Identity theft rarely announces itself clearly. It shows up as a denied loan application you didn't make, a collections call for a card you never opened, or a notice about a tax return already filed in your name. The path forward is the same regardless of which door it came through — and moving through it in order matters more than moving through it fast.
Step one: document everything
Before contacting anyone, write down what you know: which accounts or activity are affected, when you first noticed, and any relevant dates or reference numbers. You'll repeat this story to multiple institutions, and a consistent record makes each conversation faster and any later dispute stronger.
The order that actually matters
What to expect afterward
Disputing fraudulent accounts and correcting your credit record can take weeks to months, particularly if multiple institutions are involved. Keep your documentation and correspondence in one place, follow up if you don't hear back within the timeframe you were given, and check your credit reports periodically during the process rather than assuming it resolved automatically.
Reducing the chance of a repeat
- Keep the credit freeze in place long-term, lifting it temporarily only when you specifically need new credit.
- Review account statements regularly rather than only when something looks obviously wrong.
- If a data breach exposed the same information again, treat it as a fresh trigger to repeat the relevant steps above, not something already handled.
The takeaway
Identity theft recovery is a process, not a single phone call, but it's a well-worn one with a clear order: freeze first, report to the specific institution, file the official report, then clean up credentials. Moving through it methodically — and being skeptical of anyone who contacts you offering to "fix it" — gets you through it faster than panic would.
