What we verified in “Identity theft: how to freeze your credit and recover”

Statements and where we checked them

The statements with rules, figures or dates, with the exact place in the source and the date we checked them.

1. According to the FTC (September 2024), these can be signs of identity theft: you stop getting a bill (someone may have changed your address), charges for things you did not buy, bank withdrawals you did not make and accounts in your name you do not recognize on your credit report; and to protect yourself it recommends taking your mail out of the mailbox promptly, asking questions before giving out your Social Security number, knowing those organizations will not call, email or text to ask for it, using strong passwords and two-factor authentication, and not giving your information to someone who calls, emails or texts you.

   Sources 1 · What To Know About Identity Theft (September 2024): 'If you stop getting a bill, that could be a sign that someone changed your billing address'; 'Charges for things you didn't buy'; 'Withdrawals you didn't make'; 'Accounts in your name that you don't recognize'; 'take your mail out of the mailbox as soon as possible'; 'Ask questions before you give out your Social Security number'; 'those organizations won't call, email, or text you to ask for it'; 'use a strong password'; 'Add two-factor authentication'; 'Don't give your personal information to someone who calls, emails, or texts you' · Checked October 31, 2026

2. According to the FTC (September 27, 2024), if your identity is stolen: call the fraud department of the companies where it happened, explain that your identity was stolen, ask them to close or freeze the accounts and change your passwords and PINs; place a fraud alert and get your credit reports, even if you already have a freeze (and if not, freeze your credit too); and report the theft to the FTC, where you get a free recovery plan: in English at IdentityTheft.gov, in Spanish at RobodeIdentidad.gov, or in another language by calling 877-438-4338 and pressing 3, with interpreters from 9:00 a.m. to 5:00 p.m. Eastern Time.

   Sources 2 · How to recover from identity theft (Sept. 27, 2024): 'Call the fraud department. Explain that someone stole your identity'; 'Ask them to close or freeze the accounts'; 'Change logins, passwords, and PINs'; 'even if you already have a credit freeze in place'; 'If you haven't frozen your credit, do that, too'; 'You'll get a free personal recovery plan with next steps'; 'To report in English, go to IdentityTheft.gov'; 'call 877-438-4338 and press 3'; 'Interpreters are available from 9:00am – 5:00pm ET' · Checked October 31, 2026

3. According to the FTC, a fraud alert means a business has to verify your identity before opening a new account in your name; you place a free one-year alert by contacting one of the three credit bureaus, which must tell the other two; the bureaus are Experian (Experian.com/help, 888-397-3742), TransUnion (TransUnion.com/credit-help, 888-909-8872) and Equifax (Equifax.com/personal/credit-report-services, 800-685-1111); you can get your report at AnnualCreditReport.com or 877-322-8228; and the three bureaus let you check your report for free once a week at AnnualCreditReport.com.

   Sources 2 · How to recover from identity theft (Sept. 27, 2024): 'a business has to verify your identity before it opens a new credit account in your name'; 'Place a free, one-year fraud alert by contacting one of the three credit bureaus. That company must tell the other two'; 'Experian.com/help, 888-EXPERIAN (888-397-3742)'; 'TransUnion.com/credit-help, 888-909-8872'; 'Equifax.com/personal/credit-report-services, 800-685-1111'; 'call Annual Credit Report at 877-322-8228'; 'check your credit report once a week for free at AnnualCreditReport.com' · Checked October 31, 2026

4. According to the FTC (August 2025), with a credit freeze nobody can open a new credit account in your name, including you; it does not affect your credit score; it costs nothing to place or lift; you contact all three bureaus (Equifax, Experian and TransUnion); and you can request a free freeze for a child under 16, which stays in place until you ask to remove it.

   Sources 3 · What To Know About Credit Freezes and Fraud Alerts (August 2025): 'nobody can open a new credit account in your name, including you'; 'it doesn’t affect your credit score'; 'There’s no cost to place or lift a credit freeze'; 'Contact all three of the credit bureaus'; under 16: free credit freeze; 'The freeze stays in place until you tell the credit bureaus to remove it' · Checked October 31, 2026

5. Under the Fair Credit Reporting Act (15 U.S.C. §1681c-1(i)), a bureau must place a freeze free of charge no later than 1 business day after a phone or online request, or 3 business days after a mail request; the freeze stays until you ask to remove it; the bureau must remove it free no later than 1 hour after a phone or online request, or 3 business days by mail; and the freeze does not apply to companies you already have an account with when they review or collect on that account.

   Sources 4 · 15 U.S.C. §1681c-1(i)(2)(A): 'shall, free of charge, place the security freeze not later than— (i) ... 1 business day after receiving the request ... (ii) ... by mail, 3 business days'; (i)(3): 'shall remain in place until the consumer directly requests that the security freeze be removed'; 'free of charge, remove ... (i) ... 1 hour after receiving the request for removal; or (ii) ... by mail, 3 business days'; notice: 'A security freeze does not apply to a person or entity ... with which you have an existing account that requests information in your credit report for the purposes of reviewing or collecting the account' · Checked October 31, 2026

6. Under the law (15 U.S.C. §1681c-1(a), (b) and (c)), if you suspect in good faith that you are or will be a victim of fraud or identity theft, a bureau must place an initial fraud alert for at least 1 year and notify the other bureaus; if you submit an identity theft report, it must place an extended alert for 7 years, remove you for 5 years from lists of unsolicited credit or insurance offers and give you 2 free copies of your report in the next 12 months; and active duty military members can request an active duty alert for at least 12 months.

   Sources 4 · 15 U.S.C. §1681c-1(a)(1): 'asserts in good faith a suspicion'; 'for a period of not less than 1 year'; 'refer the information regarding the fraud alert ... to each of the other consumer reporting agencies'; (b)(1): 'who submits an identity theft report'; 'during the 7-year period'; 'during the 5-year period ... exclude the consumer from any list of consumers'; (b)(2)(A): '2 free copies'; (c)(1): 'active duty alert ... not less than 12 months' · Checked October 31, 2026

7. Under the law (15 U.S.C. §1681c-2), a bureau must block information in your report that you identify as resulting from identity theft no later than 4 business days after receiving proof of your identity, a copy of an identity theft report, your identification of that information and your statement that it does not relate to any transaction of yours; and it must notify the company that furnished that information.

   Sources 5 · 15 U.S.C. §1681c-2(a): 'shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than 4 business days after the date of receipt'; '(1) appropriate proof of the identity of the consumer; (2) a copy of an identity theft report; (3) the identification of such information by the consumer; and (4) a statement by the consumer that the information is not information relating to any transaction by the consumer'; (b): 'shall promptly notify the furnisher' · Checked October 31, 2026

8. According to the IRS, the Identity Protection PIN (IP PIN) is a six-digit number that prevents someone else from filing a tax return with your Social Security number or ITIN; anyone with an SSN or ITIN who can verify their identity may request one, including for dependents; the fastest way is your IRS online account; there are other options if you cannot open one, including an in-person appointment at a Taxpayer Assistance Center; and a new IP PIN is generated every year.

   Sources 6 · Get an identity protection PIN (IP PIN): 'a six-digit number that prevents someone else from filing a tax return using your Social Security number (SSN) or individual taxpayer identification number (ITIN)'; 'Anyone who has an SSN or individual taxpayer identification number (ITIN) and is able to verify his/her identity is eligible'; 'Parents and legal guardians can also request an IP PIN for dependents'; 'The fastest way ... through your online account'; 'in-person meeting at a local Taxpayer Assistance Center'; 'A new IP PIN is generated each year for your account' · Checked October 31, 2026