Signs that identity theft may have happened

Identity theft happens when someone uses your personal information — your name, Social Security number, credit card number, or bank account details — without permission to open accounts, make purchases, or take out loans in your name. The fastest way to know if this has happened is to check your credit reports and bank statements regularly, because fraudulent activity usually shows up there first.

Watch for these specific warning signs: credit card or bank statements that arrive late or don't arrive at all; charges on your statements you don't recognize; calls from debt collectors about accounts you never opened; credit inquiries you didn't authorize; mail addressed to you from companies you've never contacted; or a sudden drop in your credit score with no explanation. You may also receive tax documents for income you didn't earn, or discover that someone has filed a tax return using your Social Security number.

Some signs are harder to spot. A new address on your credit report, accounts listed under a slightly different version of your name, or inquiries from employers you never applied to can all indicate that someone is using your identity. The sooner you notice and act, the easier it is to limit the damage.

Key Takeaways

  • Check your credit reports from all three bureaus — Equifax, Experian, and TransUnion — at annualcreditreport.com, which is the only official free source.
  • Review your bank and credit card statements monthly for charges you don't recognize, and contact your bank immediately if you spot fraud.
  • Place a fraud alert with one of the three credit bureaus, and they will notify the other two; this makes it harder for thieves to open new accounts in your name.
  • If you find evidence of identity theft, file a report with the Federal Trade Commission at identitytheft.gov and keep the report number for your records.
  • Consider a credit freeze if you want to prevent new accounts from being opened, though this requires unfreezing when you want to apply for credit yourself.

Getting your free credit reports

The three major credit bureaus — Equifax, Experian, and TransUnion — maintain files on your credit history. You are may have access to to one free report from each bureau every 12 months. The only official source for these free reports is annualcreditreport.com, which is run by the three bureaus together. Do not use other websites that claim to offer free reports, as many charge hidden fees or try to sell you credit monitoring services.

Go to annualcreditreport.com and enter your name, address, Social Security number, and date of birth. You can request all three reports at once or stagger them throughout the year — spacing them out means you can monitor your credit more frequently. The site will ask you to verify your identity by answering questions about your credit history or by uploading a government ID.

Once you receive your reports, read them carefully. Look for accounts you don't recognize, inquiries from companies you never contacted, and personal information that is wrong or outdated. If you spot something suspicious, note the account number, the date it was opened, and the amount owed. This information will be important if you need to dispute the fraudulent account.

Checking your bank and credit card statements

Your bank and credit card companies send statements monthly, either by mail or email. Review these statements as soon as you receive them, looking for charges you don't recognize. Even small charges matter — thieves sometimes make small test purchases first to see if the account is being monitored before making larger purchases.

If you spot a fraudulent charge, contact your bank or credit card company immediately. Most companies have a fraud department with a phone number on the back of your card. Tell them which charges are not yours and ask them to dispute the transaction. By law, your liability for unauthorized credit card charges is capped at $50, and many companies waive this entirely if you report fraud quickly.

For bank accounts, act even faster. If someone has access to your checking account, they can drain it quickly. Call your bank's fraud line right away, and ask them to freeze the account or issue you a new account number. Request a written confirmation of the fraud report for your records.

Placing a fraud alert on your credit

A fraud alert tells credit bureaus and lenders to take extra steps before opening new accounts in your name. When you place a fraud alert, lenders must contact you by phone to verify that you actually want to open a new account before they approve it. This makes it much harder for a thief to open credit cards or take out loans using your identity.

You only need to contact one of the three credit bureaus to place a fraud alert, and that bureau will notify the other two. You can place a fraud alert by phone, mail, or online. Here are the contact details:

  • Equifax: 1-800-525-6285 or equifax.com/personal/credit-report-services
  • Experian: 1-888-397-3742 or experian.com/fraud
  • TransUnion: 1-800-680-7289 or transunion.com/fraud-alerts

A standard fraud alert lasts one year. If you want longer protection, you can request an extended fraud alert, which lasts seven years, though this requires proof that you are a victim of identity theft. After you place a fraud alert, the credit bureaus will send you free copies of your credit reports so you can monitor them for new fraudulent accounts.

Filing a report with the Federal Trade Commission

If you have found evidence that your identity has been stolen, file a report with the Federal Trade Commission at identitytheft.gov. This is a free, official report that documents the theft and creates a record you can use when disputing fraudulent accounts or dealing with creditors and debt collectors.

When you file, you will answer questions about what information was stolen, which accounts were opened fraudulently, and what steps you have already taken. The FTC will generate a report number — write this down and keep it safe. You can use this number when you contact creditors, banks, or credit bureaus to prove that you reported the theft officially.

The FTC does not investigate individual cases, but your report helps them track identity theft trends and may contribute to larger investigations. The report also creates a record that can help you if a debt collector tries to collect on a fraudulent account — you can show them the FTC report to prove the debt is not yours.

Understanding credit freezes

A credit freeze prevents anyone — including you — from opening new accounts using your credit file. When you freeze your credit, lenders cannot see your credit report, so they will not approve new credit applications. This is the strongest protection against identity theft, but it comes with a trade-off: you cannot open new credit cards, take out loans, or even sign up for some services that check your credit until you unfreeze it.

To place a credit freeze, contact each of the three bureaus separately. You can do this online, by phone, or by mail. Most bureaus allow you to freeze and unfreeze your credit for free, though some charge a small fee in certain states. When you unfreeze, you can choose to unfreeze all three bureaus at once or unfreeze them individually for specific lenders.

A credit freeze is different from a fraud alert. A fraud alert still allows lenders to see your credit report and approve accounts if they can verify your identity by phone. A freeze blocks access entirely. If you are not actively applying for credit, a freeze offers stronger protection. If you plan to apply for a mortgage, car loan, or credit card soon, a fraud alert may be more practical.

What to do if accounts were opened in your name

If you find accounts on your credit report that you did not open, contact the creditor immediately. Tell them the account is fraudulent and ask them to close it. Request written confirmation that the account has been closed and marked as fraudulent. Keep this documentation in a file for your records.

Next, dispute the account with the credit bureau that reported it. You can do this online, by phone, or by mail. Provide the credit bureau with a copy of your FTC identity theft report and any documentation from the creditor showing the account was fraudulent. The bureau must investigate your dispute within 30 days and remove the account from your report if they cannot verify it is legitimate.

If the fraudulent account appears on more than one credit report, dispute it with each bureau separately. Keep copies of all letters you send and all responses you receive. If a debt collector contacts you about a fraudulent account, send them a written dispute and a copy of your FTC report. By law, they must stop collection efforts while they investigate.

Monitoring your credit going forward

After you have dealt with identity theft, continue monitoring your credit regularly. Check your credit reports at least once a year using annualcreditreport.com, and review your bank and credit card statements every month. Many credit card companies and banks now offer free credit monitoring through their apps or websites — check whether yours does.

You can also purchase credit monitoring services from companies like Equifax, Experian, or TransUnion, though these are not necessary if you check your reports and statements regularly on your own. Some monitoring services alert you when new accounts are opened or inquiries are made, which can help you catch fraud faster.

Consider setting calendar reminders to check your credit reports on a schedule. Some people check one bureau's report every four months, rotating through all three. Others check all three at once once a year. Either approach works — the key is checking regularly and catching problems early.

Frequently Asked Questions

How long does it take to fix identity theft?

Simple cases — closing one fraudulent account and removing it from your credit report — can take a few weeks to a few months. Complex cases with multiple accounts, ongoing fraud, or accounts that have been sold to collection agencies can take a year or longer. The sooner you report the theft and dispute the accounts, the faster the process moves.

Will identity theft hurt my credit score?

Yes, fraudulent accounts and missed payments on accounts you did not open will lower your credit score. The damage is usually temporary — once you dispute and remove the fraudulent accounts, your score should recover over time. Paying down any legitimate debt you have will also help your score recover faster.

Can I be held responsible for charges made by someone who stole my identity?

For credit cards, your liability is capped at $50 by law, and many companies waive this entirely. For debit cards and bank accounts, your liability depends on how quickly you report the fraud — report within two business days and you lose at most $50; report within 60 days and you may lose up to $500. Report after 60 days and you could lose everything in the account.

What if I find out my Social Security number was stolen but no accounts have been opened yet?

Place a fraud alert and consider a credit freeze immediately. Monitor your credit reports closely for the next year. You do not need to file an FTC report unless fraudulent accounts have actually been opened, but you can file one anyway to create an official record. Keep checking your credit regularly — sometimes thieves wait months before using stolen information.

Do I need to pay for credit monitoring services?

No. You can monitor your credit for free by checking your reports at annualcreditreport.com once a year and reviewing your bank and credit card statements monthly. Paid monitoring services offer convenience and alerts, but they are not necessary to catch identity theft if you check regularly on your own.