Identity theft recovery checklist

Step-by-step check

1. 1

   File at IdentityTheft.gov

   This generates a personalized FTC Identity Theft Report and recovery plan. The report is required by most banks and creditors to remove fraudulent accounts.

2. 2

   Place a fraud alert and freeze all three bureaus

   Call any one bureau to add a fraud alert (it propagates), then freeze Equifax, Experian, and TransUnion. See our freeze guide for direct numbers.

3. 3

   Change passwords starting with your email

   Email controls password resets everywhere. Use unique, long passwords stored in a password manager, and enable authenticator-app 2FA on email, banking, and any account tied to money.

4. 4

   Call every affected bank, card issuer, and lender

   Report fraudulent charges, close compromised accounts, and request new account numbers. Ask for written confirmation of fraud determination.

5. 5

   File a report with local police

   Many creditors require a police report number to remove fraudulent debts. Bring your FTC report, photo ID, and proof of address.

6. 6

   Request an IRS Identity Protection PIN

   Go to irs.gov/ippin. A 6-digit IP PIN blocks anyone — including scammers with your SSN — from filing a tax return in your name.

7. 7

   Notify the SSA and lock your SSN

   Create or log into your my Social Security account, lock it, and review earnings for unfamiliar employers. Call 1-800-269-0271 to report SSN misuse.

8. 8

   Document everything as you go

   Keep a log of every call: date, time, person, reference number. Keep copies of letters and disputes. You may need this for years.

FAQ