Every 3 seconds, someone becomes an identity theft victim. If you're here because someone just opened a credit card in your name, drained your bank account, or you found charges you never made, your heart is probably pounding right now.
Take a breath. Yeah, this absolutely sucks. But identity theft isn't game over for your financial life. The next 24 hours matter most, and I'm going to walk you through exactly what to do, step by step.
Here's what nobody tells you: most people screw up identity theft recovery because they either panic and make terrible decisions, or they think it'll magically fix itself. Neither works. But following a plan? That actually saves your credit, your money, and keeps you sane.
Hour 1: Stop the Bleeding (Do This RIGHT NOW)
Secure Your Existing Accounts
Damage control first. Open your banking app right now and check every single account you have. Look for transactions you didn't make - even tiny ones. Thieves love testing with small charges before they go big.
See something fishy? Don't dispute it yet. Screenshot everything first. Your phone's screenshot function just became your most important tool. Capture every fraudulent charge, every weird transaction, every account you never opened.
Pro tip: Fraudsters always test with small charges at gas stations, convenience stores, or random subscription services. That $1.99 charge for "Premium Video Services" you never heard of? There's your proof.
Change passwords on these accounts immediately:
- - All bank accounts
- - Credit card accounts
- - PayPal, Venmo, Cash App - whatever payment apps you use
- - Email accounts (especially the one tied to your money)
- - Any investment or retirement accounts
Use your phone's password manager or just write them down for now. Don't reuse passwords. Ever.
Contact Your Banks and Credit Card Companies
Call the fraud departments at every financial institution where you have accounts. Skip the general customer service number - search "[Bank name] fraud hotline" to get the direct line.
Major US banks' fraud numbers:
- - Chase: 1-866-564-2262
- - Bank of America: 1-800-432-1000
- - Wells Fargo: 1-800-869-3557
- - Citi: 1-800-950-5114
For international banks, search "[Bank name] fraud report" in your language. Most major banks in the UK, Canada, Australia, India, and Brazil have 24/7 fraud lines.
When you call, say exactly this: "I need to report identity theft and fraudulent charges." This gets you transferred to specialists immediately.
They'll want:
- - Your account numbers
- - Specific fraudulent transactions
- - When you first noticed the problem
- - Whether you still have your cards/checkbook
Pro tip: Get reference numbers for every call. Write them down with date and time. You'll need these later.
Hours 2-4: Build Your Paper Trail
File a Police Report
Most people skip this thinking "police can't do anything anyway." Wrong. You need that police report number for literally everything else you're about to do.
Go to your local police station or call their non-emergency line. Many departments let you file identity theft reports online now. In the US, search "[City name] police online report." For other countries, contact local police directly.
Some places have specialized cybercrime or financial crimes units. Ask for them specifically when you call.
Report to Government Agencies
In the United States: Go to IdentityTheft.gov right now. This is the FTC's official site, and it's actually helpful (I know, shocking). It creates a recovery plan customized to your exact situation.
You'll get an Identity Theft Report that has real legal weight. Banks and creditors have to accept this as proof.
In Canada: Contact the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre-centreantifraude.ca
In the UK: Report to Action Fraud at 0300 123 2040 or actionfraud.police.uk
In Australia: Contact ACORN (Australian Cybercrime Online Reporting Network) at acorn.gov.au
In India: File with the National Cyber Crime Reporting Portal at cybercrime.gov.in
Other countries: Search "cybercrime reporting [your country]" or contact your national police force's cybercrime division.
Document Everything
Start a folder on your phone or computer called "Identity Theft Recovery." Include:
- - Screenshots of fraudulent charges
- - Photos of suspicious mail or cards you didn't request
- - Reference numbers from all your calls
- - Copies of police reports
- - Emails from financial institutions
This isn't busy work. Insurance companies, banks, and legal stuff all require detailed documentation.
Hours 4-8: Lock Down Your Credit
Place Fraud Alerts and Credit Freezes
A fraud alert tells creditors to verify your identity before opening new accounts. A credit freeze locks your credit reports completely. You want both.
In the United States: Contact one of these three agencies (they notify the others):
- - Experian: 1-888-397-3742 or experian.com
- - Equifax: 1-800-525-6285 or equifax.com
- - TransUnion: 1-800-680-7289 or transunion.com
Credit freezes are free since 2018. Don't let anyone charge you.
Pro tip: Also freeze your ChexSystems report (for bank accounts) at chexsystems.com and your Innovis report at innovis.com. Most people forget these exist.
International Credit Protection:
Canada: Contact Equifax Canada (1-800-465-7166) and TransUnion Canada (1-877-525-3823)
UK: Contact the three main agencies:
- - Experian UK: 0344 481 8000
- - Equifax UK: 0333 321 4043
- - TransUnion UK (formerly CallCredit): 0330 024 7574
Australia: Contact:
- - Equifax Australia: 138 332
- - Experian Australia: 1300 783 684
- - Illion (formerly Dun & Bradstreet): 13 23 33
India: Contact CIBIL at 022-6140-4300 or cibil.com
Check Your Credit Reports
Once you've placed alerts, pull your credit reports from all agencies. In the US, use annualcreditreport.com (the only official free site). Many other countries have similar free services.
Look for:
- - Accounts you didn't open
- - Inquiries you didn't authorize
- - Wrong personal information
- - Addresses you never lived at
Mark each suspicious item. You'll be disputing these soon.
Hours 8-12: Handle Specific Types of Theft
If Someone Filed Taxes in Your Name
Tax identity theft is particularly nasty because it can delay your legitimate refund for months. I've seen people wait over a year to get this sorted.
US taxpayers: Contact the IRS Identity Protection Specialized Unit at 1-800-908-4490. File Form 14039 (Identity Theft Affidavit). If you haven't filed your return yet, mail it with Form 14039 attached.
Other countries: Contact your national tax authority immediately. Most have specialized identity theft departments now.
If Someone Got Medical Care Using Your Identity
Medical identity theft can literally kill you if wrong information gets in your medical records.
Contact:
- - Your health insurance company's fraud department
- - Every healthcare provider where fraudulent services occurred
- - Your primary care doctor to alert them
Request copies of all medical records created in your name. Review them for accuracy. Wrong blood type or drug allergies in your file could be dangerous.
If Someone Got a Job Using Your Identity
Employment identity theft messes with your taxes and Social Security benefits.
US victims: Contact the Social Security Administration at 1-800-772-1213. You might also need to contact the IRS if the fraudulent income affects your tax situation.
Hours 12-18: Secure Your Digital Life
Change Everything (Yes, Everything)
Your identity thief might have access to way more than you think. Change passwords for:
- - Email accounts (do this first)
- - Social media accounts
- - Online shopping accounts (Amazon, eBay, etc.)
- - Streaming services (Netflix, Spotify, etc.)
- - Work accounts if you access them from personal devices
- - Cloud storage (Google Drive, iCloud, Dropbox)
Pro tip: Use your phone's built-in password manager or download Bitwarden (free and excellent). Creating unique passwords for 50+ accounts is impossible without help.
Enable Two-Factor Authentication
Turn on 2FA for every important account. Use an authenticator app like Google Authenticator or Microsoft Authenticator, not SMS when possible. SIM swapping (where thieves steal your phone number) is increasingly common.
Check for New Accounts
Identity thieves love signing up for accounts in your name. Check:
- - Your email for welcome messages from services you didn't sign up for
- - Your phone for verification texts you didn't request
- - Your mail for cards or statements you didn't expect
Hours 18-24: Plan Your Recovery
Create Your Dispute Strategy
You've gathered evidence. Now it's time to dispute fraudulent accounts and charges systematically.
For each fraudulent item, you'll need to contact:
- - The creditor directly
- - The credit reporting agencies
- - Sometimes collection agencies if accounts went to collections
Use certified mail for written disputes. Email is convenient, but certified mail creates legal proof of delivery.
Set Up Monitoring
Free credit monitoring isn't enough anymore. Consider paid services like:
- - Identity Guard (detailed identity monitoring)
- - LifeLock (owned by Norton, includes restoration services)
- - Credit Karma (free but basic)
Many banks now offer identity monitoring as a free benefit. Check with your financial institutions first.
Pro tip: Set up Google Alerts for your name, Social Security number (last 4 digits), and email addresses. It's free and catches some identity theft attempts.
Understand Your Rights
In the US: The Fair Credit Reporting Act limits your liability for fraudulent charges to $50 on credit cards, $500 on debit cards (if reported within 60 days). Most banks waive even these amounts.
Other countries: Research your local consumer protection laws. The EU's Payment Services Directive, for example, provides strong fraud protections.
What NOT to Do (Seriously, Don't)
Don't Pay Fraudulent Debts
Even if collectors are calling, don't pay anything on fraudulent accounts. Payment can be seen as acknowledgment of the debt.
Don't Close Legitimate Accounts
Closing old accounts hurts your credit score. Just monitor them closely and change passwords.
Don't Ignore Small Charges
That $2.99 charge you don't recognize? Dispute it. Ignoring small fraud encourages bigger fraud.
Don't Rely Only on Credit Monitoring
Credit monitoring catches some identity theft, but not all. Bank account monitoring, tax monitoring, and medical record monitoring are equally important.
The Long Game: Your 30-60-90 Day Plan
Week 2-4: Follow Up Relentlessly
Call every company you reported fraud to. Get status updates. Squeaky wheels get greased faster in fraud departments.
Month 2: Review Everything
Pull fresh credit reports. Check that fraudulent accounts are marked as fraud, not just closed. There's a difference, and it matters for your credit score.
Month 3: Assess the Damage
By now, you should know the full scope of the theft. If your case is complex or involves large amounts, consider hiring an identity theft attorney.
When to Get Professional Help
Some situations are too complex for DIY recovery:
- - Fraudulent charges exceed $10,000
- - Your Social Security number was used to get government benefits
- - Criminal charges were filed in your name
- - The identity theft involves your business
- - You're facing foreclosure or bankruptcy due to identity theft
Identity theft attorneys specialize in these cases. Many work on contingency (no upfront fees).
International Considerations
Identity theft is global, but recovery resources vary by country. If you're an expat or the theft crosses borders:
- - Contact your embassy or consulate
- - Report to authorities in both countries
- - Understand that recovery might take longer
- - Consider hiring local legal help in complex cases
The Psychological Side
Identity theft isn't just financial - it's deeply personal. Someone invaded your life and stole your name. That's traumatic.
It's normal to feel:
- - Violated and angry
- - Anxious about future theft
- - Overwhelmed by the recovery process
- - Suspicious of everyone
These feelings are valid. Talk to friends, family, or a counselor if the stress becomes too much.
Prevention for Next Time
The Basics That Actually Work
- - Freeze your credit reports (keep them frozen unless you're applying for credit)
- - Use a P.O. Box or secure mailbox for sensitive mail
- - Shred everything with personal information
- - Never give personal information to unsolicited callers
- - Use different passwords for every account
- - Monitor your accounts weekly, not monthly
Advanced Protection
- - Consider an identity monitoring service
- - Use a VPN on public WiFi
- - Be cautious about what you share on social media
- - Opt out of data broker sites (tedious but effective)
- - Use a separate email address for financial accounts
Disclaimer: This guide provides general information about identity theft recovery. Laws and procedures vary by jurisdiction. For complex cases involving significant financial damage or legal issues, consult with qualified professionals in your area. Recovery timelines and outcomes vary based on individual circumstances.
Your Next Move
Identity theft feels like the world is ending when it happens to you, but it's not. Millions of people recover from it every year, and you will too.
The key is systematic action, not panic. Follow this 24-hour plan, document everything, and don't let anyone convince you to "just wait and see." The faster you act, the less damage you'll suffer.
Honestly, this surprised me when I first researched identity theft - thieves actually count on you being too overwhelmed to fight back effectively. Prove them wrong.