When Your Identity Gets Stolen — The First 72 Hours That Decide Everything

Report fraud, secure accounts, and keep records.

The emergency playbook nobody teaches you until it is too late

By MJ Kim · US Credit · Identity Theft · Personal Finance · US Living

There is a moment I want you to imagine — because it happens to thousands of Americans every single day, and it may one day happen to you.

You check your credit report. Or you open your mailbox. Or you get a phone call from a bank you have never heard of.

And you realize someone is using your name.

A credit card you never applied for. A loan you never took out. An account in your name at a bank you have never visited. Debt collectors calling about charges you never made.

In that moment — when the reality hits — most people do the wrong thing. They panic. They call the wrong number first. They wait to "see if it gets worse." They assume the bank will handle it. They try to explain themselves to a collector as if they can argue their way out.

None of that works.

Identity theft recovery is a procedural battle, not an emotional one. What you do in the first 72 hours shapes the next 12 months.

The first 72 hours are critical — but recovery is an ongoing process that continues far beyond that window. What matters most now is moving fast, and moving in the right order.

This is the playbook. Written in the order you should follow it.

This Is Not Emotional — It Is Procedural

Identity theft recovery is not about explaining yourself to anyone.

It is about three things:

Documentation — every call, every letter, every number
Timelines — federal laws give you specific windows and rights
Legal positioning — citing the right statute changes how your case is handled

The faster you move from emotion into process mode, the faster you recover. The people who recover fastest are not the ones who argue hardest. They are the ones who build the cleanest paper trail.

This is the part I want to say plainly: the system is not designed to help you recover. It is designed to process paperwork. The more organized your paperwork, the faster the process moves. That is not fair — but understanding it is the first step to winning.

The First 72 Hours — Quick Checklist

Before we go deep, here is the entire playbook in one block:

Freeze your credit at all three bureaus
File an FTC Identity Theft Report at IdentityTheft.gov
File a police report and keep copies
Contact every affected institution's fraud department
Dispute every fraudulent item with the bureaus, citing FCRA Section 605B
Place a fraud alert as a second layer of protection
Secure your digital accounts — change passwords, enable 2FA
Keep a written log of every call, letter, and case number

Screenshot this list. Print it if you have to. When panic hits, a checklist is your best friend.

Before Anything Else — Breathe, Then Move

The first instinct is panic. That is normal.

But panic makes people skip steps. Slow down for sixty seconds. Get a pen, a notebook, and start a log. Write down the date, the time, and what you discovered. From day one, keep a written or digital record of every call, letter, and case number — your future self will thank you.

Do not delay action. Every hour matters in the early stage of identity theft. The longer you wait, the more accounts can be opened in your name.

Step 1 — Freeze Your Credit (Immediately)

If you have not already frozen your credit, do it now — before doing anything else.

A fraudster who has your information will try to open more accounts while they still can. Every hour you wait is another window for them.

Go to all three bureaus and freeze:

Equifax — equifax.com
Experian — experian.com
TransUnion — transunion.com

Freezing is free. If your online accounts are locked or your email is compromised, you can also request a security freeze by phone — the bureaus are generally required to place it within one business day.

If you already had a freeze in place before the theft, you may find the damage is limited to existing accounts rather than new ones. That is exactly why I believe a freeze is basic financial hygiene — not paranoia.

This single step stops the bleeding. Everything else is cleanup.

Step 2 — File an FTC Identity Theft Report

This is the step most people skip — and later regret.

Go to IdentityTheft.gov, the federal government's official identity theft recovery site. Create a report. Describe what happened.

The site will generate an official Identity Theft Report — a document you can use with banks, credit bureaus, and collection agencies to exercise your legal rights. It also creates a personalized recovery plan and provides sample dispute letters you can reuse, which saves hours of writing from scratch.

Without this report, you are just a person on the phone claiming fraud. With it, you have federal documentation on your side.

Print it. Save it as a PDF. Save it to your email. Save it to the cloud.

Here is what fascinates and frustrates me: this free government tool is one of the most powerful weapons you have — and most Americans have no idea it exists. The institutions that should tell you about it often do not. You have to know.

Step 3 — File a Police Report

The FTC Identity Theft Report is usually enough to exercise your main legal rights. But many creditors and collectors will still ask for a police report, and having one up front prevents delays later.

Go to your local police station and file a formal report. Bring:

Your FTC Identity Theft Report (from Step 2)
Any evidence of the fraud (letters, statements, screenshots)
Your ID

Get a copy. Get the report number. If they try to brush you off, be polite but persistent. Explain that you need it for credit dispute purposes.

The police report, combined with the FTC report, becomes your documentation foundation for disputing every fraudulent charge, account, and inquiry that follows.

Step 4 — Contact Every Affected Institution

Now you begin the individual cleanup.

For every fraudulent account, call the institution directly. Use the fraud department number — not the general customer service line. The two work very differently.

When you call:

State clearly: "I am reporting identity theft. I need to speak with your fraud department."
Provide your FTC report number
Provide your police report number
Request written confirmation that the account is being treated as fraud
Request written confirmation that you are not responsible for the charges
Ask them to send the correction to all three credit bureaus

While you are on the phone, also:

Change usernames, passwords, and PINs for any account that might share similar login information
Enable two-factor authentication wherever available

Keep a log of every call: date, time, representative name, reference number, and what they promised.

The burden of proof falls on you. You did not create these accounts. You did not make these charges. And yet you are the one spending hours on the phone proving your innocence. This is the structural injustice of the American credit system in its purest form — and it is why I tell people that the best strategy is prevention, not recovery.

Step 5 — Dispute Every Fraudulent Item With the Bureaus

Each credit bureau has a dispute process. You will file a separate request for the fraudulent items on each bureau's report.

Include with every request:

Copy of your FTC Identity Theft Report
Copy of your police report (if you have one)
Proof of your identity
A letter listing exactly which items are fraudulent
A request for blocking under FCRA Section 605B

The Key Legal Phrase

Do not just write "this is not mine — please remove it." That reads like a standard dispute.

Instead, open your letter with a sentence like this:

"Pursuant to FCRA Section 605B, I am reporting identity theft and requesting a block of fraudulent information from my credit report."

This makes it clear that you are making an identity theft block request under federal law — not just disagreeing with an item.

What 605B Actually Does

Under Section 605B, once a bureau receives your identity theft report, proof of identity, and a list of the fraudulent items, it must generally block that information within four business days.

Compare this to normal FCRA disputes, which can take up to 30 days to investigate. Section 605B exists as an emergency brake specifically for identity theft victims.

It is not unlimited magic — a bureau can decline or reverse a block if it finds an error or a false claim. But for genuine victims with proper documentation, it is the fastest legal route available.

Step 6 — Place a Fraud Alert (Separate from a Freeze)

A fraud alert is different from a freeze.

A freeze blocks access to your report for new credit
A fraud alert allows access but asks lenders to verify your identity before issuing new credit

You can have both. Place a fraud alert by contacting any one of the three bureaus — by law, that bureau must pass the alert to the other two.

Initial fraud alert: lasts one year (available to anyone who suspects identity theft)
Extended fraud alert: lasts seven years (requires an identity theft report, such as your FTC report)

A fraud alert adds a second layer of friction for anyone trying to impersonate you — even if your freeze is temporarily lifted.

Step 7 — Secure Your Digital Life

Here is a step many identity theft guides skip — and it may be the most important.

If someone has enough of your information to open credit in your name, they may also be able to access your email, your bank accounts, or your cloud storage. And if they control your email, they can intercept every recovery notification you receive.

Do this today:

Change your email password (use something long and unique)
Enable two-factor authentication on your email — this is non-negotiable
Change passwords on every financial account
Enable 2FA on every financial account that supports it
Review recent login activity on your major accounts
Check if your email has appeared in known breaches (HaveIBeenPwned.com is free)

A credit freeze protects your financial identity. 2FA protects your digital identity. One without the other is a half-solution. Some of the worst identity theft cases start with a lost email account that nobody noticed.

Step 8 — Monitor, Then Monitor Again

Identity theft is rarely a single event. It is often a campaign.

Once your information is in the wrong hands, it can be used repeatedly over months or years. You may clean up ten fraudulent accounts this week — and discover three more next month.

Monthly monitoring routine:

Check your credit report at all three bureaus — you can get free weekly online reports through AnnualCreditReport.com, so there is no need to pay for a service
Review every account statement
Watch for mail from institutions you do not recognize — and for mail that suddenly stops arriving
Set up account alerts on every existing financial relationship

A common piece of advice I disagree with: "It will eventually settle down." It does not settle down on its own. It settles down because you forced it to. Vigilance is not optional — it is the price of being a victim in a system that does not fully protect you.

What This Process Does NOT Stop

I want to be honest with you about the limits of this playbook.

Even after taking all these steps:

Fraud may reappear later — sometimes months or years after you thought it was over
Some accounts may take time to be fully removed from every database
New fraud attempts can still happen as long as your data is circulating
Tax identity theft, medical identity theft, and employment fraud are separate issues requiring separate remedies

This is not a one-time fix. It is an ongoing process. The playbook minimizes damage and creates legal protection — but it does not erase your data from where it has already spread.

What About Paid Identity Protection Services?

Services like LifeLock, Aura, and Identity Guard charge monthly fees to "protect" you.

My honest opinion: for many people, these services overlap heavily with protections you can set up for free.

What they provide:

Monitoring across various databases
Alerts when your information appears in breaches
Some recovery assistance
Limited insurance for out-of-pocket costs

What they do not provide:

Stronger protection against new accounts than a credit freeze already gives you
Legal rights you do not already have for free

Notably, these services still point you to the same core tools — credit freezes and IdentityTheft.gov — when something happens.

If you want the extra convenience and monitoring, they can be useful. But if you are budget-conscious, a credit freeze plus disciplined self-monitoring plus 2FA covers most of what these services promise.

Do You Need a Lawyer?

Most people do not.

The combination of your FTC Identity Theft Report, your police report, and FCRA Section 605B handles the vast majority of cases without legal help. IdentityTheft.gov's sample letters are designed so you can send them yourself.

You may want an attorney if:

A creditor or debt collector refuses to stop pursuing you after you have submitted proper documentation
You are being sued for fraudulent debt
The amount of fraud is extremely large and spans many institutions
The bureaus repeatedly fail to honor 605B block requests

For most cases, the free tools are enough. Do not let the fear of legal cost prevent you from starting the recovery process today.

The Long-Term Reality

Here is the part nobody warns you about.

Identity theft recovery is not a one-week process. It is not a one-month process. For serious cases, it can be a multi-year process.

You may find fraudulent items on your credit report long after you thought everything was resolved. You may receive collection letters for debts you already disputed. You may occasionally be denied credit because some small piece of fraud was never fully removed from some database.

This is not because you did anything wrong. It is because the American credit reporting system is a sprawling network of databases with no single authority keeping the data clean.

Save every document. Forever. Your FTC report, your police report, your dispute letters, your confirmation emails. You may need them again — maybe years from now, when some fragment of the old fraud resurfaces.

You Did Not Create This Debt — But You Must Destroy It

I want to say this directly to anyone going through this right now:

This is not your fault.

You did not cause the breach. You did not invite the fraud. You did not do anything wrong by trusting the institutions that held your data.

But the harsh reality of the American system is this: the cleanup falls on you anyway.

You did not create this debt. But you are the one who must destroy it — through documentation, through federal law, and through persistence that the system quietly hopes you will not have.

My Final Take

Here is what I want you to understand about identity theft in America:

The time, the stress, the hours on the phone, the mental weight of monitoring your credit for years — none of that is recoverable. The system can restore your credit report. It will not restore your peace of mind.

That is the true cost of identity theft, and it is the reason I keep coming back to prevention.

You cannot control whether your data is exposed. But you can control how fast you respond when it is used.

A credit freeze is not a separate topic from this one. It is the same topic. The freeze is the wall you build so you never have to fight this battle.

But if you are fighting it now — if you opened an envelope today and your stomach dropped — here is the only thing that matters:

You are not the first person this has happened to. You will not be the last. And every step in this playbook has been used by many people before you to reclaim their financial identity.

Follow the steps. Keep the records. Cite the statute. Refuse to give up when the bureaucracy pushes back.

The system was not designed to help you. But it was designed to be used — and if you know how to use it, you can win.

If you want to catch fraud early, the next skill to learn is how to read your credit report like a professional — spotting unfamiliar accounts, inquiry mismatches, and hidden errors that most people miss entirely.

Search This Blog

U.S. Living Guide – Finance, Rent, and Benefits