How to Recover From Identity Theft Step-by-Step

Identity theft can feel overwhelming because it often affects more than one account. Someone may open credit in your name, use your Social Security number, access your bank account, file taxes, or create bills you never agreed to.

The most important thing is to move in order: stop the damage, report the theft, protect your credit, dispute what is fraudulent, and keep records.

In this guide, you’ll learn how to recover from identity theft step by step and what to do first when your personal information has been misused.

TL;DR: Quick Decision Guide

• If money was stolen → contact the bank, card issuer, or payment provider first.
• If accounts were opened in your name → report identity theft at IdentityTheft.gov.
• If your Social Security number was exposed or misused → freeze your credit with all three bureaus.
• If fraudulent accounts appear on your credit report → dispute them with the credit bureaus and the companies involved.
• If you are overwhelmed → create one recovery folder and work through the steps in order.

Step 1: Stop the Immediate Damage

Start with the accounts or companies where the fraud happened. If someone used your bank account, card, payment app, email, phone, or online account, contact that company directly.

The FTC says recovering from identity theft is a process, and IdentityTheft.gov provides step-by-step advice to help limit damage, report identity theft, and fix your credit.

What to do:

• Call the fraud department for the affected company.
• Ask them to close, freeze, or secure the account.
• Change passwords for affected accounts.
• Turn on two-factor authentication.
• Remove unfamiliar devices or linked accounts.
• Save confirmation numbers and representative names.

If your email was hacked, secure it first. Email is often used to reset passwords for banks, credit cards, payment apps, and shopping accounts.

👉 Compare: Identity Protection Tools in the Marketplace →

Step 2: Report Identity Theft at IdentityTheft.gov

IdentityTheft.gov is the federal government’s main recovery site for identity theft. It helps you create an identity theft report and a personal recovery plan. The FTC says the Identity Theft Report can help prove to businesses that someone stole your identity and can make it easier to fix problems caused by identity theft.

What to do:

• Go to IdentityTheft.gov.
• Choose the type of identity theft that happened.
• Provide details about the accounts, transactions, or information misused.
• Save or print your Identity Theft Report.
• Follow the recovery checklist the site creates for you.

You may not always need a police report. But you may want one if you know who stole your identity, if a company asks for one, or if the fraud involved local crime.

Smile Money Tip: Your recovery report is not just paperwork. It gives you a record to use when disputing accounts, contacting companies, and proving the fraud was not yours.

👉 Related: How to Create an Identity Theft Recovery Plan →

Step 3: Freeze Your Credit and Place a Fraud Alert

A credit freeze helps block access to your credit report, making it harder for someone to open new credit in your name. A fraud alert tells lenders to take extra steps to verify your identity.

The FTC says credit freezes and fraud alerts can help protect you from identity theft and can help stop someone who already stole your identity from misusing it again.

What to do:

• Freeze your credit with Equifax.
• Freeze your credit with Experian.
• Freeze your credit with TransUnion.
• Place a fraud alert if someone may try to open new accounts.
• Save your freeze and alert confirmations.

For a fraud alert, you only need to contact one credit bureau. That bureau must notify the other two. For a credit freeze, contact all three separately.

👉 Related: What to Do If Your Social Security Number Was Stolen →

Step 4: Review Your Credit Reports

Next, check your credit reports for accounts, inquiries, addresses, or collections you do not recognize.

The CFPB says identity theft victims should place fraud alerts or security freezes, file a report at IdentityTheft.gov, and take steps to protect their credit history and finances.

What to look for:

• Accounts you did not open
• Credit inquiries you do not recognize
• Collection accounts that are not yours
• Addresses where you never lived
• Employers you do not recognize
• Balances or late payments tied to fraudulent accounts

What to do:
Pull reports from Equifax, Experian, and TransUnion. If a fraudulent item appears on more than one report, dispute it with each bureau reporting it.

Step 5: Dispute Fraudulent Accounts and Charges

If identity theft created accounts or charges in your name, dispute them with both the credit bureau and the company that reported the information.

The CFPB says fixing a credit report error generally means contacting both the credit reporting company and the company that provided the information. The FTC says credit bureaus generally have 30 days to investigate disputes.

What to do:

• Send disputes to the credit bureaus reporting the fraudulent account.
• Contact the company where the account was opened.
• Include your Identity Theft Report.
• Ask the company to close the fraudulent account.
• Ask for written confirmation that you are not responsible.
• Keep copies of every letter, form, and response.

If a debt collector contacts you about a fraudulent account, tell them the debt is the result of identity theft and send your Identity Theft Report.

Step 6: Keep a Recovery Folder

Identity theft recovery can take time. Keeping everything organized makes it easier to follow up and prove what happened.

What to save:

• Identity Theft Report
• Police report, if filed
• Credit bureau disputes
• Company letters
• Account closure confirmations
• Transaction records
• Screenshots
• Emails and texts
• Names of people you spoke with
• Dates and call notes
• Case or confirmation numbers

What to do:
Create one physical or digital folder. Track each fraudulent account separately so you know what was disputed, what was resolved, and what still needs follow-up.

Common Mistakes to Avoid

• Waiting to report identity theft
• Freezing only one credit bureau
• Disputing with the credit bureau but not the company
• Deleting evidence before saving it
• Ignoring small fraudulent accounts
• Not securing email and phone accounts
• Losing confirmation numbers and dispute records

What to Do If the Problem Continues

If fraudulent accounts keep appearing or companies do not respond:

• Follow up in writing.
• Send your Identity Theft Report again.
• Keep your credit frozen.
• File a complaint with the CFPB if a financial company or credit reporting issue is not resolved.
• Consider legal help if the fraud is complex or ongoing.

The CFPB accepts complaints about credit reports, checking and savings accounts, credit cards, money transfers, loans, and other financial products.

FAQs on Recovering From Identity Theft

Final Thought

Recovering from identity theft takes patience, but it becomes more manageable when you follow a clear order. Stop the damage, report the theft, freeze your credit, dispute fraudulent accounts, and keep records.

You do not have to fix everything in one day. Start with the next right step.

Next Steps:

• 👉 Learn: How to File an Identity Theft Report With the FTC →
• 👉 Read: How to Dispute Fraudulent Accounts on Your Credit Report →
• 👉 Read: What to Do If Someone Opened an Account in Your Name →
• 👉 Compare: Identity Protection Tools in the Marketplace →