untrappable

How to report identity theft

Editorially reviewed · Last updated July 15, 2026

If someone is using your personal information, there's one place to start: IdentityTheft.gov, the FTC's official site. Reporting there is free, and it gives you a personalized recovery plan and prefilled letters. Then freeze your credit so no one can open new accounts in your name. Here's the full order.

1. Report at IdentityTheft.gov

IdentityTheft.gov is the federal government's one-stop place to report identity theft and get a recovery plan. It's run by the FTC and it's free.

  • Answer a few questions about what happened.
  • It generates a personal recovery plan and the pre-filled letters and forms you'll need for banks, businesses, and credit bureaus.
  • It creates an FTC Identity Theft Report, which gives you rights when disputing fraudulent accounts.

This is more useful than a generic police report for most cases, though you can file a police report too (some creditors ask for one).

2. Freeze your credit at all three bureaus

A credit freeze is the strongest free protection, and it's the one step that stops new fraud in its tracks.

  • Placing a freeze stops anyone — including a thief — from opening a new credit account in your name.
  • It's free to place and free to lift, and you can unfreeze in minutes when you need credit.
  • Contact all three bureaus: Experian, TransUnion, and Equifax.

The FTC explains freezes and fraud alerts in what to know about identity theft.

3. Add a fraud alert and check your reports

  • Place a fraud alert by contacting any one of the three bureaus (it notifies the other two). It's free, lasts a year, and tells lenders to take extra steps to verify it's really you.
  • Get your free credit reports at AnnualCreditReport.com and look for accounts, inquiries, or addresses you don't recognize.
  • Dispute anything fraudulent using your IdentityTheft.gov report.

4. Handle the specific type

Some kinds of identity theft have an extra step:

  • Tax identity theft (someone filed a return or claimed your refund): report to the IRS and file IRS Form 14039, an Identity Theft Affidavit.
  • Medical identity theft (care or claims in your name): contact your health insurer and the providers involved, and review your benefits statements.
  • A stolen Social Security number: report at IdentityTheft.gov, which covers the SSA steps in your plan.

Keep a written record of every call and letter — dates, names, and what was said — as you work through the plan.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

Where do I report identity theft?
Report it at IdentityTheft.gov, the FTC's official site. It's free, and it builds you a personalized recovery plan plus the pre-filled letters and an official FTC Identity Theft Report you'll use to dispute fraudulent accounts. You can also file a police report, which some creditors request, but IdentityTheft.gov is the place to start.
Is it free to report identity theft and freeze my credit?
Yes. Reporting at IdentityTheft.gov is free, and placing or lifting a credit freeze at each of the three bureaus is free by law. Fraud alerts are free too. You never need to pay a service to do these core steps — they're your legal right.
What's the difference between a credit freeze and a fraud alert?
A credit freeze locks your credit report so no one can open a new account until you lift it — it's the stronger protection. A fraud alert leaves your credit open but tells lenders to take extra steps to verify your identity first. A freeze is free and reversible; a fraud alert is free and lasts a year. Many people place both.
Should I also file a police report?
For most cases, your FTC Identity Theft Report from IdentityTheft.gov is enough and gives you the same rights. File a police report as well if a creditor or bank specifically requires one, if you know the thief, or if your identity was used in another crime. Bring your IdentityTheft.gov report and ID when you go.

Sources