Learn About Identity Theft Protection and Recovery

Understanding Identity Theft: What It Is and How It Happens

Identity theft occurs when someone uses your personal information without your permission to commit fraud or other crimes. This stolen information might include your name, Social Security number, date of birth, financial account numbers, or driver's license information. The thief may use this data to open new credit accounts, make purchases, file tax returns, or access existing accounts in your name.

According to the Federal Trade Commission, millions of identity theft reports are filed each year in the United States. In 2023 alone, the FTC received over 2 million reports of identity theft and fraud, with consumers losing billions of dollars. The impact varies widely—some cases involve small fraudulent charges that are quickly resolved, while others involve extensive damage to credit history and financial accounts.

Identity theft happens through several common methods:

• Data breaches at retailers, healthcare providers, or financial institutions where your information is stored
• Phishing emails or texts that trick you into revealing sensitive information
• Lost or stolen wallets, mail, or documents containing personal information
• Weak passwords or reused passwords across multiple websites
• Public Wi-Fi networks used for financial transactions or account logins
• Dumpster diving or mail theft to find documents with personal information
• Social engineering, where someone poses as a trusted organization to extract information

Understanding how identity theft occurs helps you recognize potential risks in your daily life. For example, if you receive an unexpected credit card offer in the mail for an account you never opened, this could signal that someone is using your identity. Similarly, if you notice unfamiliar charges on bank statements or calls from collection agencies about debts you didn't incur, these are common warning signs of identity theft.

Practical takeaway: Monitor your financial accounts regularly—at least monthly—and review your credit reports annually to catch signs of identity theft early. Set phone reminders or calendar alerts to check your accounts on a consistent schedule.

Steps to Take If You Discover Identity Theft

If you believe you are a victim of identity theft, taking action quickly can reduce the damage and help prevent further fraud. The specific steps you should take depend on what type of information was stolen and how it's being misused, but there are core actions that apply to most situations.

First, contact your financial institutions immediately. Call the fraud department of your bank and any credit card companies where you hold accounts. Explain that you suspect identity theft and ask them to review recent transactions for unauthorized activity. Many banks have dedicated fraud lines available 24/7. Ask the institution to freeze or close compromised accounts and issue you new cards with new account numbers. Document the date and time of each call, the name of the person you spoke with, and what actions they said they would take.

Second, place a fraud alert on your credit reports. You can do this by contacting one of the three major credit reporting agencies—Equifax, Experian, or TransUnion. You only need to contact one agency, and they are required to notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name. The initial alert lasts one year, though you can renew it. To place an alert, visit the agency's website or call their fraud department. You'll need to provide your name, address, Social Security number, and date of birth.

Third, request copies of your credit reports from all three agencies. You are entitled to one free credit report from each agency per year through annualcreditreport.com, which is the official government website. Review these reports carefully for accounts you don't recognize, inquiries from companies you didn't contact, or personal information that's incorrect. Document any fraudulent accounts or information you find.

Fourth, file a report with the Federal Trade Commission at identitytheft.gov. This creates an official record of the theft and generates a recovery plan customized to your situation. The FTC also provides sample letters you can send to creditors and credit agencies. Filing with the FTC is free and takes about 10 minutes online.

Additional steps may include:

• Filing a police report with your local law enforcement agency, which may be necessary if you plan to dispute fraudulent accounts or debt
• Contacting companies where fraudulent accounts were opened to request closure and documentation of the fraud
• Disputing fraudulent items on your credit reports in writing, with copies of supporting documents
• Monitoring your credit reports regularly for months or years, as some thieves make repeated attempts to use stolen information

The recovery process takes time. Some fraudulent accounts may be resolved within weeks, while others take months or even longer to fully clear from your record. Stay organized by keeping a folder with copies of all correspondence, including dates of phone calls, letters sent, and responses received from creditors and credit agencies.

Practical takeaway: Create a written action plan the moment you suspect identity theft. Write down which accounts are affected, which institutions you've contacted, and what steps you've completed. This prevents you from forgetting important actions and helps you track your progress through the recovery process.

Using Credit Freezes and Fraud Alerts to Protect Your Information

A credit freeze and a fraud alert are two separate protective tools that work differently but serve related purposes in preventing identity theft. Understanding the differences between them helps you choose the right protection for your situation.

A fraud alert notifies creditors that you may be a victim of identity theft and requests that they verify your identity before extending new credit. When you place a fraud alert, any company that receives your credit application must take steps to confirm you really made that application. This might involve calling you at a phone number on file, sending a verification letter, or using other methods to confirm your identity. An initial fraud alert lasts one year and can be renewed. Some people with previous identity theft history can file an extended fraud alert that lasts seven years. Fraud alerts are free and do not affect your ability to obtain credit—they simply add an extra verification step.

A credit freeze, also called a security freeze, prevents creditors from viewing your credit report without your permission. Since creditors typically check your credit report before approving new accounts, a freeze makes it much harder for thieves to open accounts in your name. However, a freeze also means legitimate creditors you want to work with cannot see your report, so you'll need to temporarily lift the freeze when you're applying for new credit. Freezes are also free in all states and can remain in place indefinitely. You can thaw (temporarily lift) or unfreeze (permanently remove) a freeze whenever you choose.

The practical difference is this: A fraud alert is useful if you've been a victim of identity theft or believe your information may be compromised, as it adds verification requirements for anyone trying to open accounts. A credit freeze is more restrictive and is useful if you want to prevent any new accounts from being opened without your direct involvement, regardless of whether there's suspected fraud. Many people use both tools together for maximum protection.

To place a fraud alert or credit freeze, contact the three major credit reporting agencies:

• Equifax: Call 1-800-349-9960 or visit equifax.com
• Experian: Call 1-888-397-3742 or visit experian.com
• TransUnion: Call 1-833-395-6938 or visit transunion.com

You only need to contact one agency for a fraud alert, as they are required to notify the other two. However, for a credit freeze, you should contact all three agencies separately. Each agency handles freezes independently. When you contact them, have your Social Security number, date of birth, and address ready. The agency will provide you with a PIN or password that you'll need to use if you want to lift the freeze later.

Keep detailed records of when you placed the freeze or alert, which agency you contacted, and the confirmation number or PIN provided. Store this information in a safe place, such as a locked drawer or password manager. You may need this information months or years later if you want to temporarily lift a freeze to apply for credit.

Practical takeaway: If you've experienced identity theft, place a fraud alert immediately while you work through recovery steps. If you want stronger protection going forward, add a credit freeze. Review your choice