Here's a call I never want to get, but I've gotten way too many times: "Jess, I just pulled my credit report and there are accounts I never opened. My score dropped 150 points overnight."

Identity theft and credit damage — it's one of the most devastating financial experiences you can face. Fraudulent accounts, unauthorized inquiries, unfamiliar addresses popping up on your report. Your score gets obliterated, and suddenly you can't get a car loan or qualify for that apartment.

But here's what I tell every identity theft victim I work with: you have powerful legal protections specifically designed for this situation. The law is actually on your side here, and when you know the right steps to take, you can get your credit restored faster than you think.

If you're not sure how credit reports work in general, start with our guide to reading your credit report before diving into this recovery process.

How to Identify Identity Theft on Your Credit Report

When I'm auditing reports for identity theft, here's exactly what I'm looking for:

  • Accounts you don't recognize: Credit cards, personal loans, auto loans, utility accounts you never opened.
  • Addresses you've never lived at: This is huge. Identity thieves change your mailing address so bills and statements get sent to them instead of you.
  • Inquiries you didn't authorize: Hard inquiries from lenders you never contacted — someone applied for credit using your info.
  • Wrong personal information: Misspelled names, weird aliases, wrong date of birth, Social Security number variations.
  • Collection accounts for debts you don't owe: These often show up months later. Check out our collections dispute guide if you're dealing with this.
Here's the thing I tell all my clients — if you spot even one unfamiliar item, treat it as potential identity theft. One fraudulent account usually means the thief has your Social Security number and might be opening more accounts as we speak.

Step 1: File an FTC Identity Theft Report

Your first move should be getting to IdentityTheft.gov and filing an official report with the Federal Trade Commission. This isn't just paperwork — this creates an official FTC Identity Theft Report that unlocks special legal protections under the Fair Credit Reporting Act (FCRA).

With this report, the credit bureaus have to block fraudulent information from your report within four business days instead of the usual 30-day investigation period. That's a game-changer.

When you're filling out that report, be detailed. List every fraudulent account, every unauthorized inquiry, every address you've never lived at. The more thorough you are, the stronger your case.

Step 2: File a Police Report

Not always required, but I always recommend it. A police report adds serious weight to your identity theft claim. Some creditors and credit bureaus won't take you seriously without one.

Together, your FTC report and police report form what the FCRA calls an "identity theft report" — and that's what gives you the strongest possible protections.

Step 3: Credit Freeze vs. Fraud Alert

Credit Freeze (Security Freeze)

A credit freeze completely locks down your credit file. No new creditors can access your report to approve new accounts. It's free under federal law and stays in place until you remove it.

You've got to contact each bureau individually — and don't forget about Innovis and NCTUE (the ones phone companies and utility providers use):

  • Equifax: equifax.com/personal/credit-report-services/credit-freeze or 1-800-349-9960
  • Experian: experian.com/freeze or 1-888-397-3742
  • TransUnion: transunion.com/credit-freeze or 1-888-909-8872
  • Innovis: innovis.com/personal/securityFreeze or 1-800-540-2505
  • NCTUE: 1-866-349-5355

Fraud Alert

A fraud alert tells creditors to take extra steps to verify your identity before opening new accounts. Two types: Initial Fraud Alert (lasts one year — contact one bureau and they notify the other two) and Extended Fraud Alert (lasts seven years — requires an identity theft report).

My recommendation? Use both. Freeze your credit for maximum protection, and add an extended fraud alert as backup.

Step 4: Dispute Fraudulent Accounts Under FCRA Section 605B

This is where the magic happens. Under Section 605B, when you submit an identity theft report along with a request to block fraudulent information, the bureau must block that info from your report within four business days.

That's way faster than the standard 30-day investigation period. Here's what you need to include:

  • Copy of your FTC Identity Theft Report (or qualifying police report)
  • Proof of your identity
  • Clear identification of the specific fraudulent information

Send everything via certified mail with return receipt. Don't just dispute with the bureaus — contact each fraudulent creditor directly too. Once they receive an identity theft report and are notified the account is fraudulent, they have to stop reporting it and stop trying to collect.

Step 5: Monitor Your Credit After Identity Theft

Recovery doesn't end once the fraudulent accounts are removed. You need ongoing protection:

  • Free annual credit reports: Identity theft victims can request additional free reports beyond the standard annual entitlement.
  • Credit monitoring services: Real-time alerts when new accounts are opened or personal info changes.
  • IRS Identity Protection PIN: If they used your SSN for tax fraud, get an IP PIN from the IRS to prevent future tax fraud.
  • Bank and credit card alerts: Set up transaction alerts on all existing accounts.

Step-by-Step Identity Theft Recovery Timeline

Here's exactly how I walk my clients through the recovery process:

  1. Day 1 — Discover and document: Pull all three credit reports. Identify every fraudulent account, unauthorized inquiry, and incorrect address.
  2. Day 1–2 — File official reports: Complete your FTC Identity Theft Report at IdentityTheft.gov. File a police report.
  3. Day 1–2 — Freeze and alert: Place credit freezes at all five bureaus. Place an extended fraud alert.
  4. Day 2–5 — Contact creditors: Call every company where a fraudulent account was opened. Request account closure and written confirmation.
  5. Day 3–7 — Dispute with bureaus: Send Section 605B identity theft dispute packages to all three major bureaus via certified mail.
  6. Day 7–14 — Bureau response: Under Section 605B, bureaus must block fraudulent information within four business days of receiving your complete submission.
  7. Day 14–30 — Verify and clean up: Pull updated credit reports to confirm all fraudulent items have been removed.
  8. Day 30–90 — Ongoing monitoring: Continue monitoring your credit weekly for at least 90 days.
  9. Ongoing — Long-term protection: Maintain credit freezes. Keep your extended fraud alert active. Review reports quarterly.
The key to successful recovery? Speed and documentation. The faster you act and the more thorough your records, the easier it'll be to remove every fraudulent item and restore your credit.

Preventing Future Identity Theft

Once you've been a victim, you never want to go through this again. Here's how I tell my clients to stay protected:

  • Keep your credit frozen at all five bureaus. Only lift it temporarily when you need to apply for credit.
  • Use strong, unique passwords for every financial account. Get a password manager — seriously.
  • Enable two-factor authentication on banking apps, credit card accounts, and email.
  • Shred sensitive documents before you toss them — bank statements, credit card offers, tax forms, medical bills.
  • Be stingy with your SSN. Never carry your Social Security card in your wallet.
  • Opt out of pre-screened credit offers by calling 1-888-5-OPT-OUT or visiting OptOutPrescreen.com.
  • Check your credit reports regularly — at least once per year, more if you've been a victim before.

Look, identity theft is scary and overwhelming. I've seen people's lives turned upside down by it. But I've also seen hundreds of people bounce back completely when they know the right steps to take.

The federal law gives identity theft victims serious advantages — you just have to know how to use them. Here at CreditForge, we've helped countless people recover from identity theft using these exact strategies. When you follow the process correctly, you can often get your credit fully restored within 30 to 60 days.

Bottom line? Don't panic. Document everything. Act fast. And remember — the law is on your side.