My Identity Was Stolen: The Complete Recovery Playbook

I found out someone had stolen my identity on a Tuesday afternoon, wedged between a work meeting and picking up my dry cleaning. I’d applied for a new credit card to snag a solid sign-up bonus, and the rejection email hit my inbox within minutes. “Based on information in your credit report,” it said. Funny, because my credit score had been sitting pretty at 762 just two months earlier.

What followed was a week I wouldn’t wish on anyone—but also a crash course in exactly what works (and what doesn’t) when someone decides to borrow your good name for their shopping spree. By the time I emerged on the other side, I’d prevented over $8,400 in fraudulent charges from hitting my record and learned that identity theft recovery is less about panicking and more about following a specific playbook. Here’s what I did, step by step, so you can skip the frantic Googling if it ever happens to you.

Pull All Three Credit Reports Before You Do Anything Else

My first instinct was to call my bank, freeze everything, and maybe scream into a pillow. Instead, I forced myself to sit down and pull my credit reports from all three bureaus—Equifax, Experian, and TransUnion. You’re entitled to free weekly reports, and this is exactly the moment to use them.

What I found made my stomach drop: two credit cards I’d never applied for, a personal loan for $3,200, and three hard inquiries from lenders I’d never heard of. The fraudster had been busy. But here’s the thing—the damage wasn’t identical across all three reports. One bureau showed the loan, another didn’t. One had an address change I hadn’t made, while the others still showed my correct information.

I printed everything out and highlighted every single item that wasn’t mine. This became my master document for every phone call and dispute that followed. Having those printouts in front of me saved hours of fumbling through screens while on hold with fraud departments.

File an Official Identity Theft Report (This Document Is Gold)

Before I started calling creditors, I filed an identity theft report with the Federal Trade Commission. This took about fifteen minutes and gave me an official document that carried actual legal weight. I cannot overstate how useful this report became over the following days.

When I called the fraudulent credit card companies, having that FTC report number turned conversations from “we’ll look into it” to “we’ll close this immediately and remove it from your record.” Legally, creditors have to respond to disputes accompanied by an identity theft report within specific timeframes. Without it, you’re just another person on the phone claiming fraud—with it, you’re someone with documentation they’re required to take seriously.

I also filed a report with my local police department. Honestly, they didn’t seem thrilled about the paperwork, but having that police report number became another piece of ammunition when dealing with particularly stubborn creditors. One lender initially pushed back on removing the $3,200 loan until I mentioned I had both FTC and police documentation. Suddenly, they became much more cooperative.

Place a Fraud Alert—Then Consider Going Nuclear With a Credit Freeze

A fraud alert is free and tells lenders to verify your identity before opening new accounts. I placed one immediately, which only required contacting one bureau (they’re required to notify the other two). This was my first line of defense while I sorted through the mess.

But after seeing how easily someone had opened multiple accounts in my name, I decided to go further and place a full credit freeze with all three bureaus. A freeze completely blocks new creditors from accessing your report, which means no one—including you—can open new credit until you lift it. Yes, it’s inconvenient when you actually want to apply for something, but temporarily lifting a freeze takes about ten minutes.

The freeze is also free, despite what some shady “credit protection” services might imply. I set mine up with PINs I could remember (but that weren’t obvious), and I stored those PINs in my password manager. Six months later, when I legitimately wanted to refinance my car loan, I lifted the freeze for that specific bureau, completed my application, and refroze it the same day. Minor hassle, major peace of mind.

Dispute Every Fraudulent Account Individually (Yes, Every Single One)

This was the tedious part. Each fraudulent account required its own dispute—both with the credit bureaus and directly with the creditors who had opened the accounts. I learned quickly that disputing only through the bureaus wasn’t enough; contacting the creditors directly often resolved things faster.

For the two fraudulent credit cards, I called the issuing banks’ fraud departments. I had my identity theft report number ready, my police report number, and the specific account details from my credit reports. Both banks closed the accounts within 48 hours and sent me written confirmation that they’d request removal from my credit reports.

The personal loan was trickier. The lender initially claimed they’d need to “investigate,” which could take 30 to 60 days. I politely but firmly mentioned my FTC report and asked to speak with their fraud specialist rather than general customer service. That conversation took 45 minutes, but by the end, they’d flagged the account as fraudulent and initiated the removal process.

I kept a spreadsheet tracking every call: the date, who I spoke with, their employee ID if they gave one, what they promised, and when I should follow up. This felt obsessive at the time, but when one creditor “lost” my dispute three weeks later, having those notes meant I could reference the exact conversation and representative who had assured me it was handled.

Monitor Your Reports Weekly for the Next Three Months

Here’s what nobody tells you about identity theft recovery: it’s not a one-time fix. Even after I’d disputed everything and received confirmation letters, I kept finding small issues popping up. A hard inquiry would appear that I’d missed initially. An old address—one I’d never lived at—showed up on a report that had been clean the week before.

I set a recurring reminder on my phone to check my credit reports every Sunday morning, right after coffee and before the week’s chaos began. For the first month, I found something new almost every time. By month two, things had mostly stabilized. By month three, everything fraudulent had been removed, and my score had climbed back to 748—not quite where it started, but close enough that I could breathe again.

The weekly checks also helped me catch something unexpected: a legitimate account I’d forgotten about had been marked as “disputed by consumer” during the chaos, which was actually hurting my score. I contacted that creditor to clarify that their account wasn’t part of my identity theft case, and they corrected it within two weeks.

Set Up Real Monitoring (Not the Expensive Kind)

After this experience, I wanted alerts if anything unusual happened with my credit—but I wasn’t about to pay $25 a month for monitoring services that mostly just repackage free information. Instead, I set up free credit monitoring through my existing credit card issuers. Most major cards offer this as a perk, and they’ll email or text you when new accounts appear, when your score changes significantly, or when hard inquiries show up.

I also signed up for free monitoring directly through two of the credit bureaus. Yes, they try to upsell you on premium services, but the basic alerts—new account opened, address changed, score dropped more than 20 points—are available at no cost. Between my credit cards and the bureaus themselves, I now have five different services watching my credit, and I’ve paid exactly zero dollars for any of them.

The final layer of protection I added was setting up two-factor authentication on every financial account I have. It took an annoying Saturday afternoon to work through all of them, but the fraudster who stole my identity had apparently gotten my information from a data breach. Making my accounts harder to access—even if someone has my password—feels worth the extra few seconds at login.

Identity theft is genuinely awful, but recovering from it doesn’t have to consume your entire life. Move quickly in the first 48 hours, document everything obsessively, and remember that creditors are legally required to help you—even when their first instinct is to make you jump through hoops. If this ever happens to you, pull up this playbook and start checking things off. You’ll get through it, your credit will recover, and you’ll come out the other side knowing exactly how to protect yourself going forward.

Identity Protection Essentials

As an Amazon Associate, we may earn from qualifying purchases. These are products we genuinely recommend based on the topics covered in this article.

• Cross-Cut Paper Shredder
• Fireproof Document Safe
• RFID Blocking Card Sleeves
• Identity Theft Protection Books