Identity Theft: First Steps to Limit the Damage

Finding out that someone used your name, Social Security number, or account details is alarming. You may see bills for things you never bought, a debt collector calling about an account you did not open, or a notice that a loan application was denied. The first days matter, because quick action can stop some of the damage and create a record that helps later.

This guide lists the usual first steps. Every situation is different, and the steps that fit you may depend on what information was taken and how it was used.

Know the warning signs

Identity theft often shows up in ordinary paperwork. The USAGov identity theft page lists common warning signs, including bills for items you did not buy, debt collection calls for accounts you did not open, information on your credit report for accounts you do not recognize, loan denials you did not expect, and mail that stops arriving. If you see any of these, treat them as a reason to check your records.

Do not wait for a perfect picture before you act. You can start the steps below while you continue to gather facts.

Report it and get a recovery plan

The most useful first step is to report the theft at IdentityTheft.gov, the federal government's official site for reporting identity theft. The site asks what happened, then creates a personal recovery plan with steps to follow. You can save the report and the plan, and many people use the report as a record when they talk to banks or creditors.

The FTC's identity theft and online security section also explains how to protect your personal information and what to do after your information is exposed.

Call the credit reporting agencies

The USAGov page advises contacting the three major credit reporting agencies and asking them to place a fraud alert or a credit freeze on your accounts. A fraud alert asks lenders to take extra steps before they open new credit in your name. A credit freeze generally blocks new credit checks, which makes it harder for someone to open accounts with your information. Ask each agency how to place and lift these protections, since the process can differ.

You can also review your credit reports. The USAGov credit reports page explains that the three credit reporting agencies, Equifax, Experian, and TransUnion, issue reports that you can request through the official AnnualCreditReport.com site. Look for accounts, addresses, and inquiries you do not recognize.

Contact your banks and card issuers

Call the fraud department of every bank and card company where you have an account. Tell them what happened, and ask them to close or freeze any account that may have been affected. Ask whether a new card or account number should be issued.

Keep a log of every call. Write the date, the time, the name of the person you spoke with, and any reference number. If a company asks you to submit a written dispute, send it by a method that gives you proof of delivery and keep a copy.

Document everything

Create one folder, paper or digital, for the case. Store the IdentityTheft.gov report, credit reports, letters from creditors, police report numbers if you filed one, and your call log. Photos of suspicious bills and screenshots of account activity can also help. If a debt collector contacts you about a debt you do not owe, ask for written proof of the debt and keep the letter.

A clear record makes it easier for a bank, a credit bureau, or a lawyer to understand what happened and in what order.

Watch for follow-up scams

After a data breach or identity theft, criminals sometimes pose as banks, government offices, or recovery services. A caller may say you must pay a fee to fix the problem, or ask for your password to "protect" your account. Banks and government agencies do not usually demand payment by gift card or wire transfer to stop a case. If you are unsure, hang up and call the official number on your card or on the agency's website.

When a lawyer may help

Many identity theft problems can be handled with reports, letters, and calls. A lawyer may be useful when a creditor refuses to correct a record, when a debt collector keeps pursuing an account you did not open, when a criminal case involves your name, or when the harm is large. A lawyer who handles consumer and credit matters can explain your rights under federal and state law and what steps may help.

For background on choosing a lawyer and understanding fee terms, see our guides. Before you hire anyone, ask how they charge and whether they offer a consultation. Be cautious of any company that promises to erase your credit history or that asks for a large fee before doing any work.

Questions to ask at the first consultation

• Which accounts should I dispute first, and in what order?
• Should I file a police report, and how does that help my case?
• What evidence do I need to show that an account is fraudulent?
• Which creditors are likely to need written dispute letters?
• What are my rights if a debt collector contacts me?
• How do you charge for consumer and identity theft matters?

Frequently asked questions

Do I need a police report?

It depends on the situation and what your creditors ask for. Ask your creditors and the agencies you contact whether they want one. Keep the report number if you file it.

Will a credit freeze hurt my credit score?

A credit freeze generally does not change your score. It limits who can see your credit report. You can lift it when you need to apply for credit. Ask each credit bureau how its process works.

Can someone else fix my credit for me?

Be careful with credit repair companies. You can often complete the basic steps yourself using free official resources, and a legitimate lawyer can explain your rights in writing.

How long does recovery take?

It varies widely. Some cases resolve in weeks, and others take months, especially when several creditors are involved. Keep your records current throughout the process.

This page is general information, not legal advice. Laws change and every case is different — talk to a licensed attorney about your situation.