What to look for when you think your identity has been stolen

Identity theft means someone used your personal information — usually your Social Security number, name, or financial account details — to open accounts, make purchases, or take out loans in your name. You find out because bills arrive for accounts you never opened, your credit score drops suddenly, or a debt collector calls about a debt you didn't make.

The fastest way to check is to pull your credit report from all three bureaus (Equifax, Experian, and TransUnion) at once. You can get one free report per bureau per year at annualcreditreport.com, which is the official government site. Look for accounts you don't recognize, inquiries from companies you never contacted, and addresses that aren't yours. If you see something wrong, you have legal tools to dispute it and freeze your credit so no one can open new accounts.

The second step is to check your bank and credit card statements for charges you didn't make. Call your bank when ready if you find unauthorized transactions — they have a legal important date to investigate and usually reverse the charges within a few days. The third step is to check your tax records by creating an account at irs.gov or calling the IRS directly, because thieves sometimes file tax returns in your name to claim refunds.

Key Takeaways

  • You can get one free credit report per year from each of the three major bureaus at annualcreditreport.com, and you should check all three because thieves may only use one.
  • Look for accounts you don't recognize, credit inquiries from companies you never contacted, and addresses that aren't yours on your credit report.
  • Call your bank when ready if you see unauthorized charges — they must investigate within 30 days and usually reverse fraudulent transactions quickly.
  • File a report with the Federal Trade Commission at reportidentitytheft.ftc.gov so you have an official record, which helps when disputing fraudulent accounts.
  • Place a credit freeze with all three bureaus to prevent thieves from opening new accounts in your name, and unfreeze it only when you need to explore for credit yourself.

How to read your credit report for signs of theft

Your credit report lists every account in your name, every inquiry from a lender, and your payment history. When you pull it, scan the "Accounts" section first. Look for credit cards, auto loans, personal loans, or store cards you never opened. Thieves often open cards with high limits and make big purchases quickly before the account holder notices.

Next, check the "Inquiries" section. This shows every time a company checked your credit — usually when you explore for a loan or credit card. If you see inquiries from companies you never contacted, that's a red flag. Thieves often explore for multiple accounts in a short time. Finally, check the "Personal Information" section for addresses, phone numbers, or employers you don't recognize. Thieves sometimes update this to redirect mail or make it harder for you to notice the fraud.

If you find something wrong, write it down with the exact account number, the date it appeared, and what's wrong about it. You'll need these details when you dispute the account with the bureau and the company that issued it.

Steps to take when ready after finding unauthorized accounts

First, file a report with the Federal Trade Commission at reportidentitytheft.ftc.gov. This creates an official record that you're a victim, which you'll need when you contact banks and credit bureaus. The FTC will give you a case number and a recovery plan tailored to what happened to you.

Second, call your bank and credit card companies and tell them about the fraud. Ask them to close the fraudulent accounts and issue you new cards with new account numbers. Most banks will reverse unauthorized charges within a few days, though they have up to 30 days by law. Get the name and reference number of the person you speak to, and ask them to send you written confirmation of the fraud report.

Third, place a credit freeze with Equifax, Experian, and TransUnion. A freeze prevents anyone — including you — from opening new accounts in your name without unfreezing it first. You can freeze your credit for free by calling each bureau or going to their website. Keep the PIN they give you; you'll need it to unfreeze later. A freeze is stronger than a fraud alert because it blocks new accounts entirely, rather than just requiring extra verification.

How to dispute fraudulent accounts on your credit report

Once you've filed an FTC report and contacted your bank, you need to dispute the fraudulent accounts with the credit bureaus themselves. You can do this online, by mail, or by phone. The fastest way is usually online through each bureau's website — Equifax.com, Experian.com, and TransUnion.com all have dispute tools. You'll need your case number from the FTC report.

When you dispute, explain that the account is fraudulent and you didn't open it. Include a copy of your FTC report. The bureau has 30 days to investigate and either remove the account or prove it's legitimate. During this time, the account won't appear on your credit report, which protects your credit score. If the bureau can't verify the account, it must remove it permanently.

You can also dispute directly with the company that issued the fraudulent account — the credit card company, bank, or retailer. Send them a written dispute letter with copies of your FTC report and any evidence that the account is fraudulent. Keep copies of everything you send and get tracking numbers for all mail.

Checking your tax records and other accounts

Thieves sometimes file tax returns in your name to claim refunds. To check, create an account at irs.gov and look at your tax transcript. If you see a return you didn't file, or if the IRS rejects your return because one was already filed in your name, call the IRS Identity Theft Hotline at 1-800-908-4490. They can flag your account and help you file a legitimate return.

Beyond credit and taxes, check your other accounts. Log into your email, social media, and bank accounts and look for unfamiliar activity or password changes you didn't make. If your email was compromised, the thief can use it to reset passwords on other accounts. Change your passwords on all important accounts — email, banking, social media — and use strong, unique passwords for each one.

Check your phone bill and utility bills for accounts or charges you don't recognize. Thieves sometimes open phone lines or utilities in your name. Call your providers and ask them to review your account for fraud.

Protecting yourself after identity theft

After you've reported the fraud and disputed the accounts, keep your credit freeze in place. You can leave it on indefinitely — it doesn't hurt your credit and it stops new fraud. Unfreeze it only when you're actually explore for credit, and refreeze it when you're done.

Monitor your credit report regularly. You get one free report per bureau per year, so you can check one bureau every four months and catch new fraud early. Some people check Equifax in January, Experian in May, and TransUnion in September. You can also set up fraud alerts with the bureaus, which require lenders to verify your identity before opening new accounts — this is weaker than a freeze but useful if you're actively explore for credit.

Consider a credit monitoring service, though many are paid. The bureaus offer free monitoring with limited features, and some banks offer it to customers for free. These services alert you when something new appears on your credit report, so you catch fraud faster.

Frequently Asked Questions

How long does it take to fix identity theft?

Disputing fraudulent accounts takes 30 to 60 days per bureau. Removing accounts from your report can take longer if the company that issued the account fights the dispute. Some people spend months clearing up identity theft, especially if multiple accounts were opened. The sooner you report it, the sooner the process starts.

Will identity theft hurt my credit score?

Yes, fraudulent accounts will lower your score because they show up as new accounts and unpaid balances. Once you dispute and remove them, your score usually recovers within a few months. A credit freeze doesn't hurt your score, and neither does checking your own credit report.

Can I go to jail if someone stole my identity?

No. You are the victim, not the criminal. The person who stole your identity can be prosecuted, but that's up to law enforcement. Your job is to report it to the FTC and your banks so you can recover.

What if I find identity theft on an old credit report?

You can still dispute it. There's no time limit on disputing fraudulent accounts. If the account is old and the company that issued it no longer exists, the bureau may remove it more easily because they can't verify it.

Do I need to hire a lawyer or pay for identity theft protection?

You don't need to. Everything you need to do — filing an FTC report, disputing accounts, placing a freeze — is free and you can do it yourself. Some companies sell identity theft protection services, but the free tools available to you are just as effective.