Identity theft rarely announces itself. It shows up as a small administrative oddity that is easy to explain away, and the gap between the first sign and the discovery is where the damage accumulates.
Signs in your mail
- Bills or statements stop arriving. Someone may have filed a change of address so your mail goes elsewhere.
- Bills arrive for accounts you did not open, or from a store you have never used.
- Debt collectors contact you about a debt you do not recognize.
- Insurance or benefits letters reference claims, treatments or providers that are not yours.
Signs in your accounts
- Charges you cannot place, especially small ones, which are often a test before something larger.
- A card declined for a reason that does not match your balance.
- Login alerts, password reset emails or two-factor prompts you did not trigger.
- Your phone abruptly losing service, which can indicate a SIM swap moving your number to another device.
- Being locked out of an account whose recovery email or phone number has changed.
Signs in your credit file
- Hard inquiries from lenders you never applied to.
- Accounts on your report you did not open.
- An address, employer or name variation you do not recognize.
- A score drop with no explanation in your own behavior.
Signs from government agencies
- An IRS notice saying more than one return was filed under your Social Security number, or reporting wages from an employer you never worked for.
- A denial of unemployment benefits because a claim already exists in your name.
- A notice about a Medicare or Medicaid claim you did not make.
- Contact from law enforcement about an offense you know nothing about, which can indicate criminal identity theft.
How to confirm
Do not act on suspicion alone. Confirm with the records:
- Pull all three credit reports free at AnnualCreditReport.com, the only federally authorized source. Read every account, inquiry, address and employer, not just the summary.
- Review 90 days of bank and card statements, line by line rather than by total.
- Check your Social Security earnings record at SSA.gov for employers you do not recognize.
- Check your IRS account for filings and notices.
- Check whether your credentials have been exposed in known breaches, then look at whether the affected accounts show unfamiliar activity. Exposure alone is common; unexplained activity is the meaningful signal.
- Review health insurance explanation-of-benefits statements for services you never received.
A single unexplained item is not proof. A pattern — an inquiry you do not recognize plus a new address plus a missing statement — usually is.
If you find fraud
- Report it at IdentityTheft.gov. You get an official Identity Theft Report and a step-by-step recovery plan tailored to what happened.
- Call the fraud department of each affected company. Ask them to close or freeze the account and confirm in writing.
- Freeze your credit at all three bureaus so no further accounts can be opened.
- Dispute fraudulent items with the bureaus and the company that reported them. The bureau generally has 30 days to investigate a dispute.
- Request an IRS Identity Protection PIN if a tax return is involved.
- File a police report if a specific crime or a known suspect is involved, or if a creditor requires one.
- Keep a written log of every call: date, company, representative, what was agreed. This is the record that shortens the next six conversations.
The next steps after that are covered in what to do after a data breach and in our full guide to protecting yourself from identity theft.
Checking on people who cannot check for themselves
Two groups rarely notice a problem, because nobody is looking at their file.
Children. A child's Social Security number is attractive precisely because it has no history and no one will apply for credit with it for fifteen years. If a child receives preapproved credit offers, collection calls or an IRS notice, request a check for a credit file in their name at each bureau.
Older relatives, especially anyone whose mail or finances are handled by several people. Ask whether statements still arrive, and whether the number of new accounts matches what they remember opening.
