How to Protect Your Credit from Identity Theft

Identity theft is the fastest-growing crime in the United States. In 2023 alone, the FTC received 1.1 million reports of identity theft. The damage can be devastating: accounts opened in your name, credit score destroyed, years of dispute work to clean up. The best defense is a combination of proactive protection and early detection.

The Single Most Effective Protection: Credit Freeze

A credit freeze (also called a security freeze) prevents credit bureaus from releasing your credit report to anyone requesting it — which means no lender can approve new credit in your name without you temporarily lifting the freeze. Since 2018, freezing your credit is completely free at all three bureaus.

You'll receive a PIN or password for each bureau — store these securely. You can temporarily unfreeze online in minutes when you need to apply for credit. After you apply, refreeze immediately.

Early Detection: Signs of Identity Theft

• Accounts on your credit report that you don't recognize
• Hard inquiries from lenders you never contacted
• Collection calls for debts you don't owe
• Bills or collection notices for accounts you didn't open
• Credit or loan applications denied for reasons that don't match your situation
• Your tax return is rejected because one was already filed with your SSN
• Medical bills for care you didn't receive
• Notifications about a data breach from a company you have an account with

Ongoing Monitoring

Check your credit reports at least every 4 months — Equifax, Experian, and TransUnion each once per year, staggered. Look for new accounts or inquiries you don't recognize. Sign up for free monitoring through services like Credit Karma or your bank — they alert you when new accounts or inquiries appear.

If You're a Victim: The Recovery Roadmap

1. Place an initial fraud alert with one bureau — they're required to notify the others. An initial fraud alert lasts 1 year and requires lenders to verify your identity before opening new accounts.
2. Report the theft at IdentityTheft.gov (run by the FTC). This generates a personalized recovery plan and an official Identity Theft Report.
3. File a police report at your local department. Request a copy — you'll need it to dispute fraudulent accounts.
4. Request an extended fraud alert (lasts 7 years) or a credit freeze.
5. Dispute all fraudulent accounts with each bureau. Under FCRA § 605B, you can have fraudulent information blocked with just your Identity Theft Report — no investigation period required.
6. Contact each company where fraud occurred. Use the Identity Theft Report to have accounts closed and charges removed.
7. Change passwords on all financial accounts. Enable two-factor authentication everywhere.

Fraud Alert vs. Credit Freeze

Preventive Habits

• Use a unique, strong password for every financial account — use a password manager
• Enable two-factor authentication (2FA) on all financial and email accounts
• Never use public WiFi for banking or credit applications
• Shred financial documents, pre-approved credit offers, and anything with your SSN before discarding
• Don't carry your Social Security card in your wallet
• Be suspicious of unsolicited calls, texts, or emails requesting personal information — legitimate companies don't ask for your SSN by phone
• Monitor your bank and credit card transactions weekly, not just monthly