Identity Theft Recovery: Fix Your Credit and Finances

Discovering you're a victim of identity theft triggers immediate panic. Someone has your personal information and is using it to open accounts, charge purchases, drain bank accounts, file fraudulent tax returns, or even commit crimes in your name. The financial and emotional damage can feel overwhelming.

Recovery is possible, and federal law puts real protections behind it. If you follow the dispute procedures correctly, you won't be held responsible for debts the thief created, and the marks they left on your credit can be removed. Identity theft is one of the money emergencies covered across our crisis-help guides, and the steps here are specific to undoing the financial damage.

The sections below follow the order recovery actually takes in 2026: what to do in the first 24 hours, how to file your reports with the FTC and the police, how to dispute the fraudulent accounts and clear your credit, how to freeze your credit so no new accounts can open, and how to keep it from happening again.

Recognizing Identity Theft Signs

Identity theft often reveals itself through unexpected financial or legal problems. Recognizing the warning signs early allows you to minimize damage and begin recovery faster.

Credit Report Red Flags

Check your credit reports at AnnualCreditReport.com and look for:
• Accounts you didn't open appearing on your credit report
• Inquiries from lenders you never contacted
• Credit limits or account balances that don't match your records
• Addresses or employers you've never used listed on your report
• Debt collection notices for accounts you don't recognize

You're entitled to one free credit report every 12 months from each of the three major bureaus (Equifax, Experian, TransUnion). If you discover fraud, you can request additional free reports. Review all three reports carefully, because fraudulent accounts may appear on one bureau but not others.

Financial Account Warning Signs

Monitor your existing accounts for:
• Unauthorized withdrawals or charges on bank accounts or credit cards
• Statements for accounts you didn't open arriving in the mail
• Calls from creditors about accounts or debts you don't recognize
• Missing bills or financial statements (thieves may change your mailing address)
• Denied credit applications because your report shows maxed-out accounts

Set up account alerts with your bank and credit card companies to notify you of transactions over certain amounts, address changes, or other suspicious activity.

Government and Tax Fraud Indicators

Identity theft involving government benefits or taxes shows different signs (our IRS tax-debt guide covers what to do if a fraudulent return creates a balance in your name):
• IRS notification that multiple tax returns were filed in your name
• IRS letter stating you owe additional tax, refund offset, or collection actions for a year you didn't file
• Employer reports you received wages from an employer you never worked for
• Notification that a government benefits account (Social Security, unemployment) has been opened or accessed in your name
• Bills or collection notices for medical services you never received (medical identity theft)

Criminal Identity Theft

The most serious form of identity theft occurs when someone uses your identity during criminal activity:
• You receive arrest warrants, court summons, or police notices for crimes you didn't commit
• Background checks show criminal records you don't recognize
• Police contact you about crimes associated with your identity

Criminal identity theft can affect your ability to get jobs, housing, loans, or pass security clearances. This requires immediate action and often legal representation to clear your name.

Immediate Steps in First 24 Hours

The moment you suspect identity theft, take these critical actions to limit damage and begin the recovery process. Acting right away can prevent thieves from opening additional accounts or draining more money.

Step 1: Place a Fraud Alert on Your Credit

Call one of the three credit bureaus immediately to place a fraud alert. You only need to contact one; they're required to notify the other two.

Equifax: 800-525-6285
Experian: 888-397-3742
TransUnion: 800-680-7289

A fraud alert is free and lasts one year for identity theft victims (seven years if you submit an FTC Identity Theft Report). It requires creditors to verify your identity before opening new accounts. You'll receive free credit reports from all three bureaus when you place a fraud alert.

Fraud alerts don't prevent all fraud, but they add a verification step that stops many attempts. After placing the alert, proceed to file formal reports and freeze your credit for stronger protection.

Step 2: Contact Compromised Financial Accounts

Call the fraud departments of any accounts where you see unauthorized activity:

For fraudulent charges: Report them immediately and request the charges be removed. Banks and credit card companies typically reverse fraudulent charges once you file a dispute. Request new card numbers and PIN codes.

For fraudulent account openings: Tell the company you're an identity theft victim and didn't open the account. Request they close the account, send you documentation showing it was fraudulent, and report it to credit bureaus as fraud.

For compromised existing accounts: Close the account or change all login credentials, passwords, PINs, and security questions. Set up new accounts with different account numbers.

Document every conversation: write down the date, time, person you spoke with, and what was agreed. Follow up phone calls with written letters sent via certified mail.

Step 3: Change All Passwords and Enable Two-Factor Authentication

If thieves accessed your email, bank accounts, or other online accounts, change passwords immediately:
• Start with email accounts (thieves use email to reset other passwords)
• Change financial account passwords (bank, credit cards, investment accounts)
• Update passwords for any account storing payment information (Amazon, PayPal, Venmo)
• Change passwords for utilities, healthcare portals, and government benefit accounts

Enable two-factor authentication (2FA) on all accounts that offer it. This requires a code from your phone in addition to your password, making it much harder for thieves to access accounts even if they know your password.

Step 4: Review Your Credit Reports

Request your free credit reports immediately (you'll get them automatically when you place a fraud alert, or visit AnnualCreditReport.com). Review every section carefully:
• Personal information: Look for unfamiliar addresses, phone numbers, or employers
• Accounts: Identify any credit cards, loans, or accounts you didn't open
• Inquiries: Note any credit checks from companies you never contacted
• Public records: Check for bankruptcies, judgments, or liens you don't recognize

Make a list of all fraudulent items. You'll need this when filing reports and disputing accounts with credit bureaus.

Filing Reports with FTC and Police

Filing official identity theft reports is crucial. These reports are your proof of the crime and are required by many creditors, credit bureaus, and government agencies when disputing fraudulent activity.

File an FTC Identity Theft Report

Go to IdentityTheft.gov and create an account. This free FTC service walks you through reporting identity theft and creates a personalized recovery plan. The process takes 15-30 minutes.

You'll provide information about:
• What type of identity theft occurred (financial, tax, medical, criminal, etc.)
• What fraudulent accounts or activity you've discovered
• How you learned about the theft
• What steps you've already taken

After completing the report, you'll receive an FTC Identity Theft Report and a customized recovery plan. The FTC Identity Theft Report is an official legal document accepted by:
• Credit bureaus for fraud disputes and extended fraud alerts
• Creditors and debt collectors as proof the accounts are fraudulent
• Law enforcement agencies
• Government agencies (IRS, Social Security Administration)

Print multiple copies and save the PDF. You'll need to attach this report to credit bureau disputes, creditor correspondence, and police reports.

File a Police Report

Visit your local police department and file an identity theft report. Bring:
• Government-issued photo ID
• Proof of address (utility bill, lease, mortgage statement)
• FTC Identity Theft Report
• Documentation of fraudulent accounts or activity (credit reports, bank statements, collection letters)

Some police departments are reluctant to take identity theft reports, especially if the theft occurred in another jurisdiction. If they refuse, cite the FTC's guidance stating that identity theft victims should file reports where they live. If necessary, file online through your department's website or request to speak with a supervisor.

The police report, combined with your FTC Identity Theft Report, creates an official "Identity Theft Report" that provides the strongest legal protection. Creditors and credit bureaus must accept this as proof of fraud.

Get several copies of the police report, since you'll need to send copies to creditors, credit bureaus, and potentially the IRS or other agencies.

Report to Other Relevant Agencies

Depending on the type of identity theft, file reports with additional agencies:

Tax-related identity theft:
File IRS Form 14039 (Identity Theft Affidavit) with your tax return. Call the IRS Identity Protection Specialized Unit at 800-908-4490. The IRS will investigate and issue you an Identity Protection PIN for future tax returns.

Social Security number misuse:
Contact the Social Security Administration at 800-772-1213 or visit ssa.gov/fraud to report SSN misuse. Request your Social Security earnings statement to check for fraudulent employment.

Medical identity theft:
Contact your health insurance company's fraud department. Request copies of your medical records to identify fraudulent claims. File a complaint with the Health and Human Services Office for Civil Rights if providers won't correct records.

Unemployment benefits fraud:
Contact your state's unemployment office immediately. Report that someone filed a fraudulent claim in your name. This is increasingly common and can create tax problems if not reported.

Disputing Fraudulent Accounts

Once you've filed official reports, begin the process of disputing fraudulent accounts with credit bureaus and creditors. This removes the accounts from your credit report and ensures you're not held responsible for fraudulent debts.

Disputing with Credit Bureaus

Send written disputes to all three credit bureaus (Equifax, Experian, TransUnion) for each fraudulent account appearing on your credit reports. You must dispute with each bureau separately; they don't share dispute information.

Credit Bureau Dispute Addresses:

Equifax Information Services LLC
P.O. Box 740256
Atlanta, GA 30374
Online: equifax.com/personal/credit-report-services/credit-dispute

Experian
P.O. Box 4500
Allen, TX 75013
Online: experian.com/disputes

TransUnion LLC
Consumer Dispute Center
P.O. Box 2000
Chester, PA 19016
Online: transunion.com/credit-disputes

What to include in your dispute letter:
• Your complete name, current address, and date of birth
• Clear identification of each fraudulent item (account name, account number, date opened)
• Statement that you're a victim of identity theft and didn't open or authorize these accounts
• Copy of your FTC Identity Theft Report
• Copy of your police report
• Request that the entire account and all associated information be removed from your credit report

Send disputes via certified mail with return receipt requested. Keep copies of everything. Credit bureaus must investigate within 30 days and provide written results.

Disputing Directly with Creditors

In addition to disputing with credit bureaus, contact the companies where fraudulent accounts were opened. This is called furnisher disputes: you're disputing with the company that "furnishes" information to credit bureaus.

Send a written dispute letter to each creditor including:
• Statement that you're an identity theft victim and didn't open the account
• Request to close the account and absolve you of all charges
• Request written confirmation that the account was fraudulent
• Copy of FTC Identity Theft Report and police report
• Request that they notify all credit bureaus that the account was fraudulent and should be removed

Under the Fair Credit Reporting Act, creditors must investigate identity theft claims and may not report the debt to credit bureaus while investigating. Once they verify fraud, they must stop collection attempts and report the account as fraudulent.

Using an Identity Theft Affidavit

Some creditors require an Identity Theft Affidavit in addition to the FTC report. This is a notarized statement swearing that you didn't create the debt. The FTC provides a standard form at IdentityTheft.gov or you can use the creditor's specific form.

The affidavit typically requires:
• Your personal information and contact details
• Description of what fraudulent activity occurred
• Statement that you didn't authorize the accounts or transactions
• List of supporting documents you're providing
• Your signature notarized by a notary public

Most banks, UPS stores, and county clerk offices offer notary services (sometimes for a small fee, often under $10). Bring valid photo ID when getting documents notarized.

Dealing with Debt Collectors

If fraudulent debts were sent to collection agencies, you have specific rights under the Fair Debt Collection Practices Act:

Send the debt collector a written letter (within 30 days of their first contact) stating:
• You dispute the debt because it resulted from identity theft
• You're an identity theft victim and didn't create this debt
• Include copies of your FTC Identity Theft Report and police report
• Request they cease collection activities and delete the debt from your credit report

Once you provide an Identity Theft Report, debt collectors must stop collection activities. They cannot sue you, garnish wages, or continue reporting the debt to credit bureaus. If a collector ignores this and files a lawsuit over the fraudulent debt, respond and raise identity theft as a defense. If they continue collection attempts after receiving your identity theft documentation, file a complaint with the CFPB at consumerfinance.gov/complaint.

Freezing Your Credit

A credit freeze (also called a security freeze) is the most effective tool to prevent new fraudulent accounts. It completely blocks access to your credit reports, making it nearly impossible for thieves to open new accounts in your name.

How Credit Freezes Work

When you freeze your credit, the credit bureaus lock your credit file. Lenders, creditors, and most businesses can't access your credit report or score unless you temporarily lift the freeze. Since most creditors check credit before approving applications, they'll deny applications if they can't access your report.

This prevents identity thieves from:
• Opening new credit cards in your name
• Taking out loans or mortgages
• Opening utility or cell phone accounts
• Applying for retail credit accounts

Important: A credit freeze doesn't affect your existing accounts, credit score, or ability to use your current credit cards and loans. It only prevents new accounts from being opened.

How to Freeze Your Credit

Credit freezes are free by federal law. You must freeze your credit with all three major credit bureaus separately:

Equifax:
Online: equifax.com/personal/credit-report-services/credit-freeze
Phone: 800-349-9960
Mail: Equifax Security Freeze, P.O. Box 105788, Atlanta, GA 30348

Experian:
Online: experian.com/freeze/center.html
Phone: 888-397-3742
Mail: Experian Security Freeze, P.O. Box 9554, Allen, TX 75013

TransUnion:
Online: transunion.com/credit-freeze
Phone: 888-909-8872
Mail: TransUnion LLC, P.O. Box 2000, Chester, PA 19016

The online process takes about 10 minutes per bureau. You'll need to provide your name, address, date of birth, Social Security number, and answer security questions. You'll receive a PIN or password to use when lifting the freeze later.

Save your freeze PINs/passwords securely! You'll need them to temporarily lift the freeze when you legitimately apply for credit.

Lifting or Removing a Credit Freeze

When you need to apply for credit, a job that requires credit checks, housing, or other services requiring credit access, you can temporarily lift your freeze:

Temporary lift: Lift the freeze for a specific time period (1 day to 1 year) or for a specific creditor. Use your PIN/password to lift online or by phone. Lifts are typically processed within 1 hour online, or within 3 business days if requested by phone or mail.

Permanent removal: You can completely remove the freeze anytime using your PIN/password. However, for identity theft victims, it's better to keep freezes in place and lift them temporarily as needed.

Pro tip: Ask the creditor or company which credit bureau they use, then only lift the freeze with that specific bureau. This provides maximum protection while allowing the specific check you need.

Other Credit Files to Freeze

Beyond the major credit bureaus, consider freezing these specialty consumer reporting agencies that companies use for non-credit decisions:

ChexSystems (banking history): 800-887-7641 or chexsystems.com
Used by banks when opening checking/savings accounts

Innovis (fourth credit bureau): 800-540-2505 or innovis.com
Some lenders use Innovis in addition to the big three

National Consumer Telecom & Utilities Exchange: 866-349-5355 or nctue.com
Used for cell phone and utility account applications

Credit Freeze vs. Fraud Alert

Both tools protect against identity theft, but they work differently:

Fraud Alert:
• Requires creditors to verify your identity before opening accounts
• Free and lasts 1 year (7 years with Identity Theft Report)
• Only need to contact one bureau (they notify the others)
• Doesn't block credit access, just adds verification step
• Provides free credit reports
• Easier for you when applying for credit (no need to lift/unfreeze)

Credit Freeze:
• Completely blocks access to credit reports
• Free and lasts until you lift it
• Must contact all three bureaus separately
• Most effective prevention tool
• Requires you to lift freeze when applying for credit
• Recommended for identity theft victims

Best practice: Use both. Place a fraud alert immediately for quick protection, then freeze your credit for long-term prevention.

Recovering Stolen Money

If identity thieves drained your bank accounts or made unauthorized charges, you have legal protections that can help you recover the stolen funds. The key is acting quickly and following proper procedures. This is different from a creditor-driven bank account freeze, which follows its own steps to release.

Recovering Unauthorized Bank Account Withdrawals

Under federal law (Regulation E), you're protected from unauthorized electronic transfers, but your liability depends on how quickly you report the fraud:

Report within 2 business days: Maximum liability is $50
Report within 60 days: Maximum liability is $500
Report after 60 days: You could lose all the money taken after the 60-day period

To recover funds:
1. Contact your bank's fraud department immediately
2. Request to speak with someone about unauthorized transactions
3. Dispute each unauthorized transaction in writing
4. Provide your Identity Theft Report and police report
5. Request provisional credit while they investigate (banks must credit your account within 10 business days)
6. Follow up if you don't receive credit or a response within the required timeframe

Keep detailed records of all communications. If the bank denies your claim, file a complaint with the CFPB at consumerfinance.gov/complaint.

Disputing Fraudulent Credit Card Charges

Credit card fraud protection is strong under federal law (Fair Credit Billing Act). Your maximum liability for unauthorized charges is $50, and most credit card companies waive even that amount.

To dispute fraudulent charges:
1. Call the credit card issuer immediately (use the fraud number on the back of your card)
2. Report which charges are unauthorized
3. Request the card be cancelled and a new one issued
4. Follow up in writing within 60 days of the statement date
5. Include your Identity Theft Report in the written dispute
6. Request written confirmation that charges were removed

The credit card company must acknowledge your dispute within 30 days and resolve it within two billing cycles (but not more than 90 days). They must remove the charges or provide a written explanation if they believe the charges are valid.

Recovering Fraudulent Tax Refunds

If someone filed a fraudulent tax return and received your refund, recovery takes longer but is possible:

1. File your legitimate tax return on paper with IRS Form 14039 attached
2. Mail it to the IRS address for your state (instructions on Form 14039)
3. Call the IRS Identity Theft Protection Specialized Unit at 800-908-4490
4. Respond to any IRS verification letters immediately
5. Provide documentation of your actual income (W-2s, 1099s, pay stubs)

The IRS will investigate and verify your legitimate return. This process typically takes 6-12 months. Once verified, you'll receive your legitimate refund. The IRS will issue you an Identity Protection PIN for future tax filings to prevent repeat fraud.

Recovering Money from New Accounts

For accounts fraudulently opened in your name (loans, credit cards), you're not responsible for the debt once you prove identity theft. However, if thieves withdrew cash or made purchases, recovering that money is different:

What you're not liable for:
• The debt itself, which creditors must write off
• Interest or fees on fraudulent accounts
• Collection activities or lawsuits

What may not be recoverable:
• Cash or goods thieves obtained from fraudulent accounts
• The company's losses from the fraud

Your focus should be on clearing your name and credit report, not on recovering the money the thief stole from creditors. The creditor absorbs that loss. Your liability is zero once you provide proper identity theft documentation.

Preventing Future Theft

Once you've recovered from identity theft, implementing strong prevention measures protects you from repeat victimization. Identity theft victims are often targeted again because their information is already circulating among thieves.

Keep Credit Freezes Active

Maintain credit freezes with all three bureaus indefinitely. Only lift them temporarily when you need to apply for credit, then refreeze immediately. This is the single most effective prevention tool.

Set calendar reminders to check that your freezes are still active every 6 months. Log into each bureau's website to verify freeze status.

Monitor Your Credit Reports and Accounts

Check your credit reports at AnnualCreditReport.com every 4 months (rotate through the three bureaus, since one every 4 months gives you year-round monitoring for free). Look for any new fraudulent activity that appeared before you froze your credit or any errors.

Consider free credit monitoring services offered by many credit card companies and banks. These alert you to new accounts, inquiries, or significant changes to your credit report.

Set up account alerts with all financial institutions:
• Transaction alerts for purchases over certain amounts
• Login alerts when someone accesses your account
• Address or contact information change alerts
• New payee alerts for bill pay services

Secure Your Personal Information

Protect the information thieves use for identity theft:

Social Security number:
• Don't carry your Social Security card in your wallet
• Only provide your SSN when legally required
• Ask if alternative identification can be used
• Never provide SSN over email or to unsolicited callers

Mail security:
• Use a locked mailbox or P.O. box
• Collect mail promptly
• Shred financial documents and pre-approved credit offers before discarding
• Opt out of pre-approved credit offers at optoutprescreen.com

Online security:
• Use strong, unique passwords for each account
• Enable two-factor authentication on all accounts
• Don't reuse passwords across multiple sites
• Use a password manager to track complex passwords
• Be suspicious of phishing emails asking for personal information

Protect Your Digital Devices

Much identity theft starts with hacked devices or accounts:
• Keep software and operating systems updated
• Use antivirus software on computers
• Don't click links in unexpected emails or texts
• Only download apps from official app stores
• Use secure WiFi, and avoid public WiFi for banking or sensitive activities
• Enable encryption and remote wipe features on phones and tablets
• Back up important data regularly

Be Wary of Scams

Identity thieves often use social engineering to steal information:

Common scams to avoid:
• IRS phone scams (IRS never calls demanding immediate payment)
• Tech support scams (unsolicited calls claiming your computer has a virus)
• Grandparent scams (caller pretends to be family member in emergency needing money)
• Phishing emails impersonating banks, government agencies, or businesses
• Romance scams on dating sites
• Fake charity requests after disasters

Red flags:
• Unsolicited contact asking for personal information
• Urgent demands for immediate action or payment
• Requests for payment via gift cards, wire transfer, or cryptocurrency
• Threats of arrest, lawsuits, or account closures
• Offers that sound too good to be true

Protection strategy: If someone contacts you claiming to be from a company or agency, hang up and call the official number from the organization's website. Don't use contact information the caller provides.

Review Your Social Security Earnings Statement

Create an account at ssa.gov/myaccount to access your Social Security earnings record. Check it annually to ensure no fraudulent employers appear. Identity thieves sometimes use stolen SSNs for employment.

If you find earnings from an employer you never worked for, report it to the Social Security Administration immediately and file IRS Form 14039 because this often indicates tax fraud will follow.

Frequently Asked Questions

Conclusion

Identity theft recovery is mostly paperwork and persistence. The sequence is what matters: fraud alerts and credit freezes first, then FTC and police reports to build your official Identity Theft Report, then disputes with both the credit bureaus and the creditors using that documentation, then the bank and credit card fraud protections to claw back any money taken. After that, the work shifts to maintenance, keeping the freezes active and checking your credit on a rotation so nothing new slips through.

IdentityTheft.gov is the FTC's free hub for all of this. It tracks your progress, tailors the next steps to your specific situation, and generates the dispute letters you'll need to send. When you hit a wall, nonprofit credit counseling agencies, Legal Aid offices, and the CFPB complaint system are also free, and the law is firmly on your side as a victim. Once the fraud is cleared, rebuilding may mean comparing credit options after the damage, working with a member-owned credit union, or following a structured debt action plan if collections piled up before you caught it.

Sources

The liability limits, dispute timelines, freeze and fraud-alert rules, and agency procedures described above are drawn from the following authoritative sources:

• IdentityTheft.gov (Federal Trade Commission), the official recovery hub that generates your Identity Theft Report and a personalized recovery plan.
• Consumer Financial Protection Bureau (CFPB): Fraud and scams resources, including the free credit-freeze and fraud-alert rights and Regulation E electronic-transfer liability tiers.
• IRS: Identity Theft Central (Form 14039 Identity Theft Affidavit and the Identity Protection PIN).
• Social Security Administration: Protecting your Social Security number for reporting SSN misuse.