Identity theft is when someone steals your personal information — name, Social Security number, card or account details — to open accounts, make purchases, or commit fraud in your name. If it happens, act fast: freeze your credit, report to the authorities, and document everything. Speed dramatically limits the damage.
How identity theft happens
Your personal information can be compromised through:
- ▸
Data breaches — major breaches at companies you've used expose names, emails, passwords, SSNs, and financial data. Check haveibeenpwned.com to see if your data has been exposed.
- ▸
Phishing — tricked into entering credentials on fake websites.
- ▸
Social engineering — scammers calling banks or utilities impersonating you using information gathered from social media.
- ▸
Physical theft — stolen mail, wallets, or documents.
- ▸
Dark web marketplaces — stolen data is aggregated, packaged, and sold for as little as $15 per full identity profile.
- ▸
Public Wi-Fi — unencrypted connections can be intercepted by attackers on the same network.
Many of these start with a single phishing message that harvests one password.
Signs your identity has been stolen
Watch for these warning signs:
- ▸
Unfamiliar accounts or charges on your credit report.
- ▸
Bills or collection notices for accounts you didn't open.
- ▸
IRS notification that multiple tax returns were filed under your name.
- ▸
Medical bills for treatments you didn't receive.
- ▸
Denied credit applications when you have good credit history.
- ▸
Authentication codes you didn't request arriving via SMS or email.
- ▸
Login alerts from accounts you didn't access.
- ▸
Mail that stops arriving (may indicate address change fraud).
Immediate recovery steps
If you suspect identity theft, act in this order (for the broader picture, see our scam recovery guide, and our reporting directory for the right agency in your country):
- 1.
Place a fraud alert with one of the three credit bureaus (Equifax, Experian, TransUnion) — they're required to notify the other two.
- 2.
Freeze your credit at all three bureaus — this prevents new accounts from being opened in your name.
- 3.
Review your credit reports for unfamiliar accounts — you're entitled to free reports at annualcreditreport.com.
- 4.
Report to the FTC at identitytheft.gov — they create a personalized recovery plan and provide affidavits.
- 5.
File a police report — you'll need this documentation for disputes with creditors.
- 6.
Contact every institution where fraud occurred — dispute unauthorized charges and accounts in writing.
- 7.
Change passwords on all accounts, especially email and banking. Enable two-factor authentication everywhere.
- 8.
Consider an identity theft protection service for ongoing monitoring.
The emotional toll of identity theft is underestimated. Victims describe feeling violated, paranoid, and exhausted by months of phone calls and paperwork. If you're going through this, know that it does end — and every step you take makes it harder for the thief to continue using your information.
Written from real-world experience. All statistics sourced from verified organizations.
Frequently Asked Questions
Sources & References
Every statistic in this guide is sourced from verified organizations. Click to verify any claim.
Think your identity has been stolen?
Get expert guidance on the recovery process and protecting yourself from further damage.
Book a Consultation →