How to report identity theft
Editorially reviewed · Last updated September 8, 2026
If someone is using your personal information, start at IdentityTheft.gov for a free US recovery plan. If information was exposed but you have not found misuse, use its data-breach guidance. Follow the steps for the type of information involved.
1. Separate exposure from confirmed misuse
Use IdentityTheft.gov to report identity theft and get a recovery plan. If you shared information but do not know of misuse, start with steps for exposed information.
Contact the bank or business involved in any suspicious account or transaction. Keep copies of your reports and correspondence.
2. Freeze your credit at all three bureaus
A credit freeze restricts access to your credit report and helps prevent new credit fraud. It does not secure existing bank accounts or prevent every kind of identity misuse.
Contact Equifax, Experian, and TransUnion separately. Placing and lifting freezes is free in the US. You may need to lift a freeze when applying for credit. See the FTC’s credit-freeze instructions and bureau links.
3. Add a fraud alert and check your reports
An initial fraud alert lasts one year and tells lenders to verify your identity. Contact one of the three bureaus; it must notify the others. You can use an alert alongside a freeze.
Review your reports through AnnualCreditReport.com and dispute fraudulent information. Follow your IdentityTheft.gov plan for the documents and steps your situation requires.
4. Handle the specific misuse
Tax identity theft: follow any verified IRS notice. Form 14039 is not required for every case; the IRS says many recipients of identity-verification letters should follow the letter instead. Read when to file an Identity Theft Affidavit.
Medical or insurance misuse: contact the insurer and providers involved and check claims and benefits statements.
Police involvement: a police report may be appropriate if you know the thief, your identity was used in another crime, or an institution requests one. Your FTC report is not a universal substitute for every institution’s requirements.
Sources
- 01Identity theft recovery— Federal Trade Commission
- 02Credit freezes and fraud alerts— Federal Trade Commission
- 03When to file an Identity Theft Affidavit— Internal Revenue Service
Finished the urgent steps?
Mark this plan complete after you have followed the steps for the information exposed or misused.