Cybersecurity Geniuses

Learn / Threats explained

Identity theft

When someone uses your personal details to open accounts, file taxes or get care in your name. The warning signs and the official recovery steps that work.

2 min read · Updated October 2026

What identity theft looks like

Identity theft is using someone else's personal information, such as name, date of birth, Social Security number or account numbers, to commit fraud. It comes in several forms:

TypeExample
New-account fraudA credit card, loan or phone contract opened in your name
Existing-account takeoverSomeone gets into your bank or card account
Tax identity theftA fake tax return filed in your name to claim a refund
Medical identity theftSomeone receives care or prescriptions using your insurance
Employment identity theftYour SSN used by someone else to get a job
Child identity theftA child's clean SSN used for years before anyone notices
Synthetic identityReal SSN pieces mixed with a fake name to build a new credit profile

Warning signs

  • Bills, cards or collection calls for accounts you never opened.
  • A credit report entry you do not recognize, or a sudden drop in your score.
  • Your tax return is rejected because one was already filed with your SSN.
  • An insurance statement for treatment you never received.
  • Expected mail stops arriving, which can mean someone changed your address.
  • You are denied credit unexpectedly.

Recovery: the official route

In the US, the Federal Trade Commission runs IdentityTheft.gov, which builds a personal recovery plan and an official Identity Theft Report you can show to companies and credit bureaus. The core steps:

  1. Call the companies where fraud occurred, ask them to close or freeze the accounts and note the date and name of the person you spoke to.
  2. Freeze your credit at Equifax, Experian and TransUnion, free by law in the US. See how to freeze your credit.
  3. Report it at IdentityTheft.gov. Some situations also call for a police report.
  4. Get your free credit reports at AnnualCreditReport.com and dispute fraudulent entries with each bureau.
  5. Tax fraud: respond to any IRS letter and file Form 14039 (Identity Theft Affidavit) if advised. You can also request an IRS Identity Protection PIN, which any taxpayer can now get to protect future returns.
  6. Medical fraud: ask your insurer and providers for records, and correct your medical file.
  7. Change passwords and enable two-factor authentication on email, banking and government accounts.

Keep copies of everything in one folder. Recovery can take weeks, and organized records make every call easier.

Prevention

  • Freeze your credit by default and unfreeze temporarily when you apply for credit.
  • Freeze your children's credit as well; the bureaus allow parents to do this.
  • Shred documents with account numbers or your SSN, and use a locked mailbox or informed delivery services to watch your mail.
  • Give out your SSN only when legally required, and ask why it is needed.
  • Use strong, unique passwords and two-factor authentication on financial and government accounts.
  • Watch statements and set up transaction alerts in your banking app.
Note

Outside the US the agencies differ, but the steps are similar: contact your bank, report to the national fraud authority, and use any credit-reporting protections available in your country.

Keep learning

HOW-TOHow to freezeyour creditHow-toHow to freeze your creditA credit freeze is free in the US, takes about 15 minutes, and is the strongest single defense against new accounts being opened in your name. Here is exactly how it works.Rows of servers in a data centerThreatData breachesWhat happens when a company leaks your data, what criminals do with it, and a calm step-by-step plan for the day you get a breach notification letter.HOW-TOWhat to do ifyou get hackedHow-toWhat to do if you get hackedA calm, ordered recovery plan for a hacked email, social media, bank or device. Work through the steps in this order so the attacker cannot get back in.