Identity Theft Recovery: Step-by-Step Action Plan

The moment you suspect identity theft, you have 72 hours to act. Call one of the three credit bureaus—Equifax, Experian, or TransUnion—and request a fraud alert. You only need to call one; they're required to notify the other two within 24 hours.

A fraud alert tells creditors to verify your identity before opening new accounts in your name. It's free and lasts one year. Here's what to say: "I want to place a fraud alert on my credit file due to identity theft. My Social Security number is [your SSN]."

Equifax: 1-800-525-6285

Experian: 1-888-397-3742

TransUnion: 1-800-680-7289

Write down the confirmation number and the date you called. Ask them to mail you written confirmation—you'll need this documentation.

After 12 months, the alert expires. If you want extended protection, you can renew it. For active-duty military members, alerts last two years at no cost.

This first step buys you time while you work through the rest of recovery. Most identity thieves move fast—they apply for credit cards, loans, and cell phone accounts within days. The fraud alert makes that harder.

A credit freeze is stronger than a fraud alert. It blocks anyone—including legitimate creditors—from accessing your credit file without your permission. This stops thieves cold.

You can freeze your credit for free under the Fair Credit Reporting Act (FCRA). Contact all three bureaus:

Equifax: www.equifax.com/personal/credit-report-services or 1-800-349-9960

Experian: www.experian.com/freeze or 1-888-397-3742

TransUnion: www.transunion.com/credit-freeze or 1-888-909-8872

You'll get a PIN number for each bureau. Save these PINs in a safe place—you'll need them to temporarily unfreeze when you apply for legitimate credit.

Freezes take effect within 1 business day, sometimes immediately. They don't hurt your credit score, and they don't prevent existing creditors from accessing your file.

The freeze stays in place indefinitely until you remove it. If you need to apply for a credit card, mortgage, or apartment, you can temporarily thaw your credit for specific creditors. Give them your PIN and a window (for example, "unfreeze from April 10-15").

Unlike fraud alerts that expire, a freeze gives you permanent protection. You're in control.

Now pull your credit reports. You're entitled to one free report per year from each bureau under the FCRA. Go to www.annualcreditreport.com—this is the official site, not a third-party app.

Download all three reports. Look for accounts you didn't open: credit cards, loans, phone contracts, or utility accounts. Write down every unauthorized account, including:

• Account name and number
• Date opened (if listed)
• Current balance
• Account status (open, closed, charged off)

Example: You might see "Verizon Wireless Account #12345 opened 3/15/26, balance $2,847, status: open." You never opened this.

Create a fraud binder. Use a physical folder or digital file to keep:

• Copies of your credit reports with fraudulent accounts highlighted
• Fraud alert confirmation numbers and dates
• Credit freeze PINs and confirmation numbers
• Your police report (you'll file this next)
• All letters you send to creditors

This binder is your proof. If a creditor denies your claim later, you'll show them the evidence.

Under the FCRA, you have the right to dispute inaccurate information. The credit bureaus must investigate within 30 days and remove false items. But they won't know they're fraudulent unless you tell them—which is why documentation matters.

File a police report with your local police department. Go in person if possible—it carries more weight than a phone report. Bring your fraud binder.

Tell them:

• What accounts were opened in your name
• When you discovered the theft
• How you think your identity was stolen (data breach, lost documents, phishing, etc.)

Get a copy of the police report. It's crucial proof that you're a victim, not a deadbeat.

Next, file a report with the Federal Trade Commission (FTC) at www.identitytheft.gov. This is the official government site for identity theft recovery. The FTC will create an Identity Theft Report, which is different from and stronger than a police report.

Why does this matter? The FTC Identity Theft Report gives you specific rights under the law:

• Creditors and debt collectors must stop contacting you about fraudulent debts
• You can remove fraudulent items from your credit report without going through the standard 30-day dispute process
• You can place an extended fraud alert that lasts seven years (instead of one year)

The FTC report takes 15-30 minutes to file online. You'll get a customized recovery plan and a summary document. Keep copies of everything.

Without these reports, you're fighting uphill. With them, you have legal backing.

Now dispute the fraudulent accounts with the credit bureaus and the creditors themselves. Send written letters—do not call.

Dispute with Credit Bureaus:

Send a certified letter to each bureau (Equifax, Experian, TransUnion) at their dispute addresses. Include:

• Your name, address, and SSN
• A copy of your ID
• A copy of your FTC Identity Theft Report
• A list of the fraudulent accounts with account numbers
• A statement: "I did not open these accounts. These are the result of identity theft. Please investigate and remove them."

Send it certified mail with return receipt. Keep copies for your binder.

The bureaus must investigate within 30 days. If they verify the accounts are fraudulent, they'll remove them. If the creditor can't prove you opened the account, they have to remove it.

Dispute with Creditors Directly:

Send the same letter to the creditor (the bank, credit card company, phone company, etc.). Include your FTC Identity Theft Report.

Example letter excerpt: "On [date], I discovered that Account #12345 was opened without my authorization. I am the victim of identity theft. Please close this account immediately and confirm in writing that I am not liable for any charges."

Send this certified mail too. Most creditors will close fraudulent accounts within 30-60 days when they see your FTC report.

Important: Under the Fair Credit Reporting Act, fraudulent debts cannot legally appear on your credit report once you've filed an Identity Theft Report. If they remain after 30 days, the creditor may be violating federal law. Document this for potential complaints.

Keep all letters and responses. You're building a paper trail.

Identity theft recovery doesn't end in 30 days. Most people take 6-12 months to fully recover. You need ongoing monitoring.

Check your credit reports quarterly. Use www.annualcreditreport.com again. You're allowed one free report per bureau per year, so space them out: pull Equifax in January, Experian in April, TransUnion in July.

Look for new fraudulent accounts. If the thief is still active (which is uncommon but possible), you'll catch it early.

Use free credit monitoring. Many services offer free monitoring with fraud alerts. Options include:

• Credit Karma (free, real-time alerts)
• AnnualCreditReport.com (free basic monitoring)
• Your bank's built-in monitoring (many large banks offer this)

These services alert you if someone tries to open new accounts in your name or if your credit file changes.

Consider a paid service for high-risk situations. If your Social Security number, passport, or financial accounts were compromised, invest in a service like LifeLock or Experian's premium monitoring ($10-20/month). They monitor dark web activity and offer insurance against identity theft losses.

Watch your bank and credit card statements monthly. Log into each account and check transactions. Set up account alerts for transactions over $1. Many banks offer this free.

Monitor utility and phone accounts. Check your monthly bills for accounts you didn't authorize. Call providers directly (use numbers from your bills, not Google results) to verify your accounts.

The goal: catch any new fraud attempts within 30 days. The longer fraud sits unreported, the harder it is to prove you didn't authorize it.

Once fraudulent accounts are removed, your credit score will likely recover. If your actual accounts (ones you really opened) fell behind during the chaos, pay them current now. Under the Fair Credit Reporting Act, inaccurate negative items linked to identity theft can be removed.

What to expect:

If you had good credit before the theft, scores typically bounce back 3-6 months after fraudulent accounts are removed. If you had fair or bad credit, recovery takes longer because the negative items may stay on your report for seven years—but at least they'll be marked as fraud-related.

Prevention steps:

1. Shred sensitive documents. Tear up old credit card offers, bank statements, medical records. Many identity thefts start with dumpster diving.

2. Monitor your Social Security number. Use the free service at ssa.gov to check if your SSN is tied to work you didn't do. If it is, report it immediately.

3. Use strong, unique passwords. Don't use "password123" everywhere. Use a password manager like Bitwarden (free) or 1Password ($3/month).

4. Enable two-factor authentication. Add an extra security step to email, banking, and credit card accounts. This stops thieves even if they steal your password.

5. Opt out of prescreened credit offers. Call 1-888-567-8688 or visit www.optoutprescreen.com. This stops thieves from applying for cards in your name.

6. Freeze your credit permanently. Keep it frozen unless you're actively applying for credit. It costs nothing and blocks most fraud.

7. Get an annual credit report. Keep checking for suspicious activity for at least two years.

Identity theft is traumatic, but it's recoverable. Thousands of people go through this every year. Stay organized, follow these steps, and you'll rebuild your financial life.