Identity Theft Complaint & Recovery Guide

Step 1: Place Fraud Alert (5 minutes)

Call ONE of the three credit bureaus to place fraud alert. They're required to notify the other two.

• Equifax: 1-800-525-6285 or equifax.com/fraud
• Experian: 1-888-397-3742 or experian.com/fraud
• TransUnion: 1-800-680-7289 or transunion.com/fraud

Effect: Creditors must verify your identity before opening new accounts. Free, lasts 1 year, renewable.

Step 2: Get Free Credit Reports (10 minutes)

You're entitled to free credit reports from all three bureaus when you're identity theft victim.

Request at: AnnualCreditReport.com (only official source)

Review for:

• Accounts you didn't open
• Unauthorized credit inquiries
• Incorrect personal information
• Fraudulent collection accounts
• Wrong addresses or employers

Step 3: Report to FTC (15 minutes)

File official report at IdentityTheft.gov

Creates:

• Official identity theft affidavit
• Personalized recovery plan
• Pre-filled letters to send to companies
• Documentation for police report

You'll need:

• Personal information (name, address, SSN, DOB)
• Details of fraudulent activity you've discovered
• Any documentation you have

Step 4: Change Compromised Passwords (30 minutes)

If accounts were accessed:

• Change passwords on all financial accounts
• Change email password first (thieves use email to reset other accounts)
• Enable two-factor authentication everywhere possible
• Use unique, strong passwords for each account
• Consider password manager (1Password, Bitwarden, LastPass)

Step 5: Contact Affected Companies (varies)

Call fraud departments of any companies where fraud occurred:

• Banks/Credit cards: Close compromised accounts, dispute charges
• Utilities: Report if account opened in your name
• Phone companies: If new service in your name
• Government agencies: If tax, benefits, or unemployment fraud

Ask for:

• Fraud department transfer
• Case number for your report
• Written confirmation they're closing/disputing
• Copy of fraudulent applications (you have right to these)

Why Report to FTC First

• Creates official federal record of identity theft
• Identity Theft Report gives you legal rights under Fair Credit Reporting Act
• Recovery plan with personalized checklist
• Pre-filled dispute letters to send to companies
• Required for some disputes - creditors and bureaus may require FTC report
• Helps law enforcement - provides data to identify fraud patterns

What You'll Need to Complete Report

• Personal information (name, address, SSN, date of birth)
• Details of how you discovered the theft
• Timeline of when theft likely occurred
• List of fraudulent accounts/activity you've found
• Supporting documents (credit reports, collection letters, account statements)
• Police report number (if you already have one)
• Any suspects or information about who might be responsible

Step-by-Step Process

1. Go to IdentityTheft.gov
2. Click "Get Started" and create account (or report anonymously)
3. Answer questions about what happened:
   • Type of identity theft
   • When you discovered it
   • What accounts/information were affected
   • Estimated losses
4. Provide details about fraudulent activity
5. Upload supporting documents
6. Submit report
7. Save your Identity Theft Report - you'll need this for disputes
8. Follow personalized recovery plan provided

Your Identity Theft Report

After filing with FTC, you can add a police report to create complete "Identity Theft Report."

This report gives you:

• Extended fraud alert: 7 years (vs. 1 year standard)
• Free credit reports: Multiple reports per year
• Debt blocking: Credit bureaus must block fraudulent debts
• Company compliance: Companies must provide fraud records to you
• Stop debt collection: Stop collection on fraudulent debts

Where to File

File with police in:

• Where you live (most common)
• Where theft occurred (if known)
• Where business is located (if fraudulent account opened)

If police refuse to take report: Some jurisdictions are reluctant if crime didn't occur in their area. Provide FTC Identity Theft Report and explain creditors require police report.

What to Bring

• Government-issued photo ID
• Proof of address (utility bill, lease)
• FTC Identity Theft Report (from IdentityTheft.gov)
• Credit reports showing fraudulent accounts
• Collection letters or bills for accounts you didn't open
• Documentation showing accounts aren't yours
• Any other evidence of identity theft

What to Tell Police

• When you discovered identity theft
• What fraudulent activity occurred (be specific)
• How you think thief got your information (if known)
• What steps you've already taken
• If you know or suspect who did it

Important: Get case/report number and officer's name/badge number. Request copy of police report.

If Police Won't File Report

Some departments refuse identity theft reports, especially if suspect isn't local. Options:

• Show them FTC guidance requiring police report for victim rights
• File "miscellaneous incident report" instead (better than nothing)
• Ask for supervisor
• Try different jurisdiction where fraud occurred
• File with state police
• Document refusal (officer name, date, reason) for creditors

How to Place Credit Freeze

Must contact all three bureaus:

• Equifax: 1-800-349-9960 or equifax.com/freeze
• Experian: 1-888-397-3742 or experian.com/freeze
• TransUnion: 1-888-909-8872 or transunion.com/freeze

You'll need: Name, address, SSN, date of birth, proof of address

Save your PINs - you need these to lift freeze temporarily or permanently

Don't Forget These Credit Agencies

Beyond the "big three," also freeze with:

• Innovis: 1-800-540-2505 or innovis.com
• ChexSystems (banks use this): 1-800-428-9623 or chexsystems.com
• National Consumer Telecom & Utilities Exchange: nctue.com

Step 1: Dispute with Credit Bureaus

Send dispute letter to all three bureaus for each fraudulent item.

Include:

• Copy of FTC Identity Theft Report
• Copy of police report
• Letter explaining the account is fraudulent
• Copy of your ID
• Proof of address

File online or mail:

• Equifax: Dispute online or mail to: Equifax Information Services LLC, P.O. Box 740256, Atlanta, GA 30374
• Experian: Dispute online or mail to: Experian, P.O. Box 4500, Allen, TX 75013
• TransUnion: Dispute online or mail to: TransUnion LLC, P.O. Box 2000, Chester, PA 19016

Timeline: Bureaus have 30 days to investigate and respond

Step 2: Dispute with Creditors

Also send dispute directly to company that opened fraudulent account.

Sample dispute letter:

Send certified mail, return receipt requested

Step 3: Dispute Collection Accounts

If fraudulent debt went to collections:

• Send debt validation letter demanding proof debt is yours
• Include Identity Theft Report and police report
• Explain you're identity theft victim and debt is fraudulent
• Demand they stop collection and remove from credit report
• Report to CFPB if they continue collection

If Company Refuses to Remove Fraudulent Account

• File complaint with Consumer Financial Protection Bureau
• File complaint with your state Attorney General
• Send follow-up dispute with more documentation
• Consider consulting consumer rights attorney
• Report to FTC for investigation

When to File AG Complaint

• Creditor refuses to close fraudulent account
• Company won't provide fraud records you're entitled to
• Debt collector continues collection on fraudulent debt
• Credit bureau won't remove fraudulent accounts
• Business doesn't follow identity theft procedures
• Suspected business involvement in identity theft

What to Include in AG Complaint

• Your information: Name, address, contact info
• Company information: Name, address, account number
• Timeline: When identity theft occurred, when you reported it
• What you've done: Steps you've taken (FTC report, police report, disputes)
• Company's response: What company did or didn't do
• Documentation:
  • FTC Identity Theft Report
  • Police report
  • Copies of all disputes sent to company
  • Company's responses
  • Credit reports showing fraudulent accounts
  • Any other relevant documents
• What you want: Account closed, debt forgiven, credit report correction

Where to File

• Your state AG: Find your state's AG office
• CFPB: File online complaint (for financial companies)
• FTC: Report fraud

Immediate (Day 1-3)

• Place fraud alert with credit bureaus
• Order credit reports from all three bureaus
• File FTC Identity Theft Report at IdentityTheft.gov
• File police report
• Change passwords on compromised accounts
• Enable two-factor authentication
• Contact banks/creditors about fraudulent accounts

Short-term (Week 1-4)

• Consider credit freeze
• Send dispute letters to credit bureaus
• Send dispute letters to creditors
• Close or freeze compromised accounts
• Update automatic payments to new accounts
• Review credit reports for additional fraud
• Document all communications
• Check medical records if medical ID theft
• Contact IRS if tax fraud (1-800-908-4490)
• Contact Social Security if SSN misuse (1-800-772-1213)

Ongoing (Months 1-12)

• Monitor credit reports monthly
• Follow up on disputes every 30 days
• Check credit scores regularly
• Review bank statements carefully
• Watch for collection letters on fraudulent debts
• File tax return early to prevent tax refund theft
• Keep all documentation organized
• Consider credit monitoring service

Long-term Prevention

• Maintain credit freeze or fraud alert
• Use strong, unique passwords with password manager
• Enable two-factor authentication everywhere
• Check credit reports at least twice yearly
• Shred financial documents before discarding
• Don't carry Social Security card
• Be cautious with personal information online
• Use secure WiFi (avoid public WiFi for sensitive transactions)