How to Protect Yourself from Identity Theft and Credit Fraud

Identity theft is one of the fastest-growing crimes in the United States. According to the Federal Trade Commission (FTC), consumers reported losing more than $10 billion to fraud in 2023, and identity theft was the most commonly reported type of fraud. The FTC received more than 1 million identity theft reports that year alone.

If someone steals your personal information and uses it to open credit accounts, make purchases, or file tax returns in your name, the damage can take months or even years to fully resolve. The good news is that there are concrete steps you can take right now to protect yourself, and if you do become a victim, a clear action plan can help you recover faster.

How Identity Theft Happens

Understanding how thieves steal personal information helps you protect yourself. Here are the most common methods:

Data Breaches

Large-scale data breaches at companies, hospitals, government agencies, and financial institutions expose millions of records each year. When a company you have an account with is breached, your name, Social Security number, credit card numbers, and other personal information may end up for sale on the dark web.

Phishing and Social Engineering

Phishing emails, text messages, and phone calls trick you into revealing personal information. These scams are increasingly sophisticated — they may look like messages from your bank, the IRS, or a company you do business with. A common red flag is any unsolicited communication that creates urgency ("Your account will be closed unless you verify your information immediately").

Mail Theft

Stolen mail can provide thieves with pre-approved credit offers, bank statements, tax documents, and other sensitive information. Using a locked mailbox or a P.O. Box, and opting for electronic statements, can reduce this risk.

Stolen Wallets and Documents

A stolen wallet provides your name, address, driver's license number, and credit card numbers. Some thieves also steal documents from your home, car, or office.

Public Wi-Fi

Using unsecured public Wi-Fi networks can expose your login credentials and personal information to hackers who are monitoring the network. Avoid logging into financial accounts or entering sensitive information on public Wi-Fi without a VPN.

> **Want step-by-step fraud response plans for every scenario?** [Get the DIY Credit Report Guide for $29 →](/product)

Prevention: How to Protect Yourself

Freeze Your Credit

A credit freeze (also called a security freeze) is the single strongest protection against new-account identity theft. A freeze prevents anyone, including you, from opening new credit accounts in your name until you lift the freeze. It is free with all three credit bureaus, it does not affect your existing accounts, and it does not lower your credit score.

How to place a freeze:

You must freeze your credit with each bureau separately. When you place a freeze, each bureau will give you a PIN or password that you will need to temporarily lift or permanently remove the freeze when you want to apply for new credit. Keep these PINs in a safe place.

A freeze remains in place until you lift it. When you need to apply for credit, you can temporarily lift the freeze with the specific bureau (or all three) for a set period of time, then it automatically goes back into effect.

Place a Fraud Alert

A fraud alert is a free notice added to your credit report that tells creditors to take extra steps to verify your identity before opening new accounts. Unlike a freeze, a fraud alert does not block access to your report — it simply flags it.

There are two types of fraud alerts:

Credit Freeze vs. Fraud Alert: Which Should You Choose?

| Feature | Fraud Alert | Credit Freeze |

|---------|------------|---------------|

| Duration | 1 year (initial) or 7 years (extended) | Until you lift it |

| Strength | Moderate — creditors should verify identity but are not required to deny credit | Strong — no new credit can be opened |

| Setup | Contact one bureau; they notify the other two | Must contact each bureau separately |

| Effect on existing accounts | None | None |

| Effect on credit score | None | None |

| Can you still apply for credit? | Yes, with extra verification | No, until you temporarily lift it |

| Best for | Suspected fraud or as a precaution | Confirmed fraud or maximum protection |

For the strongest protection, use both a credit freeze and a fraud alert together.

Monitor Your Credit Reports Regularly

Check your credit reports from all three bureaus regularly at [AnnualCreditReport.com](https://www.annualcreditreport.com). Free weekly reports are available. Look for accounts you did not open, addresses where you have never lived, inquiries you did not authorize, and any other unfamiliar information.

Consider staggering your checks — for example, checking one bureau every month or two — so you are monitoring throughout the year.

Protect Your Social Security Number

Your Social Security number is the most valuable piece of information for identity thieves. Do not carry your Social Security card in your wallet. Do not give out your SSN unless absolutely necessary (and ask why it is needed and how it will be protected). Be especially cautious of requests for your SSN by phone, email, or text.

Use Strong, Unique Passwords

Use a different password for every online account, especially financial accounts. Each password should be at least 12 characters and include a mix of letters, numbers, and symbols. A password manager can help you create and store strong passwords without having to memorize them all.

Enable Two-Factor Authentication

Two-factor authentication (2FA) adds a second layer of security to your online accounts. Even if someone steals your password, they cannot log in without the second factor (usually a code sent to your phone or generated by an authentication app). Enable 2FA on all financial accounts, email accounts, and social media accounts.

Review Financial Statements Monthly

Check your bank statements and credit card statements every month for charges you do not recognize. Report any suspicious activity to your bank or card issuer immediately. Most card issuers offer zero liability for unauthorized charges if you report them promptly.

What to Do If You Are a Victim of Identity Theft

If you discover that someone has stolen your identity, act quickly. The sooner you respond, the less damage the thief can do and the easier it will be to recover. Follow these steps in order:

Step 1: Place a Fraud Alert and Credit Freeze

Contact one of the three credit bureaus to place an initial fraud alert (they will notify the other two). Then contact all three bureaus to place a credit freeze. This prevents the thief from opening any new accounts.

Step 2: Report to the FTC

Go to [IdentityTheft.gov](https://identitytheft.gov) and complete the online report. The FTC will create a personalized recovery plan based on your specific situation. You will receive an FTC Identity Theft Report, which you will need for disputing fraudulent accounts and for placing an extended fraud alert.

Step 3: File a Police Report

File a report with your local police department. Bring a copy of your FTC Identity Theft Report and any evidence of the fraud (fraudulent account statements, collection notices, etc.). While local police may not investigate the crime directly, the police report creates an official record that can help with disputes and creditor investigations.

Step 4: Review Your Credit Reports

Get fresh copies of your credit reports from all three bureaus and review them carefully for any accounts, inquiries, or addresses you do not recognize. Make a list of every fraudulent item you find.

Step 5: Dispute Fraudulent Information

File disputes with each credit bureau for every fraudulent item on your reports. Use the fraud dispute process, which is separate from the regular dispute process. Include your FTC Identity Theft Report and police report with your disputes. The bureau must block the fraudulent information within four business days of receiving your dispute.

Step 6: Contact Affected Creditors

Call each company where a fraudulent account was opened in your name. Explain that you are a victim of identity theft, ask them to close the fraudulent account, and request written confirmation that the account has been closed and you are not liable for any charges. Send follow-up letters via certified mail.

Step 7: Secure Your Accounts

Change passwords on all online accounts, especially email, banking, and financial accounts. Enable two-factor authentication where available. If the thief gained access through a specific breach or method, take steps to address that vulnerability.

Recovery Timeline and What to Expect

Recovering from identity theft can take anywhere from a few weeks to several months, depending on the severity:

Throughout the process, document everything: every phone call (date, time, person you spoke with, what was discussed), every letter sent and received, every dispute filed, and every report made. This paper trail is your best protection and will be essential if you need to escalate any part of your recovery.

Under the Fair Credit Reporting Act, you are not liable for fraudulent debts opened in your name, and creditors cannot hold you responsible once you have reported the fraud. However, the process of getting everything corrected takes persistence and follow-through.

> **The complete guide includes detailed action plans for every fraud scenario, including template letters for creditors and bureaus.** [Get all 10 chapters, 5 templates, and 3 checklists for $29 →](/product)