How to report an identity theft step by step

First things first: freeze your credit with all three bureaus—Equifax, Experian, and TransUnion. This blocks scammers from opening new accounts in your name. It’s free, easy, and you can do it online or over the phone. Just head to each bureau’s website (like equifax.com or experian.com) and look for the ‘credit freeze’ option. You’ll need to verify your identity, so have your SSN and a recent bill handy. Once frozen, no one—not even you—can open new credit until you lift it. Don’t worry, you can still use your existing cards. Pro tip: Set a reminder to unfreeze it temporarily if you’re applying for a loan or new credit card later.

Next, grab your free credit reports from AnnualCreditReport.com (you’re entitled to one free report from each bureau per year). Look for anything fishy—accounts you didn’t open, addresses you don’t recognize, or inquiries from companies you’ve never dealt with. If you spot fraud, note the details (like the account number and company name) because you’ll need them for the next steps. For example, if there’s a credit card from a bank you’ve never heard of, that’s a red flag. You can also sign up for free credit monitoring (like Credit Karma or CreditWise) to get alerts about new activity. The sooner you catch fraud, the easier it is to fix.

Now, head to IdentityTheft.gov and file a report with the Federal Trade Commission (FTC). This is your official record of the theft, and it’ll generate a recovery plan tailored to your situation. The site walks you through everything—just answer the questions honestly (e.g., ‘Did someone open a credit card in your name?’). You’ll get a printable report and a checklist of next steps, like contacting creditors or the IRS. The FTC report isn’t a police report, but it’s super helpful when you’re disputing fraudulent charges. Plus, it’s free and takes less than 10 minutes. Save the report number—you’ll need it later.

Time to call the companies where the fraud happened. For example, if someone opened a Chase credit card in your name, call Chase’s fraud department (the number’s usually on the back of the card or their website). Tell them you’re an identity theft victim and ask to close the account. They’ll likely ask for your FTC report and a copy of your ID. Do this for every fraudulent account—even if it’s just a $20 charge. Most companies have fraud departments that handle this stuff daily, so they’ll guide you through their process. Keep notes of who you talked to and when. Some might send you forms to fill out; others will handle it over the phone. Either way, follow up in writing (email or certified mail) to create a paper trail.

Even if the police can’t catch the thief, filing a report is crucial for cleaning up the mess. Head to your local police station or file online if your city allows it. Bring your FTC report, a copy of your ID, and any proof of the fraud (like bills or credit reports showing the fake accounts). Be clear and specific—say something like, ‘Someone opened a Capital One card in my name, and I didn’t do it.’ The police report gives you extra leverage when disputing charges or dealing with creditors. Some banks or credit bureaus might ask for it, so keep a copy handy. If the officer seems unsure, politely ask for a report number—you’ll need it for your records.

While a credit freeze locks everything down, a fraud alert adds an extra layer of protection. It tells lenders to verify your identity before approving new credit. You only need to place the alert with one bureau (they’ll notify the others), and it lasts for a year. Call Experian, for example, and say, ‘I’d like to place a fraud alert on my credit file.’ They’ll ask for your info and send you a confirmation. Unlike a freeze, a fraud alert lets you open new credit—just with extra steps (like a phone call to confirm it’s really you). It’s a good middle ground if you’re not ready to freeze your credit permanently. Renew it every year if you’re still worried about fraud.

Now that you’ve locked things down, keep an eye on your accounts for any new suspicious activity. Set up alerts on your bank and credit card accounts (most let you get texts or emails for transactions over a certain amount, like $50). Check your credit reports regularly—you can stagger them so you’re checking one every few months. For example, pull Experian in January, Equifax in May, and TransUnion in September. Also, watch for weird stuff like medical bills for procedures you didn’t have or IRS notices about unfiled taxes. If you see anything off, report it immediately. The sooner you catch new fraud, the easier it is to stop it in its tracks.

If you’re feeling overwhelmed, an identity theft protection service can help. Companies like LifeLock, IdentityForce, or even your bank might offer monitoring, alerts, and recovery assistance. They’ll watch for your info on the dark web, alert you to new accounts opened in your name, and even help you fix fraud if it happens. Some services cost $10–$30 a month, but others are free (like CreditWise from Capital One). If you’re not sure, start with a free service and upgrade later if you need to. Just remember: no service can prevent identity theft 100%, so stay vigilant. Think of it like having a security system for your personal info—it’s not foolproof, but it’s better than nothing.