What do I do if I am a victim of identity theft?

If you are a victim of identity theft, take these steps right away. Close any affected accounts. Contact the security or fraud departments at your financial institutions. Report identity theft to the Federal Trade Commission (FTC) at IdentityTheft.gov. You will get an Identity Theft Report and recovery plan that walks you through the steps to take.

Visit the Department of Justice (DOJ) or the FTC’s IdentityTheft.gov  to learn more.

Contact financial institutions, law enforcement, the DOJ, or FTC directly using official websites and phone numbers, because:

• Scammers are pretending to be FTC and lying. They contact people and say that someone used their personal information to open accounts or commit fraud. Know that the FTC never threatens you, makes you transfer your money to “protect it,” or tells you to withdraw cash or buy gold and give it to someone. That’s a scam. Scammers have also impersonated the CFPB, other agencies, and law enforcement in the past.
• Scammers also often pretend to be a financial institution. Be careful if you receive an email, text, or call from someone claiming to be from your bank, credit card provider, or other financial institutions. For more information, visit Banks Never Ask That!

Contact any one of these three nationwide credit reporting companies Equifax , Experian , or Transunion  to place fraud alerts on your credit reports:

A fraud alert protects you by requiring creditors to make sure it’s you before they open a new account, issue an additional card, or raise your credit limit. When you place a fraud alert on your credit report at one of the nationwide credit reporting companies, it must notify the others.

There are two main types of fraud alerts: initial fraud alerts and extended alerts. Servicemembers also have the option of an active-duty alert.

Place an initial fraud alert on your credit report if you believe you are, or are about to become, a victim of fraud or identity theft. Credit reporting companies keep that alert on your file for one year. After one year, the initial fraud alert will end and be removed. You have the option to place another fraud alert at that time.

When you place an initial fraud alert, creditors must take reasonable steps to make sure it’s you making new credit requests before they can approve.

Also, with an initial fraud alert, you get to order one free copy of your credit report from each of the nationwide credit reporting companies. These free reports do not count as your free annual report from each credit reporting company.

Place an extended alert if your identity has been stolen and you have filed an identity theft report at IdentityTheft.gov .

An extended alert is good for seven years. If you have an extended alert, a creditor must contact you—in person, by phone, or another contact method of your choosing—to make sure it’s you before approving new credit.

When you place an extended alert on your file, you can order two free copies of your credit report from each nationwide credit reporting company over a 12 month period. Your name will also be removed from prescreened credit offers and insurance marketing lists for five years.

Active-duty alerts protect servicemembers on active duty by making businesses take reasonable steps to make sure it’s you before they open a new account, issue an additional credit card, or increase the credit limit on your existing account. The alerts last for 12 months. You can request that the alert be removed sooner. If your deployment lasts longer than 12 months, you may place another alert on your credit file.

A security freeze, also called a credit freeze, stops new creditors from accessing your credit file until you lift the freeze. Under federal law, you can freeze and unfreeze your credit record for free at the three nationwide credit reporting companies – Experian, TransUnion, and Equifax. This federal law does not apply to someone who requests your credit report for employment, tenant-screening, or insurance purposes.

Unlike fraud alerts, if you place a security freeze with one credit reporting company, they do not notify the other credit reporting companies. You must contact each credit reporting company individually if you would like to place a security freeze with all three nationwide credit reporting companies.

Because most businesses do not open credit accounts without checking your credit report, a freeze can stop identity thieves from opening new accounts in your name. Be mindful that a freeze doesn't prevent identity thieves from taking over existing accounts.

You can ask credit reporting companies to block or remove fraudulent information and debts from your credit report by submitting an identity theft report and supporting documentation. If you’ve been a victim of identity theft, send the credit reporting companies:

• An identity theft report, which can be done through IdentityTheft.gov
• Proof of your identity
• A letter identifying the fraudulent debts and information on your credit report

You can get a sample letter on IdentityTheft.gov to help you write your request. Use this method only for debts that are the result of identity theft. Credit reporting companies can refuse or remove a block if the information you provide is not correct or if debt is not caused by identity theft.

Credit reporting companies must block fraudulent information from your credit report within four business days after receiving your request. In addition, they must tell the companies that provided the information that someone stole your identity. Once notified, creditors can’t turn identity theft-related debts over to debt collectors.

If you need to dispute a debt that is not the result of identity theft, read “How do I dispute an error on my credit report?”

If you have a problem with credit reporting, you can submit a complaint to the CFPB.