Discovering that your identity has been stolen is alarming, but panic is the enemy of effective response. Having a clear plan of action makes the difference between months of unresolved chaos and a structured recovery. The steps you take in the first 24 to 48 hours are critical, so knowing them in advance means you can act immediately when it matters most.

Immediate Steps: The First 24 Hours

When you confirm or strongly suspect identity theft, take these actions as quickly as possible, in this order:

  1. Freeze your credit at all three bureaus. This is the single most important step to prevent further damage. Call or visit the websites for Equifax (1-800-349-9960), Experian (1-888-397-3742), and TransUnion (1-888-909-8872). A credit freeze prevents anyone, including the thief, from opening new accounts in your name. This is free and takes effect immediately.
  2. Contact your banks and credit card companies. Alert every financial institution where you have accounts. They can flag your accounts for suspicious activity, issue new card numbers, and in some cases reverse fraudulent charges. Ask about setting up additional verification requirements for transactions.
  3. Change passwords immediately on your most critical accounts: email, banking, and any account you know was compromised. Use unique, strong passwords for each. If you do not already use a password manager, this is the time to start. Enable two-factor authentication on everything.
  4. File a report with the FTC at IdentityTheft.gov. This is the federal government's primary resource for identity theft victims. The site walks you through the reporting process and generates a personalized recovery plan with specific steps based on your situation. It also creates an Identity Theft Report that serves as your official documentation.

Filing Your FTC Identity Theft Report

The FTC report created at IdentityTheft.gov is more than just a formal complaint. It is a legal document that gives you specific rights under federal law. With an Identity Theft Report, you can:

  • Get fraudulent accounts removed from your credit report
  • Prevent companies from collecting debts that resulted from identity theft
  • Place an extended fraud alert on your credit reports lasting seven years
  • Get information from companies about accounts the thief opened in your name

When completing the report, be as detailed as possible. Include every fraudulent account or transaction you are aware of, the dates you discovered them, and any information you have about how the theft may have occurred. Save your report number and keep a copy in a secure location.

In addition to the FTC report, file a police report with your local law enforcement. While police may not investigate individual identity theft cases, a police report provides additional documentation that some creditors and agencies require. Bring your FTC Identity Theft Report, proof of your identity, and any evidence of the fraud when filing.

The Identity Theft Affidavit

When you dispute fraudulent accounts with banks and creditors, you will often need to provide an Identity Theft Affidavit. The FTC provides a standardized form (available through IdentityTheft.gov) that is widely accepted. This affidavit is a sworn statement declaring that you are a victim of identity theft and that specific accounts or transactions are fraudulent.

Send the affidavit along with supporting documentation to each company where fraud occurred. Include a copy of your FTC report, your police report, a copy of your government-issued ID, and proof of your address. Send everything by certified mail with return receipt requested so you have proof of delivery. Keep copies of everything you send.

Documenting Everything

Identity theft recovery can take months, sometimes years, and involves communication with numerous organizations. Thorough documentation is essential for tracking your progress and proving your case:

  • Create a dedicated folder (physical or digital) for all identity theft documentation.
  • Log every phone call including the date, time, company name, representative's name, and what was discussed or agreed upon.
  • Save all correspondence including emails, letters, and chat transcripts. Take screenshots of online disputes and confirmations.
  • Keep a timeline of when you discovered each fraudulent account or transaction and what actions you took in response.
  • Track your expenses related to the recovery, including time off work, mailing costs, notary fees, and any legal expenses. These may be relevant if you pursue restitution.

The Recovery Timeline

Identity theft recovery rarely happens quickly. Here is a realistic timeline of what to expect:

Week 1: Complete all immediate steps. File FTC and police reports. Freeze credit. Contact financial institutions. Begin disputing fraudulent accounts.

Weeks 2 to 4: Follow up on disputes. Contact additional creditors as you discover more fraudulent accounts. Review your credit reports from all three bureaus for accounts you may have missed. Contact the IRS if you suspect tax identity theft by filing Form 14039, Identity Theft Affidavit.

Months 2 to 3: Continue following up on disputes. Most creditors are required to investigate and respond within 30 days. Send follow-up letters if you have not received responses. Check your credit reports again for any new fraudulent activity.

Months 3 to 6: Most disputes should be resolved. Fraudulent accounts should be removed from your credit reports. If any remain, escalate by sending additional documentation and referencing your FTC report number. If a company refuses to remove a fraudulent account, you have the right to add a statement to your credit report explaining the situation.

Ongoing: Monitor your credit reports and financial accounts closely for at least a year after the theft. Identity thieves sometimes wait months before using stolen information, or they may return to a victim whose data they still possess.

Preventing Recurrence

Once you have recovered, take steps to make sure it does not happen again. Keep your credit frozen as your default state and only unfreeze temporarily when you need to apply for credit. Use a password manager with unique, strong passwords for every account. Enable two-factor authentication everywhere possible, preferring authenticator apps over SMS codes. Sign up for free credit monitoring through Credit Karma or a similar service. Review your credit reports at least quarterly through AnnualCreditReport.com.

Consider an identity theft protection service if your Social Security number was compromised, since this creates ongoing risk that is difficult to eliminate. Place a fraud alert on your credit file as an additional layer of protection. Reduce your overall data exposure by opting out of data broker sites and minimizing the personal information you share online.

Identity theft is a violation that extends beyond financial damage. It is normal to feel angry, anxious, or overwhelmed. Take the recovery process one step at a time, document everything, and remember that you have legal rights and free resources to help you through it. The FTC's IdentityTheft.gov remains your most comprehensive resource throughout the entire recovery process.

Share this article