If you suspect someone is using your personal information to commit fraud, contact the Federal Trade Commission (FTC) through IdentityTheft.gov immediately. This is the central U.S. government resource for reporting and recovering from identity theft.
Identity theft occurs when someone uses your name, Social Security number, or financial details without permission. Common signs include unfamiliar accounts, unexpected charges, or denied credit applications. Acting quickly reduces damage and speeds recovery.
The FTC recommends filing a report online at IdentityTheft.gov rather than calling a hotline. The site generates a personalized recovery plan, including templates for disputing fraudulent activity and contacting creditors.
Start by securing your accounts. Freeze your credit files with Equifax, Experian, and TransUnion. A freeze prevents new credit lines from being opened in your name. You can lift the freeze later when needed.
Notify your bank and credit card issuers. Most major banks have dedicated fraud departments. Provide account numbers, dates of unauthorized transactions, and a copy of your police report if available. Many institutions offer zero-liability protection for unauthorized purchases.
File a police report with your local law enforcement. Not all agencies accept identity theft reports, but a formal record strengthens your case with creditors and credit bureaus. Request a copy of the report for your records.
The FTC operates the national identity theft reporting system. Visit IdentityTheft.gov to file a report. The site guides you through steps, confirms your status, and issues an official Identity Theft Report. This document is required to remove fraudulent entries from your credit reports.
Credit bureaus play a critical role. Contact Equifax at 800-685-1111, Experian at 888-397-3742, and TransUnion at 800-680-7289. Request a fraud alert and a credit freeze. A fraud alert lasts 90 days and requires lenders to verify your identity before extending credit.
For cases involving stolen government documents, such as a passport or driver's license, contact the relevant state agency. In California, the Department of Motor Vehicles handles driver's license fraud. In New York, the State Department of Motor Vehicles manages similar reports.
Many victims mistakenly call their credit card company first. While this stops ongoing charges, it doesn't address the root issue. Credit bureaus and the FTC handle long-term resolution.
Some believe filing a report with one agency covers all others. That's false. Each creditor, credit bureau, and law enforcement agency requires independent notification. The FTC report is not a substitute for a police report.
A key distinction: the FTC does not investigate crimes. It provides tools and guidance. Law enforcement investigates criminal activity. The FBI's Internet Crime Complaint Center (IC3) handles cyber-related identity theft. Submit a complaint at ic3.gov.
In 2022, a Florida resident discovered a $12,000 loan under their name. They contacted their bank within 24 hours, froze credit at all three bureaus, and filed a report at IdentityTheft.gov. Within 10 days, the FTC confirmed the report and sent a recovery kit.
They sent dispute letters to the lender and credit bureaus. The lender reversed the loan. The credit bureaus removed the entry. The victim received a letter from the FTC confirming the fraud was resolved.
Recovery time varies. Simple cases take 30-60 days. Complex cases involving multiple accounts may take 6-12 months. The faster you act, the better the outcome.
| Agency | Primary Role | Contact Method | Response Time |
|---|---|---|---|
| FTC (IdentityTheft.gov) | Central reporting and recovery planning | Online form | Instant confirmation |
| Equifax/Experian/TransUnion | Credit monitoring and freezing | Phone or website | 1-5 business days |
| Local Police | Criminal investigation coordination | Visit station or file online | Varies by jurisdiction |
| FBI IC3 | Cybercrime reporting | Online portal | 2-4 weeks for review |
I once helped a client recover from a phishing scam that stole their login credentials. They had used the same password across multiple sites. After resetting passwords and enabling two-factor authentication, we filed a report with the FTC. The process took 45 days, but all accounts were secured and no further breaches occurred.
Always keep copies of correspondence. Save emails, letters, and report numbers. These serve as proof of action taken.
After resolving the incident, monitor your credit reports annually. Use free services like AnnualCreditReport.com to access reports from all three bureaus.
Who do I contact about identity theft? Start with the FTC at IdentityTheft.gov. This is the fastest, most effective route to begin recovery.