Identity Theft Prevention and Recovery: A Practical Guide
Jordan Pierce
Cybersecurity Writer, SecurFig
Identity theft happens when someone uses your personal information — often your Social Security number or account logins — to open accounts, file taxes, or make charges in your name. You cannot prevent every breach, but you can make yourself a harder target and limit the damage if something goes wrong. The steps below follow guidance from the Federal Trade Commission (FTC).
Protect Your Social Security Number
- Do not carry your Social Security card; keep it secured at home.
- Ask why a number is needed, how it will be protected, and whether another identifier can be used.
- Shred documents that show personal or financial details before discarding them.
Use Strong, Unique Passwords and 2FA
Most account takeover starts with a reused or leaked password. A password manager plus two-factor authentication on email and financial accounts removes the easiest paths in. This also limits how much a single breach can expose.
Watch Your Accounts
- Review bank, card, and account statements regularly for charges you do not recognize.
- Set up alerts where your bank or card offers them for large or unusual transactions.
- Request your free credit reports from the official source, AnnualCreditReport.com, and scan them for accounts you did not open.
Consider a Credit Freeze
A credit freeze limits access to your credit report, making it much harder for a thief to open new credit in your name. In the US it is free at each nationwide bureau, does not affect your score, and you can temporarily lift it when you apply for credit yourself. A fraud alert is a lighter alternative that asks creditors to verify identity; it is also free and lasts a set period.
Be Skeptical of Unexpected Contact
Scams that lead to identity theft often arrive as a call, text, or email pretending to be a bank, government agency, or employer. Do not give personal information to someone who contacts you out of the blue. Hang up or close the message and reach the organization through its official number or website.
If It Happens to You
- Go to IdentityTheft.gov, the FTC's official recovery site, and follow its personalized plan.
- Place a fraud alert or credit freeze with the nationwide bureaus.
- Change passwords on affected accounts and enable 2FA.
- Review statements and credit reports, and dispute anything fraudulent.
- File a report with your local police if asked for one by a creditor or for a police report.
Disclaimer
This article is for general educational purposes only and summarizes publicly available FTC guidance. Laws and the names of official resources can change; always use the FTC's official website (ftc.gov) and IdentityTheft.gov for current instructions. This guide does not constitute legal or financial advice.
Frequently Asked Questions
What is the first thing to do if I think my identity was stolen?
Visit IdentityTheft.gov, the official FTC site, and follow its recovery steps. At the same time, place a fraud alert or credit freeze with the nationwide credit bureaus, change passwords on affected accounts, and review your bank and card statements for unauthorized activity.
What is a credit freeze and does it cost money?
A credit freeze restricts access to your credit report so a thief cannot open new accounts in your name. In the United States, placing and lifting a freeze is free at each of the nationwide bureaus. It does not affect your score and you can temporarily lift it when you apply for credit yourself.
Where do I get a free copy of my credit report?
The official, federally authorized source is AnnualCreditReport.com, where you can request a free report from each nationwide bureau. Be wary of look-alike sites; use only the official source.
Should I carry my Social Security card?
No. Keep your Social Security card at home in a safe place, and do not provide the number unless there is a legitimate, verified reason and you initiated the contact. Ask why it is needed and whether another identifier can be used instead.