Skip to main content
GACS will never ask for your seed phrase, private keys, or payment. free and ad-free.
GACS.app — Global Anti-Crime & Safety
Sign up / Log in
Recovery · 8 steps · first 24 hours

Identity theft recovery checklist

Speed matters. The first 24 hours after discovering identity theft determine how much damage you can reverse and how quickly accounts can be restored.

Got a suspicious link, number, email or wallet? Check it free.

Or get free scam alerts so you hear about new tricks first.

Written by GACS Research TeamReviewed by GACS Editorial Review and the GACS Research TeamLast reviewed September 8, 2026

Free dispute letter & evidence checklist

Copy the letter, fill in the brackets, and send it to your bank or card issuer. Not legal advice.

  • Screenshots of every charge (statement lines with dates and amounts)
  • Cancellation confirmation or proof you tried to cancel
  • All emails / chats with the merchant (dated)
  • The ad, website page or message that misled you
  • Report receipts: FTC (reportfraud.ftc.gov) and, for losses, FBI IC3 (ic3.gov)
  • PayPal: open the dispute in the Resolution Center within 180 days of payment
Show the dispute letter template
Subject: Dispute of unauthorized / unwanted charge

To: [Bank or card issuer] Dispute Department

Cardholder: [Full name]
Card / account ending: [last 4 digits]

I am disputing the following charge(s):
- Merchant: [name]
- Date(s): [date]
- Amount(s): [amount]

Reason: [I did not authorize this charge / I cancelled before renewal / I was deceived about what I was buying].

I contacted the merchant on [date] by [email/chat] and [they refused / did not respond]. Copies are attached.

Please reverse the charge(s), issue a provisional credit while you investigate, and block future charges from this merchant.

Attached evidence: receipts, screenshots, cancellation confirmation, merchant correspondence.

Signed: [Name]   Date: [date]
Quick answer

File at IdentityTheft.gov to generate a free FTC Identity Theft Report, freeze your credit at all three bureaus, add a fraud alert, change passwords starting with your primary email, file a local police report, and request an IRS Identity Protection PIN.

Freeze your credit first Prevention plan after recovery

What this check is built on, right now

438,318
entries in the public scam registry
8,103
reports filed by the public
19,892
new listings in the last 30 days
2
countries reports have come from

Counts come straight from the GACS registry, updated Oct 21, 2026. See the full breakdown.

Step-by-step check

  1. 1

    File at IdentityTheft.gov

    This generates a personalized FTC Identity Theft Report and recovery plan. The report is required by most banks and creditors to remove fraudulent accounts.

  2. 2

    Place a fraud alert and freeze all three bureaus

    Call any one bureau to add a fraud alert (it propagates), then freeze Equifax, Experian, and TransUnion. See our freeze guide for direct numbers.

  3. 3

    Change passwords starting with your email

    Email controls password resets everywhere. Use unique, long passwords stored in a password manager, and enable authenticator-app 2FA on email, banking, and any account tied to money.

  4. 4

    Call every affected bank, card issuer, and lender

    Report fraudulent charges, close compromised accounts, and request new account numbers. Ask for written confirmation of fraud determination.

  5. 5

    File a report with local police

    Many creditors require a police report number to remove fraudulent debts. Bring your FTC report, photo ID, and proof of address.

  6. 6

    Request an IRS Identity Protection PIN

    Go to irs.gov/ippin. A 6-digit IP PIN blocks anyone — including scammers with your SSN — from filing a tax return in your name.

  7. 7

    Notify the SSA and lock your SSN

    Create or log into your my Social Security account, lock it, and review earnings for unfamiliar employers. Call 1-800-269-0271 to report SSN misuse.

  8. 8

    Document everything as you go

    Keep a log of every call: date, time, person, reference number. Keep copies of letters and disputes. You may need this for years.

Red flags

  • Anyone offering 'recovery' help in exchange for an up-front fee — that is a follow-on scam.
  • Calls from 'the FTC' or 'the IRS' demanding payment to clear the fraud — neither agency calls victims this way.
  • Emails asking you to 'confirm' your SSN, bank login, or recovery code after you filed the report.

What to do next

  • ✓Pull all three credit reports at annualcreditreport.com and dispute every unfamiliar account in writing.
  • ✓Watch your mail for collection notices on debts you did not incur and dispute each with your FTC report.
  • ✓Re-check your reports every 3 months for the next year.

FAQ

Do I need to pay for an identity-theft recovery service?

No. IdentityTheft.gov, bureau freezes, fraud alerts, and IRS IP PINs are all free. Paid services mostly automate the same steps.

How long does recovery take?

Closing accounts can take days; clearing fraudulent debts and tax-return fraud often takes 6 to 12 months. Keep your case file organized.

What if the thief used my identity for a crime?

Request a 'clearance letter' from the arresting agency and file an FTC report. Some states issue an Identity Theft Passport for use at traffic stops.

Can I sue the company that leaked my data?

Sometimes. Class actions follow most major breaches. Your FTC report and police report help establish standing.

Sources

  1. 1IdentityTheft.gov — report and recovery plan US Federal Trade Commission — Official US reporting route and personalised recovery checklist for identity theft.
  2. 2What to know about credit freezes and fraud alerts US Federal Trade Commission — How a freeze differs from a fraud alert, and how to place one with each bureau.
  3. 3Where to report a scam USA.gov — Directory of the correct US agency for each scam type.
  4. 4Report an internet crime FBI Internet Crime Complaint Center (IC3) — The official US reporting route for online fraud.

Every figure on this page is quoted from the body named beside it. Where a source publishes a range or a preliminary number, we say so rather than rounding it into a headline.

Recently exposed scams

Live from the GACS registry — click any entry for the full report, red flags, and reporting channels for that specific scam.

Don't see the scam you're researching? Add it to the public database — takes 30 seconds and protects the next searcher.

Latest alert digests

Weekly and thematic scam roundups from the GACS intelligence feed.

Free dispute letter & evidence checklist

Copy the letter, fill in the brackets, and send it to your bank or card issuer. Not legal advice.

  • Screenshots of every charge (statement lines with dates and amounts)
  • Cancellation confirmation or proof you tried to cancel
  • All emails / chats with the merchant (dated)
  • The ad, website page or message that misled you
  • Report receipts: FTC (reportfraud.ftc.gov) and, for losses, FBI IC3 (ic3.gov)
  • PayPal: open the dispute in the Resolution Center within 180 days of payment
Show the dispute letter template
Subject: Dispute of unauthorized / unwanted charge

To: [Bank or card issuer] Dispute Department

Cardholder: [Full name]
Card / account ending: [last 4 digits]

I am disputing the following charge(s):
- Merchant: [name]
- Date(s): [date]
- Amount(s): [amount]

Reason: [I did not authorize this charge / I cancelled before renewal / I was deceived about what I was buying].

I contacted the merchant on [date] by [email/chat] and [they refused / did not respond]. Copies are attached.

Please reverse the charge(s), issue a provisional credit while you investigate, and block future charges from this merchant.

Attached evidence: receipts, screenshots, cancellation confirmation, merchant correspondence.

Signed: [Name]   Date: [date]

Stay ahead of the next scam

Set up your free alerts, or check something suspicious right now.

Get My Free Scam Alerts

Get community scam alerts and free on-demand checks. Continuous monitoring is available with a paid plan.

Continue
Check a site, wallet or number

One box for links, domains, crypto addresses and phone numbers.

Continue

Did you find this guide useful?

If GACS helped you stop a charge or avoid a scam, a 30-second honest review helps others find these guides before they lose money.

Review us on TrustCaptainReview us on Trustpilot

Related scam-safety guides

Browse the full scam-safety guide library →

Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team

Cite this page: GACS (2026). Identity Theft Recovery Checklist: First 24 Hours. https://gacs.app/identity-theft-recovery-checklist · Record ID GACS-identity-theft-recovery-checklist

Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.

Related GACS research

Authoritative sources

Independent primary sources used to check and corroborate the guidance on this page.

Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team

Cite this page: GACS (2026). Identity Theft Recovery Checklist: First 24 Hours — GACS. https://gacs.app/identity-theft-recovery-checklist · Record ID GACS-identity-theft-recovery-checklist

Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.

Related GACS research