Types of Identity Theft: Financial, Medical, Tax, Synthetic, and More

Financial Identity Theft

The most common type: a thief uses your identifying information to open new credit accounts, make purchases, take out loans, or empty your bank account. Signs include: unfamiliar accounts on your credit report, unexpected calls from collectors about debts you do not recognize, and unexplained withdrawals.

How to address it:

• Place a security freeze at all three bureaus immediately
• File an FTC Identity Theft Report at IdentityTheft.gov
• Dispute fraudulent accounts using the FTC report (bureaus must block within 4 business days)
• File a police report if you have evidence of the thief

Medical Identity Theft

Medical identity theft occurs when someone uses your name and insurance information to receive medical care, obtain prescriptions, or submit fraudulent insurance claims. Signs: explanation of benefits (EOB) notices for services you did not receive; unexpected medical bills; being told your insurance benefits are exhausted when you have not used them.

Why it is especially dangerous:

Fraudulent medical records can be mixed into your actual medical history — potentially affecting your future medical care (wrong blood type, allergies, medications on file). This is harder to detect and correct than financial identity theft.

How to address it:

• Request a copy of your medical records from every provider where fraud occurred
• File a complaint with your insurance company's fraud hotline
• Contact the HHS Office for Civil Rights if providers refuse to correct your records
• File complaints with your state insurance commissioner

Tax Identity Theft

Tax identity theft occurs when someone uses your Social Security number to file a fraudulent tax return and claim your refund. Signs: the IRS notifies you that a return was already filed using your SSN; you receive a W-2 from an employer you do not recognize.

How to address it:

• File an IRS Form 14039 (Identity Theft Affidavit) immediately
• File your legitimate tax return along with Form 14039 by mail (paper filing)
• Request an IRS Identity Protection PIN (IP PIN) to prevent future fraud — available at irs.gov/ippin

Synthetic Identity Theft

Synthetic identity theft combines real information (often a Social Security number, frequently stolen from children or the deceased) with fabricated information (false name, date of birth) to create a new, fictional identity. Because no single real person's identity is fully stolen, it is harder to detect — victims often do not know until they try to establish credit for the first time or a deceased person's estate is audited.

Child Identity Theft

Children are prime targets because their SSNs have no associated credit history — giving thieves a clean slate. Victims typically do not discover the theft until they apply for their first credit card or student loan as adults. Parents should consider placing a security freeze on each minor child's credit file at all three bureaus as a preventive measure. Contact each bureau by mail with a birth certificate and proof of guardianship.

Data Breach Exposure

When a company that holds your data experiences a breach, your information may be sold on the dark web and used for any of the above theft types. If you receive a data breach notification, treat it as high priority: freeze your credit immediately, change passwords across financial accounts, and monitor all three bureaus weekly for new accounts. See our data breach response guide.