Updated on 4/3/2024 with new credit report access information.
While some identity thieves might use stolen information to clear out your bank account or make claims on your insurance policies, a more insidious form of identity fraud exists. Armed with your information, scammers create entirely new accounts – bank accounts, store accounts, credit card accounts – in your name.
Identity thieves can use your personal information to open and max out multiple credit cards, apply for loans, and place deposits on big-ticket items. This activity all goes onto your credit profile, eventually sinking your credit rating. Yet you might never find out about the unauthorized activity until the debt collectors come calling or you find yourself summarily rejected for a loan or mortgage application.
Many people have turned to credit monitoring services that will notify you about unusual activity. But that's the equivalent of closing the door after the horse has already left the barn. At that point, thieves have already opened an account and compromised your credit.
So what can you do to thwart identity thieves? The major credit bureaus allow you to place a freeze on your credit or add a fraud alert. Both are free, but each has its limitations.
Read more: Investment Scams Surge: New FBI Report Warns of Record Losses
Is it time to add a credit freeze?
Closing any compromised credit and bank accounts can stem your financial losses, true. But thieves can continue opening false accounts and piling up debt on your credit profile, making it impossible to successfully apply for credit.
To stop thieves in their tracks, put a security freeze on your credit profile, which prohibits lenders and companies that are trying to check your credit from accessing your profile. This prevents thieves from opening new accounts under your name, because creditors are unable to check your credit history.
“The security freeze is a good tool for someone with recurring fraud issues,” says Rod Griffin, senior director of public education for credit reporting agency Experian. “That's the insidious nature of fraud. Once an identity has been stolen, more false accounts may pop up again six months or two years later, and we wouldn't necessarily recognize it as fraud.”
Is a credit fraud alert more helpful?
If you're planning on getting a mortgage, a car, or even a new phone service, a security freeze can hold up the process by preventing the service providers from checking your credit. “For most people, if you plan to apply for credit or services that need credit checking, a security freeze tends to be more intrusive than it is beneficial,” Griffin says.
Instead, if you believe you're the victim of fraud, Griffin recommends first requesting a copy of your credit report. At the same time, alert a credit reporting agency that you suspect you may be at risk for fraud. The credit reporting agency will place an initial fraud alert on your profile so that any companies requesting a copy of the profile are told to ask for additional proof of identity. This makes it more difficult for identity thieves to prove they are you. The credit agency you alert will let the other two agencies know to do the same.
Next, comb your credit report for activity that wasn't generated by you. Common signs of fraud include social security number and address changes or names and accounts you don't recognize. “If you discover you have been the victim of fraud, file a police report, send it to Experian, and we extend the fraud alert so that it stays on your profile for seven years,” Griffin says.
How to set fraud alerts and security freezes
Follow these steps to set a security freeze or a security alert.
1. If you suspect you have been the victim of identity theft, set an initial fraud alert at any of the three credit agencies. You can do this online, and the agency you contact will alert the others to add a fraud message to the profile they hold on you. We also recommend alerting Innovis, a smaller credit agency. Here are the links to their fraud alert pages for quick access:
Placing an initial fraud alert on your profile informs potential creditors to request additional identity verification if an account is opened in your name. This alert lasts for 90 days. If you apply for anything requiring a credit check during this period, you should be prepared to provide greater proof of your identity than usual.
2. If you find that you are the victim of identity theft – for example, if your credit profile shows suspicious activity or a debt collector turns up demanding payments for something you know nothing about – you can request an extended fraud alert that lasts for seven years. File a police report and send a copy to the credit agency along with your request for an extended fraud alert. The credit agency will verify the fraudulent accounts and clear them out of your profile. Potential creditors will continue to receive alerts that your profile is associated with fraud, with instructions to request additional ID verification.
3. If fraudulent activity continues to appear on your credit profile, you may want to consider a security freeze. With a credit freeze, no one can access your credit profile except lenders you specify during a time period you set. You need to set up a freeze individually with each credit agency, either by phone or via each agency's online form.
When you freeze your credit profile, you'll receive a PIN to use for temporarily lifting the freeze to allow specific credit checks. Placing a security freeze, temporarily lifting a freeze, and permanently lifting a freeze are all free.
Notifying the IRS
In addition to opening accounts and making purchases, identity thieves can file a fraudulent tax return in your name to trick the IRS into issuing a refund to the thieves. Most of this theft happens in January and February since the thieves have to file their fraudulent return before you file your return. If you suspect or confirm that you're a victim of tax-related identity theft, contact your local IRS office (scroll down to find the numbers) to determine if additional protective steps are necessary, including completing an Identity Theft Affidavit. Find the form and further details in the Tax-Related Identity Theft section of the IRS Taxpayer Guide to Identity Theft.
Read more: Deepfake IRS Agents Are Coming for Your Money. Here's How to Spot Them
How to stay safe
Knowing when your personal data has been compromised is very difficult, as it could happen from any number of places that hold that data. When a security breach occurs at a point-of-sale terminal, consumers are especially powerless and may never find out about the breach until the retailer itself uncovers it. It's best to only use credit cards, as there’s an added layer of protection that makes it easier to claim money back in cases of fraud.
Most importantly, check your credit profile. On AnnualCreditReport.com, you can request a free annual copy from Equifax, Experian, and TransUnion, and you have the option to check your credit report for free weekly.
[id theft concept via BigStockPhoto]
Natasha Stokes has been a technology writer for more than 10 years covering consumer tech issues, digital privacy and cybersecurity. As the features editor at TOP10VPN, she covered online censorship and surveillance that impact the lives of people around the world. Her work has also appeared on NBC News, BBC Worldwide, CNN, Time and Travel+Leisure.