Identity Theft: The Exact Steps to Take Immediately

Act Fast — The First 24–72 Hours Are Critical

Identity theft recovery is significantly easier the faster you act. Fraudulent accounts opened in your name can generate late payments, collections, and even lawsuits within months. The actions below are ordered by urgency.

The Complete Response Checklist

Priority	Action	Time	Cost
1 — Immediate	Freeze credit at all three bureaus	Minutes online	Free
2 — Same day	File FTC report at IdentityTheft.gov	15–30 minutes	Free
3 — Within 24 hours	Pull credit reports from all three bureaus	10 minutes	Free
4 — Within 24 hours	Notify affected financial institutions	30–60 minutes	Free
5 — Within 3 days	File police report (if identity used for fraud or debt)	1–2 hours	Free
6 — Within 7 days	Dispute fraudulent accounts with all three bureaus	1–2 hours	Free
7 — Within 30 days	Place extended fraud alert (7 years, free for victims)	10 minutes	Free
8 — Ongoing	Monitor all three bureaus for new fraudulent activity	Ongoing	Free via Credit Karma / Experian

Step 1: Freeze Your Credit at All Three Bureaus

This is the single most important action. A credit freeze prevents any new lender from accessing your report — making it impossible for a thief to open new accounts in your name.

Equifax: equifax.com/personal/credit-report-services or call 1-800-349-9960
Experian: experian.com/freeze/center.html or call 1-888-397-3742
TransUnion: transunion.com/credit-freeze or call 1-888-909-8872

Each freeze is instant online and free. You will receive a PIN to lift the freeze when needed. See our complete credit freeze step-by-step guide.

Step 2: File Your FTC Identity Theft Report

IdentityTheft.gov is operated by the Federal Trade Commission. Filing here creates an official FTC Identity Theft Report, which is a critical document that:

Serves as legal documentation of the theft
Is accepted by credit bureaus as supporting documentation for blocking fraudulent information within 4 business days (faster than a standard dispute)
Can be used with creditors to dispute fraudulent accounts
Creates a personalized recovery plan

Step 3: Dispute Fraudulent Accounts

Once you have your FTC report, contact each bureau where fraudulent accounts appear and request a block under FCRA § 605B. The bureau must block fraudulent information within 4 business days of receiving your FTC Identity Theft Report, a copy of your government-issued ID, and your identification information. This is faster than the standard 30-day dispute process.

Step 4: Notify Affected Creditors in Writing

Even after the bureau blocks the accounts, contact each creditor where fraud occurred. Ask them to close the fraudulent account, flag it as fraud in their records, and confirm in writing that you are not responsible for the fraudulent charges. Keep copies of all correspondence.

Step 5: Change Passwords and Secure Accounts

If your identity was stolen through a data breach or phishing:

Change passwords on email, banking, and financial accounts
Enable two-factor authentication everywhere possible
Set up transaction alerts on all bank and credit accounts
Consider a new email address for financial accounts

For a deeper dive into protection options, read our credit freeze guide and the identity theft resource hub.