How to Recover from Identity Theft: Step-by-Step Guide

Spread the love

You Just Found Out. Here’s What to Do First.

Finding out your identity has been stolen feels awful. Maybe you spotted a charge you didn’t make. Maybe a credit card arrived you never applied for. Maybe you got a letter from the IRS about a tax return you never filed.

Whatever triggered it, trust me you can fix this.

I’ve written this guide for you – everyday people, not a tech experts. No jargon, no panic – just the steps, explained in simple language on how to recover from identity theft step by step.

One important thing before we start: Identity theft isn’t always dramatic. Sometimes it’s one fraudulent charge that gets sorted in a day. Sometimes it’s a stolen Social Security number that takes months to clean up.

The steps below are ordered so that the most urgent actions come first and you stop reading when your situation is handled.

Disclosure: Some of the links on this page are affiliate links. This means that if you click through and make a purchase, we may earn a small commission — at no extra cost to you. We only recommend products, tools, and services that we believe provide real value for online safety, privacy, and identity protection.

As an Amazon Associate, we earn from qualifying purchases.

Step 1: Take 15 Minutes to Figure Out What Actually Happened

Before you call anyone, take 15 minutes to identify what happened. Different types of identity theft need different responses and overreacting wastes weeks.

Grab a piece of paper and note:

• What tipped you off? (a charge, a letter, an account you didn’t open)
• Which accounts or information are involved?
• Is it still happening, or does it look contained?

Quick guide to urgency:

Step 2: Secure Your Email First — Everything Else Depends on It

Your email account is the master key to your entire digital life. Password reset links for your bank, your credit card, your PayPal they all go to your email. If a thief controls your email, they can reset the password on everything else while you’re asleep.

Do this right now:

1. Change your email password, make it long and unique
2. Turn on two-factor authentication (2FA) — a code sent to your phone every time someone logs in from a new device
3. Check your active sessions and log out anything you don’t recognise
4. Verify your recovery email and phone number are still yours. Thieves change these to lock you out

Then do the same for: online banking, PayPal, and any payment apps.

Step 3: Freeze Your Credit — This Is Your Most Powerful Move

A credit freeze (also called a security freeze) tells the credit bureaus to lock your file. Once it’s frozen, no one — not even someone with your full name, address, and Social Security Number can open a new credit card, loan, or finance account in your name.

It’s free. It doesn’t affect your credit score. And it can be done in about 20 minutes.

You must freeze with each bureau separately:

United States:

• Equifax — freeze online, by phone, or by post
• Experian — freeze online or by phone
• TransUnion — freeze online or by phone

Australia:

• Equifax Australia, Experian Australia, and Illion — search each by name and request a “credit ban”

United Kingdom:

• Register with CIFAS Protective Registration — this flags your file so lenders must do extra checks before approving anything

When you freeze, save your PIN or login details somewhere safe. You’ll need them to temporarily “thaw” your credit if you ever want to apply for a mortgage, car loan, or new credit card.

Fraud alert vs. credit freeze — what’s the difference? A fraud alert asks lenders to check your identity more carefully. A credit freeze blocks new credit entirely. After confirmed identity theft, a freeze is the stronger choice.

For a full country-by-country walkthrough, read: How to Freeze Your Credit After Identity Theft →

Step 4: Pull Your Credit Reports and Go Through Them

Now that your credit is frozen, nothing new can be added. But you need to see what’s already there.

Where to get your free credit reports:

• USA: AnnualCreditReport.com — this is the only official free source (the others charge after a trial)
• Australia: Check Equifax Australia, Experian Australia, and Illion – all offer one free report per year
• UK: Check Experian, Equifax UK, and TransUnion UK

What you’re looking for:

• Accounts you didn’t open (credit cards, loans, store accounts)
• Hard enquiries from lenders you’ve never contacted
• Addresses listed that you’ve never lived at
• Balances on accounts you recognise but didn’t use

Write down anything suspicious like the lender’s name, the account number, and the date it was opened. You’ll need this in the next step.

Step 5: File Your Official Identity Theft Report

This document is your proof that you’re the victim, not the fraudster. Banks, credit bureaus, and government agencies will ask for it. Don’t skip it.

Where to file (takes 15–20 minutes online):

• United States: IdentityTheft.gov — run by the FTC. It generates a personalised recovery plan and creates your official Identity Theft Report automatically. Start here.
• Australia: IDCARE — free, confidential support specifically for Australians affected by identity crime
• United Kingdom: Action Fraud — the UK’s national reporting centre for fraud
• Canada: Canadian Anti-Fraud Centre

After you file, save or print your report number. You’ll reference it in every call you make from this point forward.

In the US, IdentityTheft.gov will actually generate pre-filled dispute letters for you. This alone can save hours.

Step 6: Contact Every Affected Bank and Lender

For each fraudulent account or charge you found, call the fraud department (not general customer service) and ask them to:

• Close or freeze the fraudulent account
• Remove you from liability for the charges
• Send written confirmation
• Give you a case reference number

Keep a simple log: date, name of person you spoke to, case number. This will safe you lots of time and frustration especially when your mind is racing and stressed out. Document everything in one safe place.

Step 7: Dispute the Fraudulent Items on Your Credit Report

Once you have your identity theft report and your list of fraudulent accounts, you can formally dispute them with the credit bureaus.

In the US, you can do this through IdentityTheft.gov , it generates the dispute letters for you. You can also dispute directly through each bureau’s website.

What to include in every dispute:

• Your identity theft report
• The specific account name, number, and the reason it’s fraudulent
• A copy of a government-issued ID and proof of address

Bureaus typically have 30 days to investigate and respond. Follow up if you don’t hear back.

This is also when you might consider sending a dispute letter directly to the lender who opened the fraudulent account not just the credit bureau. The lender has to investigate too.

Step 8: Keep Watching — Identity Theft Often Comes Back

This is where a lot of people relax too soon.

Stolen personal data gets sold, resold and used months or even years after the initial theft. Someone might use your details once, then sell them to someone else who uses them six months later.

At minimum, do this for the next 6–12 months:

• Check your credit reports every 3 months (you can stagger them — one bureau every few months)
• Watch for unexpected mail: letters from lenders, government agencies, or debt collectors
• Keep an eye on your tax filing — in the US, a thief might file a tax return in your name to claim your refund (an IRS IP PIN can prevent this)
• Check your email regularly for “account created” or “password reset” notifications you didn’t trigger

If this feels like too much to track yourself especially if your Social Security Number or passport was exposed, if multiple accounts were opened or if you just don’t want to manage this manually, a monitoring service can help. Services like Aura alert you to new credit applications, dark web mentions of your data, and suspicious account activity — so you find out quickly rather than discovering it months later.

(This is optional. The manual steps above are enough for most people. But if the idea of checking all of this yourself every few months stresses you out, a service can take it off your plate.)

How Long Does Recovery Take?

Honestly, it varies. Here’s a realistic picture:

The paperwork phase feels slow. That’s normal. Keep your records, follow up when deadlines pass, and don’t give up.

Your Identity theft Recovery Checklist

Cut this out and work through it:

• Identified what type of theft occurred and which accounts are affected
• Secured email (new password + 2FA)
• Secured banking and financial app passwords
• Frozen credit with all three bureaus in your country
• Saved freeze PIN somewhere secure
• Pulled and reviewed credit reports from all bureaus
• Filed official identity theft report (IdentityTheft.gov / IDCARE / Action Fraud)
• Called fraud departments at all affected lenders — got case numbers
• Submitted formal disputes with credit bureaus
• Set reminders to check credit reports every 3 months

Knowing how to recover from identity theft is the first step and you’ve just completed it. Every action you take from here puts you more in control.

People Also Ask

Can I recover from identity theft on my own? Yes — absolutely. The official steps above are what the professionals follow too. You don’t need to hire anyone. A monitoring service helps with ongoing peace of mind, but the recovery itself is something you can handle.

What’s the very first thing I should do? Secure your email, then freeze your credit. Those two steps alone stop most ongoing damage while you sort out the rest.

Will my credit score be permanently damaged? Not if you dispute the fraudulent accounts. Once the credit bureaus investigate and confirm the accounts aren’t yours, they remove them — and your score recovers. The freeze itself has zero effect on your score.

What if the thief took out a loan in my name? Contact that lender’s fraud department directly, provide your identity theft report, and formally dispute it. The lender is legally obligated to investigate.

Next in this series: How to Freeze Your Credit After Identity Theft , a step-by-step walkthrough for every country, including what to do if you need to temporarily “thaw” it.

More on Your Digital safety Journey

The Ultimate Phone Security Hub: How to Keep Your Phone Safe (Simple Guide)

Scam Hub- everything you need to learn about scam

A curated Family Safety Toolbox with free cybersecurity tools and trusted products to protect your data, prevent identity theft, and stay safe online—at home or while traveling