This article is published by The Legal Warning India and written by Advocate Uday Singh.
Identity theft can happen when someone uses your personal information without permission to open accounts, make purchases, impersonate you or commit other fraud. If you discover suspicious activity, acting quickly can reduce further damage and create a clearer record of what happened.
What should you do first after identity theft?
- Contact the company where the fraud occurred. Ask its fraud department what steps are available to secure the account, stop further transactions or close an account opened without your authorization.
- Change affected passwords and security settings. Use a trusted device, create unique passwords and enable multi-factor authentication where available.
- Review your financial and account activity. Look for unfamiliar charges, accounts, applications, password resets and other changes.
- Preserve evidence. Keep statements, emails, account notices, screenshots, application records, transaction details and correspondence.
- Use the FTC identity-theft recovery process. IdentityTheft.gov provides a federal recovery plan and resources for victims.
How to report identity theft in the USA
IdentityTheft.gov is the federal government’s one-stop resource for identity-theft victims. It can create an FTC Identity Theft Report and a recovery plan based on the information you provide.
The FTC explains that victims can use the report and recovery plan when dealing with businesses and other organisations affected by the identity theft. Depending on the situation, you may also choose to make a police report.
Should you place a fraud alert on your credit report?
The FTC’s identity-theft recovery guidance explains that you can place a free one-year fraud alert by contacting one of the three nationwide credit bureaus. The bureau you contact must notify the other two.
A fraud alert can make it harder for someone to open new credit in your name because businesses are expected to take steps to verify identity before issuing new credit when an alert is in place. Eligibility for other credit-protection measures can depend on your circumstances.
For current instructions, use official resources from IdentityTheft.gov Recovery Steps and the credit bureaus rather than relying on third-party contact numbers.
How to check whether someone opened accounts in your name
Review your credit reports and look for accounts, applications, inquiries or other information you do not recognize. The FTC’s identity-theft guidance directs consumers to obtain their credit reports and review them for suspicious activity.
Use AnnualCreditReport.com, the official site for free credit reports from the nationwide credit reporting companies, and avoid search advertisements or unfamiliar sites that imitate official resources.
What documents and evidence should you keep?
Identity-theft cases often involve several organisations. Create a chronological file so you can explain the incident consistently.
- Government or account notices showing suspicious activity
- Bank and credit-card statements
- Credit-report entries you do not recognise
- Emails, text messages and login alerts
- Copies of identity-theft reports and police reports, if filed
- Correspondence with banks, creditors, businesses and credit bureaus
- Dates, names, reference numbers and details of every call or complaint
Keep original documents and store copies securely. Avoid posting Social Security numbers, account numbers, full identification documents or other sensitive information publicly while seeking help.
What if the identity thief opened a credit account?
Contact the business’s fraud department and explain that the account was opened through identity theft. Ask what documentation is required to investigate or close the fraudulent account. IdentityTheft.gov provides recovery guidance and sample resources for dealing with fraudulent accounts and credit-report problems.
Keep written records of your requests and responses. If a company asks for an FTC Identity Theft Report or other documents, use the official process and retain proof of submission.
What if your Social Security number was exposed?
If your Social Security number or other sensitive information was exposed, do not assume that nothing can be done. Review the official FTC identity-theft resources, monitor financial and credit activity, and follow the recovery steps appropriate to your circumstances.
If the information was exposed through a data breach, follow the affected organisation’s official instructions and be cautious about follow-up phishing messages. A data-breach notification does not automatically mean that every recipient who contacts you is legitimate.
What if someone is using your identity to commit a crime?
Identity theft can sometimes create problems beyond credit and money. IdentityTheft.gov explains that victims may need to contact the law-enforcement agency or court involved if an identity thief used their information during an arrest or criminal proceeding.
This is an area where jurisdiction and facts matter significantly. If you are facing an active criminal-record or court problem because of identity impersonation, seek advice from a lawyer licensed in the relevant U.S. jurisdiction.
Common identity-theft mistakes to avoid
- Waiting too long: delaying contact with financial institutions or affected companies can make the situation harder to document.
- Using unofficial contact information: verify phone numbers and websites independently.
- Paying a recovery scammer: fraud victims are often targeted again by people promising to recover lost money or restore identity for an upfront fee.
- Sharing sensitive documents publicly: never post full identity documents or account credentials in social-media groups.
- Failing to keep records: maintain a timeline of calls, reports, reference numbers and responses.
When should you seek professional help?
Consider professional legal advice when identity theft has created a serious dispute, substantial financial loss, debt-collection issue, employment or licensing problem, tax issue, criminal-record problem or another jurisdiction-specific legal question. U.S. legal practice is state-regulated, so a lawyer licensed in the relevant jurisdiction is the appropriate source for state-specific legal advice and representation.
For general cyber-safety information, evidence organisation and procedural-awareness questions, you may request general consultation. This service does not provide U.S. legal representation.
Official U.S. identity-theft resources
- IdentityTheft.gov — FTC identity-theft reporting and recovery resources
- IdentityTheft.gov Recovery Steps
- AnnualCreditReport.com
Frequently Asked Questions
Is identity theft a crime in the USA?
Identity theft can involve conduct prohibited by federal or state law, but the applicable law depends on what happened and where. This article does not provide a state-specific legal classification.
Does an FTC Identity Theft Report automatically remove every fraudulent account?
No automatic result should be assumed. The FTC provides a recovery process and explains steps for contacting businesses and credit bureaus. Follow the current official instructions for your situation.
Can Legal Warning India provide U.S. legal representation?
No. Uday Singh is an advocate in India and this website does not present him as a U.S.-licensed attorney. U.S.-specific legal advice and representation should be obtained from an appropriately licensed U.S. lawyer.
Image Disclaimer
Any featured image used with this article is illustrative and does not depict an actual victim, identity-theft report, government notice, police report or court document.
Disclaimer: This article is for general legal information and awareness purposes only. It does not constitute legal advice or solicitation. Communication is purely informational, in compliance with Bar Council of India Rule 36.




