Something feels off. Maybe you got a bill for an account you never opened. Maybe your credit score dropped for no reason. Maybe the IRS rejected your tax return because one was already filed. Or maybe you’re getting collection calls about debts that aren’t yours.
These are all warning signs that your identity may have been stolen. And the sooner you recognize them, the faster you can limit the damage.
This guide covers the most common warning signs, how to confirm whether your identity has been stolen, and the exact steps to take if it has.
In this guide:
- 12 warning signs your identity has been stolen
- How to confirm identity theft
- Immediate steps if you’ve been a victim
- How to prevent it from happening again
Check your exposure right now: Run a free Optery scan to see how much of your personal information is publicly available on data broker sites. The more data that’s exposed, the higher your risk of identity theft.
12 Warning Signs Your Identity Has Been Stolen
Watch for these red flags — any one of them could indicate your identity has been stolen:
1. Unfamiliar Charges on Your Accounts
Charges you don’t recognize on your credit card or bank statements — even small ones. Identity thieves often test stolen cards with small purchases before making larger ones. Check your statements carefully, not just the totals.
2. Bills for Accounts You Didn’t Open
Receiving credit card statements, loan documents, or utility bills for accounts you never created. This means someone opened an account in your name.
3. Unexpected Credit Score Changes
A sudden drop in your credit score without any changes in your own financial behavior. New accounts, hard inquiries, or missed payments on fraudulent accounts all impact your score.
4. Collection Calls for Debts You Don’t Owe
Debt collectors calling about accounts you know nothing about. Don’t dismiss these as spam — they may indicate someone has racked up debt in your name.
5. IRS Tax Return Rejection
Your tax return gets rejected because one was already filed using your Social Security number. Tax-related identity theft is growing, and criminals file early to steal your refund before you file. Learn how to check if your SSN is on the dark web →
6. Medical Bills for Services You Didn’t Receive
Bills or insurance explanations of benefits (EOBs) for medical procedures, prescriptions, or doctor visits you didn’t have. This is medical identity theft — someone used your insurance information to receive care.
7. Missing Mail
Expected mail suddenly stops arriving — bank statements, bills, credit card statements. An identity thief may have submitted a change-of-address request to redirect your mail to their address.
8. Denied Credit for No Apparent Reason
Getting turned down for a loan, credit card, or apartment when you expected approval. The denial may be due to fraudulent accounts or debts on your credit report that you didn’t create.
9. Unfamiliar Accounts on Your Credit Report
Accounts, inquiries, or addresses on your credit report that you don’t recognize. Pull your free reports from annualcreditreport.com and review every entry.
10. Notifications About Data Breaches
If you receive a data breach notification from a company you use, your information may be in criminal hands. Not all breaches lead to identity theft, but they significantly increase your risk.
11. Two-Factor Authentication Codes You Didn’t Request
Receiving verification codes via text or email for logins you didn’t attempt. This means someone has your password and is trying to access your accounts. Change your passwords immediately and check for SIM swapping.
12. Strange Activity on Your Social Media
Posts, messages, or friend requests you didn’t make. Someone may have taken over your social media accounts using stolen credentials.
How to Confirm If Your Identity Has Been Stolen
If you’ve noticed any of the warning signs above, take these steps to confirm whether your identity has been stolen:
Pull your credit reports. Go to annualcreditreport.com and request free reports from all three bureaus (Equifax, Experian, TransUnion). Review every account, inquiry, and address listed. Anything you don’t recognize is a red flag.
Check Have I Been Pwned. Visit haveibeenpwned.com to see if your email has been part of any data breaches. Breached credentials are a common entry point for identity theft.
Review your bank and credit card statements. Go through the last 3-6 months of statements looking for any charges you don’t recognize — no matter how small.
Check your SSA earnings record. Log into my Social Security at ssa.gov and review your earnings history. Unfamiliar earnings could mean someone is using your Social Security number for employment.
Check your data broker exposure. Run a free Optery scan to see how much personal information is publicly available about you. Extensive data broker exposure means criminals had easy access to the details needed to steal your identity.
What to Do Immediately If Your Identity Has Been Stolen
If you’ve confirmed that your identity has been stolen, act fast. Every hour matters:
Step 1: Freeze Your Credit (Do This NOW)
Freeze your credit with all three bureaus immediately. This stops the thief from opening any new accounts in your name:
- Equifax: 1-800-349-9960
- Experian: 1-888-397-3742
- TransUnion: 1-888-909-8872
Free, takes 10 minutes. Do this before anything else.
Step 2: File a Report at IdentityTheft.gov
Go to IdentityTheft.gov (the FTC’s identity theft resource). They create a personalized recovery plan and generate the official documents you need to dispute fraudulent accounts.
Step 3: File a Police Report
File a report with your local police department. Bring your documentation — fraudulent account statements, collection letters, and your IdentityTheft.gov report. Many creditors and insurance companies require a police report before they’ll remove fraudulent accounts.
Step 4: Contact Affected Companies
Call the fraud department of every company where fraudulent accounts were opened or charges were made. Request the accounts be closed and the fraudulent charges reversed. Use the documents from IdentityTheft.gov to support your dispute.
Step 5: Dispute Fraudulent Items on Credit Reports
Contact all three credit bureaus and dispute any fraudulent accounts, inquiries, or addresses on your reports. They must investigate within 30 days and remove verified fraud.
Step 6: Change All Compromised Passwords
Change passwords on every account that may have been compromised. Start with email (the master key), then banking, then social media. Use a password manager and enable 2FA on everything.
Step 7: Remove Your Data from Data Broker Sites
The personal information on data broker sites is likely what the thief used to impersonate you. Removing it prevents future theft and cuts off the data supply for criminals.
Optery — Our top recommendation. Free scan to see your exposure. Paid plans ($39-$249/year) automate removal from 350+ data broker sites with continuous monitoring. Read our full Optery review →
Incogni — Best budget option. Covers 180+ data brokers for $6.49/month billed annually. Read our full Incogni review →
Step 8: Set Up an IRS Identity Protection PIN
If your SSN was used for tax fraud, get an IRS Identity Protection PIN at irs.gov. This prevents anyone from filing future tax returns with your SSN without this PIN. Full SSN protection guide →
How to Prevent Identity Theft from Happening Again
After recovering from identity theft, take these steps to prevent it from happening again:
Keep your credit frozen permanently. Only temporarily lift when you need to apply for credit. It automatically refreezes after the time period you set.
Keep your data off broker sites. Continuous monitoring through Optery or Incogni ensures your personal information stays removed from data broker sites — cutting off the primary data source criminals use.
Use a password manager with 2FA. Unique passwords and two-factor authentication on every account prevent credential-based attacks. Full password security guide →
Monitor your credit regularly. Check your credit reports at least quarterly. Set up free credit monitoring alerts through your bank or credit card provider.
Use secondary contact information. Google Voice number and secondary email for non-essential accounts keep your primary information private.
Set up Google Alerts for your name, phone number, and email to catch new appearances of your information online.
Lock down social media to prevent data harvesting that feeds future identity theft attempts.
Act Now — Don’t Wait for Confirmation
If you suspect your identity has been stolen, don’t wait for absolute proof before taking action. Freeze your credit immediately — it costs nothing and can be undone if it turns out to be a false alarm. The risk of acting too late far outweighs the minor inconvenience of a precautionary freeze.
- Freeze your credit — do this right now, before finishing this article
- Run a free Optery scan — see how exposed your personal information is on data broker sites
- Pull your credit reports at annualcreditreport.com and review for unfamiliar activity
- File at IdentityTheft.gov if you find confirmed fraud
- Remove your data from broker sites using Optery or Incogni to prevent future theft
The faster you act, the less damage identity theft can cause. Don’t wait.
Frequently Asked Questions
What’s the first sign of identity theft?
The most common early signs are unfamiliar charges on your accounts, bills for accounts you didn’t open, or an unexpected drop in your credit score. Collection calls for debts you don’t owe are also a strong indicator.
Should I freeze my credit if I only suspect identity theft?
Yes — always err on the side of caution. Freezing your credit is free, takes 10 minutes, and can be easily reversed. The cost of NOT freezing when you should have is much higher than a precautionary freeze.
How do data brokers contribute to identity theft?
Data brokers publicly list your name, address, phone number, date of birth, and family members — giving criminals the exact details they need to impersonate you. Removing your data from broker sites makes identity theft significantly harder. Run a free Optery scan to see your exposure.
Can identity theft affect my children?
Yes. Child identity theft is growing because children have clean credit histories that go unmonitored. Consider freezing your children’s credit as a precaution.
How long does identity theft recovery take?
The average identity theft victim spends over 200 hours and $1,000+ resolving the damage. Recovery typically takes 3-12 months depending on the severity. Acting quickly reduces both time and cost.
Will identity theft affect my credit score permanently?
No — but the recovery process takes time. Once fraudulent accounts are removed from your credit report, your score will recover. The faster you dispute fraudulent items, the faster your score bounces back.
This post contains affiliate links. If you purchase through our links, we may earn a commission at no extra cost to you. See our affiliate disclosure for details.