Signs Your Identity Has Been Stolen (and What to Do About It)

What Is Identity Theft?

Identity theft occurs when another person uses your personal or financial information without permission. The stolen information might include your name, address, birth date, Social Security number, credit card number, bank credentials, driver’s license details, Medicare number, or health insurance account information.

A thief may use that data to open credit accounts, make purchases, obtain utility or wireless service, steal a tax refund, receive medical treatment, apply for employment, claim benefits, or impersonate you during an encounter with law enforcement. In other words, identity theft is not limited to credit cards. It can affect nearly every administrative corner of your lifethe corners where paperwork reproduces after midnight.

The Federal Trade Commission recommends monitoring bills, bank statements, and credit reports because unexpected accounts, unexplained withdrawals, and missing statements are among the clearest warning signs.

Major Signs Your Identity Has Been Stolen

1. You See Purchases or Withdrawals You Did Not Make

An unfamiliar transaction is one of the most obvious signs of financial identity theft. It may appear on a checking account, credit card, payment app, digital wallet, or store account.

Do not ignore a small charge because it is “only” a few dollars. Criminals sometimes test stolen account information with a modest purchase before attempting a larger transaction. A mysterious $2.17 charge may be less random than it looks.

Contact the financial institution using the number printed on your card or shown in its official app. Lock or replace the affected card, dispute unauthorized transactions, and ask whether the account number should be changed.

2. Bills or Financial Statements Suddenly Stop Arriving

A missing bill is not always a gift from the universe. Someone may have changed your mailing address, email address, or communication preferences to hide fraudulent activity.

Check the account directly. Confirm your mailing address, email address, phone number, authorized users, and recent security changes. If several pieces of mail disappear at once, contact the U.S. Postal Service and investigate whether an unauthorized change of address or mail hold was submitted.

Mail-related identity theft and suspected mail theft can be reported to the U.S. Postal Inspection Service.

3. You Receive Bills for Accounts You Never Opened

A collection notice, utility bill, wireless account, personal loan statement, or retail credit card you do not recognize is a serious warning. It may mean someone has used your identity to establish a new account.

Do not pay the bill merely to make it disappear. Contact the company’s fraud department, explain that the account resulted from identity theft, and request documentation about the application. Ask the business to close or block the fraudulent account and confirm the result in writing.

4. Your Credit Report Contains Unknown Accounts or Inquiries

Credit reports may reveal fraudulent loans, credit cards, addresses, employers, balances, and hard inquiries. Review reports from Equifax, Experian, and TransUnion because information can differ among the three bureaus.

AnnualCreditReport.com is the official federally authorized source for free reports from the nationwide credit bureaus. Free weekly online reports are currently available, making regular checks practical even when you are not applying for a mortgage or loan.

Look beyond the account list. Check personal information, previous addresses, inquiries, payment history, and collection records. A strange address can be an early breadcrumb leading to a fraudulent account.

5. Your Credit Application Is Unexpectedly Denied

A sudden rejection can occur because an identity thief has opened accounts, increased your balances, or stopped paying debts created in your name. You may also receive a worse interest rate than expected because fraudulent information lowered your creditworthiness.

Read the adverse-action notice from the lender. It should identify the credit bureau that supplied the report used in the decision. Obtain that report and review it carefully rather than assuming your credit score simply woke up grumpy.

6. You Receive Password-Reset or Login Alerts You Did Not Request

Unexpected authentication codes, password-reset messages, device-login alerts, or emails announcing changed account details may indicate an attempted or successful account takeover.

Open the company’s official app or manually enter its known website address. Do not use a link in the suspicious message. Change the password, sign out other devices, review recovery information, and enable multifactor authentication.

Start with your primary email account. Email often controls password resets for banking, shopping, social media, tax, and cloud-storage accounts. Whoever controls your inbox may hold a digital skeleton key.

7. Your Phone Suddenly Loses Service

If your phone unexpectedly displays “No Service” while other people nearby have a signal, contact your carrier immediately. A criminal may have transferred your number to another SIM card or wireless provider.

SIM-swap and port-out fraud can allow a thief to intercept calls and text-message security codes. Once the criminal controls the number, they may reset passwords and enter financial accounts.

Ask the carrier to restore the number, review account changes, add a port-out PIN or number lock, and require stronger verification for future changes. The FCC also advises notifying the carrier associated with any fraudulent account and filing an identity theft report with the FTC.

8. A Tax Return Has Already Been Filed in Your Name

Tax identity theft may surface when the IRS rejects your electronic return because another return was filed using your Social Security number. You might also receive an IRS notice about wages from an unfamiliar employer or an account you did not create.

Follow the instructions in the IRS notice and continue filing your legitimate return as directed. Consider obtaining an Identity Protection PIN. An IRS IP PIN is a six-digit number that helps prevent another person from filing a federal tax return using your Social Security number or Individual Taxpayer Identification Number. A new IP PIN is generated each year.

9. Your Health Insurance Shows Care You Never Received

Medical identity theft happens when someone uses your information to obtain treatment, prescriptions, equipment, or insurance payments. Warning signs include unfamiliar doctors, prescriptions you do not take, medical debt you do not owe, or an Explanation of Benefits statement listing services you never received.

This type of theft can be especially dangerous because inaccurate diagnoses, allergies, medications, or blood-type information may become mixed into your medical record.

Request records from the providers involved, identify incorrect information, and submit written correction requests. Also contact your insurer’s fraud department and review your credit reports for unfamiliar medical collections.

10. You Are Denied Government Benefits You Never Claimed

A criminal may use your personal information to claim unemployment compensation, Social Security benefits, health coverage, or other assistance. You may discover the fraud through a benefits notice, a tax document, or a denial stating that benefits have already been paid.

Contact the agency administering the affected program. For unemployment fraud, report the case to the relevant state unemployment agency. For suspected misuse involving Social Security benefits or records, follow the Social Security Administration’s fraud-reporting instructions and create an identity theft recovery plan through the FTC.

11. A Debt Collector Calls About an Unknown Debt

Ask the collector for written validation of the debt. Do not confirm sensitive personal information simply because the caller already knows your name or part of your Social Security number.

Compare the information with your credit reports and contact the original creditor through an independently verified phone number. If the account is fraudulent, dispute it with both the business that supplied the information and every credit bureau reporting it.

12. Your Child Receives Credit Offers, Bills, or Tax Notices

Children can become identity theft victims long before they are old enough to apply for credit. A child’s Social Security number may be attractive to criminals because the misuse can remain unnoticed for years.

Warning signs include collection calls, credit offers, government-benefit problems, or IRS notices connected to a child who has no income or accounts. Parents and guardians can request a credit freeze for a child under 16 from each of the three nationwide credit bureaus.

What to Do Immediately After Discovering Identity Theft

Step 1: Contact the Affected Company

Call the fraud department of the bank, lender, card issuer, wireless carrier, medical provider, retailer, or government agency involved. Ask the organization to stop transactions, secure or close fraudulent accounts, and explain its identity theft process.

Use contact information from an official statement, card, app, or independently verified website. A fraud alert delivered inside a phishing email is still a phishing email wearing a tiny police hat.

Step 2: Secure Your Important Online Accounts

Change passwords for affected accounts and any other account using the same or a similar password. Use a unique password for every important service.

Enable multifactor authentication, preferably with an authenticator app, hardware security key, or passkey where available. Review trusted devices, active sessions, recovery email addresses, forwarding rules, connected applications, and account activity.

Step 3: Freeze Your Credit at All Three Bureaus

A credit freeze restricts access to your credit file and makes it harder for a thief to open new credit accounts. It is free, does not affect your credit score, and remains in place until you lift it.

You must contact Equifax, Experian, and TransUnion separately to freeze all three files. Keep the account credentials or confirmation information needed to temporarily lift each freeze when you legitimately apply for credit, housing, insurance, or certain services.

Remember that a freeze mainly addresses new-account fraud. It does not prevent misuse of an existing bank account, credit card, email account, tax identity, medical identity, or government benefits.

Step 4: Add a Fraud Alert

A fraud alert tells potential creditors to take additional steps to verify your identity. You only need to contact one nationwide credit bureau; that bureau must notify the other two.

An initial fraud alert is free and lasts one year. Victims who complete an FTC Identity Theft Report or file a police report may qualify for an extended alert lasting seven years. A fraud alert can be used alongside a credit freeze.

Step 5: Report the Theft at IdentityTheft.gov

IdentityTheft.gov is the federal government’s central recovery resource for identity theft victims. Your report can produce a customized recovery plan, an FTC Identity Theft Report, checklists, and prefilled letters for businesses, debt collectors, and credit bureaus.

Save copies of the report and recovery plan. Some creditors and credit bureaus may request the FTC report before blocking fraudulent information.

Step 6: Review and Dispute Credit-Report Errors

Identify every account, inquiry, address, balance, and collection item connected to the theft. Dispute fraudulent information with each credit bureau reporting it and with the company that supplied it.

Include copiesnot originalsof supporting documents. Keep confirmation numbers, delivery records, screenshots, letters, and notes from phone calls. Written documentation turns “I already explained this to someone named Kevin” into evidence an organization can actually investigate.

Step 7: Consider a Police Report

An FTC Identity Theft Report is often sufficient for recovery, but a local police report may be useful when you know the thief, property was physically stolen, a creditor requests one, or the crime involves impersonation during an arrest.

Bring identification, the FTC report, fraudulent statements, account records, and any evidence identifying the suspect. Request a copy or report number.

Step 8: Protect Your Tax Identity

Respond promptly to legitimate IRS correspondence and follow its verification procedures. Obtain an IP PIN through your IRS Online Account when eligible, and never share that number with anyone except a trusted tax professional preparing your return.

File future tax returns early when practical. Early filing reduces the window in which a criminal can attempt to submit a fraudulent return first.

Step 9: Secure Your Mail and Phone Number

Check whether your mailing address, mail hold, or forwarding instructions have changed. Retrieve mail promptly and report suspected mail theft or fraudulent address changes.

Ask your wireless carrier to add an account PIN, number lock, SIM-swap protection, and port-out protection. Remove weak security questions whose answers can be found on social media.

Step 10: Build a Recovery File

Create a folder containing:

• Your FTC Identity Theft Report and recovery plan
• Police reports, if applicable
• Credit reports and dispute results
• Fraudulent bills and account statements
• Letters, emails, tracking receipts, and screenshots
• Dates, names, phone numbers, and summaries of conversations
• Confirmation numbers for freezes, alerts, and account closures

Identity theft recovery often involves several organizations. A clear timeline prevents you from retelling the entire saga from memory every time a new representative joins the adventure.

How to Reduce the Risk of Future Identity Theft

• Keep your credit reports frozen when you are not actively applying for credit.
• Review bank, card, medical, tax, and benefit statements regularly.
• Turn on transaction, login, password-change, and profile-change alerts.
• Use unique passwords, a password manager, passkeys, and multifactor authentication.
• Protect your primary email account more carefully than ordinary shopping accounts.
• Shred documents containing financial, medical, or identification information.
• Collect mail promptly and avoid leaving outgoing checks in an unsecured mailbox.
• Do not provide sensitive information to unexpected callers, texts, or emails.
• Ask why an organization needs your Social Security number and whether another identifier will work.
• Review medical Explanation of Benefits statements and Medicare claims.

Paid identity monitoring can provide useful alerts, but it is not an invisible force field. Credit monitoring may detect a new account while missing bank withdrawals, tax fraud, medical identity theft, benefit fraud, or an account takeover that never reaches a credit bureau. The most effective approach combines monitoring with freezes, account alerts, good login security, and regular statement reviews.

Experience-Based Lessons: What Identity Theft Recovery Really Feels Like

Identity theft often begins with uncertainty rather than certainty. Imagine noticing an unfamiliar $18 purchase on a card statement. It is tempting to assume a family member used the card or that you forgot a subscription. The practical lesson is not to panic, but not to procrastinate either. Checking the merchant, locking the card, and calling the issuer may take ten minutes. Waiting several weeks can give a thief time to make larger purchases or change account details.

Another common experience begins with a credit alert announcing a new inquiry. The victim checks one monitoring dashboard, sees nothing else, and assumes the problem is over. Months later, a collection account appears on a different credit report. The lesson is simple: one report is not all three reports. Fraudulent information may appear at Equifax but not TransUnion, or at Experian several weeks later. Recovery requires checking every bureau and returning periodically to confirm that disputed information has not reappeared.

Victims also learn that freezing credit is powerful but not magical. A person may freeze all three reports and then discover that the thief is still using an existing checking account or email address. That does not mean the freeze failed. It means the criminal entered through a different door. New-credit fraud, existing-account fraud, tax fraud, medical fraud, and phone-account takeover require separate responses.

Communication creates another challenge. A bank may say the issue belongs to the credit bureau, while the bureau says the information came from the bank. This is where careful documentation becomes valuable. Record the date, department, representative’s name, case number, and promised next step. Follow phone calls with written disputes whenever possible. A short, factual letter supported by statements and an FTC Identity Theft Report usually travels farther than an emotional 45-minute phone calleven when the emotion is completely justified.

Medical identity theft can be particularly unsettling. A victim may receive an Explanation of Benefits statement for a clinic hundreds of miles away or find an unfamiliar prescription in a patient portal. Correcting the bill is only half the job. The medical record itself must also be reviewed because someone else’s diagnosis, medication, or health history may have been attached to the victim’s identity. That incorrect data could influence future treatment.

Tax identity theft tends to appear at the least charming time possible: during tax filing. A legitimate return may be rejected because the IRS already received one using the taxpayer’s Social Security number. The experience teaches two preventive habitsfile early when possible and obtain an IRS IP PIN. The PIN does not erase past fraud, but it provides an additional identity check for future federal returns.

Perhaps the most important lesson is that victims should not feel embarrassed. Identity thieves exploit data breaches, stolen mail, phishing pages, malicious software, weak business verification systems, reused passwords, and information traded among criminals. Intelligent and security-conscious people become victims too.

Recovery is usually a sequence of manageable tasks rather than one heroic phone call. Stop the active fraud. Secure accounts. Freeze credit. Report the theft. Dispute false information. Protect tax, medical, mail, and wireless identities. Then continue monitoring. The process may be tedious, but every completed step reduces the thief’s room to operate and moves control back where it belongswith you.

Conclusion

The clearest signs of identity theft are changes you cannot explain: unfamiliar charges, missing bills, unknown accounts, rejected tax returns, strange medical claims, unexpected benefit notices, phone-service loss, and login alerts you did not trigger.

Treat one suspicious event as a reason to investigate, not as proof that your entire identity has been stolen. When fraud is confirmed, move quickly and methodically. Contact affected organizations, secure your accounts, freeze all three credit reports, place a fraud alert, report the theft through IdentityTheft.gov, and document every step.

You may not be able to prevent every criminal from obtaining personal data, but you can make that data much harder to useand make suspicious activity much easier to detect.