Where to start checking for identity theft

The fastest way to check for identity theft is to pull your credit reports from all three bureaus — Equifax, Experian, and TransUnion — at no cost through AnnualCreditReport.com, the official site run by the Federal Trade Commission. You can request all three reports at once or space them out over the year. Look for accounts you did not open, inquiries from companies you never contacted, and addresses that are not yours.

Before you pull your reports, check your own financial accounts first. Log into your bank, credit card, and investment accounts and scan the transaction history for charges you do not recognize. Set up account alerts on your main accounts so you get notified of large purchases or new login attempts. This takes 10 minutes and catches most theft before it spreads.

If you spot something suspicious, do not ignore it hoping it will go away. Thieves move fast — they open new accounts, take out loans, and file tax returns in your name. The sooner you act, the easier it is to stop the damage and prove it was not you.

Key Takeaways

  • Pull your credit reports free at AnnualCreditReport.com and look for accounts, inquiries, and addresses you do not recognize.
  • Check your bank and credit card statements monthly for unauthorized charges, and set up account alerts for large purchases.
  • If you find theft, place a fraud alert with one bureau and they will notify the other two, which freezes new account openings.
  • File a report with the Federal Trade Commission at IdentityTheft.gov so you have an official record to show creditors and banks.
  • Monitor your credit reports for at least one year after you discover theft, because thieves sometimes wait months before using stolen information.

How to place a fraud alert and credit freeze

A fraud alert tells creditors to verify your identity before opening new accounts in your name. Call or go online to any one of the three credit bureaus — Equifax, Experian, or TransUnion — and request an initial fraud alert. That bureau will notify the other two automatically. The alert lasts one year and is free.

A credit freeze is stronger: it locks your credit file so no one can open new accounts without your permission, even if they have your Social Security number. You request a freeze from each bureau separately through their websites. A freeze is free and lasts until you remove it. If you need to explore for credit, you temporarily lift the freeze, which takes a few minutes online.

Fraud alerts and freezes do not affect your existing accounts or your credit score. They only stop new accounts from being opened. If a thief has already opened accounts, you will need to contact those creditors directly and dispute the charges.

Checking your credit reports line by line

When your credit reports arrive, read them carefully. Look for three types of red flags: accounts you never opened, hard inquiries from companies you never applied to, and personal information that is wrong — a different address, phone number, or employer.

Hard inquiries happen when a lender checks your credit before approving a loan or credit card. If you see inquiries from companies you did not contact, that is a sign someone applied for credit in your name. Soft inquiries (from your own banks or employers) do not count and do not hurt your score.

If you find an account or inquiry that is not yours, dispute it directly with the credit bureau. You can do this online, by mail, or by phone. The bureau has 30 days to investigate and remove false information. Keep copies of everything you send and receive.

Monitoring accounts and statements after theft

After you discover theft, check your credit reports every three months for the first year. You can order free reports from AnnualCreditReport.com as often as you want — the "once per year" rule is a minimum, not a maximum. Many people space them out to check one bureau every four months, so they have coverage year-round.

Set up alerts on your bank and credit card accounts for any transaction over a certain amount — $1 or $25, depending on what makes sense for your spending. Most banks offer this free through their app or website. You will get a text or email within minutes of a charge, so you can dispute it before the thief makes more purchases.

Check your tax records too. Thieves sometimes file tax returns in stolen names to claim refunds. You will find out when you file your own return and the IRS rejects it. If this happens, file Form 14039 (Identity Theft Affidavit) with your tax return and contact the IRS directly.

What to do if you find unauthorized accounts

Contact the creditor directly — the bank, credit card company, or loan servicer — and tell them the account is fraudulent. Ask them to close the account and remove it from your credit report. Get the name of the person you spoke to, the date, and a reference number. Send a follow-up letter by certified mail so you have proof you reported it.

Dispute the account with the credit bureau at the same time. The bureau will contact the creditor to verify the account. If the creditor cannot prove you opened it, they must remove it from your report. This process takes 30 to 45 days.

If the unauthorized account has a balance, do not pay it. Paying acknowledges the debt as yours, which makes it harder to dispute later. Let the creditor and credit bureau handle the investigation. If the account is eventually removed from your report, you have no obligation to pay.

Using credit monitoring services and identity theft protection

Free credit monitoring is available through AnnualCreditReport.com and many banks. Paid services like Equifax, Experian, and TransUnion offer monitoring that alerts you to changes on your credit report within hours. These services cost $10 to $30 per month and are useful if you want real-time alerts rather than checking manually.

Identity theft protection services go further — they monitor not just credit reports but also the dark web, public records, and financial accounts. Services like Aura, LifeLock, and IDShield cost $10 to $25 per month and include insurance that covers some losses from theft. They do not prevent theft, but they catch it faster and help you recover.

Free options work fine if you check your accounts regularly and pull your credit reports every few months. Paid services are worth considering if you have been a victim before, work in a field that makes you a target (healthcare, finance, government), or straightforward prefer automated monitoring.

Reporting identity theft to the government

File a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record that you reported the theft, which you can show to creditors, banks, and the IRS. The FTC does not investigate individual cases, but the report gives you legal standing to dispute fraudulent accounts and removes the burden of proof from you.

You can also file a police report with your local police department or the police department where the theft occurred. Some creditors and banks will not remove fraudulent accounts without a police report number. Police reports are free and can be filed in person or online, depending on your jurisdiction.

Keep copies of both the FTC report and the police report. You will need them when you dispute accounts with creditors and credit bureaus. These documents prove you reported the theft promptly, which protects you from liability for fraudulent charges.

Frequently Asked Questions

How long does it take to recover from identity theft?

straightforward cases — one or two fraudulent accounts with no balance — can be resolved in 30 to 60 days. Complex cases involving multiple accounts, loans, or tax fraud can take six months to two years. The key is acting fast: the sooner you report it, the sooner creditors and bureaus can investigate and remove false information.

Will identity theft hurt my credit score?

Yes, fraudulent accounts and missed payments will lower your score. Once you dispute and remove the false accounts, your score will recover over time — usually within six months to a year. Hard inquiries from fraudulent applications also hurt your score but fall off after two years.

Can I be held liable for charges made by an identity thief?

Federal law limits your liability to $50 per card for credit and debit card fraud, and $0 if you report it before the card is used. For other types of fraud — loans, tax returns, utility accounts — you have no liability if you report it promptly with an FTC report or police report. This is why documentation matters.

What should I do if my Social Security number was stolen?

Place a fraud alert and credit freeze when ready, then monitor your credit reports closely. You cannot change your Social Security number unless you can prove ongoing, substantial harm from fraud. Focus instead on catching fraudulent accounts early through regular monitoring and alerts.

Is it safe to use credit monitoring services?

Yes, credit monitoring services are safe to use. They do not have access to your accounts or passwords — they only monitor your credit reports and public records. Choose services from the three major credit bureaus or established companies with good reviews. Avoid services that ask for your password or Social Security number upfront.