Identity Theft: A Step-By-Step Guide if You’re a Victim 

Identity theft can feel overwhelming, but taking quick, organized action can significantly limit the damage and help restore your financial security. If you discover that your identity has been compromised, here are the key steps to take and why each one matters.

1. Contact your financial institutions immediately.

Your first call should be to your bank, credit card companies, or any financial institution where fraud may have occurred. Tell them you’re a victim of identity theft and have them freeze or close compromised accounts. Most institutions have dedicated fraud departments that can reverse unauthorized transactions, issue new account numbers, and monitor for additional suspicious activity. Acting quickly helps stop the thief’s access before more damage can occur.

2. Place a fraud alert on your credit reports.

Next, contact one of the three major credit bureaus—Equifax, Experian, or TransUnion—and place a fraud alert on your file. The bureau you contact is required to notify the others. A fraud alert makes it harder for someone to open new accounts in your name, because businesses must take extra steps to verify your identity. An initial fraud alert lasts one year and is free.

If you know your identity was compromised in a major way—such as the theft of your Social Security number—you can also request an extended fraud alert, which lasts seven years and requires proof of identity theft.

3. Consider freezing your credit.

While a fraud alert adds a layer of verification, a credit freeze blocks creditors from accessing your credit report altogether, making it extremely difficult for anyone to open new accounts in your name. Unlike a fraud alert, a freeze must be placed separately with each credit bureau. It’s free, easy to manage, and one of the strongest protections you can use. You can temporarily lift the freeze whenever you need to apply for credit.

4. Report the theft to the FTC.

File an official report at IdentityTheft.gov, the Federal Trade Commission’s portal for identity theft victims. The FTC will generate a personalized recovery plan and provide documents you may need to dispute fraudulent accounts. This report is important because many creditors and businesses require it as verification when resolving fraudulent activity.

5. File a police report if needed.

A police report can be helpful—especially if someone used your identity during a traffic stop, employment situation, or other event involving public records. Some businesses also require a police report in addition to the FTC affidavit. Visit your local police department with your FTC report and any evidence of fraud. While law enforcement may not be able to catch the perpetrator, having an official report creates an additional layer of documentation that can speed your recovery.

6. Review and dispute your credit reports

Request your free reports at AnnualCreditReport.com and review each line for unfamiliar accounts, addresses, or activity. If you find fraudulent information, file disputes with each bureau reporting the error. This process ensures the inaccurate data is corrected or removed, helping restore your credit profile and preventing long-term harm.

7. Secure your online accounts

Change passwords—especially for email, banking, and shopping platforms—and enable multifactor authentication wherever possible. If one of your accounts was compromised, thieves may attempt to use the same credentials elsewhere. Stronger login security helps prevent repeat incidents.

8. Monitor your financial activity going forward

Even after resolving the initial fraud, continue checking bank statements, insurance claims, and credit reports periodically. Identity theft sometimes happens in stages, and ongoing vigilance increases your chances of catching new issues early.

Being a victim of identity theft is stressful, but you’re not powerless. With swift action, proper documentation, and ongoing attention to your financial accounts, you can regain control and significantly reduce the long-term impact.