Has Your Identity Been Stolen? What to Do in the First 24 Hours

Identity theft recovery begins in the first 24 hours by securing bank accounts, freezing credit, and enabling two-factor authentication.

Expert offers ways to protect financial resources from cyber threats

Discovering that your identity has been stolen can leave you feeling angry, scared, and unsure of where to start. Maybe someone drained your bank account, opened a credit card in your name, or filed a fraudulent tax return using your Social Security number. Whatever happened, your next steps can help limit the damage.

The first 24 hours are critical because identity thieves may use your information until you secure your accounts. Fortunately, there are several steps you can take right away to protect yourself and start healing.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smart and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson shares five practical ways to protect your trip and your wallet this holiday travel season. You'll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings, and use technology to make your travels easier and less stressful. No technical experience is required.

Join us on Saturday, October 31st at 11am ET / 8am ET. Register now for free.

Identity recovery: What to do after identity theft?

Identity theft can quickly spread beyond the account where you first discovered the problem. For example, someone who gains access to your email may use it to reset passwords for your bank, shopping, or other accounts. That's why quick action can make a difference

However, you don't have to solve everything in one day. Identity theft recovery can take weeks or even months depending on the circumstances. Your immediate goal is to prevent additional fraud, protect your information, and create a record of what happened.

What to do in the first 24 hours after identity theft?

The checklist below breaks the process down into manageable steps. Time frames are guidelines, so prioritize active fraud and compromised accounts rather than waiting for a specific hour.

Start with the accounts that are most likely to expose your money or personal information.

Contact your bank or credit card company. If someone accesses your account or makes unauthorized transactions, contact your card number or the official website of the institution. Report fraud and ask if the account should be locked, blocked or replaced. Also ask about discussing unauthorized transactions.

Change compromised passwords if they may have been leaked, starting with the affected account and your original email address. Use strong, unique passwords and a trusted device.

Turn on two-factor authentication (2FA). Protect your email, financial accounts and other important services. Use an authentication program or passkey if supported.

Check for unauthorized account changes. Review recovery email addresses, phone numbers, marketing rules, and active sessions. Log out of unfamiliar devices.

Important: If money is stolen, report it to your financial institution immediately. Federal protections and reporting deadlines vary by account and transaction type.

Next, make it harder for criminals to open additional accounts using your personal information.

Place a fraud alert on your credit file. Contact Equifax, Experian or TransUnion. The office you call must notify the other two. The initial fraud alert is free and generally lasts for one year.

Block your credit with all three bureaus. A credit freeze is free and limits access to your credit reports, making it harder for someone to open new credit accounts in your name. You must contact each office separately.

Check Your Credit Reports To check your reports from all three bureaus, visit Look out for unfamiliar accounts, questions and incorrect personal information.

Even if you expect to apply for a loan or credit card soon, you can freeze your credit. Simply lift the ice temporarily as needed.

Creating an official record can help you counter fake accounts and restore your identity.

Report identity theft to the Federal Trade Commission. Visit IdentityTheft.gov to file an identity theft report and receive a personal recovery plan.

Contact the local police if necessary. If your identity has been stolen, you know who committed the theft, or the creditor requests additional documents, a police report may be helpful.

Save your report information Keep copies of the FTC report, police report if applicable, and confirmation numbers.

An FTC identity theft report can help you exercise certain rights under federal law, including asking the credit bureaus to block fraudulent information. However, you usually don't need to file an FTC report before notifying your bank about unauthorized transactions.

A scammer has your name, phone number, and address. What can they actually do?

8am to 4pm: Secure your other accounts

Identity thieves sometimes try to use stolen information on multiple services.

Browse other important accounts. Check your email, bank, retirement, shopping and payment accounts for suspicious activity. Replace reusable passwords.

Contact your mobile phone carrier. If you suspect SIM card swapping or unauthorized phone number porting, report it immediately. Ask about account PINs, number locks, and additional verification.

Notify your employer if necessary. A compromised employee's work email, payroll account, or benefits account may reveal more information.

Check your devices If malware or phishing may have caused the theft, update your software, run a strong antivirus software scan where supported, and remove suspicious programs or browser add-ons.

Protect your tax identity if necessary. Contact the IRS if someone has used your Social Security number to file a fraudulent tax return. You may need to complete Form 14039, Identity Theft Affidavit. You can also request an Identity Protection PIN (IP PIN) from IRS.gov to prevent fraudulent federal tax returns using your information.

Once you've addressed the most immediate threats, organize your recovery efforts.

Create a fraud recovery record. Note the date, time, account number or case reference, names of representatives and steps you took. Store sensitive details securely.

Prepare an additional checklist. Identify accounts, disputes, and organizations you still need to contact.

Schedule additional credit checks. Continue to check your credit reports and financial statements as suspicious activity may show up later.

Save copies of important documents. Keep correspondence, dispute letters, and identity theft reports in a safe place.