Identity Theft: The Recovery Sequence

*When someone steals your identity, the hard part usually isn’t realizing it’s bad — it’s knowing what to do, in what order, and fast, while you’re rattled. This module is the recovery playbook for after it’s happened. The course already covers how to prevent it and protect your accounts in Week 6 (Account Safety and Fraud), how to read and dispute your credit reports in Week 11, and the freeze-versus-fraud-alert tools in Week 26 — so this doesn’t re-teach those. It ties them into one clear sequence, anchored on the free, official IdentityTheft.gov. It’s for anyone who’s been hit — a stolen card that snowballed, accounts opened in your name, a fraudulent tax return — or who’s helping someone who has. First, the part that matters most: identity theft happens to millions of people every year, and it is not a verdict on you or a sign you were careless. There’s a free, government-run path through it, and the damage is recoverable. This is general education, not legal advice.*

Start here: IdentityTheft.gov organizes the whole thing

The single most useful move is to use the FTC’s free hub, IdentityTheft.gov (or 1-877-438-4338). You answer questions about what happened, and it generates three things that drive everything else: a personalized recovery plan (step-by-step, for your specific situation), an official FTC Identity Theft Report, and pre-filled sample letters to send to companies and credit bureaus. That Identity Theft Report is the key document — it’s an official report that, on its own, is usually enough to make credit bureaus and most companies fix fraudulent accounts and entries. Everything below is the shape of the plan it will walk you through.

The recovery sequence, in order

First moves: contain, alert, and report (steps 1–4)

• 1. Call the companies where the fraud happened. Contact the fraud department of each bank, card issuer, or business where an account was misused or opened. Ask them to close or freeze those accounts and remove fraudulent charges, and change your passwords, PINs, and security questions. (You may need to contact some of them again once you have your Identity Theft Report.)
• 2. Place a fraud alert and pull your credit reports. A fraud alert is free: contact just one of the three credit bureaus and it must tell the other two. It lasts one year, makes lenders verify your identity before opening new credit, and entitles you to free reports. Get your reports (free weekly at annualcreditreport.com) and mark every account or charge you don’t recognize. (Week 26 explains how a fraud alert differs from a stronger credit freeze.)
• 3. Report to the FTC at IdentityTheft.gov to generate your Identity Theft Report and recovery plan (above). This is the step that unlocks your rights and your documentation.
• 4. File a police report if you need one. Your FTC Identity Theft Report is usually sufficient on its own, but file a local police report if you know the thief, if a company specifically requires it, or if it otherwise helps your case. Bring your FTC Identity Theft Report, a photo ID, proof of address, and any evidence — and get a copy of the report.

Then: clean up and lock down (steps 5–6)

• 5. Close the fraudulent accounts and clean up your credit report. Armed with your Identity Theft Report, ask each business to close fraudulent new accounts and send a letter confirming you’re not liable; have fraudulent charges removed from real accounts; and have the credit bureaus block or remove the fraudulent information from your report (the Identity Theft Report gives you that right). Week 11 covers the mechanics of disputing credit-report entries. Keep notes of who you contacted and when, and save every confirmation letter.
• 6. Lock things down going forward. Consider an extended fraud alert (lasts seven years, and requires an Identity Theft Report) or a credit freeze, which blocks new credit entirely until you lift it (free at all three bureaus; see Week 26). Keep checking your reports.

A few special cases worth knowing

• Tax-related identity theft (someone files a return using your Social Security number): respond to any IRS notice, and if a fraudulent return was filed, file IRS Form 14039 (Identity Theft Affidavit); an IRS Identity Protection PIN (IP PIN) protects your future filings. Route to irs.gov (Identity Theft Central). IdentityTheft.gov can submit to both the FTC and the IRS.
• A misused or lost Social Security number: report it, and replace a lost or stolen card for free through the Social Security Administration (ssa.gov) — but note that you almost never need a new number, and getting one can cause its own problems.
• Lost or stolen government IDs: replace a driver’s license through your state DMV and a passport through the U.S. State Department.
• Medical or child identity theft have their own steps; IdentityTheft.gov has tailored checklists for each.

What this actually costs you

The most reassuring fact in all of this: your legal liability for the fraud is usually very limited. Under most state laws you’re not responsible for debts on fraudulent new accounts opened in your name, and under federal law your liability for unauthorized credit-card charges is capped at $50 — and is often $0 with issuer zero-liability policies (Week 6 covers the debit-card and credit-card protections in detail). So the real cost of identity theft is mostly time and stress, not money — and moving quickly through the sequence above is exactly what keeps both as small as possible.

The money relationship in all this

Having your identity stolen feels violating, and the scramble to fix it is genuinely stressful — so it’s worth holding onto two calming truths. First, it is extraordinarily common and not your fault; treating it as a personal failure just adds shame to an already hard week. Second, there is a free, official, well-worn path through it, and you don’t have to figure it out alone or pay anyone. Be wary of for-profit “identity recovery” services that charge for what IdentityTheft.gov does for free — the government tool, your own records, and a few phone calls are what actually resolve it. Go in order, keep good notes, and let the process do its work.

The honest limit

This module is the sequence and the map; it can’t tell you exactly which steps your specific case needs — that’s what your personalized plan at IdentityTheft.gov is for, and it’s the authoritative, always-current source. Prevention and your account protections are in Week 6, disputing your credit report is in Week 11, and freezes and alerts are in Week 26; the appendix of free help and official sources lists the rest. For tax identity theft, the IRS is the authority; for a misused SSN, the Social Security Administration. If the situation involves theft by someone you know, threats, or money you can’t recover on your own, a consumer-law attorney or your state attorney general’s office can help.

Key takeaways

• Start at IdentityTheft.gov. The FTC’s free site builds your recovery plan, your official Identity Theft Report, and ready-to-send letters — the report alone is usually enough to make companies and credit bureaus fix things.
• Work the sequence in order: call the companies where fraud occurred → place a fraud alert and pull your reports → report at IdentityTheft.gov → police report if needed → close fraudulent accounts and clean up your credit report → set an extended alert or freeze.
• A fraud alert is one free call (one bureau tells the other two; lasts a year); a credit freeze is stronger and blocks new credit until you lift it (Week 26).
• Your liability is limited — generally $0–$50 on fraudulent charges and nothing on fraudulent new accounts — so the cost is mostly time, and speed keeps it small.
• Don’t pay for what’s free. Skip for-profit “recovery” services; IdentityTheft.gov, your records, and a few calls are what resolve it. Keep notes of every contact.

Educational disclaimer: This page provides general financial education for a general audience in the United States. It is not legal advice, and it doesn’t tell you exactly what your specific case requires. Identity-theft recovery steps, the tools available, and the relevant rules can change over time, so use your personalized plan and the current instructions at IdentityTheft.gov, and confirm tax-related steps at irs.gov and Social Security matters at ssa.gov. For disputing credit-report entries see Week 11; for freezes and fraud alerts see Week 26. If the theft involves someone you know, threats, or losses you can’t recover on your own, consider a consumer-law attorney or your state attorney general’s office. Information here was drawn from official sources as of June 2026; confirm current steps at the source before relying on them.