Signs Your Identity Has Been Stolen: A Checklist and Action Plan for Every Warning Signal
Key Takeaways
Most people find out their identity was stolen the hard way: a credit card they never opened, a tax return rejected by the IRS, or a debt collector calling about a loan they never took. By the time those calls come, the damage is already spreading.
Identity theft reports in the US are on pace to hit 1.54 million in 2025, up 36% from 2024, according to FTC Consumer Sentinel data analyzed by OmniWatch. And yet 66% of Americans say it's their top fear while only 21% have any form of protection in place.
The gap between knowing it's a problem and knowing what to do when the signs appear is exactly where people get hurt. This checklist closes that gap. Each warning signal below comes paired with a specific action you can take right now.
Don't wait for the damage to find you. Start protecting your identity today.
The warning signals, and what to do about each one
1. Unfamiliar charges on your bank or credit card statements
You spot a charge you don't recognize. It might be small, fraudsters often test stolen card details with a $1 or $2 purchase before making bigger moves.
What to do: Call your bank or card issuer immediately and dispute the charge. Ask them to flag the account for fraud monitoring and issue a new card number. Don't wait to see if it "clears up."
2. A new credit card or loan you didn't apply for
You get a welcome letter from a bank you've never heard of. Or a billing statement for a store card you definitely didn't open.
What to do: Pull your credit report from AnnualCreditReport.com and scan for any accounts you don't recognize. Contact the issuing lender to report fraud, then place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion). That alert is shared automatically with the others.
3. Unexpected hard inquiries on your credit report
A hard inquiry shows up in your credit history from a lender you never contacted. This usually means someone applied for credit in your name.
What to do: Dispute the inquiry directly with the credit bureau that reported it. If there are multiple inquiries from different lenders, consider placing a credit freeze, it's free at all three bureaus and blocks anyone from opening new accounts in your name.
4. Bills stop arriving, or you get bills you don't recognize
Missing a bill you always receive is a quieter signal but a meaningful one. Thieves sometimes redirect mail to a new address so you don't notice new accounts being opened in your name. Getting unexpected medical or utility bills is the other side of the same coin.
What to do: Contact the companies involved directly and verify your address on file. If mail redirection is suspected, file a complaint with the USPS. Check your credit report for any addresses listed that aren't yours.
5. Medical claims denied because you've "already" used your benefits
This one can be genuinely alarming. A doctor's office tells you your insurance won't cover a procedure because your benefits for that period are exhausted, but you haven't been to the doctor.
What to do: Request an Explanation of Benefits (EOB) statement from your insurer and review it line by line. Report any fraudulent claims to your insurance company's fraud department, and ask for a copy of the medical records filed under your name, you're legally entitled to them.
6. The IRS rejects your tax return, someone already filed one
You sit down to file your taxes and the IRS rejects the return because one has already been submitted under your Social Security number.
What to do: File IRS Form 14039 (the Identity Theft Affidavit) immediately. The IRS Identity Theft Victim Assistance unit will investigate and assign you an Identity Protection PIN for future filings. Paper-file your actual return with Form 14039 attached.
7. Calls or letters from debt collectors about debts you don't owe
A collector contacts you about a debt you've never heard of. This often means someone took out a loan or opened a credit line using your identity, and then stopped paying it.
What to do: Request a debt validation letter in writing. If the debt isn't yours, send a written dispute to the collection agency and file a report with the FTC at ReportFraud.ftc.gov. Also report to your state attorney general's office.
8. You're denied credit despite having a good score
You apply for a mortgage, car loan, or credit card and get rejected. The lender's reason doesn't match your understanding of your own credit history.
What to do: Get your free credit report and look for accounts, balances, or derogatory marks you don't recognize. If fraud is the cause, you'll need to dispute each fraudulent item with the relevant bureau and file an identity theft report.
9. Unfamiliar accounts or logins in your email or social media
Password reset emails arrive for accounts you didn't create. Or you're locked out of an account you use regularly because someone changed the credentials.
What to do: Check for active sessions in your account settings and terminate any you don't recognize. Change your password immediately and turn on two-factor authentication. If you can't regain access, contact the platform's account recovery team.
10. A data breach notification lands in your inbox
A company emails to tell you your information was exposed in a breach. That data, name, email, password, Social Security number, is now potentially in the hands of someone who may use it.
What to do: Take it seriously, even if the email looks routine. Change any shared passwords immediately. If your Social Security number was exposed, consider placing a credit freeze and signing up for credit monitoring. Don't assume the breach won't affect you just because nothing has happened yet.
Don't wait for the next warning sign to take action. Start monitoring your identity and credit today before fraudsters get the upper hand. Get protected now.
Your immediate action plan if you've spotted a warning sign
Running through the checklist and finding a match is unsettling. Here's what to do in order:
- Report to the FTC. Go to IdentityTheft.gov and file a report. The site generates a personal recovery plan tailored to your specific situation.
- Place a fraud alert or credit freeze. Contact Equifax, Experian, or TransUnion, one alert notifies all three. A freeze is stronger and blocks new credit from being opened entirely.
- File a police report. Some creditors and agencies require a copy for the fraud resolution process. Your local police can issue one.
- Contact affected companies directly. Each bank, lender, or insurer has a fraud department. Ask them to close or freeze impacted accounts and send you written confirmation.
- Keep records of everything. Save every letter, email, and call log. Recovery can take months, and documentation is what moves the process forward.
Don't wait until it's too late. Start protecting your identity today and take control of your financial future before another warning sign appears.
How Guardio helps you catch warning signs earlier
Most of the signals above show up after the damage has already started. Guardio's real-time monitoring is built to catch the earlier indicators, like phishing pages built to steal your credentials, malicious browser extensions harvesting your data, or fraudulent sites impersonating your bank.
In independent phishing detection tests, Guardio achieved 100% detection, compared to 80% for Aura in the same evaluation. Over 1.5 million people use Guardio to stay ahead of the threats that tend to precede identity theft, not just respond to them after the fact.
Get a free security scan with Guardio today and stay protected before warning signs become real problems.
Conclusion
Identity theft rarely announces itself all at once. It shows up as a strange charge, a rejected tax return, a bill that never arrives, small signals that are easy to miss until they add up. Catching them early is what keeps a minor headache from turning into months of cleanup.
Run through this checklist whenever something feels off, take the specific action listed for whatever signal you're seeing, and put a fraud alert or credit freeze in place if you haven't already. The sooner you respond, the less damage there is to undo.
FAQs
How do I know if my identity has been stolen?
The most common signs include unfamiliar charges on your accounts, new credit cards or loans you didn't open, unexpected calls from debt collectors, and tax return rejections from the IRS. Pulling your free credit report is a good first check.
What should I do first if I think my identity was stolen?
File a report at IdentityTheft.gov, the FTC's official site generates a personalized recovery plan. Then place a fraud alert or credit freeze with the three major credit bureaus.
Can I freeze my credit for free?
Yes. All three major credit bureaus (Equifax, Experian, and TransUnion) are required by law to provide free credit freezes. You'll need to freeze each one separately.
What is a fraud alert and how long does it last?
A fraud alert tells lenders to take extra verification steps before opening credit in your name. An initial alert lasts one year. Extended alerts, available to confirmed victims, last seven years.
Will identity theft affect my credit score?
It can, especially if fraudulent accounts go unpaid or collections are filed. Disputing fraudulent accounts with the credit bureaus can have those entries removed once the fraud is confirmed.
How long does it take to recover from identity theft?
It varies. Simple cases involving a single fraudulent account can be resolved in weeks. More complex cases, multiple accounts, tax fraud, or medical identity theft, can take months to fully resolve.
Is medical identity theft common?
It's less common than credit card fraud but growing. In 2025, "other" identity theft categories (which include insurance and medical fraud) grew 41% quarter over quarter, according to FTC Consumer Sentinel data analyzed by OmniWatch. Learn how Guardio can help protect your identity today.
What is an IRS Identity Protection PIN?
It's a six-digit number the IRS assigns to verified theft victims that must be included on all future tax filings. It prevents someone else from filing a return under your Social Security number again.
