Your identity is worth $15 on the dark web. The damage costs thousands.

How identity theft happens

Your personal information can be compromised through: Data breaches — major breaches at companies you've used expose names, emails, passwords, SSNs, and financial data. Check haveibeenpwned.com to see if your data has been exposed. Phishing — tricked into entering credentials on fake websites. Social engineering — scammers calling banks or utilities impersonating you using information gathered from social media. Physical theft — stolen mail, wallets, or documents. Dark web marketplaces — stolen data is aggregated, packaged, and sold for as little as $15 per full identity profile. Public Wi-Fi — unencrypted connections can be intercepted by attackers on the same network.

Signs your identity has been stolen

Watch for these warning signs: Unfamiliar accounts or charges on your credit report. Bills or collection notices for accounts you didn't open. IRS notification that multiple tax returns were filed under your name. Medical bills for treatments you didn't receive. Denied credit applications when you have good credit history. Authentication codes you didn't request arriving via SMS or email. Login alerts from accounts you didn't access. Mail that stops arriving (may indicate address change fraud).

Immediate recovery steps

If you suspect identity theft, act in this order: 1. Place a fraud alert with one of the three credit bureaus (Equifax, Experian, TransUnion) — they're required to notify the other two. 2. Freeze your credit at all three bureaus — this prevents new accounts from being opened in your name. 3. Review your credit reports for unfamiliar accounts — you're entitled to free reports at annualcreditreport.com. 4. Report to the FTC at identitytheft.gov — they create a personalized recovery plan and provide affidavits. 5. File a police report — you'll need this documentation for disputes with creditors. 6. Contact every institution where fraud occurred — dispute unauthorized charges and accounts in writing. 7. Change passwords on all accounts, especially email and banking. Enable two-factor authentication everywhere. 8. Consider an identity theft protection service for ongoing monitoring.