What to Do If Your Identity Is Stolen
Identity theft feels overwhelming precisely because it's unclear what to do first. Here's the order of operations that limits the damage fastest.
Identity theft — someone using your personal information to open accounts, file taxes, or make purchases in your name — is disorienting mostly because there's no single button to press to fix it. The damage is spread across financial institutions, credit bureaus, and government agencies that don't talk to each other. Having a clear order of operations turns a panic response into a manageable checklist.
Contain the immediate damage first
If you've identified a specific compromised account (a card, a bank login, an email account), lock or freeze it immediately before doing anything else. Stopping active, ongoing misuse takes priority over documentation or reporting.
Place a fraud alert or credit freeze
Contacting the major credit bureaus to place a fraud alert or, more strongly, a credit freeze prevents new accounts from being opened in your name using your credit file. A freeze is more restrictive but more effective; you can lift it temporarily whenever you legitimately need credit checked.
Document everything as you go
Keep a simple log: the date you noticed the issue, every account or institution you contacted, who you spoke to, and any reference or case numbers given. This record becomes essential if you need to dispute charges or prove timeline later, and it's much harder to reconstruct after the fact than to keep in real time.
Report it officially
File a report with your national identity theft reporting service or consumer protection agency (for example, IdentityTheft.gov in the United States) and, if there's evidence of a specific crime, with local law enforcement. An official report and case number are often required by banks and creditors to formally dispute fraudulent activity.
Notify affected institutions directly
Contact the fraud department of any bank, card issuer, or service where fraudulent activity actually occurred, using the number on the back of your card or the institution's official website — never a number provided in a suspicious message. Ask them to walk through their specific dispute and account-recovery process.
Change passwords and enable MFA everywhere
If there's any chance the identity theft stemmed from a compromised account rather than a data broker leak, treat it as a credential compromise too: change the password on that account and any account sharing it, and enable multi-factor authentication.
Monitor going forward
After the immediate response, set up ongoing credit monitoring or check your credit report periodically for months afterward — identity thieves sometimes hold stolen information and use it well after the initial incident.
The goal in the first hours isn't to fix everything. It's to stop the bleeding, start a paper trail, and put barriers up against further damage while the formal processes catch up.
Found this useful?
Share it with someone who could use the reminder — most breaches are prevented by habits, not luck.