What Is Identity Theft?

Identity theft occurs when someone uses your personal information — such as your name, Social Security number, date of birth, or financial account details — without your permission, typically for financial gain. It is one of the most common and damaging forms of cybercrime, with consequences that can persist for years if not addressed promptly.

How Criminals Obtain Your Identity

Identity thieves use a wide range of methods to acquire personal data:

  • Data breaches: Large-scale hacks of companies, healthcare providers, or government agencies that expose customer records
  • Phishing attacks: Tricking you into entering credentials or personal details on fake websites
  • Mail theft: Stealing physical documents like bank statements, tax forms, or pre-approved credit card offers
  • Social engineering: Manipulating you or employees at financial institutions into revealing account information
  • Skimming devices: Devices attached to ATMs or card readers that capture your payment card data
  • Dark web purchases: Buying stolen credentials or personal data from other criminals

Types of Identity Theft

Financial Identity Theft

The most common form. Criminals use your information to open new credit accounts, take out loans, drain bank accounts, or make fraudulent purchases. Victims often only discover this when they apply for credit and find unexpected debts on their report.

Tax Identity Theft

A criminal files a fraudulent tax return in your name to collect your refund. You typically discover this when you go to file your own return and the IRS rejects it as a duplicate.

Medical Identity Theft

Your health insurance or personal information is used to obtain medical care, prescription drugs, or file false insurance claims. This can corrupt your medical records with dangerous inaccuracies.

Social Security Identity Theft

Your Social Security number is used to gain employment, apply for government benefits, or establish fraudulent credit — sometimes for years before detection.

Child Identity Theft

A child's SSN (which is rarely monitored) is used to build fraudulent credit histories. Often discovered when the child applies for student loans or their first credit card years later.

Synthetic Identity Theft

Criminals combine real information (such as a legitimate SSN) with fabricated details to create a new, blended identity. This is particularly difficult to detect and is increasingly common.

Warning Signs That Your Identity May Be Stolen

  • Unfamiliar accounts or charges on your credit report
  • Bills or collection notices for accounts you didn't open
  • Your tax return is rejected as already filed
  • Medical bills for services you didn't receive
  • Notification from a company that your data was part of a breach
  • Unexpected denials of credit, loan applications, or government benefits

Immediate Steps If You're a Victim

  1. File a report at IdentityTheft.gov — the FTC's dedicated identity theft recovery portal. It generates a personalized recovery plan and creates an official Identity Theft Report you can use with creditors.
  2. Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion.
  3. Dispute fraudulent accounts directly with the credit bureaus and the creditors involved.
  4. Report to the IRS if tax fraud is suspected — file IRS Form 14039 (Identity Theft Affidavit).
  5. File a police report with your local law enforcement — some creditors require this for dispute resolution.
  6. Contact affected institutions — banks, insurers, or government agencies — to report the fraud and begin account recovery.

Recovery Takes Time — But It Is Possible

Recovering from identity theft can be a lengthy process, often taking months of correspondence with agencies, creditors, and bureaus. Stay organized, keep copies of every communication, and use IdentityTheft.gov's tracking tools to monitor your progress. Most victims do successfully clear fraudulent records — the key is acting quickly and systematically.