When someone uses your name, Social Security number, or bank details without permission, you get to use a recovery framework most people do not know exists. The Federal Trade Commission runs IdentityTheft.gov, a free federal portal that generates a personalized recovery plan, the official affidavit creditors are required to accept, and the dispute letters you need to send. Combined with a police report and credit freezes at the three nationwide credit bureaus, the framework gives you legal leverage that improvised cleanup does not.
What the federal framework actually changes
Identity theft used to mean spending months on hold convincing banks and credit bureaus that fraudulent accounts were not yours. The framework Congress built through the Fair Credit Reporting Act, the FTC Act, and the Fair and Accurate Credit Transactions Act flips the burden. Once you file the FTC Identity Theft Report and the police report, the law requires credit bureaus to block fraudulent items, requires creditors to stop collecting on accounts you did not open, and requires furnishers to investigate within 30 days.
The framework does not catch the thief. It cleans up the financial damage and stops new damage from accumulating. Catching the thief is a criminal matter for law enforcement.
Step one: file at IdentityTheft.gov
IdentityTheft.gov is the FTC's free portal at identitytheft.gov. You answer questions about what happened, what kind of accounts or benefits were affected, and what you know about the theft. The site generates a personalized recovery plan, an FTC Identity Theft Report, prefilled letters to creditors and credit bureaus, and an affidavit you can sign and send.
The FTC Identity Theft Report has the same legal weight as a police report for most purposes under federal law. Creditors and credit bureaus have to accept it. Many recovery steps require this report, including blocking fraudulent items on your credit reports and stopping collection on fraudulent debts.
No lawyer is needed to use IdentityTheft.gov. The interface walks anyone through it in 20 to 40 minutes.
When to file a police report
A police report is not always required, but it is often useful and sometimes mandatory. File one when your identity was stolen by someone you know, when fraudulent items appear on credit reports that the bureaus refuse to block with only the FTC report, when you know who the thief is, or when your state requires it for specific protections.
To file the report, bring a copy of your FTC Identity Theft Report, government issued photo identification, proof of address, and any evidence you have, including statements showing fraudulent charges and letters from creditors. The officer files a report and gives you a copy or a report number, which you then submit to creditors and credit bureaus as needed.
Departments vary in how seriously they take identity theft reports. Federal law requires the department to take the report, even if they cannot investigate.
The credit freeze step
A credit freeze, also called a security freeze, stops new creditors from accessing your credit report. Because almost every lender requires a credit pull before opening a new account, freezing the report effectively stops new accounts from opening in your name. The freeze is free at all three nationwide credit bureaus under federal law.
You have to freeze each bureau separately. Equifax, Experian, and TransUnion each have their own online portals and phone lines. The freeze takes effect within minutes online and within one business day by phone or mail. The freeze stays in place until you lift it, either permanently or temporarily, which is also free.
A freeze is different from a fraud alert. A fraud alert is a notice on your credit file asking creditors to verify identity before opening accounts, but it does not block access. An initial fraud alert lasts one year, and an extended fraud alert based on an FTC Identity Theft Report lasts seven years. You can use both a freeze and a fraud alert at the same time.
Handling tax related identity theft
If someone filed a tax return in your name to steal your refund, the IRS has a separate track. File IRS Form 14039, the Identity Theft Affidavit, and respond to any IRS letters you receive. The IRS issues an Identity Protection PIN, a six digit number you use on future tax returns to verify it is really you filing.
The IRS also flags your account for additional review on future returns. Resolution takes 120 to 180 days in normal cases and longer during peak filing season.
Handling Social Security related theft
If your Social Security number was misused for employment, benefits, or government records, contact the Social Security Administration. The SSA does not issue new numbers except in narrow cases of ongoing harm. The agency does review your earnings record to remove fraudulent entries and works with the Office of Inspector General on suspected fraud.
Check your Social Security statement annually through a my Social Security account at ssa.gov. Fraudulent earnings that appear in your record can affect future benefits if not corrected.
Disputing fraudulent items on credit reports
Under the Fair Credit Reporting Act, you can dispute any item on a credit report. With an FTC Identity Theft Report attached, the credit bureau has to block fraudulent items within four business days. The bureau then notifies the furnisher, the creditor that reported the item, which has to stop reporting and stop collection.
If the bureau or the furnisher refuses to comply, you have a private right of action under the FCRA for actual damages, statutory damages, and attorney fees. This is when consulting a consumer protection attorney makes sense.
Common misreads we see consumers make
Misread one: thinking a fraud alert is the same as a freeze. A fraud alert asks creditors to verify identity. A freeze blocks the credit pull entirely. For active identity theft, use both.
Misread two: assuming the bank or creditor will handle the cleanup. Banks and creditors only handle their own accounts. Cleaning up credit reports, IRS records, and Social Security records requires you to contact each agency directly. The FTC report and recovery plan walk through which letters to send where.
Misread three: skipping the FTC report because you already filed a police report. The FTC Identity Theft Report unlocks specific federal rights that a generic police report does not, including the four day block on credit reports and the extended seven year fraud alert. File both.
Practical next steps
Step one: file the IdentityTheft.gov report and freeze your credit the same day. The FTC report and the credit freezes together stop most ongoing damage within hours. Both are free and take less than an hour combined.
Step two: document and keep everything. Save copies of every letter you send and receive, every report number, every confirmation email. Identity theft cleanup often takes six to twelve months, and documentation is what holds creditors and bureaus to their legal obligations.
Step three: monitor your credit reports for a year. All three bureaus give free weekly reports at annualcreditreport.com, the federally authorized site. New fraudulent items can surface months after the initial theft.
How LawSensai supports identity theft recovery
LawSensai helps people respond to identity theft by walking through the federal recovery framework, generating dispute letters in plain language, and tracking which agencies and creditors have been contacted. For organizing the documentation a recovery requires, including reports, affidavits, dispute letters, and confirmations, the documents surface is where to start. We do not replace a consumer protection attorney, and when furnishers or bureaus refuse to comply with FCRA obligations, that is when a private FCRA case may be worth investigating with counsel.
This article is informational and not legal advice. Identity theft situations vary, and FCRA and state law rights depend on facts. Consult a licensed attorney for advice on your specific situation, especially if you have suffered actual financial loss or face ongoing fraudulent activity.
Authoritative sources
- FTC IdentityTheft.gov
- FTC Consumer Advice: Identity Theft
- Social Security Administration: Identity Theft
- IRS: Identity Theft Central
- Consumer Financial Protection Bureau: Place a Credit Freeze
Last verified: 2026-04-09.