments are reluctant to take identity theft reports — if yours pushes back, explain that you need it for creditor disputes. You’re entitled to file one.

Phase 4: Contact Affected Institutions

Work through your list of affected accounts and contact each one directly. Do not rely solely on the dispute process through the bureaus — you need to address fraud at the source too.

Banks and Credit Unions

If a fraudulent account was opened at a bank, call their fraud department, not general customer service. Ask them to:

• Flag the account as fraudulent
• Freeze or close the account
• Remove fraudulent transactions from your record
• Provide written confirmation

If your existing checking or savings accounts were accessed, get new account numbers and new debit cards immediately.

Credit Card Issuers

For fraudulent credit cards opened in your name, contact the issuer’s fraud department. Request:

• Immediate account closure
• Written statement that the account is fraudulent and you are not responsible
• Removal of all associated charges

Keep copies of everything they send.

Utilities and Other Services

If someone opened utility accounts (electric, gas, phone, internet) in your name, contact each provider. You may need to provide your FTC report or police report. Some utility companies report to specialized consumer reporting agencies like ChexSystems or NCTUE rather than the three main bureaus.

IRS (If Tax Fraud Is Involved)

If someone filed a tax return using your Social Security number, or if your SSN was used for employment fraud, you need to act quickly:

1. File IRS Form 14039 (Identity Theft Affidavit)
2. Respond promptly to any IRS letters — do not ignore them
3. Request an IRS Identity Protection PIN (IP PIN)

The IRS IP PIN is a six-digit number that must be entered on your federal tax return each year. It prevents anyone else from filing a return using your SSN. Once enrolled, you get a new PIN each January. Apply at IRS.gov/IPPIN.

Tax identity theft can delay your legitimate tax refund by months. The IRS does resolve these cases, but it takes time.

Phase 5: Dispute Fraudulent Accounts

Disputing errors on your credit reports removes fraudulent accounts and any damage they caused to your score.

Disputing With the Bureaus

You have the right to dispute any inaccurate information on your credit report. Under the Fair Credit Reporting Act, bureaus generally must investigate within 30 days and remove items they can’t verify.

Send a dispute to each bureau that shows the fraudulent account. Include:

• A written description of what’s fraudulent and why
• A copy of your FTC Identity Theft Report
• Copies (not originals) of any supporting documentation
• Your complete name, address, and date of birth

Do this in writing, sent certified mail, so you have a paper trail. You can also dispute online, but written disputes create a better record.

Disputing With the Creditor Directly

Also send a dispute directly to the creditor or debt collector. Request that they:

• Mark the account as fraudulent
• Stop reporting it to the credit bureaus
• Send written confirmation

Under the Fair Debt Collection Practices Act, debt collectors must stop collection activity on accounts disputed as fraudulent once they receive your Identity Theft Report.

Block Fraudulent Information

You can request that credit bureaus block fraudulent information from appearing on your report. This is a stronger protection than a standard dispute. To request a block, provide:

• Proof of your identity
• Your FTC Identity Theft Report
• Identification of the specific items to block

Blocked items cannot be reinserted without your consent.

Phase 6: Monitor and Follow Up

Recovery doesn’t end after you file the first dispute. Fraudulent accounts can resurface, new fraud can appear, and some disputes require follow-up.

Monitor Your Credit Regularly

Check your credit reports every few months during active recovery. Look for:

• Reappearance of accounts you had removed
• New fraudulent accounts or inquiries
• Unexpected score drops

Many free tools (Credit Karma, your bank’s credit monitoring, Experian’s free tier) show you alerts when significant changes appear on your report. Use them.

Follow Up on Open Disputes

If 30–45 days pass without a response to a dispute, follow up in writing. Keep records of every follow-up. If a bureau or creditor fails to investigate properly, you can file a complaint with the CFPB at ConsumerFinance.gov/complaint or with your state attorney general.

Consider a Long-Term Fraud Alert

After completing a police report, you can place a seven-year extended fraud alert on your credit file. This lasts much longer than the standard one-year alert and requires creditors to take additional verification steps for the duration.

Special Situations

Child Identity Theft

Children’s SSNs are valuable targets because there’s no credit file to monitor. Theft often goes undetected until the child applies for credit, financial aid, or a job years later.

Signs: your child receives credit offers, debt collection calls, or IRS notices. To check, contact each of the three credit bureaus and request a manual search using your child’s SSN.

If fraud is found, contact the FTC and freeze your child’s credit at all three bureaus. Most states allow parents or guardians to freeze a minor’s credit.

Medical Identity Theft

Someone uses your identity to receive medical care or prescription drugs. This is dangerous because fraudulent medical records can affect your own healthcare. Contact the healthcare providers involved, your insurance company, and review your Explanation of Benefits statements carefully.

How Long Does Recovery Take?

There’s no single timeline. Realistic expectations:

The more accounts affected and the longer the fraud went undetected, the longer recovery takes. Stay organized, be persistent, and document everything.

Frequently Asked Questions

What’s the difference between a fraud alert and a credit freeze?

A fraud alert asks lenders to verify your identity before extending credit — it’s advisory. A credit freeze actually blocks new credit from being opened without your explicit authorization. If you know your information has been stolen, a freeze is the stronger protection.

Can I recover my credit score after identity theft?

Yes. Once fraudulent accounts are successfully disputed and removed, the score damage they caused goes with them. Your score reflects your actual history, and fraudulent items shouldn’t remain once you’ve properly disputed them with supporting documentation.

Do I need a lawyer for identity theft recovery?

Most people don’t. The FTC’s IdentityTheft.gov, the dispute process, and your own persistence are enough for the majority of cases. If fraud has resulted in criminal charges against you, or if creditors refuse to remove verified fraudulent accounts, consulting an attorney who specializes in consumer protection law is worth considering.

What if a debt collector keeps contacting me about a fraudulent account?

Send them a copy of your FTC Identity Theft Report and a written dispute by certified mail. Under federal law, they must stop collection activity on the account. If they continue, file a complaint with the CFPB. You may also have grounds for legal action under the Fair Debt Collection Practices Act.

Learn More

• Federal Trade Commission: IdentityTheft.gov — Official Recovery Plans and Dispute Letters
• USAGov: Identity theft
• FTC: Credit freezes and fraud alerts
• Consumer Financial Protection Bureau: Identity theft and credit reports
• IRS: Identity Protection PIN (IP PIN)