Identity Theft Recovery Steps: How to Freeze Credit and File Fraud Alerts
identity theft recovery steps. Guidance on initial steps to take after discovering identity theft, including securing accounts, freezing credit, and reporting fraud within the first 24 hours.
Discovering that your identity has been stolen can leave you feeling angry, frightened and unsure where to begin. Maybe someone drained your bank account, opened a credit card in your name or filed a fraudulent tax return using your Social Security number. Whatever happened, your next steps can help limit the damage. The first 24 hours are especially important because identity thieves may continue using your information until you secure your accounts. Fortunately, you can take several steps right away to protect yourself and begin recovering.
Identity theft can quickly spread beyond the account where you first discovered the problem. Someone who gains access to your email, for example, might use it to reset passwords for your banking, shopping or other accounts. That’s why acting quickly can make a difference. However, you don’t have to solve everything in one day. Identity theft recovery can take weeks or even months, depending on the circumstances. Your immediate goal is to stop additional fraud, protect your information and create a record of what happened.
During the first hour, start with the accounts most likely to expose your money or personal information. Contact your bank or credit card company if someone accessed your account or made unauthorized transactions, and ask whether the account should be locked, frozen or replaced. Change compromised passwords using strong, unique passwords and a trusted device. Turn on two-factor authentication for email and financial accounts using an authenticator app or passkey when supported, and check for unauthorized account changes such as modified recovery addresses or forwarding rules.
Between hours two and four, place an initial fraud alert on your credit file by contacting Equifax, Experian or TransUnion, which requires the contacted bureau to notify the other two. Freeze your credit separately with all three bureaus to restrict access to your credit reports and make it harder for someone to open new credit accounts. You can also review your credit reports at AnnualCreditReport.com for unfamiliar accounts and inquiries.
Between hours four and eight, report identity theft to the Federal Trade Commission at IdentityTheft.gov to receive a personalized recovery plan, and contact local police when appropriate. Keep copies of your FTC report, police report and confirmation numbers. An FTC report helps you exercise rights under federal law, such as requesting that credit bureaus block fraudulent information, though you generally do not need to file one before notifying a bank about unauthorized transactions.
Between hours eight and 16, review other important accounts across email, banking, retirement, shopping and payment services. Contact your mobile carrier immediately if you suspect a SIM swap or unauthorized phone number transfer. Notify your employer if a work email or payroll account was compromised, check devices for malware or phishing, and protect your tax identity by contacting the IRS or requesting an Identity Protection PIN if someone used your Social Security number.
Between hours 16 and 24, organize your recovery efforts by creating a fraud recovery record of dates, times, account numbers and representatives’ names. Make a follow-up checklist, schedule additional credit checks, and save copies of correspondence and dispute letters in a secure location.
Common recovery mistakes include trying to handle everything at once, assuming a credit freeze fixes existing fraud, calling numbers from suspicious messages, failing to document conversations, and stopping after securing only one account. While some tasks continue beyond the first day, reporting unauthorized financial transactions immediately remains essential.
Identity theft protection services may offer additional support through dedicated restoration specialists, ongoing monitoring, and reimbursement for eligible stolen funds depending on the plan. However, services cannot prevent every type of fraud, and individuals can freeze credit and report fraud for free without paying a company.
