What to Do If Someone Used Your Identity

Finding out that someone used your identity can feel stressful and deeply unsettling. Maybe you spotted a credit card you never opened, a charge you didn’t make, a debt collector contacted you about an account you don’t recognize, or your tax return was rejected because someone already filed in your name.

At that point, it’s no longer just a privacy concern or a breach notice. It’s identity theft, and the goal is to act quickly, limit the damage, and create a paper trail that helps you fix the problem. Start by contacting affected companies, placing fraud protections on your credit, reviewing your credit reports, and reporting the theft through IdentityTheft.gov.

Start by locking down the accounts that were affected

If you already know where fraud happened, contact those companies first. Call the fraud department, explain that someone used your identity, and ask them to close, freeze, or secure the affected account. Change passwords, PINs, and login details connected to the account, especially if the same password was used anywhere else. The FTC specifically advises victims to start with the companies where the fraud occurred, ask that the account be closed or frozen, and change logins, passwords, and PINs.

This step matters because identity theft often spreads. A criminal who opened one account or got into one service may try to use the same information elsewhere. Start with the confirmed problem, then widen your review from there.

Put protections on your credit

If someone used your identity to open accounts or apply for credit, place a fraud alert on your credit reports right away. A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name. An initial fraud alert is free, lasts one year, and you only need to contact one of the three major credit bureaus because that bureau must notify the other two.

A credit freeze is also worth serious consideration. A freeze is free, doesn’t affect your credit score, and makes it much harder for someone to open a new account in your name. Unlike a fraud alert, a freeze requires you to contact all three major credit bureaus. It stays in place until you lift it.

If your identity has clearly been misused, a freeze is often the stronger move. It makes it harder for someone to open new credit in your name, which is exactly what you want when someone already has your information.

Review your credit reports carefully

Once the immediate protections are in place, review your credit reports line by line. Look for accounts you don’t recognize, unfamiliar addresses, credit applications or hard inquiries you didn’t authorize, or debts that don’t belong to you. AnnualCreditReport.com is the official site authorized by federal law for free credit reports, and it currently says free weekly online credit reports are available from Equifax, Experian, and TransUnion.

Don’t just glance at the top of the report. Read through the personal information section, account listings, and inquiries. Sometimes the first clue isn’t a new credit card. It’s an address change, a phone number that’s not yours, or a collection account that should never be there.

Report the identity theft through IdentityTheft.gov

One of the most important steps is creating an official identity theft report through IdentityTheft.gov. This step gives you a personal recovery plan and allows you to generate pre-filled letters and forms to send to credit bureaus, businesses, and debt collectors.

That matters because identity theft recovery is rarely just one phone call. You may need to dispute accounts, deal with fraudulent debts, correct your credit report, and respond to collection notices. Having an FTC identity theft report helps turn your situation into a documented case instead of a vague complaint. It may also help you place an extended fraud alert. FTC guidance says an extended fraud alert is available to people who experienced identity theft and completed an FTC identity theft report or filed a police report, and that the alert lasts seven years.

Dispute fraudulent accounts, charges, and debts

If someone opened an account in your name, contact that business directly and tell them the account was opened fraudulently in your name. If it appears on your credit report, dispute it with both the credit bureau and the company that reported it. IdentityTheft.gov provides sample letters for credit bureau disputes and debt collection problems, which can make this process easier.

Keep records of everything: dates, names, case numbers, letters, emails, and screenshots. That paper trail is important if the problem resurfaces later or if a collector continues trying to collect a debt that isn’t yours.

File a police report if it will actually help

A police report isn’t always the first step people think of, but it can be useful in some identity theft cases. FTC guidance says an extended fraud alert is available to people who have experienced identity theft and completed an FTC identity theft report or filed a police report. Some records requests and recovery steps may also require a police report along with your FTC identity theft report.

Some banks, lenders, debt collectors, insurers, or government agencies may ask for a police report. Having one on hand can strengthen your documentation and make it easier to push back on fraudulent accounts or debts.

Watch for signs the theft spread beyond credit

Identity theft isn’t always limited to credit cards or loans. It can also involve tax fraud, Social Security misuse, benefits fraud, or account takeover.

If someone used your information for tax-related identity theft, the IRS says victims may need to complete Form 14039, Identity Theft Affidavit, depending on the situation. If you’re unable to e-file because of the theft, the IRS says to file a paper return and attach Form 14039 or submit it separately as instructed. The IRS also says confirmed tax-related identity theft victims are placed into the Identity Protection PIN program and issued a new IP PIN each year.

If someone used your Social Security number to open an account or make a purchase, the Social Security Administration points people to IdentityTheft.gov for an FTC identity theft report and next steps. SSA also distinguishes this from situations where your Social Security number was lost or exposed but not yet misused, which is an important difference.

Mistakes to avoid

One common mistake is stopping after changing a password. If someone already used your identity, password changes alone are not enough. You still need to review your reports, document the theft, and dispute fraudulent accounts, charges, or debts.

Another mistake is assuming credit monitoring solves the problem. Monitoring can help you spot changes, but it doesn’t stop someone from trying to open new credit in your name. A freeze or fraud alert offers more direct protection.

It’s also a mistake to ignore mail, bills, or collection notices because they feel confusing or stressful. Identity theft gets harder to clean up when fraudulent accounts age, get sold to collectors, or keep showing up month after month.

Final takeaway

If someone used your identity, the most important thing is to act quickly. Secure the accounts you know about. Place fraud protections on your credit. Review your credit reports carefully. Report the theft through IdentityTheft.gov. Then start disputing anything that doesn’t belong to you.

You don’t have to fix everything in one day. But you do need to start. Identity theft recovery is usually a process, not a single step. The sooner you begin, the better your chances of limiting the damage and clearing your name.