Identity Theft Response

You suspect or confirm someone has your data. The exact steps to take in the first 72 hours.

First Hour

• Don't panic — quick action limits damage
• Identify what's been compromised: which accounts, what info
• From a clean device (not the one possibly infected), change passwords on critical accounts
• Email → Bank → Investment → Apple/Google → password manager → social

First Day — Freeze Credit

• Place a fraud alert: contact one bureau, they notify the other two
• Equifax: equifax.com/personal/credit-report-services
• Experian: experian.com/freeze
• TransUnion: transunion.com/credit-freeze
• A credit freeze is free and stops new accounts from being opened
• Save the PIN/password each bureau gives you — needed to thaw later

First Day — Report It

• Report to FTC at IdentityTheft.gov — generates official recovery plan and affidavit
• File a police report if money was taken or accounts opened in your name
• Keep copies of both reports — banks will ask

Notify Financial Institutions

• Call every bank and credit card on the back-of-card number
• Close any compromised account; new account number issued
• Dispute every fraudulent charge in writing within 60 days
• Request fraud monitoring for 12+ months on remaining accounts

Notify Other Agencies

• IRS — if SSN compromised, file Form 14039 (Identity Theft Affidavit)
• Social Security Administration — 1-800-269-0271
• Your state DMV if driver's license info exposed
• USPS if mail was rerouted; file with the Postal Inspector

Document Everything

• Spreadsheet: date, who you called, who you spoke to, ref number, next step
• Save every confirmation email and letter in one folder
• Photograph any suspicious mail or package

Strengthen Going Forward

• Keep credit frozen permanently — thaw temporarily only when applying for credit
• Set up account alerts on every card and bank account
• Sign up for free credit monitoring (often offered after a known breach)
• Reduce attack surface: complete the Password & Account Cleanup list
• Pull free credit reports every 4 months (rotate bureaus) for the next year