Skip to main content
GACS will never ask for your seed phrase, private keys, or payment. free and ad-free.
Identity defense · 7 steps · 15 minutes

Identity theft protection

Most identity-theft losses happen because the victim's credit file, SSN, and email recovery were never locked. The steps below take about fifteen minutes and cost nothing.

Got a suspicious link, number, email or wallet? Check it free.

Or get free scam alerts so you hear about new tricks first.

Written by GACS Research TeamReviewed by GACS Editorial Review and the GACS Research TeamLast reviewed September 8, 2026

Free dispute letter & evidence checklist

Copy the letter, fill in the brackets, and send it to your bank or card issuer. Not legal advice.

  • Screenshots of every charge (statement lines with dates and amounts)
  • Cancellation confirmation or proof you tried to cancel
  • All emails / chats with the merchant (dated)
  • The ad, website page or message that misled you
  • Report receipts: FTC (reportfraud.ftc.gov) and, for losses, FBI IC3 (ic3.gov)
  • PayPal: open the dispute in the Resolution Center within 180 days of payment
Show the dispute letter template
Subject: Dispute of unauthorized / unwanted charge

To: [Bank or card issuer] Dispute Department

Cardholder: [Full name]
Card / account ending: [last 4 digits]

I am disputing the following charge(s):
- Merchant: [name]
- Date(s): [date]
- Amount(s): [amount]

Reason: [I did not authorize this charge / I cancelled before renewal / I was deceived about what I was buying].

I contacted the merchant on [date] by [email/chat] and [they refused / did not respond]. Copies are attached.

Please reverse the charge(s), issue a provisional credit while you investigate, and block future charges from this merchant.

Attached evidence: receipts, screenshots, cancellation confirmation, merchant correspondence.

Signed: [Name]   Date: [date]
Quick answer

Freeze your credit file at Equifax, Experian, and TransUnion, lock your SSN through E-Verify Self Lock, turn on two-factor authentication on email and bank accounts, set fraud alerts, and enable transaction alerts on every card. If you are already a victim, file at IdentityTheft.gov the same day.

What this check is built on, right now

438,316
entries in the public scam registry
8,103
reports filed by the public
19,895
new listings in the last 30 days
2
countries reports have come from

Counts come straight from the GACS registry, updated Oct 21, 2026. See the full breakdown.

Step-by-step check

  1. 1

    Freeze your credit at all three bureaus

    A credit freeze is free, takes minutes, and blocks new accounts from being opened in your name. Do Equifax, Experian, and TransUnion — not just one.

  2. 2

    Lock your Social Security Number

    Use E-Verify Self Lock at e-verify.gov to block fraudulent employment, and create a my Social Security account at ssa.gov before a scammer does.

  3. 3

    Turn on two-factor authentication on email first

    Whoever controls your email controls password resets for every other account. Use an authenticator app, not SMS, and save backup codes offline.

  4. 4

    Set fraud alerts and bank transaction alerts

    Add a one-year fraud alert at any one bureau (it propagates to the other two) and enable instant text or push alerts on every debit and credit card.

  5. 5

    Lock your phone carrier account against SIM swap

    Add a port-out PIN or 'Number Lock' with T-Mobile, Verizon, AT&T, or your carrier. SIM-swap attacks bypass SMS-based 2FA.

  6. 6

    Check your credit reports for accounts you do not recognize

    Pull all three free at annualcreditreport.com. Dispute anything unfamiliar in writing within 30 days.

  7. 7

    Monitor for impersonation across social platforms

    Scammers clone your name and photo to defraud your contacts. Run a free scan on each major platform and set alerts for new accounts using your face.

Red flags

  • A bill, debt collector call, or IRS notice for an account you never opened.
  • Missing mail — scammers redirect statements to hide new accounts.
  • Your phone suddenly says 'No Service' for hours (possible SIM swap in progress).
  • Login or password-reset alerts you did not initiate.
  • Tax return rejected because someone already filed using your SSN.

What to do next

  • ✓Save the confirmation PINs from each bureau freeze in a password manager.
  • ✓Schedule a 6-month reminder to re-pull your credit reports.
  • ✓If you have minor children, freeze their credit too — child SSN fraud often hides for years.

FAQ

Does a credit freeze hurt my credit score?

No. A freeze blocks new inquiries from creating accounts in your name but does not affect your existing score or accounts.

Do I need to pay for identity-theft protection services?

No. Every essential step — freezes, fraud alerts, SSN lock, IdentityTheft.gov recovery — is free. Paid services mostly resell monitoring you can do yourself.

How long does a credit freeze last?

Indefinitely, until you lift it. You can thaw it temporarily online in minutes when applying for credit.

What if my SSN is already on the dark web?

Assume it is — most are. Focus on freezes, SSN lock, MFA, and account alerts. These block the actual fraud, not the data leak.

Sources

  1. 1IdentityTheft.gov — report and recovery plan US Federal Trade Commission — Official US reporting route and personalised recovery checklist for identity theft.
  2. 2What to know about credit freezes and fraud alerts US Federal Trade Commission — How a freeze differs from a fraud alert, and how to place one with each bureau.
  3. 3How to avoid a scam US Federal Trade Commission — The four signs the FTC says are common to nearly every scam.
  4. 4Where to report a scam USA.gov — Directory of the correct US agency for each scam type.

Every figure on this page is quoted from the body named beside it. Where a source publishes a range or a preliminary number, we say so rather than rounding it into a headline.

Latest alert digests

Weekly and thematic scam roundups from the GACS intelligence feed.

Free dispute letter & evidence checklist

Copy the letter, fill in the brackets, and send it to your bank or card issuer. Not legal advice.

  • Screenshots of every charge (statement lines with dates and amounts)
  • Cancellation confirmation or proof you tried to cancel
  • All emails / chats with the merchant (dated)
  • The ad, website page or message that misled you
  • Report receipts: FTC (reportfraud.ftc.gov) and, for losses, FBI IC3 (ic3.gov)
  • PayPal: open the dispute in the Resolution Center within 180 days of payment
Show the dispute letter template
Subject: Dispute of unauthorized / unwanted charge

To: [Bank or card issuer] Dispute Department

Cardholder: [Full name]
Card / account ending: [last 4 digits]

I am disputing the following charge(s):
- Merchant: [name]
- Date(s): [date]
- Amount(s): [amount]

Reason: [I did not authorize this charge / I cancelled before renewal / I was deceived about what I was buying].

I contacted the merchant on [date] by [email/chat] and [they refused / did not respond]. Copies are attached.

Please reverse the charge(s), issue a provisional credit while you investigate, and block future charges from this merchant.

Attached evidence: receipts, screenshots, cancellation confirmation, merchant correspondence.

Signed: [Name]   Date: [date]

Stay ahead of the next scam

Set up your free alerts, or check something suspicious right now.

Did you find this guide useful?

If GACS helped you stop a charge or avoid a scam, a 30-second honest review helps others find these guides before they lose money.

Related scam-safety guides

Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team

Cite this page: GACS (2026). Identity Theft Protection: 7-Step Plan for 2026. https://gacs.app/identity-theft-protection · Record ID GACS-identity-theft-protection

Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.

Authoritative sources

Independent primary sources used to check and corroborate the guidance on this page.

Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team

Cite this page: GACS (2026). Identity Theft Protection: 7-Step Plan for 2026 — GACS. https://gacs.app/identity-theft-protection · Record ID GACS-identity-theft-protection

Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.