Identify what appears to have been misused

Save the statement, notice, or message that first revealed the problem. List the affected account and the activity you do not recognize, including dates and amounts where relevant. Do not assume every unexplained item has the same cause. Contact the institution using a trusted number or independently verified channel, rather than replying to an unexpected message that asks for passwords or verification codes.

Protect access and address new-account risk

Secure affected accounts with strong, unique passwords and multi-factor authentication where available. A credit freeze restricts access to a credit report and helps prevent new-account fraud; it does not reverse existing fraudulent transactions. Place a freeze separately with each of the three nationwide credit bureaus. A fraud alert is a different tool. Ask which measures fit the incident while continuing to monitor existing accounts for unauthorized activity.

Use the official recovery process

The Federal Trade Commission provides an identity theft reporting process and a personalized recovery plan through its official identity theft service. The plan can help identify next steps and supporting letters. Keep the resulting report and reference details securely. Banks, credit bureaus, tax agencies, or other institutions may still require their own submissions. One report should not be assumed to complete every dispute or satisfy every institution’s procedure.

Track each disputed item to its own outcome

Use a table with the institution, disputed account, submission date, requested correction, reference number, and response. Keep copies of letters and the records sent with them. Check whether a response addresses the particular item you challenged. If information remains inaccurate, preserve the explanation and ask about the next review step. A file marked closed by one organization does not establish that every affected record has been corrected.

Get help when the consequences escalate

Seek prompt legal assistance if you receive a lawsuit, persistent collection demands, or other serious consequences connected with the misuse. Court papers need attention even when the underlying debt is fraudulent. Tax and medical identity theft also require specialized follow-up. Avoid giving sensitive records to someone who promises guaranteed recovery. Maintain a secure copy of the recovery file so you can explain the remaining issue without restarting the entire history.

Your preparation checklist

A useful file starts here.

  • The original notice or record of suspicious activity.
  • A list of affected accounts and protective steps taken.
  • The identity theft report and copies of institution-specific disputes.
  • A tracker of responses, unresolved items, and any court papers.

References: Federal Trade Commission, What to Know About Identity Theft; Stolen Identity? Get Help at IdentityTheft.gov. The relevant institution and type of misuse determine the required recovery steps.