Identity Theft Recovery Checklist

Identity theft recovery requires action at multiple fronts simultaneously. This checklist covers every step — in the right order — from first discovery to long-term monitoring.

Immediate Steps (Days 1–3)

1. Place credit freezes at all three bureaus (Equifax, Experian, TransUnion) — free online, takes minutes each. This prevents new fraudulent accounts from being opened.
2. Place an initial fraud alert at one bureau (it notifies the others automatically). The 1-year alert is immediate; upgrade to 7-year once you have your FTC report.
3. File an FTC Identity Theft Report at IdentityTheft.gov — creates your official documentation and generates a personalized recovery plan.
4. File a police report with your local department (required by some creditors to close fraudulent accounts).
5. Change passwords on all financial accounts (banking, investment, credit cards). Use a password manager. Enable two-factor authentication everywhere.

Week 1: Document and Dispute

1. Pull credit reports from all three bureaus at AnnualCreditReport.com. Review every account — unfamiliar accounts, unfamiliar employers, unknown addresses.
2. Request bureau blocking of fraudulent information at each bureau using your FTC report (FCRA § 605B — bureaus must block within 4 business days).
3. Contact each creditor with fraudulent accounts. Use their fraud department, not general customer service. Provide the account number, your FTC report number, and police report number.
4. Upgrade to 7-year extended fraud alert at each bureau using your FTC Identity Theft Report.

Month 1: Verify and Follow Up

1. Confirm that fraudulent accounts have been closed and balances cleared
2. Verify credit report corrections at each bureau (request a free updated report after any change)
3. Check for any forwarded mail or address changes — file a report with USPS if your mail was redirected
4. Review bank and investment accounts for unauthorized transactions
5. Check your IRS account at IRS.gov for signs of tax fraud (fraudulent return filed in your name)

Ongoing: Monitoring

• Check credit reports from all three bureaus every 3–4 months for the next 12 months
• Monitor bank and credit card statements monthly
• File taxes early each year to prevent fraudulent tax return filing
• Consider paid three-bureau credit monitoring for the first 12 months post-incident

If Problems Keep Appearing

If fraudulent accounts keep appearing despite your freeze and fraud alerts, you may have a more serious compromise — possibly someone who has your full identity package. Contact an identity theft attorney. The FTC recovery plan at IdentityTheft.gov also provides escalation steps for persistent cases.

See also: How to Freeze Your Credit | Filing Your FTC Report