Key Takeaways
- The average identity theft victim goes 6–12 months before discovering the crime — the earlier you catch it, the less damage is done
- Unexpected bills, unfamiliar accounts on your credit report, and IRS notices you didn’t initiate are the three most reliable early warning signs
- A credit freeze is the single fastest action to stop ongoing identity theft — it blocks new accounts from opening in your name immediately
- Many signs of identity theft look like ordinary errors at first — an unexpected medical bill, a declined transaction — which is why people miss them for so long
- You can check all three major credit reports for free right now at AnnualCreditReport.com — this should be your first action after reading this guide
In This Guide
Most people picture identity theft as something you discover immediately — a drained bank account, a blocked credit card, an obvious crisis. The reality is far more insidious. The average identity theft victim discovers the crime 6 to 12 months after it began. By then, criminals may have opened multiple accounts, filed fraudulent tax returns, received medical care in your name, and built a credit trail you will spend years cleaning up.
The warning signs are almost always there earlier. People miss them because they look like ordinary mistakes — a credit card offer for a card you don’t remember applying for, a small unfamiliar charge on a statement, a collection call for an account you don’t recognize. Each one, alone, is easy to dismiss. Together they are a pattern that should immediately raise alarm.
This guide gives you 15 specific warning signs, organized by category, so you can methodically check for each one right now.
Financial Warning Signs
Even small ones. Fraudsters often test stolen card information with tiny charges — $0.99, $1.00, $2.47 — before making larger withdrawals. A single unrecognized charge is worth investigating immediately. Do not assume it is a billing error until you have confirmed what it is.
A collection agency calling about a debt you know nothing about is one of the clearest signals that someone has opened an account in your name. Do not ignore these calls or assume they are mistakes. Request written verification and immediately check your credit report.
If your card is declined when you know there is available balance or credit, call your card issuer immediately. It may mean your account has been compromised, funds have been drained, or a fraud alert has been placed on your account by the bank after detecting suspicious activity.
If bank statements, credit card bills, or other financial correspondence suddenly stops arriving, someone may have filed a change of address in your name to redirect your mail. This is often an early step in financial identity theft, done to buy time before you notice fraudulent activity.
Credit and Account Warning Signs
This is the most definitive sign of identity theft. Check your credit report at AnnualCreditReport.com and look for every account listed. Any account you do not recognize — credit card, loan, retail account, utility — was opened by someone else using your information.
A sudden unexplained drop in your credit score — especially if you have not missed payments or applied for new credit — may indicate that fraudulent accounts are being opened or that existing accounts are being maxed out in your name.
Each time someone applies for credit in your name, the lender runs a hard inquiry on your credit report. Multiple hard inquiries from banks, auto dealers, or credit card companies you have never interacted with means someone is actively trying to open accounts using your identity.
Being turned down for a loan, credit card, or apartment rental when you believe your credit is in good standing is a serious signal. The lender sees something on your credit report that you have not looked at recently — check it immediately.
Government and Tax Warning Signs
This is tax identity theft — someone filed a return using your Social Security number and claimed your refund. File IRS Form 14039 (Identity Theft Affidavit) immediately, then file your legitimate return on paper. See our complete guide to what to do if someone filed your taxes.
Check your Social Security earnings record at SSA.gov/myaccount. If you see wages from employers you do not recognize, someone is using your SSN to work — which can affect your future Social Security benefits and create tax complications.
Fraudulent unemployment claims, Medicaid applications, or other government benefit applications filed using your SSN are a form of identity theft that surged during the pandemic and continues at elevated levels. You may find out via a letter from the relevant agency.
Digital and Online Warning Signs
Receiving unsolicited password reset requests, two-factor authentication codes, or account verification emails for accounts you didn’t initiate means someone is trying to access your accounts. Change the password for that account immediately and check whether any access was gained.
A sudden loss of phone service — where calls and texts stop working completely — may be a SIM swap attack. A criminal convinced your carrier to transfer your number to a SIM they control, giving them access to all SMS-based two-factor authentication codes. Contact your carrier immediately.
Medical Identity Theft Signs
Medical identity theft occurs when someone uses your health insurance to receive care. You may receive Explanation of Benefits statements from your insurer for procedures or visits that never happened, or bills from medical providers you have never seen.
If your insurer denies a legitimate claim saying you have exhausted your annual benefit limit — when you know you have not used it — someone else may have been receiving care under your policy. Contact your insurer’s fraud department immediately.
What to Do If You Confirm Identity Theft
Freeze your credit at all four bureaus right now
Equifax.com, Experian.com, TransUnion.com, Innovis.com. Free, permanent until you lift it. Blocks any new accounts from opening in your name immediately — this is the most important first action regardless of what type of identity theft you discovered.
File an identity theft report at IdentityTheft.gov
The FTC’s dedicated identity theft resource. Creates an official report and generates a personalized recovery plan based on your specific situation. This report is required by credit bureaus and creditors when disputing fraudulent accounts.
File a police report
Required by many creditors, banks, and credit bureaus when disputing fraudulent accounts. Bring your FTC Identity Theft Report, a government-issued ID, and any documentation of the fraud you have already found.
Dispute fraudulent accounts directly with each creditor
Contact the fraud department of each creditor where a fraudulent account was opened. Provide your police report and FTC Identity Theft Report. Request that the account be closed and removed from your credit report.
Dispute fraudulent items with all three credit bureaus
Send a written dispute to Equifax, Experian, and TransUnion for each fraudulent account. Include your FTC Identity Theft Report and police report. Bureaus are required to investigate within 30 days and remove confirmed fraudulent items.
Check Right Now — Free Resources
Do not wait to see if these signs develop further. Check these resources today:
- Your credit reports — free: AnnualCreditReport.com (all three bureaus)
- Your Social Security earnings record: SSA.gov/myaccount
- Whether your email was in a data breach: HaveIBeenPwned.com
- Freeze your credit — free at all four bureaus: Equifax.com, Experian.com, TransUnion.com, Innovis.com
- File an identity theft report: IdentityTheft.gov
For a complete recovery guide if you have already been victimized, see: What To Do If You Got Scammed — Steps to Take Right Now.
Stop Scams Before They Reach You
Get the free 30-step Identity Lock Checklist — lock down your credit, secure your accounts, and protect your family starting tonight.



Leave a Reply