Someone used your name to open an account. Maybe a collector called about a debt you never owed. The first hours feel messy, but the federal government publishes a clear path. This piece walks through what an FTC identity theft recovery plan asks you to do, based on the public guidance from the FTC, the Consumer Financial Protection Bureau and USAGov.

An empty editorial desk at dusk with a blank sheet of paper and a pencil, waiting for content to arrive.
A blank sheet and a pencil on a desk at dusk, the quiet starting point for writing down what happened and what to do next.

What counts as identity theft, and how it shows up

Identity theft means someone uses your personal or financial information without your permission. That can include your name, address, Social Security number, credit card number, bank account number or medical insurance account number. USAGov lists these examples on its identity theft page (USAGov).

The warning signs are often ordinary. A bill arrives for something you never bought. A debt collector calls about an account you never opened. A loan application is denied for no clear reason. Mail you expected stops showing up. An unfamiliar account appears on your credit report.

  • Bills for items you did not buy
  • Collection calls for accounts you did not open
  • Unknown accounts on your credit report
  • Loan denials you cannot explain
  • Missing mail

Any one of these is worth checking. Together they are a strong signal to act.

Start with IdentityTheft.gov

The FTC runs IdentityTheft.gov, the official place to report identity theft. According to the CFPB, the site produces an Identity Theft Report and a personal recovery plan that walks you through the steps (CFPB). You can also report by phone at 1-877-438-4338.

The FTC describes the site as a way to get help in one place (FTC). The public pages we reviewed do not spell out every section of the plan, so expect the site to tailor its checklist to what you tell it. The CFPB and USAGov also suggest reporting to local police.

Keep notes as you go. Write down dates, the names of people you speak with and any reference numbers. A simple log makes later calls easier.

Close accounts, call the fraud desks, and set alerts

Right away, close any affected accounts. Then contact the security or fraud departments at your bank, card issuers and any other place where you hold an account (CFPB). Use the phone number on your card or the company's official website, not a number from a text or email.

Next, contact the three major credit reporting agencies. Ask each one to place a fraud alert and a credit freeze. Both the CFPB and USAGov point to this step. The sources we could read do not say how long an alert or freeze lasts, or whether any fee applies. Check the FTC's consumer pages for those details before you call.

  1. Close affected accounts.
  2. Call the fraud departments at your financial institutions.
  3. Report at IdentityTheft.gov and to local police.
  4. Ask the three credit bureaus for fraud alerts and a freeze.
  5. Follow the checklist in your recovery plan.

The order can shift with your situation. Stopping new damage usually comes first.

Tax-related theft and Form 14039

Some thieves file a tax return in your name. If you suspect this but have not received an IRS notice, USAGov says you can file IRS Form 14039, the Identity Theft Affidavit. Completing it can invalidate a fraudulent return filed with your information (USAGov).

If you already received an IRS letter, follow the instructions in that letter. The guidance we reviewed does not cover medical records, government benefits or other non-financial misuse in detail, so look to the agency involved for those cases.

Red flags in the recovery process itself

Victims are a target for a second round of fraud. The CFPB notes that scammers have impersonated the FTC, the CFPB, other agencies, law enforcement and financial institutions. The FTC will never threaten you, ask you to move money to protect it, or tell you to withdraw cash or buy gold to hand over. Those are scams (CFPB).

Be careful with unsolicited calls, texts and emails that claim to come from your bank or card provider. Hang up and call back through an official number. Type the website address yourself.

Recovery takes patience, and no plan can promise a particular outcome for your credit. What the plan does give you is a record, a sequence and official channels. For more on the process, see the FTC's overview (What To Know About Identity Theft) and its guide (How to recover from identity theft).