Your Identity Was Stolen—Now What? A Step-by-Step Recovery Checklist

Written By Marissa Sutera

If your personal information has been stolen, taking immediate action is crucial to minimize damage and begin the recovery process. Here's a comprehensive checklist of steps to take:

1. Secure Your Accounts and Devices:

  • Change Passwords and PINs: Immediately change passwords for all your online accounts, especially email, banking, social media, and any accounts that share the same password. Create strong, unique passwords and consider using a password manager.

  • Enable Two-Factor Authentication (2FA): Turn on 2FA wherever possible for an extra layer of security. This requires a second form of verification (like a code sent to your phone) in addition to your password.

  • Run Antivirus/Antimalware Scans: If you suspect your computer or devices were compromised, run a full scan to detect and remove any malicious software.

  • Contact Companies Where Fraud Occurred: If you know specific accounts (bank, credit card, utility) have been compromised, contact their fraud departments immediately. Explain that your identity was stolen and ask them to close or freeze the compromised accounts. Request new account numbers and cards.

  • Review Account Statements: Carefully examine your bank and credit card statements for any unauthorized charges or withdrawals. Dispute any fraudulent activity.

2. Report the Identity Theft:

  • Report to the Federal Trade Commission (FTC): This is a critical first step. Visit IdentityTheft.gov or call 1-877-IDTHEFT (1-877-438-4338). The FTC will provide you with a personal recovery plan and an official FTC Identity Theft Report, which is essential for working with creditors and law enforcement.

  • File a Police Report: Contact your local police department and file a report. Bring a copy of your FTC Identity Theft Report, a government-issued photo ID, proof of your address, and any other evidence of the theft (e.g., fraudulent bills, IRS notices). Obtain a copy of the police report for your records, as many institutions will require it.

3. Address Your Credit and Financial Information:

  • Place Fraud Alerts: Contact one of the three major credit reporting companies (Equifax, Experian, or TransUnion) to place a free fraud alert on your credit report. This alert notifies businesses to verify your identity before extending new credit. The company you contact is required to notify the other two. An initial fraud alert lasts for one year; if you have an FTC Identity Theft Report, you can request an extended alert that lasts for seven years.

    • Equifax: 1-800-685-1111

    • Experian: 1-888-397-3742

    • TransUnion: 1-888-909-8872

  • Consider a Credit Freeze: A credit freeze (also known as a security freeze) prevents anyone from accessing your credit file, making it much harder for identity thieves to open new accounts in your name. It's free to place and lift. You'll need to contact each of the three credit bureaus separately to set up a freeze.

  • Get and Review Your Credit Reports: You are entitled to a free credit report from each of the three major credit bureaus annually through AnnualCreditReport.com. Review them carefully for any accounts or inquiries you don't recognize. Dispute any fraudulent items directly with the credit bureaus.

  • Contact Debt Collectors: If debt collectors contact you about fraudulent debts, provide them with your FTC Identity Theft Report and explain that the debt is not yours.

4. Address Specific Types of Identity Theft (if applicable):

  • Social Security Number (SSN) Misuse: If your SSN has been used fraudulently (e.g., for employment, benefits, or tax fraud), contact the Social Security Administration (1-800-772-1213) and the IRS (Identity Protection Specialized Unit: 1-800-908-4490). You may need to file Form 14039, Identity Theft Affidavit, with the IRS.

  • Driver's License/State ID Theft: Contact your state's Department of Motor Vehicles (DMV) to report the theft and inquire about replacing your license or flagging the old one.

  • Passport Theft: Report lost or stolen passports to the U.S. State Department (1-877-487-2778).

  • Medical Identity Theft: Request a list of benefits paid from your health insurance company and review your medical records for inaccuracies.

  • Utility/Service Accounts: Contact utility providers (electricity, gas, water, phone, internet) if you suspect new accounts were opened in your name.

5. Ongoing Monitoring and Record Keeping:

  • Keep Detailed Records: Maintain a log of all your actions, including dates, names of people you spoke with, phone numbers, and a summary of conversations. Keep copies of all correspondence, reports, and relevant documents.

  • Continue Monitoring Your Accounts: Regularly check your financial statements and credit reports for any new suspicious activity. Consider using a credit monitoring service for alerts.

  • Watch Your Mail: Be alert for any mail you don't recognize, such as bills for services you didn't order or notifications about new accounts. Identity thieves may try to change your mailing address.

Recovering from identity theft can be a lengthy process, but by taking these steps promptly and persistently, you can significantly reduce the potential damage and restore your identity.

Marissa Sutera
Next

Maintaining an Effective and Accurate Estate Plan