Skip to content
BeginnerInitial actions plus ongoing review and recovery

U.S. Identity Theft Protection and Recovery

Review U.S. credit freezes, account security and free reports, compare actual service terms, and follow an identity-theft recovery plan with a private action log.

U.S. adults protecting their identityU.S. consumers notified of a data breachpeople responding to suspected identity theft in the U.S.

Workflow

  1. Identify the situation and address active misuse

    Act promptly; track each follow-up

    This guide uses U.S. credit and reporting systems. Record whether you are preparing in advance, have received a verified exposure notice, or have found an unfamiliar account or transaction. If misuse is happening, promptly contact the affected institution through its official app, statement number or independently verified website; ask how to restrict the affected account and dispute the activity. Start the recovery step now rather than waiting to finish every prevention task.

  2. Manage credit freezes and fraud alerts

    Act promptly; track each follow-up

    For a U.S. credit freeze, contact Equifax, Experian and TransUnion separately using the official contacts linked by the FTC. Placing and lifting freezes is free. Record confirmation for each bureau and keep account recovery details securely. A freeze restricts access to your credit report; it does not secure existing accounts or prevent every type of identity theft. If you suspect fraud, an initial fraud alert is a separate free option: contact one bureau, which must notify the other two.

  3. Secure account access and recovery

    Act promptly; track each follow-up

    Start with email, financial and other sensitive accounts. Use unique strong passwords, with a password manager if useful, and enable multifactor authentication where offered. Prefer an authenticator app or security key when available; text-based verification is still better than leaving a supported account without a second factor. Check recovery contact details and keep recovery codes securely. Update devices and apps, and use the provider’s recovery process if an account has already been taken over.

  4. Review reports and account activity

    Act promptly; track each follow-up

    Obtain reports for all three nationwide bureaus through AnnualCreditReport.com; free weekly online reports are available. Review identity details, unfamiliar accounts and inquiries, and record anything to investigate. Separately review bank and card activity and enable useful provider alerts. Credit reports and credit monitoring do not show every kind of misuse. Set a personal review schedule and act on a suspicious entry when found rather than waiting for the next scheduled review.

  5. Compare optional services using actual terms

    Act promptly; track each follow-up

    Check services already available through an employer, financial provider, breach notice or insurance policy. If considering a paid service, record the bureaus and other information monitored, alert frequency, recovery assistance, price, renewal and cancellation terms. For insurance, obtain the actual policy or endorsement and ask about covered expenses, exclusions, deductible, limits and claim requirements. Keep unresolved questions separate from confirmed benefits.

  6. Follow an individual recovery plan and track closure

    Act promptly; track each follow-up

    For suspected identity theft in the U.S., go to IdentityTheft.gov to report what happened and obtain a personal recovery plan. Keep a copy of the report and use the plan’s instructions and sample letters to address fraudulent accounts, charges and credit-report entries. Follow the applicable route for tax, benefits, medical or other misuse, and check whether your circumstances call for a police report or additional documents. Track each institution, submission, case reference, response and next action until the issue is resolved.

Checklist

0 / 6 completed

Loading your checklist…

Triage

Credit

Access

Monitoring

Services

Recovery

Reference Materials

Protection and response tasks have different purposesTable

Use this as a scope checklist, not an effectiveness ranking or a protection score. The credit-bureau procedures here are U.S.-specific.

TaskPurposeLimit to remember
Credit freezeRestrict access to a credit reportNot protection for all existing-account or non-credit misuse
Fraud alertRequire extra identity verification for new creditDifferent from a freeze; follow the applicable alert process
Account securityReduce unauthorised sign-in riskReview recovery methods as well as the password
Reports and transaction alertsHelp detect activity to investigateNo single report or service observes every type of misuse
Recovery planOrganise incident-specific next stepsReporting alone does not close each dispute
Optional service or policyProvide only the benefits in its actual termsNo assumed payout, universal coverage or protection percentage
Private follow-up recordTable

Keep this record in your own secure files. Use a short account label here rather than full account numbers, passwords or identity documents.

RecordWhat to save
Issue and discoveryShort description, date and where the activity was observed
Verified contactInstitution and independently confirmed channel
Action and evidenceWhat was submitted, date and secure evidence location
Reference and responseCase number, written response and unresolved question
Next actionResponsible person, official deadline or agreed follow-up date
Closure checkWritten outcome, corrected record and any further review needed
U.S. freezes and free reportsStandard

FTC guidance explains separate bureau contact for freezes, the initial fraud-alert process and the official free report route. Check current official instructions when making a request.

Recovery and optional-service scopeStandard

The FTC describes identity monitoring, recovery services and insurance as different services. IdentityTheft.gov supplies a personal recovery plan; use that plan for the type of misuse involved.

Protect account accessStandard

FTC account-security guidance covers passwords, software updates, phishing and multifactor authentication. Use the options and recovery instructions provided by the actual account provider.

  • Use one private action log

    Record what each organisation asks for and the next follow-up date. Keep copies of submissions and written outcomes so you can explain what remains unresolved.

  • Distinguish observations from conclusions

    An unfamiliar entry needs investigation. Note where it appeared and what you verified rather than treating every alert as confirmed theft.

  • Verify benefits before buying

    Compare confirmed service features and actual policy terms with assistance you already have. Marketing labels and headline limits do not establish coverage.

Safety Notes

  • Do not upload or paste SSNs, full account numbers, passwords, recovery codes or identity documents into this guide or general-purpose calculators.
  • Use independently verified contact details instead of links or phone numbers in an unexpected message; do not share an unsolicited verification code.
  • Keep identity records and recovery documents securely, collect sensitive mail and destroy documents appropriately before disposal.
  • For people outside the U.S., use local credit-reporting, consumer-protection and incident-reporting procedures; U.S. bureau and FTC steps are not universal.

Related Scenarios

Explore related topics

Insurance SelectionPersonal Property & Risk Protection