Where to look for signs of identity theft

Identity theft usually shows up first in your financial accounts and credit reports, not in a single alert. Check your bank and credit card statements for charges you did not make, look at your credit reports for accounts you did not open, and search your email for password reset confirmations you did not request. The Federal Trade Commission's IdentityTheft.gov has a free tool that walks you through these checks in order and tells you what to do if you find something.

Start with your bank and credit card statements — these are the fastest way to spot recent fraud. Log into each account online and scan the past 30 to 90 days for transactions that are not yours. Credit card companies often catch large fraudulent charges and block them, but smaller ones can slip through for months. If you find unauthorized charges, call the card issuer's fraud line immediately; the number is on the back of your card.

Next, pull your credit reports from all three bureaus — Equifax, Experian, and TransUnion. You can get one free report from each bureau every 12 months at AnnualCreditReport.com, which is the official government site. Look for accounts you did not open, inquiries from companies you did not contact, and addresses that are not yours. If a thief opened a credit card or loan in your name, it will appear here before you see fraudulent charges.

Key Takeaways

  • Check your bank and credit card statements for charges you did not make, starting with the past 90 days.
  • Pull your free credit reports from AnnualCreditReport.com and look for accounts, inquiries, and addresses you do not recognize.
  • Search your email for password reset requests, account confirmations, and login alerts from companies you do not use.
  • If you find fraud, report it to the company involved, then file a report at IdentityTheft.gov to create an official record.
  • Place a fraud alert or credit freeze with the credit bureaus to prevent a thief from opening new accounts in your name.

What to check in your email and online accounts

Thieves often reset passwords on your existing accounts or create new ones using your email address. Search your email inbox and spam folder for password reset confirmations, account creation notices, and login alerts from services you do not use. Pay special attention to financial institutions, email providers, and social media platforms — these are the accounts thieves target first because they can use them to reset passwords on other sites.

Log into your email account's security settings and review recent login activity. Most email providers show you the device, location, and time of each login. If you see logins from places you have never been or devices you do not own, someone else has your password. Change it immediately and enable two-factor authentication if you have not already.

Check the recovery email and phone number on file for each of your important accounts — your email, bank, and credit card accounts especially. If a thief changed these, they can lock you out and control the account. If you see changes you did not make, change them back and contact the company's fraud department.

How to read your credit report for fraud

Your credit report lists every account opened in your name, every inquiry made by a lender, and your payment history. A thief who opens accounts in your name will appear as a new account with a recent opening date and an inquiry from the lender. Look for accounts you do not recognize, inquiries from companies you never contacted, and addresses that are not yours.

Pay attention to the type of account opened. If someone opened a credit card in your name, it will show as a "revolving" account. If they took out a car loan or personal loan, it will show as an "installment" account. New accounts hurt your credit score and can affect your ability to borrow money yourself.

Each bureau may show different accounts because thieves do not always use all three. This is why you need to check all three reports, not just one. If you find an account you did not open, note the account number, the date it was opened, and the name of the creditor. You will need this information when you report the fraud.

What to do if you find unauthorized accounts or charges

If you find fraud on a credit card or bank account, call the company's fraud line immediately. The number is on your statement or the back of your card. Tell them which charges are not yours and ask them to reverse them. By law, you are not responsible for unauthorized charges on a credit card, and most banks will reverse fraudulent transfers within a few days.

Next, file a report at IdentityTheft.gov. This is the official government site run by the Federal Trade Commission. The report creates a record of the fraud and gives you a recovery plan tailored to what happened. You can print the report and use it when you contact creditors or dispute accounts on your credit report.

Contact each credit bureau and place a fraud alert on your account. A fraud alert tells lenders to contact you before opening new accounts in your name. You only need to contact one bureau — they are required to notify the other two. The alert lasts one year and is free. If the fraud is serious or ongoing, you can place a credit freeze instead, which blocks all access to your credit report until you unlock it. A freeze is stronger but requires you to unfreeze your report each time you want to open a new account.

Monitoring services and credit freezes explained

After you discover fraud, you have two main ways to prevent it from happening again: monitoring services and credit freezes. A credit freeze is free and blocks anyone — including you — from accessing your credit report without your permission. When you want to open a new credit card or loan, you temporarily unfreeze your report so the lender can check it. This is the strongest protection because a thief cannot open new accounts without your PIN.

A fraud alert is weaker but less inconvenient. It tells lenders to contact you by phone before opening new accounts. You do not have to unfreeze anything, but the lender might still open the account if they cannot reach you. A fraud alert lasts one year and is free. After one year, you can renew it if you want.

Paid monitoring services watch your credit reports and send you alerts when something changes. These services are optional — you can monitor your credit yourself for free by checking your reports every few months. Paid services are useful if you want real-time alerts, but they do not prevent fraud; they only tell you it happened. A credit freeze prevents fraud more effectively than any monitoring service.

How often to check for new fraud

After you discover identity theft, check your credit reports and bank statements more often than you normally would. For the first few months, check your bank and credit card statements weekly. Check your credit reports every month for the first year, then every few months after that. If you find new unauthorized accounts or charges, report them immediately using the same process.

Even after you resolve the initial fraud, thieves sometimes use stolen information months or years later. This is why a credit freeze is valuable — it prevents new accounts from being opened without your permission, even if the thief still has your information. You can keep a freeze in place indefinitely at no cost.

If you have placed a fraud alert, renew it before it expires. You can renew it online at any of the three credit bureaus' websites, and it takes a few minutes. Setting a calendar reminder for 11 months after you place the alert will help you remember.

What information thieves typically use

Identity thieves usually start with your Social Security number, which they use to open credit accounts and take out loans. They may also use your name, address, and date of birth — information that is often public or easy to find. If a thief has your Social Security number, they can open accounts in your name at almost any lender.

Some thieves use stolen information to commit tax fraud by filing a false tax return in your name and claiming your refund. If you suspect this, file your real return as soon as possible and contact the IRS at 1-800-908-4490. The IRS has a process for victims of tax identity theft.

Other thieves use your information to get medical services, utilities, or phone accounts in your name. These do not show up on your credit report, so you may not discover them until you get a bill or a collection notice. If you receive bills for services you did not use, contact the company and report the fraud.

Frequently Asked Questions

How long does it take to discover identity theft?

Most people discover identity theft within three months because fraudulent charges appear on bank statements or credit reports. However, some fraud goes undetected for years, especially if the thief opens accounts that do not send statements to your address. Checking your credit reports once a year is the best way to catch fraud early.

Can I get my money back if someone stole my identity?

Yes, but it depends on the type of account. Credit card companies must reverse unauthorized charges by law. Banks will usually reverse fraudulent transfers, though it may take a few days. Loans taken out in your name are more complicated — you will need to dispute them with the lender and provide proof you did not sign the loan agreement.

Do I need to pay for a credit freeze?

No. Federal law requires credit bureaus to place and remove freezes for free. Some companies advertise paid freeze services, but you can do it yourself at no cost by contacting Equifax, Experian, and TransUnion directly through their websites.

What is the difference between a fraud alert and a credit freeze?

A fraud alert tells lenders to contact you before opening new accounts, but they may still open them if they cannot reach you. A credit freeze blocks access to your credit report entirely until you unlock it. A freeze is stronger but requires you to unfreeze your report when you want to open a new account. Both are free.

Should I buy identity theft insurance?

Identity theft insurance covers the cost of recovering from fraud — things like legal fees and lost wages from time spent fixing the problem. It does not prevent fraud or recover stolen money. Whether it is worth buying depends on your situation and the cost. A credit freeze prevents most fraud for free and is usually a better first step.