I recently noticed unfamiliar accounts and charges on my credit report, and I’m worried someone stole my identity. What usually happens after identity theft, and what steps should I take to protect my credit and personal information?
Don’t pay the unfamiliar accounts or call phone numbers listed in suspicious emails or texts just to make the problem go away. Contact the bank, card issuer, or lender through its official app, statement, or verified customer-service number. Tell the fraud department the account or charge is unauthorized, ask them to freeze or close it, and get a case number. Move quickly on bank withdrawals and debit-card transactions because delays can affect your protections.
Identity theft can lead to new loans or cards, account takeovers, collection notices, damaged credit, tax-return fraud, or accounts opened for utilities and other services. Cleanup usually means dealing separately with each company and each credit bureau. It may take weeks or months, and removed items can occasionally reappear, so save letters, screenshots, dates, names, and confirmation numbers.
Freeze your credit with Equifax, Experian, and TransUnion individually. A freeze is free and stronger than relying only on credit monitoring or a fraud alert. Be careful not to get steered into a paid “credit lock.” A freeze mainly stops new credit accounts. It does not protect an existing bank or card account, so change the password on your email first, then your financial accounts, and turn on two-factor authentication.
File an identity-theft report through the federal recovery process and use that report when disputing every fraudulent account. Send disputes to both the credit bureau showing the item and the company that supplied it. Identify each account clearly and request an identity-theft block, not merely a generic correction. With the required identity-theft report and proof, fraudulent information generally must be blocked within four business days. Ordinary credit-report disputes can take around 30 days, sometimes longer.
Check all three reports, not just the one where you first noticed trouble, and keep checking after the first round of fixes. If your Social Security number may be exposed, consider getting an IRS Identity Protection PIN to prevent someone from filing a federal return under your information. A police report can be useful if a creditor requests one, the thief is known to you, or the fraud involves more than credit accounts.
A credit freeze at the big three does not cover checking-account screening files. If bank-account fraud is possible, review and freeze your ChexSystems file too, since criminals may open deposit accounts rather than credit cards.
A freeze, including ChexSystems, only blocks new activity. It does not remove existing fraud. Contact each creditor’s fraud department, file an FTC identity theft report, dispute the entries, and keep copies plus case numbers for every contact.
The hidden downside is that a clean credit report does not necessarily mean your identity is clean everywhere. The three major bureaus cover credit accounts, while banks, phone companies, utilities, insurers, landlords, and medical providers may rely on different records. @router3027 is right about ChexSystems, but that is only the deposit-account side of the problem.
I would treat this as two separate jobs. First, stop anything still happening: lock affected cards, secure your email and mobile account, remove unknown recovery addresses or devices, and freeze new-account access. Second, trace where the stolen information has traveled. The second job takes longer and tends to produce the annoying surprises.
Let the type of fraud guide your search. A strange checking account points toward bank-screening records. A phone or utility account may appear in a telecom and utility file rather than on a normal credit report. Rental fraud can land in tenant-screening reports. Unrecognized insurance claims, prescriptions, or treatments require checking with the insurer and medical provider because fixing the credit entry would not correct inaccurate medical records.
For each fraudulent account, ask the company for the application and transaction details, not merely confirmation that it was closed. The address, phone number, email, delivery location, and payment method used by the thief can show whether this was a leaked Social Security number or a broader takeover of your email, phone, or mail. Keep the closure letter saying the account was fraudulent and that you owe nothing. A credit score returning to normal is less valuable than having that letter if a collector resurfaces later.
I would not spend the first day ordering every obscure consumer report available. Follow the evidence and any denial or collection letters you receive. Those letters often identify which reporting company supplied the bad information. Think of a freeze as putting a lock on the front door. It helps prevent new entry, but it does not remove whoever already got inside or repair records they changed. That cleanup still has to happen company by company.
A stolen card number and a brand-new loan opened in your name can look like the same problem, but they are handled differently. That confused me at first. An unfamiliar charge belongs in the fraud process for an account you already own. An unfamiliar account means someone may have used your personal information to apply for credit. There is a third possibility too: the credit bureau may have mixed another person’s information into your file.
I would sort every item into those three buckets before making calls. For a charge on your real card, report the exact transaction and ask the issuer whether the card number needs replacing. You normally do not need to close an otherwise legitimate credit account just because its number was compromised. Keep paying the legitimate portion of the bill while the disputed charge is investigated.
For an account you never opened, ask the lender’s fraud department to confirm that it is being treated as identity theft, not as an ordinary billing disagreement. Get the account number, opening date, balance, and written confirmation that you are not responsible. Then use the identity theft report and dispute process discussed above. Freezing your reports is still sensible while this is being sorted out, even if you are unsure whether theft or a reporting mix-up caused it.
Check the personal-information section of all three credit reports carefully. An address, employer, phone number, or name variation you do not recognize can help explain which account does not belong. If an account clearly belongs to someone with a similar name but different identifying details, tell the bureau you may have a mixed file. Calling every error “fraud” can send it into the wrong investigation process and create more paperwork.
I would make a small table with the company, account or charge, date reported, case number, and promised response date. The annoying part seems to be that different departments rarely share notes properly. If a collector calls later, a vague memory of an old phone conversation will not help much, while a closure letter and case number will.
Watch your mail and email during the cleanup. Missing statements, password-reset notices, replacement cards you did not request, or an unexpected address change can mean the person still has access somewhere. If new fraud appears after the credit freezes are active, I would suspect an existing account, email account, phone account, or mail access rather than assuming the freezes failed.
Expect this to eat months, not a weekend, and expect the same fraudulent item to pop back up after you think it’s gone. @netcloud4’s little tracking table is the one piece of advice here I’d actually treat as non-negotiable, because six months from now a collector will call and your only real defense is the case number and closure letter, not your memory of who said what.
Don’t hire a “credit repair” or identity-restoration company in a panic. A legitimate service may help organize paperwork, but it has no special power to erase fraud or force a lender to move faster. Credit freezes, identity-theft reports, and disputes are available free. Be especially suspicious of anyone promising a new credit identity, guaranteed score recovery, or removal of information before reviewing it.
@zerocache is right that a messy case can drag on, but not every incident becomes a six-month ordeal. A stolen card number may be resolved fairly quickly. A loan opened in your name, a collection account, or several changed addresses is a broader problem. Secure your email and phone account, freeze all three credit files, report each item directly to the real company, create an FTC identity-theft report, and insist on written results. Keep paying legitimate bills while disputed charges are investigated.
Watch for a second round of fraud during cleanup. Scammers may call pretending to be a bank, bureau, investigator, or “recovery specialist.” Even if the caller knows your name, account balance, or case details, hang up and call the verified number yourself. Never give an inbound caller a password, PIN, or verification code.