Free Resource

Identity Theft Response Kit

Your Complete Recovery Toolkit โ€” everything you need to take control after identity theft. Print it, fill it in, fight back.

Last updated: March 2026 | Version 1.1

Section 1

Emergency Action Checklist

Print this page and check off each item as you complete it. Time is critical โ€” the faster you act, the less damage identity thieves can do.

🔴

First 24 Hours โ€” Critical Actions

These steps limit immediate damage and establish your case.

Immediate Documentation

  • Take screenshots of all suspicious activity
  • Print or save suspicious emails/texts
  • Note dates, times, and details of discovery
  • Photograph fraudulent charges or accounts
  • Start a detailed timeline (use tracker on page 6)

Credit Protection

  • Place fraud alert with ONE credit bureau (they notify others)
    Called: Date: Confirmation #:
  • Freeze credit with ALL THREE bureaus:
    Equifax โ€” Date: PIN:
    Experian โ€” Date: PIN:
    TransUnion โ€” Date: PIN:
    Innovis (optional) โ€” Date: PIN:

Official Reports

  • File report at IdentityTheft.gov
    Report ID:
    Recovery plan printed: Yes / No
  • File police report (if applicable)
    Police department:
    Report #: Officer:
    Date filed:

Account Security

  • Change password for primary email account
  • Change passwords for financial accounts:
    Bank 1:
    Bank 2:
    Credit Card 1:
    Credit Card 2:
    Investment accounts:
  • Enable 2FA on all critical accounts

Contact Financial Institutions

  • Bank #1: Called: Rep:
  • Bank #2: Called: Rep:
  • CC #1: Called: Rep:
  • CC #2: Called: Rep:
  • CC #3: Called: Rep:
🟠

First Week โ€” Reporting & Protection

Expand your reporting and begin the dispute process.

Contact Affected Companies

  • Company 1: Date: Status:
  • Company 2: Date: Status:
  • Company 3: Date: Status:
  • Company 4: Date: Status:

Send Dispute Letters

Use the templates below to send certified letters.

  • Letter to creditor 1 (sent date: )
  • Letter to creditor 2 (sent date: )
  • Letter to creditor 3 (sent date: )
  • Letter to credit bureau (sent date: )

Specialized Reporting (check if applicable)

  • IRS (Form 14039) โ€” Tax identity theft
  • Social Security Administration โ€” SSN fraud
  • State unemployment office โ€” Unemployment fraud
  • Health insurance company โ€” Medical identity theft
  • DMV โ€” Driver's license fraud
  • Passport office โ€” Passport fraud
🟡

First Month โ€” Monitoring & Follow-Up

Review reports, set up ongoing monitoring, and follow up on disputes.

Credit Monitoring

  • Order credit report from Equifax
  • Order credit report from Experian
  • Order credit report from TransUnion
  • Review all reports for fraudulent accounts
  • Set up credit monitoring alerts

Account Monitoring

  • Enable transaction alerts on all accounts
  • Review all account statements
  • Check for unauthorized changes to contact info
  • Verify no new authorized users added

Follow-Up Communications

  • Follow up on dispute letter 1
  • Follow up on dispute letter 2
  • Follow up on dispute letter 3
  • Request written confirmations
🟢

Ongoing โ€” Long-Term Recovery

Identity theft recovery can take months. Stay vigilant.

Monthly Tasks

  • Month 1: Check credit reports
  • Month 2: Check credit reports
  • Month 3: Check credit reports
  • Month 4: Check credit reports
  • Month 5: Check credit reports
  • Month 6: Check credit reports

Quarterly Tasks

  • Q1: Review all financial statements
  • Q2: Review all financial statements
  • Q3: Review all financial statements
  • Q4: Review all financial statements

Annual Tasks

  • Check Social Security earnings statement
  • Review medical records for anomalies
  • Update passwords on all accounts
  • Review and update security practices
Section 2

Dispute Letter Templates

Copy and customize these legally-grounded templates. Always send via certified mail with return receipt requested. Keep copies of everything.

1
Credit Bureau Dispute Letter Use to dispute fraudulent accounts on your credit report

[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]

[Date]

[Credit Bureau Name]
[Address]
[City, State ZIP]

Re: Dispute of Fraudulent Information on Credit Report
Report Confirmation Number: [Your confirmation number, if available]

Dear Sir or Madam:

I am writing to dispute fraudulent information appearing on my credit report as a result of identity theft. I am a victim of identity theft and did not authorize or create the following account(s):

FRAUDULENT ACCOUNT(S):

  1. [Creditor Name]
    Account Number: [Last 4 digits only]
    Amount: $[Amount]
    Date Opened: [Date]
  2. [Creditor Name]
    Account Number: [Last 4 digits only]
    Amount: $[Amount]
    Date Opened: [Date]

I have enclosed the following documents to support my claim:

  • Copy of my FTC Identity Theft Report
  • Copy of police report [if applicable]
  • Copy of government-issued photo ID
  • Proof of address

Under the Fair Credit Reporting Act (FCRA), I request that you:

  1. Block this fraudulent information from appearing on my credit report
  2. Provide written confirmation that these accounts have been removed
  3. Notify me in writing of the results of your investigation within 30 days

I did not create these accounts, and I am not responsible for them. This information is inaccurate and should be removed immediately under 15 U.S.C. § 1681c-2.

Please send written confirmation of the removal of this fraudulent information to the address listed above.

Thank you for your immediate attention to this matter.

Sincerely,

[Your Signature]
[Your Printed Name]

Enclosures: FTC Identity Theft Report, Police Report [if applicable], Copy of ID, Proof of address

2
Fraudulent Account Dispute โ€” Creditor Use to dispute fraudulent accounts with the company that opened them

[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]

[Date]

[Company Name]
Fraud Department
[Address]
[City, State ZIP]

Re: Fraudulent Account โ€” Identity Theft Victim
Account Number: [Last 4 digits only, if known]

Dear Fraud Department:

I am writing to inform you that I am a victim of identity theft and that a fraudulent account was opened in my name without my knowledge or authorization.

FRAUDULENT ACCOUNT DETAILS:
Account Number: [Last 4 digits only]
Date Opened: [Date, if known]
Amount/Credit Limit: $[Amount]

I did not:

  • Open or authorize this account
  • Receive any products, services, or benefits from this account
  • Make any charges or transactions on this account
  • Give anyone permission to use my personal information

I am requesting that you:

  1. Close this fraudulent account immediately
  2. Remove all fraudulent charges associated with this account
  3. Provide written confirmation that I am not responsible for this debt
  4. Stop all collection activities related to this account
  5. Report to all credit bureaus that this account was fraudulent
  6. Provide documentation showing the account has been closed and debt discharged

Under the Fair Credit Billing Act and Fair Credit Reporting Act, I am not liable for these fraudulent charges. I request that you conduct a full investigation and provide me with copies of any application or documentation used to open this account.

Please send written confirmation of the account closure and debt discharge to the address above within 30 days.

Sincerely,

[Your Signature]
[Your Printed Name]

Enclosures: FTC Identity Theft Report, Police Report [if applicable], Copy of ID, Proof of address

3
Debt Collector Dispute Letter Use when contacted by a debt collector about fraudulent debt

[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]

[Date]

[Collection Agency Name]
[Address]
[City, State ZIP]

Re: Identity Theft โ€” Fraudulent Debt
Your Reference Number: [Reference number from collection notice]

Dear Sir or Madam:

I received your notice dated [date] regarding a debt collection attempt for account number [last 4 digits]. I am writing to inform you that I am a victim of identity theft and this debt is fraudulent.

I did NOT:

  • Incur this debt
  • Authorize anyone to use my personal information
  • Receive any goods or services related to this debt
  • Enter into any agreement with the original creditor

Under the Fair Debt Collection Practices Act (FDCPA), I am exercising my right to dispute this debt and request validation. I request that you:

  1. Cease all collection activities immediately
  2. Do not report this debt to credit bureaus
  3. Provide validation of this debt including: original signed contract, proof of collection authorization, and complete payment history
  4. Remove this debt from my records
  5. Provide written confirmation that this matter is closed

Under 15 U.S.C. § 1692g, you must cease collection activities until you have validated the debt. Under 15 U.S.C. § 1681c-2, you may not report fraudulent debts resulting from identity theft.

Any continued collection attempts without proper validation will be considered harassment under the FDCPA.

Sincerely,

[Your Signature]
[Your Printed Name]

Enclosures: FTC Identity Theft Report, Police Report [if applicable]

4
Employer Notification Letter Use if someone used your identity for employment

[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]

[Date]

[Company Name]
Human Resources Department
[Address]
[City, State ZIP]

Re: Employment Identity Theft Notification
Employee Name on File: [Your name]
SSN: [Last 4 digits]-XX-XXXX

Dear Human Resources:

I am writing to inform you that someone has fraudulently used my Social Security number and personal information to gain employment at your company. I am a victim of identity theft and did NOT apply for, work for, or authorize anyone to use my information for employment at your company.

The IRS has informed me of unreported income from your company for tax year(s): [year(s)]

I request that you:

  1. Investigate this fraudulent employment immediately
  2. Terminate the fraudulent employee if still employed
  3. Provide me with copies of employment documents (application, W-4, I-9)
  4. Correct your records to show I was not the employee
  5. Issue a corrected W-2 or notify the IRS of the fraudulent wages
  6. Provide written confirmation of these actions

Please contact me at [phone number] or [email] to discuss this matter. I request a response within 10 business days.

Sincerely,

[Your Signature]
[Your Printed Name]

Enclosures: FTC Identity Theft Report, Police Report, Copy of ID, IRS Documentation

5
Medical Identity Theft Letter Use for healthcare providers when someone used your info for medical services

[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date of Birth]

[Date]

[Healthcare Provider Name]
Medical Records Department
[Address]
[City, State ZIP]

Re: Medical Identity Theft โ€” Request for Records Review
Patient Name: [Your name]
Date of Birth: [Your DOB]
Medical Record Number: [If known]

Dear Medical Records Department:

I am writing to inform you that I am a victim of medical identity theft. Someone has fraudulently used my personal information to obtain medical services at your facility.

FRAUDULENT SERVICES:
Date(s) of Service: [Date(s)]
Type of Service: [Description]
Provider: [Doctor/Department name]

I did NOT receive these medical services, visit your facility on the date(s) listed, authorize anyone to use my information, or give permission for these treatments.

I am concerned that my medical records contain incorrect information that could affect future care, that I am being billed for services I did not receive, and that my insurance benefits may be affected.

I request that you:

  1. Flag my records to indicate medical identity theft
  2. Provide me with copies of all records from the fraudulent visits
  3. Create a separate file for the fraudulent information
  4. Remove fraudulent information from my active medical file
  5. Require photo ID for all future appointments in my name
  6. Provide written confirmation of these actions

Under HIPAA, I have the right to request amendments to my medical records. Please contact me within 10 business days to discuss the steps you will take.

Sincerely,

[Your Signature]
[Your Printed Name]

Enclosures: FTC Identity Theft Report, Police Report, Copy of ID, Proof of address

Section 3

Documentation & Tracking Sheets

Use these sheets to track every interaction, dispute, and piece of correspondence. Organization is your most powerful weapon in recovery.

Credit Bureau Dispute Tracker

Credit BureauDate ContactedMethodConfirmation #Response DueFollow-upStatusResolved
Equifax
Experian
TransUnion
Innovis

Fraudulent Account Tracker

CompanyAcct # (last 4)Date OpenedAmountDate DisputedMethodStatusClosed Date
$
$
$
$
$
$

Total Fraudulent Charges: $

Communication Log

DateTimeCompany / AgencyContact PersonPhone / EmailMethodPurposeOutcomeFollow-up

Correspondence Tracker

Date SentRecipientLetter TypeSent ViaTracking #Response?Response DateFollow-upStatus
Y / N
Y / N
Y / N
Y / N
Y / N

Document Checklist

Keep organized copies of all documents related to your case.

Essential Documents

  • FTC Identity Theft Report (print multiple copies)
  • Police report (get at least 3 certified copies)
  • Government-issued photo ID (copy)
  • Proof of address (utility bill, lease, etc.)

Credit Reports

  • Equifax credit report (date obtained: )
  • Experian credit report (date obtained: )
  • TransUnion credit report (date obtained: )
  • Annotated copies highlighting fraudulent accounts

Correspondence

  • All dispute letters sent (keep copies)
  • All responses received from companies
  • Certified mail receipts
  • Email correspondence printed and dated

Account Documentation

  • Bank statements showing unauthorized transactions
  • Credit card statements with fraudulent charges
  • Account opening documents (if available)
  • Account closure confirmations

Specialized Documents (if applicable)

  • IRS Form 14039 (Identity Theft Affidavit)
  • Medical records showing fraudulent treatment
  • Employment records showing false employment
  • Court documents (if criminal charges filed)
Storage Tip: Keep physical copies in a secure, fireproof location. Create digital backups stored securely in the cloud with encryption enabled.
Section 4

Emergency Contact Cards

Print these cards, cut them out, and keep them in your wallet. Laminate for durability.

IDENTITY THEFT EMERGENCY CONTACTS
Credit Bureaus โ€” Fraud Alerts
  • Equifax: 1-800-525-6285
  • Experian: 1-888-397-3742
  • TransUnion: 1-800-680-7289
Credit Freezes
  • Equifax: 1-800-685-1111
  • Experian: 1-888-397-3742
  • TransUnion: 1-888-909-8872
Report Identity Theft
Federal Agencies
  • IRS (Tax Fraud): 1-800-908-4490
  • SSA (SSN Fraud): 1-800-772-1213
My Banks & Cards
Bank: Ph:
Card: Ph:
Card: Ph:
WALLET LOST / STOLEN โ€” ACTION CARD
If Your Wallet Is Lost or Stolen:
  1. Call all banks and credit card companies
  2. Place fraud alert: 1-800-525-6285
  3. File police report
  4. Report at IdentityTheft.gov
My Financial Accounts
Bank 1:
Phone: Acct (last 4):
Bank 2:
Phone: Acct (last 4):
CC 1:
Phone: Card (last 4):
CC 2:
Phone: Card (last 4):
MY IMPORTANT ACCOUNT INFO
Credit Freeze PINs (Store Securely!)
Equifax PIN:
Experian PIN:
TransUnion PIN:
Password Manager
Service:
Master password hint:
Recovery contact:
Primary Email Recovery
Email:
Recovery email:
Recovery phone:
Trusted Contacts
Name: Phone:
Name: Phone:
Attorney (if applicable)
Name: Phone:
Section 5

Account Inventory Worksheet

Complete this inventory to track all your accounts. This makes monitoring easier and helps you quickly identify what's been compromised.

Banking

Bank NameAccount TypeAcct # (last 4)PhoneOnline Login2FA?
CheckingY / N
SavingsY / N
CheckingY / N
SavingsY / N

Credit Cards

IssuerCard TypeCard # (last 4)Credit LimitPhoneAlerts?
$Y / N
$Y / N
$Y / N
$Y / N
$Y / N

Loans

LenderLoan TypeAcct # (last 4)BalancePhoneAuto-pay?
Mortgage$Y / N
Auto$Y / N
Student$Y / N
Personal$Y / N

Investment & Retirement

InstitutionAccount TypeAcct # (last 4)Phone2FA?
401(k)Y / N
IRAY / N
BrokerageY / N
HSAY / N

Payment Services

ServiceEmail / Phone Used2FA?Linked Bank (last 4)
PayPalY / N
VenmoY / N
Cash AppY / N
ZelleY / N
Apple PayY / N
Google PayY / N

Insurance

TypeCompanyPolicy #PhoneAgent
Health
Dental
Vision
Life
Auto
Home/Renters

Email Accounts

Email AddressProviderRecovery EmailRecovery Phone2FA Type

Social Media

PlatformUsernameEmail Used2FA?Private?
FacebookY / NY / N
InstagramY / NY / N
Twitter/XY / NY / N
LinkedInY / NY / N
TikTokY / NY / N

Utilities & Services

ServiceProviderAccount #PhoneAuto-pay?
ElectricY / N
GasY / N
WaterY / N
InternetY / N
PhoneY / N
Section 6

Recovery Timeline Tracker

Track your recovery from discovery to full resolution. This documentation is critical for legal proceedings and insurance claims.

Discovery

Date Identity Theft Discovered:
How Discovered:
Estimated Date Theft Occurred:

Type of Identity Theft (check all that apply)

  • Financial / Credit Card
  • Bank Account
  • Tax-Related
  • Medical
  • Employment
  • Criminal
  • Social Media
  • Other:

Week 1 Timeline

DateAction TakenTime SpentResult / Notes

Weeks 2โ€“4 Timeline

DateAction TakenTime SpentResult / Notes

Months 2โ€“6 Timeline

DateAction TakenTime SpentResult / Notes

Ongoing Monitoring

MonthReports CheckedNew Issues?Action TakenStatus
Month 7Y / NY / N
Month 8Y / NY / N
Month 9Y / NY / N
Month 10Y / NY / N
Month 11Y / NY / N
Month 12Y / NY / N

Financial Impact Tracker

DescriptionAmountRecovered?Recovery Date
Fraudulent charges$Y / N
Fees (overdraft, late, etc.)$Y / N
Interest charges$Y / N
Legal fees$Y / N
Credit monitoring costs$Y / N
Other$Y / N
Total Financial Loss: $
Total Recovered: $
Net Loss: $

Resolution Milestones

  • All fraudulent accounts identified
  • Credit bureaus notified
  • Fraud alerts placed
  • Credit frozen
  • Police report filed
  • FTC report filed
  • All dispute letters sent
  • Received first response from creditor
  • First fraudulent account closed
  • All fraudulent accounts closed
  • Credit report cleaned
  • Credit score recovered
  • Extended fraud alert placed
  • Legal matters resolved
  • Full recovery achieved
Date Case Fully Resolved:
Total Recovery Time: months
Resources

Get Help

Identity Theft Resource Center

Free victim assistance and case management

888-400-5530

idtheftcenter.org

Federal Trade Commission

Official identity theft reporting and recovery plans

1-877-FTC-HELP (382-4357)

identitytheft.gov

AARP Fraud Watch Network

Scam tracking and victim support helpline

877-908-3360

aarp.org/money/scams-fraud

Annual Credit Report

Free credit reports from all three bureaus

annualcreditreport.com

FBI IC3

Report internet crime and cyber fraud

ic3.gov

ScamWatchHQ

Free identity risk assessment and protection tools

Identity Risk Assessment

Do's

  • Act quickly โ€” time is critical
  • Document everything in detail
  • Keep all correspondence organized
  • Follow up on all disputes
  • Continue monitoring even after resolution
  • Use certified mail for important letters
  • Request written confirmation of all actions

Don'ts

  • Don't ignore warning signs
  • Don't pay fraudulent debts
  • Don't throw away documents without shredding
  • Don't give up if initial attempts don't work
  • Don't assume it's resolved until confirmed
  • Don't forget to monitor children's credit too
  • Don't share personal information unnecessarily

Download the Complete Kit

Get the printable PDF version with fillable fields, all templates, and tracking sheets.

Identity Theft Response Kit v1.1 | March 2026 | ScamWatchHQ.com

This kit provides general guidance for identity theft victims. It is not legal advice. For specific legal questions, consult with an attorney.