Identity Theft & Privacy
Protect your identity. Recover faster if something happens.
Identity theft can involve stolen personal information, hacked accounts, fake accounts, data breaches, unauthorized charges, or misuse of your Social Security number. Learn what to watch for, how to protect yourself, and what steps to take if your information is misused.
If your identity was stolen, start with IdentityTheft.gov.
IdentityTheft.gov is the FTC’s recovery website. It can help you report identity theft, create a recovery plan, and get an Identity Theft Report that may help when working with businesses, credit bureaus, and debt collectors.
If You Are a Victim, Start Here
Acting quickly can reduce the impact of identity theft and help you recover faster.
File a Police Report
- Contact your local law enforcement agency.
- Request a copy of the report for your records.
- This may help when working with creditors or disputing accounts.
Report at IdentityTheft.gov
- Create an Identity Theft Report.
- Get a step-by-step recovery plan.
- Access pre-filled letters and forms.
Review & Document
- Check your credit reports and account statements.
- Look for unfamiliar accounts or activity.
- Save notices, statements, and screenshots.
Find Your Situation
Start with the basic steps above, then choose what happened to get more specific guidance.
Someone opened accounts in my name
New credit cards, loans, or accounts appear that you did not open.
Contact the company where the account was opened. Tell them it is identity theft and ask them to close or freeze the account.
Next:Report the identity theft at IdentityTheft.gov and create an Identity Theft Report.
Then:Review all three credit reports and consider placing a credit freeze.
My card or bank account was used
Charges or withdrawals you did not authorize.
Contact your bank or card issuer immediately and report the unauthorized activity.
Next:Ask about reversing the charges, securing your account, and issuing new cards or credentials.
Then:Change your passwords and monitor your accounts closely for additional activity.
My email or social media was hacked
You lost access or your account is sending messages you didn’t write.
Use the official account recovery process to regain access.
Next:Change your password from a secure device and turn on multi-factor authentication.
Then:Check for changes to recovery settings and warn contacts not to respond to suspicious messages.
My Social Security number was exposed
Your SSN may have been used or could be at risk.
Review your credit reports for unfamiliar accounts or activity.
Next:Place a credit freeze with all three credit bureaus.
Then:Report identity theft at IdentityTheft.gov if you see misuse or suspicious activity.
I got a data breach notice
Your personal information may have been exposed.
Read the notice carefully and identify what information was exposed.
Next:Change passwords and secure affected accounts immediately.
Then:Monitor accounts, consider a credit freeze, and follow guidance at IdentityTheft.gov/databreach.
I lost my wallet or documents
IDs, cards, or sensitive information were lost or stolen.
Cancel or replace your cards and contact agencies that issued your identification.
Next:Monitor your accounts and credit reports for suspicious activity.
Then:Consider placing a fraud alert or credit freeze if sensitive information was exposed.
My phone number was taken over
You lost service or accounts are being accessed using your number.
Contact your phone provider immediately to secure your number.
Next:Change passwords on important accounts, especially email and financial accounts.
Then:Check for unauthorized transactions or password resets across your accounts.
I want to prevent identity theft
Nothing has happened yet, but you want to reduce your risk.
Use strong, unique passwords for important accounts and enable multi-factor authentication.
Next:Review your privacy settings and avoid clicking unexpected links or sharing verification codes.
Then:Monitor your accounts regularly and consider placing a credit freeze for added protection.
Protect, Detect, Recover
Identity theft prevention and recovery is easier to manage when you break it into three parts.
Protect
- Use strong, unique passwords or passphrases.
- Turn on multi-factor authentication when available.
- Be cautious with links, verification codes, and unexpected messages.
- Consider freezing your credit.
Detect
- Review bank, credit card, and payment app activity.
- Check credit reports for accounts you do not recognize.
- Watch for password reset emails or login alerts you did not request.
- Pay attention to debt collection notices or missing mail.
Recover
- Contact the company where the fraud happened.
- Report identity theft at IdentityTheft.gov.
- Place a fraud alert or freeze your credit when appropriate.
- Save letters, notices, statements, reports, and screenshots.
Credit Freeze vs. Fraud Alert
These tools sound similar, but they work differently. Both can help protect your credit.
Credit Freeze
A credit freeze restricts access to your credit report. This can make it harder for someone to open new credit in your name.
- Good for prevention after a breach or identity theft concern.
- You can temporarily lift or remove it when you need to apply for credit.
- You need to contact each credit bureau separately.
Fraud Alert
A fraud alert tells businesses to take extra steps to verify your identity before opening new credit in your name.
- Useful if you suspect identity theft or personal information exposure.
- An initial fraud alert lasts one year.
- You only need to contact one credit bureau to place an initial fraud alert.
Security Freeze: Key Facts
A security freeze is one of the strongest tools available to prevent new accounts from being opened in your name.
No Cost
- There is no cost to place or lift a security freeze.
- You can do this at any time.
Contact All Three
- You must place a freeze with each credit bureau individually.
- Equifax, Experian, and TransUnion do not share freeze requests.
Does Not Affect Score
- A freeze does not lower your credit score.
- You can still check your credit reports.
Blocks New Credit
- Most lenders will not open accounts without checking your credit.
- A freeze restricts access to your credit report.
Not Complete Protection
- It does not stop fraud on existing accounts.
- It does not prevent all types of identity theft.
You Control It
- You can temporarily lift or permanently remove a freeze.
- You may need to lift it when applying for credit or employment.
Security Freeze FAQ
Common questions about how security freezes work.
Credit Bureau Contacts
You must contact each credit bureau individually to place or lift a freeze.
Equifax
800-685-1111
www.equifax.com
Experian
888-397-3742
www.experian.com
TransUnion
800-680-7289
www.transunion.com
Free Credit Reports
877-322-8228
www.annualcreditreport.com
Data Breach: What Was Exposed?
If you received a data breach notice, your next steps depend on what kind of information was involved.
First steps
- Change the password for the affected account.
- Change any reused passwords on other accounts.
- Turn on multi-factor authentication.
Watch for
- Login alerts you did not cause.
- Password reset emails.
- Messages sent from your account.
Helpful habit
- Use a different password for every important account.
- Consider a password manager.
First steps
- Review credit reports.
- Consider a credit freeze.
- Use IdentityTheft.gov if your SSN is misused.
Watch for
- Accounts you did not open.
- Debt collection notices.
- Tax, wage, or benefit notices that do not make sense.
Keep records
- Save breach notices.
- Save credit reports and dispute letters.
- Save any Identity Theft Report.
First steps
- Contact your bank, card issuer, or payment app.
- Ask about freezing, replacing, or securing the account.
- Review recent transactions.
Watch for
- Small test charges.
- New linked accounts.
- Transfers or withdrawals you did not authorize.
Keep records
- Save statements.
- Save dispute numbers.
- Save written communications.
First steps
- Contact the agency, insurer, or provider involved.
- Ask what protective steps are available.
- Review account statements, claims, or notices.
Watch for
- Medical bills or claims you do not recognize.
- Address or profile changes.
- Accounts or services you did not request.
Keep records
- Save explanation of benefits documents.
- Save account notices.
- Save replacement ID documentation.
Hacked Account Recovery
If someone gets into your email, social media, banking, shopping, or payment account, act quickly to regain control and protect other accounts.
Recover
- Use the account’s official recovery page.
- Change the password from a trusted device.
- Sign out of other sessions when possible.
Secure
- Turn on multi-factor authentication.
- Check recovery email and phone settings.
- Remove unfamiliar devices or connected apps.
Warn
- Tell contacts not to respond to suspicious messages.
- Review sent messages and deleted messages.
- Watch for additional password resets.
Recover
- Contact the company through the official app or website.
- Change your password.
- Remove unfamiliar payment methods, addresses, or devices.
Review
- Check recent transactions.
- Look for new linked accounts or transfers.
- Save order numbers and dispute confirmations.
Protect
- Turn on multi-factor authentication.
- Use unique passwords.
- Watch linked email for additional alerts.
Warning Signs of Identity Theft
These signs do not always mean identity theft happened, but they are worth checking.
Unknown Accounts
Accounts, loans, utilities, or credit cards appear that you did not open.
Debt Collection
You get collection calls or letters for debts you do not recognize.
Login Alerts
You receive password reset emails, verification codes, or login alerts you did not request.
Missing Mail
Bills, statements, or important mail stop arriving or appear to be redirected.
Unexpected Denials
You are denied credit, benefits, housing, or services for reasons that do not make sense.
Tax or Benefit Issues
You receive notices about wages, tax returns, unemployment, or benefits you did not claim.
Medical Surprises
You see medical bills, claims, or records for care you did not receive.
Strange Messages
Friends or family receive suspicious messages that appear to come from your account.
Privacy & Online Safety Basics
Small habits can prevent big headaches. Start with the accounts and devices you use most.
Use Strong Passwords
Use unique passwords or passphrases for important accounts, especially email and financial accounts.
Turn On MFA
Multi-factor authentication adds another layer of protection if a password is stolen.
Skip Suspicious Links
Go directly to official websites or apps instead of clicking unexpected links.
Review Privacy Settings
Limit what strangers can see on social media and other public profiles.
Update Devices
Security updates help fix weaknesses that scammers and hackers may exploit.
Watch Verification Codes
Never share a verification code with someone who contacted you unexpectedly.
Check Statements
Review bank, card, payment app, and shopping account activity regularly.
Limit Oversharing
Be careful with personal details that could help someone guess security answers or impersonate you.
Quick Check: Is This Identity Theft?
Practice spotting the right next step.
You get a letter about a credit card you never opened. What should you do?
Disputing Fraudulent Charges or Accounts
If you find incorrect or fraudulent information, you can send a dispute letter to creditors and credit bureaus.
Keep Good Records
Keep copies of notices, statements, screenshots, emails, letters, account alerts, police reports, Identity Theft Reports, dispute letters, confirmation numbers, and any written responses you receive. Good records can make recovery easier.
If you find an incorrect charge or fraudulent account, you may need to send a written dispute. The example below can help you understand the type of information to include.
Sample Letter for Disputing Billing Errors
[Date]
Send the letter certified with return receipt requested.
[Name of Creditor]
Attention: Disputes and Billing Inquiries
[Address]
[City, State, Zip Code]
RE: [Your Account Number]
Dear Sir or Madam:
I am writing to dispute a billing error in the amount of [$______] on my account. The amount is inaccurate because [describe the problem].
I am requesting that the error be corrected, that any finance and other charges related to the disputed amount be credited, and that I receive an accurate statement.
Enclosed are copies of [describe supporting documents, such as sales slips, payment records, statements, screenshots, or correspondence] supporting my position.
Please investigate this matter and correct the billing error as soon as possible.
Sincerely,
[Your Name]
[Your Address]
[Phone Number and Email Address]
Enclosures:
[List the documents included]
Keep copies of notices, statements, screenshots, emails, letters, account alerts, police reports, Identity Theft Reports, dispute letters, and confirmation numbers. Good records can make recovery easier.
What To Do Now
If your information was misused, act quickly, report it, and save evidence.
