Quick Take
If you’ve discovered you’re a victim of identity theft, take a breath — this is fixable. Identity restoration is the structured process of reporting the fraud, locking down your accounts and credit, disputing fraudulent activity, and rebuilding your financial identity so it’s protected going forward.
Most people can complete the critical first steps in 1-2 hours, though full recovery — especially for more complex cases like new account fraud or synthetic identity theft (where a criminal blends your real Social Security number with fake personal details) — can take a few weeks to a few months of follow-through. You won’t be doing this alone, and you don’t need to be a security expert to get through it. You just need a plan. This guide is that plan.
Before You Start
What you’ll need:
- A list of accounts, cards, or documents you believe were compromised
- Your Social Security number (SSN) and government-issued ID
- Access to your email and phone (for verification codes)
- Recent bank and credit card statements
- A notebook or document to log every call, date, and reference number — this matters more than people expect
How long this will take: Plan for 1-2 hours for the initial reporting and lockdown steps below. If you’re disputing fraudulent accounts or dealing with a stolen tax refund or medical identity theft, expect follow-up work over several weeks as institutions investigate.
Why this matters: Every hour a fraudulent account or unauthorized charge sits unreported is more time for damage to compound — more inquiries on your credit report, more accounts opened in your name, more stress down the road. Acting methodically now saves you months of cleanup later.
Step-by-Step Instructions
Step 1: File Your identity theft report at IdentityTheft.gov
Go to IdentityTheft.gov, the Federal Trade Commission’s official recovery site. Click “Get Started” and answer the guided questions about what happened — a stolen wallet, a data breach notification, unauthorized charges, whatever your situation is.
The site will generate a personal recovery plan and an FTC Identity Theft Report, which is a legal document that helps prove to banks, credit bureaus, and debt collectors that you’re a genuine victim. Save and print this report — you’ll use it repeatedly.
Tip: You’ll see an option to create an account so you can return to your recovery plan later. Do this — you’ll likely need to check items off over several weeks.
Step 2: Place a Fraud Alert or Credit Freeze
This is the single most important step for stopping new account fraud (when someone opens new credit in your name). You have two tools, and they work differently:
| Feature | Fraud Alert | Credit Freeze |
|---|---|---|
| What it does | Tells lenders to verify your identity before approving credit | Blocks access to your credit file entirely — no new accounts can be opened |
| Cost | Free | Free |
| How long it lasts | 1 year (initial); 7 years if you file a police report (extended) | Until you lift it |
| Where to request | One bureau (they notify the other two) | Each bureau separately |
| Best for | Light protection with less hassle | Strong protection, recommended after confirmed theft |
For a credit freeze (recommended if you’ve confirmed fraud): Visit each bureau’s freeze page directly:
- Equifax: equifax.com/personal/credit-report-services
- Experian: experian.com/freeze
- TransUnion: transunion.com/credit-freeze
You’ll create an account, verify your identity with personal details, and activate the freeze. You’ll get a PIN or password — save it somewhere safe, since you’ll need it to lift the freeze later when you want to apply for credit yourself.
Gotcha: Some people get stuck at identity verification because the system asks knowledge-based questions (like “which street did you live on in [year]”) that are hard to recall. If you fail verification online, each bureau allows you to freeze by phone or mail instead.
Step 3: Contact Your Banks and Card Issuers
Call the fraud department number on the back of your card (not a number from an email or text — this matters, since phishing scams impersonate banks). Report the fraudulent charges or unauthorized access. Ask them to:
- Close or freeze the affected account
- Issue new card numbers
- Reverse fraudulent charges
- Note the account with your FTC Identity Theft Report number
Under the Fair Credit Reporting Act (FCRA) and FACTA (the Fair and Accurate Credit Transactions Act), you have the right to dispute fraudulent charges and have them removed without it damaging your credit.
Step 4: Pull Your Credit Reports and Review Every Line
Go to AnnualCreditReport.com — the only federally authorized source for free credit reports from Equifax, Experian, and TransUnion. Request all three.
Look for:
- Accounts you don’t recognize (new account fraud)
- Hard inquiries you didn’t authorize
- Addresses or employers you never had (a red flag for synthetic identity theft)
What you’ll see: Each report lists accounts, balances, inquiries, and public records. Fraudulent entries often look almost identical to real accounts, so check account numbers and open dates carefully.
Step 5: Dispute Fraudulent Accounts and Charges
For each fraudulent item, file a dispute directly with the credit bureau reporting it (each has an online dispute portal) and with the creditor or bank that opened the account. Attach your FTC Identity Theft Report — this is your strongest piece of evidence.
By law, bureaus generally must investigate and respond within 30 days. You’ll receive a written outcome by mail or through your online account.
Step 6: File a Police Report (If Recommended)
Some banks and creditors require a local police report in addition to your FTC report, especially for larger losses or extended fraud alerts. Bring your FTC Identity Theft Report, ID, and any evidence to your local police department and ask to file an identity theft report. Request a copy of the filed report for your records.
Verify It Worked
- Fraud alerts/freezes: You should receive written confirmation from each bureau within a few days to two weeks by mail or email. Log into your account with each bureau to confirm the freeze is active.
- Disputed accounts: You’ll get a written outcome letter within 30 days. Confirm the fraudulent item no longer appears by pulling a fresh credit report.
- Bank/card disputes: Check your statement in the next billing cycle to confirm charges were reversed and the account is closed.
If it didn’t work: Call the bureau or bank back, reference your case number, and ask for a supervisor. If a dispute is denied and you believe it’s wrong, you can submit additional documentation and request a re-investigation.
Common Issues and Fixes
“I can’t get past identity verification online.”
This happens often, especially if you’ve moved recently or your credit history is thin. Call the bureau’s dedicated freeze/fraud line instead — phone verification uses different methods.
“A creditor won’t remove a fraudulent account even with my FTC report.”
Send a written dispute letter by certified mail with your FTC Identity Theft Report attached, and cite your rights under the FCRA. If they still refuse after 30 days, this is the point to escalate.
“My dispute was denied.”
Ask for the specific reason in writing. You can submit a fraud affidavit and re-file, or escalate to the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint — this creates a formal record and often prompts faster resolution.
“I keep getting collection calls for a debt I don’t owe.”
Tell the collector in writing that this is the result of identity theft, include your FTC report, and request they cease contact and remove the debt. Under FACTA, you’re also entitled to obtain records related to the fraudulent account from the business that opened it.
When to file a formal complaint: If a business isn’t cooperating after 30-45 days despite proper documentation, file complaints with the CFPB and the FTC at FTC.gov/complaint. These agencies track patterns of noncompliance and can apply pressure that individual consumers can’t.
What to Do Next
- Set up ongoing monitoring. A credit freeze stops new accounts, but it doesn’t alert you to other threats like your information appearing on the dark web (criminal marketplaces where stolen personal data is bought and sold) or medical identity misuse.
- Change passwords and enable two-factor authentication (2FA) on your email, banking, and any account tied to your identity — this adds a second verification step beyond just a password.
- Watch for SIM swap attempts — a tactic where criminals hijack your phone number to intercept verification codes. If your phone suddenly loses service, contact your carrier immediately.
- Recheck your credit reports every few months, not just once. Fraud sometimes resurfaces weeks after the initial cleanup.
- Consider removing your data from data broker sites, which compile and sell your personal information and make you an easier target for future scams.
FAQ
How long does identity restoration usually take?
The initial lockdown — fraud alerts, freezes, and reporting — takes a few hours. Full resolution of disputed accounts and credit report corrections typically takes 30 to 90 days, though complex cases can take longer. Staying organized and following up consistently shortens the timeline significantly.
Will a credit freeze hurt my credit score?
No. Freezing your credit doesn’t affect your score at all — it simply blocks new lenders from viewing your file until you lift it. You can lift it temporarily anytime you need to apply for credit.
Do I need to pay for identity restoration services?
The core recovery steps — filing reports, freezing credit, disputing fraud — are all free. Paid services add value through ongoing monitoring, faster alerts, and hands-on support so you’re not doing the legwork alone during a stressful time.
What’s the difference between a fraud alert and a credit freeze?
A fraud alert asks lenders to verify your identity before extending credit, while a credit freeze blocks access to your credit file entirely. A freeze offers stronger protection and is generally recommended once fraud is confirmed.
What if the identity theft involved my Social Security number specifically?
You can’t change your SSN in most cases, but freezing your credit, monitoring your accounts, and filing your FTC report are your strongest defenses. The Social Security Administration also has guidance at ssa.gov for cases involving SSN misuse for employment or benefits fraud.
Moving Forward With Confidence
Recovering from identity theft is a process, not a single action — but it’s one you can absolutely get through with the right steps and a little persistence. The hardest part is usually the first phone call or the first form; after that, momentum builds and things start falling into place.
You don’t have to manage this alone, either now or going forward. IdentityProtector.com provides continuous identity monitoring across all three credit bureaus, real-time alerts if your information turns up in a data breach or on the dark web, and — if you ever face something like this again — recovery specialists who walk through it with you step by step, not just an automated report. Take the steps above today, and take control of your identity security for good.
