Identity Theft Recovery 2026: 7 Steps to Get Your Money, Credit, and Peace of Mind Back

If your identity is stolen, act in this order: write down what was taken, report it at IdentityTheft.gov to get a personal recovery plan, freeze your credit at Equifax, Experian, and TransUnion, dispute every fraudulent charge with your bank, and clean up your credit reports. Each step limits further damage.

Prefer to watch first? Watch the video: Identity Theft Recovery — The Complete 2026 Guide, which walks through the same recovery steps on screen.

Key facts

• A credit freeze is free under United States federal law and is the strongest single step you can take.
• Reporting at IdentityTheft.gov gives you a personal recovery plan and an affidavit creditors accept.
• A fraud alert lasts one year at first; an extended fraud alert lasts seven years.
• You can check your three credit reports free every week at AnnualCreditReport.com.

What identity theft recovery actually involves

Identity theft means someone uses your personal information — your name, Social Security number, bank details, or other identifying data — to pretend to be you. Recovery means three things: stopping the thief from doing more damage, undoing the fraudulent accounts and charges, and repairing your records.

Do not try to fix everything in one phone call. Work through the steps below in order, and keep a simple log: who you called, when, what they said, and any reference number.

Step 1 and 2: Get your facts in order, then report it

Start by writing down everything you know: which accounts or documents were affected, when you first noticed the problem, and which charges or accounts are not yours. Gather statements, letters, and screenshots.

Next, report the theft at IdentityTheft.gov, the Federal Trade Commission's recovery site. It asks what happened and then builds a personal recovery plan with the exact letters and forms for your situation, plus an affidavit you can show creditors.

If you know who stole your identity, or if a creditor asks for one, file a report with your local police and keep a copy.

Step 3: Freeze your credit at all three bureaus

A credit freeze is a free tool that blocks lenders from opening new credit in your name until you lift the freeze. It does not affect your credit score, and it does not stop your existing cards from working. Place a freeze separately with each of the three credit bureaus: Equifax, Experian, and TransUnion.

A fraud alert is different: it tells lenders to take extra steps to verify your identity before opening credit. An initial fraud alert lasts one year, and an extended fraud alert lasts seven years. A freeze is stronger than an alert, so freeze first.

While you are at it, ask each bureau for your free credit report and mark every account you do not recognize. You will dispute those in a later step.

Step 4 and 5: Fix your bank accounts, cards, and tax records

Call the fraud department of every bank or card issuer with a fraudulent charge or account. Ask them to close or replace the affected cards, reverse the fraudulent charges, and put a note on your file. Follow up every phone call with a written dispute and keep a copy.

Then check the places thieves go next. If someone filed a tax return in your name or used your Social Security number for work, report it to the Internal Revenue Service with Form 14039, the Identity Theft Affidavit, and ask about an Identity Protection PIN for your future tax filings. If government benefits, a passport, a driver's license, or a Social Security account is involved, contact that agency directly.

Read related guidance on our site: Credit Repair 2026: How to Fix Your Credit Score Fast, How to Build Credit Fast 2026: 10 Proven Ways, and Best Banks 2026: Top Picks for Checking, Savings & More.

Step 6: Repair your credit reports

With your FTC report in hand, dispute every fraudulent account, charge, and inquiry with each credit bureau that shows it. Disputes are free. Write clearly, list each item separately, and attach a copy of your FTC report and any proof you have.

Check your reports again after the disputes are processed, using your free weekly reports at AnnualCreditReport.com. If a corrected item reappears, dispute it again and keep copies of both rounds.

Step 7: Lock everything down so it does not happen again

Once the urgent damage is contained, harden your accounts. Change the passwords on your email, banking, and shopping accounts, choosing a different strong password for each, and turn on two-factor authentication wherever it is offered. Your email is the master key to password resets, so protect it first.

Turn on transaction alerts on every bank account and card, so you hear about new charges within minutes. Shred financial mail before throwing it away, collect your mail promptly, and be careful with links and attachments in unexpected messages. Finally, keep your freeze in place: lifting it takes only a few minutes when you genuinely need new credit.

For a visual walkthrough of these steps, see the Problem Solved channel.

Frequently asked questions

How long does identity theft recovery take?

It depends on the damage. A single fraudulent card charge can be resolved in days or weeks, while cases involving tax returns, government benefits, or several accounts can take months. Keeping copies of every letter, call, and reference number speeds everything up.

Should I freeze my credit or place a fraud alert?

A credit freeze is stronger: it blocks new credit in your name until you lift it. A fraud alert asks lenders to verify your identity before opening credit. Freezing is free under federal law, so freeze first and use an alert only if you cannot freeze right away.

Does reporting to the FTC cost anything?

No. Reporting at IdentityTheft.gov is free, and the site builds your personal recovery plan and the affidavit many creditors ask for. Be cautious of any website that charges a fee to report identity theft for you.

Do I need a police report?

Not always. The FTC report and your records are usually enough for banks and creditors. Some creditors, insurers, or agencies may still ask for a police report, so file one if any organization requests it or if you know who stole your identity.

This article is general information, not legal or financial advice. For complex cases, consider speaking with a qualified attorney or financial professional about your situation.