If your personal information has been compromised, act quickly. This step-by-step guide will help you report identity theft and begin the recovery process.
Identity theft can happen to anyone. If you believe your personal information has been stolen or misused, taking immediate action can limit the damage and help you recover more quickly. Follow these steps in order to protect yourself.
Visit IdentityTheft.gov to file an official identity theft report with the Federal Trade Commission. This website will guide you through a recovery plan tailored to your specific situation, generate pre-filled letters you can send to businesses, and create an official FTC Identity Theft Report that serves as documentation for creditors and law enforcement.
Call the Massachusetts Attorney General's Consumer Hotline at (617) 727-8400 to report the identity theft. The AG's office can provide guidance specific to Massachusetts law, help you understand your rights under state consumer protection statutes, and assist with disputes involving Massachusetts businesses. You can also file a complaint online through the AG's website.
Contact all three major credit bureaus to place fraud alerts on your credit reports. A fraud alert requires creditors to verify your identity before opening new accounts in your name.
Equifax: (800) 525-6285
Experian: (888) 397-3742
TransUnion: (800) 680-7289
File a police report with your local police department. Bring your FTC Identity Theft Report, a government-issued photo ID, proof of your address, and any evidence of the theft (fraudulent bills, collection notices, unauthorized account statements). A police report creates an official record and may be required by creditors or financial institutions to resolve fraudulent accounts.
Request free copies of your credit reports from all three bureaus at AnnualCreditReport.com. Review each report carefully for accounts you did not open, inquiries you did not authorize, addresses where you have never lived, and any other unfamiliar information. Dispute any fraudulent entries directly with the credit bureau reporting them.
A credit freeze (also called a security freeze) prevents new creditors from accessing your credit report entirely, which stops most new accounts from being opened in your name. Under Massachusetts law and federal law, credit freezes are free. You can place and lift a freeze online, by phone, or by mail with each bureau. You will receive a PIN to temporarily lift the freeze when you want to apply for credit yourself.
Keep detailed records of every step you take during the recovery process. Save copies of all letters, emails, and forms you send or receive. Note the dates, times, and names of people you speak with. Keep records of any expenses you incur as a result of the identity theft. This documentation will be essential if you need to dispute charges, file insurance claims, or pursue legal action.
While responding to identity theft is critical, preventing it in the first place is even better. Here are steps you can take to reduce your risk:
The simplest and most effective way to prevent document-based identity theft is to shred documents that contain personal information before discarding them. Bank statements, tax returns, medical records, pre-approved credit offers, and any document with your Social Security number, account numbers, or date of birth should be shredded. Valley Green Shredding provides NAID AAA Certified shredding services for both businesses and individuals.
Check your credit reports at least once a year through AnnualCreditReport.com. Consider signing up for a credit monitoring service that alerts you to changes in your credit file. Many banks and credit card companies now offer free credit monitoring to their customers.
Use unique, complex passwords for each of your online accounts, especially financial accounts, email, and social media. Enable two-factor authentication wherever it is available. Avoid using the same password across multiple sites, and consider a password manager to keep track of your credentials securely.
Never give out your Social Security number, bank account numbers, or other sensitive information unless you initiated the contact and you are certain of the recipient's identity. Be wary of phishing emails, phone calls, and text messages that ask for personal information. When in doubt, contact the organization directly using a phone number from their official website.