Identity Theft Response Kit
Your Complete Recovery Toolkit โ everything you need to take control after identity theft. Print it, fill it in, fight back.
Last updated: March 2026 | Version 1.1
Emergency Action Checklist
Print this page and check off each item as you complete it. Time is critical โ the faster you act, the less damage identity thieves can do.
First 24 Hours โ Critical Actions
These steps limit immediate damage and establish your case.
Immediate Documentation
- Take screenshots of all suspicious activity
- Print or save suspicious emails/texts
- Note dates, times, and details of discovery
- Photograph fraudulent charges or accounts
- Start a detailed timeline (use tracker on page 6)
Credit Protection
- Place fraud alert with ONE credit bureau (they notify others)
Called: Date: Confirmation #:
- Freeze credit with ALL THREE bureaus:
Equifax โ Date: PIN:Experian โ Date: PIN:TransUnion โ Date: PIN:Innovis (optional) โ Date: PIN:
Official Reports
-
File report at IdentityTheft.gov Report ID:Recovery plan printed: Yes / No
-
File police report (if applicable)
Police department:Report #: Officer:Date filed:
Account Security
- Change password for primary email account
-
Change passwords for financial accounts:
Bank 1:Bank 2:Credit Card 1:Credit Card 2:Investment accounts:
- Enable 2FA on all critical accounts
Contact Financial Institutions
- Bank #1: Called: Rep:
- Bank #2: Called: Rep:
- CC #1: Called: Rep:
- CC #2: Called: Rep:
- CC #3: Called: Rep:
First Week โ Reporting & Protection
Expand your reporting and begin the dispute process.
Contact Affected Companies
- Company 1: Date: Status:
- Company 2: Date: Status:
- Company 3: Date: Status:
- Company 4: Date: Status:
Send Dispute Letters
Use the templates below to send certified letters.
- Letter to creditor 1 (sent date: )
- Letter to creditor 2 (sent date: )
- Letter to creditor 3 (sent date: )
- Letter to credit bureau (sent date: )
Specialized Reporting (check if applicable)
- IRS (Form 14039) โ Tax identity theft
- Social Security Administration โ SSN fraud
- State unemployment office โ Unemployment fraud
- Health insurance company โ Medical identity theft
- DMV โ Driver's license fraud
- Passport office โ Passport fraud
First Month โ Monitoring & Follow-Up
Review reports, set up ongoing monitoring, and follow up on disputes.
Credit Monitoring
- Order credit report from Equifax
- Order credit report from Experian
- Order credit report from TransUnion
- Review all reports for fraudulent accounts
- Set up credit monitoring alerts
Account Monitoring
- Enable transaction alerts on all accounts
- Review all account statements
- Check for unauthorized changes to contact info
- Verify no new authorized users added
Follow-Up Communications
- Follow up on dispute letter 1
- Follow up on dispute letter 2
- Follow up on dispute letter 3
- Request written confirmations
Ongoing โ Long-Term Recovery
Identity theft recovery can take months. Stay vigilant.
Monthly Tasks
- Month 1: Check credit reports
- Month 2: Check credit reports
- Month 3: Check credit reports
- Month 4: Check credit reports
- Month 5: Check credit reports
- Month 6: Check credit reports
Quarterly Tasks
- Q1: Review all financial statements
- Q2: Review all financial statements
- Q3: Review all financial statements
- Q4: Review all financial statements
Annual Tasks
- Check Social Security earnings statement
- Review medical records for anomalies
- Update passwords on all accounts
- Review and update security practices
Dispute Letter Templates
Copy and customize these legally-grounded templates. Always send via certified mail with return receipt requested. Keep copies of everything.
1 Credit Bureau Dispute Letter Use to dispute fraudulent accounts on your credit report
[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date]
[Credit Bureau Name]
[Address]
[City, State ZIP]
Re: Dispute of Fraudulent Information on Credit Report
Report Confirmation Number: [Your confirmation number, if available]
Dear Sir or Madam:
I am writing to dispute fraudulent information appearing on my credit report as a result of identity theft. I am a victim of identity theft and did not authorize or create the following account(s):
FRAUDULENT ACCOUNT(S):
- [Creditor Name]
Account Number: [Last 4 digits only]
Amount: $[Amount]
Date Opened: [Date] - [Creditor Name]
Account Number: [Last 4 digits only]
Amount: $[Amount]
Date Opened: [Date]
I have enclosed the following documents to support my claim:
- Copy of my FTC Identity Theft Report
- Copy of police report [if applicable]
- Copy of government-issued photo ID
- Proof of address
Under the Fair Credit Reporting Act (FCRA), I request that you:
- Block this fraudulent information from appearing on my credit report
- Provide written confirmation that these accounts have been removed
- Notify me in writing of the results of your investigation within 30 days
I did not create these accounts, and I am not responsible for them. This information is inaccurate and should be removed immediately under 15 U.S.C. § 1681c-2.
Please send written confirmation of the removal of this fraudulent information to the address listed above.
Thank you for your immediate attention to this matter.
Sincerely,
[Your Signature]
[Your Printed Name]
Enclosures: FTC Identity Theft Report, Police Report [if applicable], Copy of ID, Proof of address
2 Fraudulent Account Dispute โ Creditor Use to dispute fraudulent accounts with the company that opened them
[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date]
[Company Name]
Fraud Department
[Address]
[City, State ZIP]
Re: Fraudulent Account โ Identity Theft Victim
Account Number: [Last 4 digits only, if known]
Dear Fraud Department:
I am writing to inform you that I am a victim of identity theft and that a fraudulent account was opened in my name without my knowledge or authorization.
FRAUDULENT ACCOUNT DETAILS:
Account Number: [Last 4 digits only]
Date Opened: [Date, if known]
Amount/Credit Limit: $[Amount]
I did not:
- Open or authorize this account
- Receive any products, services, or benefits from this account
- Make any charges or transactions on this account
- Give anyone permission to use my personal information
I am requesting that you:
- Close this fraudulent account immediately
- Remove all fraudulent charges associated with this account
- Provide written confirmation that I am not responsible for this debt
- Stop all collection activities related to this account
- Report to all credit bureaus that this account was fraudulent
- Provide documentation showing the account has been closed and debt discharged
Under the Fair Credit Billing Act and Fair Credit Reporting Act, I am not liable for these fraudulent charges. I request that you conduct a full investigation and provide me with copies of any application or documentation used to open this account.
Please send written confirmation of the account closure and debt discharge to the address above within 30 days.
Sincerely,
[Your Signature]
[Your Printed Name]
Enclosures: FTC Identity Theft Report, Police Report [if applicable], Copy of ID, Proof of address
3 Debt Collector Dispute Letter Use when contacted by a debt collector about fraudulent debt
[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date]
[Collection Agency Name]
[Address]
[City, State ZIP]
Re: Identity Theft โ Fraudulent Debt
Your Reference Number: [Reference number from collection notice]
Dear Sir or Madam:
I received your notice dated [date] regarding a debt collection attempt for account number [last 4 digits]. I am writing to inform you that I am a victim of identity theft and this debt is fraudulent.
I did NOT:
- Incur this debt
- Authorize anyone to use my personal information
- Receive any goods or services related to this debt
- Enter into any agreement with the original creditor
Under the Fair Debt Collection Practices Act (FDCPA), I am exercising my right to dispute this debt and request validation. I request that you:
- Cease all collection activities immediately
- Do not report this debt to credit bureaus
- Provide validation of this debt including: original signed contract, proof of collection authorization, and complete payment history
- Remove this debt from my records
- Provide written confirmation that this matter is closed
Under 15 U.S.C. § 1692g, you must cease collection activities until you have validated the debt. Under 15 U.S.C. § 1681c-2, you may not report fraudulent debts resulting from identity theft.
Any continued collection attempts without proper validation will be considered harassment under the FDCPA.
Sincerely,
[Your Signature]
[Your Printed Name]
Enclosures: FTC Identity Theft Report, Police Report [if applicable]
4 Employer Notification Letter Use if someone used your identity for employment
[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date]
[Company Name]
Human Resources Department
[Address]
[City, State ZIP]
Re: Employment Identity Theft Notification
Employee Name on File: [Your name]
SSN: [Last 4 digits]-XX-XXXX
Dear Human Resources:
I am writing to inform you that someone has fraudulently used my Social Security number and personal information to gain employment at your company. I am a victim of identity theft and did NOT apply for, work for, or authorize anyone to use my information for employment at your company.
The IRS has informed me of unreported income from your company for tax year(s): [year(s)]
I request that you:
- Investigate this fraudulent employment immediately
- Terminate the fraudulent employee if still employed
- Provide me with copies of employment documents (application, W-4, I-9)
- Correct your records to show I was not the employee
- Issue a corrected W-2 or notify the IRS of the fraudulent wages
- Provide written confirmation of these actions
Please contact me at [phone number] or [email] to discuss this matter. I request a response within 10 business days.
Sincerely,
[Your Signature]
[Your Printed Name]
Enclosures: FTC Identity Theft Report, Police Report, Copy of ID, IRS Documentation
5 Medical Identity Theft Letter Use for healthcare providers when someone used your info for medical services
[Your Name]
[Your Address]
[City, State ZIP]
[Phone Number]
[Email Address]
[Date of Birth]
[Date]
[Healthcare Provider Name]
Medical Records Department
[Address]
[City, State ZIP]
Re: Medical Identity Theft โ Request for Records Review
Patient Name: [Your name]
Date of Birth: [Your DOB]
Medical Record Number: [If known]
Dear Medical Records Department:
I am writing to inform you that I am a victim of medical identity theft. Someone has fraudulently used my personal information to obtain medical services at your facility.
FRAUDULENT SERVICES:
Date(s) of Service: [Date(s)]
Type of Service: [Description]
Provider: [Doctor/Department name]
I did NOT receive these medical services, visit your facility on the date(s) listed, authorize anyone to use my information, or give permission for these treatments.
I am concerned that my medical records contain incorrect information that could affect future care, that I am being billed for services I did not receive, and that my insurance benefits may be affected.
I request that you:
- Flag my records to indicate medical identity theft
- Provide me with copies of all records from the fraudulent visits
- Create a separate file for the fraudulent information
- Remove fraudulent information from my active medical file
- Require photo ID for all future appointments in my name
- Provide written confirmation of these actions
Under HIPAA, I have the right to request amendments to my medical records. Please contact me within 10 business days to discuss the steps you will take.
Sincerely,
[Your Signature]
[Your Printed Name]
Enclosures: FTC Identity Theft Report, Police Report, Copy of ID, Proof of address
Documentation & Tracking Sheets
Use these sheets to track every interaction, dispute, and piece of correspondence. Organization is your most powerful weapon in recovery.
Credit Bureau Dispute Tracker
| Credit Bureau | Date Contacted | Method | Confirmation # | Response Due | Follow-up | Status | Resolved |
|---|---|---|---|---|---|---|---|
| Equifax | |||||||
| Experian | |||||||
| TransUnion | |||||||
| Innovis |
Fraudulent Account Tracker
| Company | Acct # (last 4) | Date Opened | Amount | Date Disputed | Method | Status | Closed Date |
|---|---|---|---|---|---|---|---|
| $ | |||||||
| $ | |||||||
| $ | |||||||
| $ | |||||||
| $ | |||||||
| $ |
Total Fraudulent Charges: $
Communication Log
| Date | Time | Company / Agency | Contact Person | Phone / Email | Method | Purpose | Outcome | Follow-up |
|---|---|---|---|---|---|---|---|---|
Correspondence Tracker
| Date Sent | Recipient | Letter Type | Sent Via | Tracking # | Response? | Response Date | Follow-up | Status |
|---|---|---|---|---|---|---|---|---|
| Y / N | ||||||||
| Y / N | ||||||||
| Y / N | ||||||||
| Y / N | ||||||||
| Y / N |
Document Checklist
Keep organized copies of all documents related to your case.
Essential Documents
- FTC Identity Theft Report (print multiple copies)
- Police report (get at least 3 certified copies)
- Government-issued photo ID (copy)
- Proof of address (utility bill, lease, etc.)
Credit Reports
- Equifax credit report (date obtained: )
- Experian credit report (date obtained: )
- TransUnion credit report (date obtained: )
- Annotated copies highlighting fraudulent accounts
Correspondence
- All dispute letters sent (keep copies)
- All responses received from companies
- Certified mail receipts
- Email correspondence printed and dated
Account Documentation
- Bank statements showing unauthorized transactions
- Credit card statements with fraudulent charges
- Account opening documents (if available)
- Account closure confirmations
Specialized Documents (if applicable)
- IRS Form 14039 (Identity Theft Affidavit)
- Medical records showing fraudulent treatment
- Employment records showing false employment
- Court documents (if criminal charges filed)
Emergency Contact Cards
Print these cards, cut them out, and keep them in your wallet. Laminate for durability.
- Equifax: 1-800-525-6285
- Experian: 1-888-397-3742
- TransUnion: 1-800-680-7289
- Equifax: 1-800-685-1111
- Experian: 1-888-397-3742
- TransUnion: 1-888-909-8872
- FTC: IdentityTheft.gov
- Phone: 1-877-438-4338
- IRS (Tax Fraud): 1-800-908-4490
- SSA (SSN Fraud): 1-800-772-1213
- Call all banks and credit card companies
- Place fraud alert: 1-800-525-6285
- File police report
- Report at IdentityTheft.gov
Account Inventory Worksheet
Complete this inventory to track all your accounts. This makes monitoring easier and helps you quickly identify what's been compromised.
Banking
| Bank Name | Account Type | Acct # (last 4) | Phone | Online Login | 2FA? |
|---|---|---|---|---|---|
| Checking | Y / N | ||||
| Savings | Y / N | ||||
| Checking | Y / N | ||||
| Savings | Y / N |
Credit Cards
| Issuer | Card Type | Card # (last 4) | Credit Limit | Phone | Alerts? |
|---|---|---|---|---|---|
| $ | Y / N | ||||
| $ | Y / N | ||||
| $ | Y / N | ||||
| $ | Y / N | ||||
| $ | Y / N |
Loans
| Lender | Loan Type | Acct # (last 4) | Balance | Phone | Auto-pay? |
|---|---|---|---|---|---|
| Mortgage | $ | Y / N | |||
| Auto | $ | Y / N | |||
| Student | $ | Y / N | |||
| Personal | $ | Y / N |
Investment & Retirement
| Institution | Account Type | Acct # (last 4) | Phone | 2FA? |
|---|---|---|---|---|
| 401(k) | Y / N | |||
| IRA | Y / N | |||
| Brokerage | Y / N | |||
| HSA | Y / N |
Payment Services
| Service | Email / Phone Used | 2FA? | Linked Bank (last 4) |
|---|---|---|---|
| PayPal | Y / N | ||
| Venmo | Y / N | ||
| Cash App | Y / N | ||
| Zelle | Y / N | ||
| Apple Pay | Y / N | ||
| Google Pay | Y / N |
Insurance
| Type | Company | Policy # | Phone | Agent |
|---|---|---|---|---|
| Health | ||||
| Dental | ||||
| Vision | ||||
| Life | ||||
| Auto | ||||
| Home/Renters |
Email Accounts
| Email Address | Provider | Recovery Email | Recovery Phone | 2FA Type |
|---|---|---|---|---|
Social Media
| Platform | Username | Email Used | 2FA? | Private? |
|---|---|---|---|---|
| Y / N | Y / N | |||
| Y / N | Y / N | |||
| Twitter/X | Y / N | Y / N | ||
| Y / N | Y / N | |||
| TikTok | Y / N | Y / N |
Utilities & Services
| Service | Provider | Account # | Phone | Auto-pay? |
|---|---|---|---|---|
| Electric | Y / N | |||
| Gas | Y / N | |||
| Water | Y / N | |||
| Internet | Y / N | |||
| Phone | Y / N |
Recovery Timeline Tracker
Track your recovery from discovery to full resolution. This documentation is critical for legal proceedings and insurance claims.
Discovery
Type of Identity Theft (check all that apply)
- Financial / Credit Card
- Bank Account
- Tax-Related
- Medical
- Employment
- Criminal
- Social Media
- Other:
Week 1 Timeline
| Date | Action Taken | Time Spent | Result / Notes |
|---|---|---|---|
Weeks 2โ4 Timeline
| Date | Action Taken | Time Spent | Result / Notes |
|---|---|---|---|
Months 2โ6 Timeline
| Date | Action Taken | Time Spent | Result / Notes |
|---|---|---|---|
Ongoing Monitoring
| Month | Reports Checked | New Issues? | Action Taken | Status |
|---|---|---|---|---|
| Month 7 | Y / N | Y / N | ||
| Month 8 | Y / N | Y / N | ||
| Month 9 | Y / N | Y / N | ||
| Month 10 | Y / N | Y / N | ||
| Month 11 | Y / N | Y / N | ||
| Month 12 | Y / N | Y / N |
Financial Impact Tracker
| Description | Amount | Recovered? | Recovery Date |
|---|---|---|---|
| Fraudulent charges | $ | Y / N | |
| Fees (overdraft, late, etc.) | $ | Y / N | |
| Interest charges | $ | Y / N | |
| Legal fees | $ | Y / N | |
| Credit monitoring costs | $ | Y / N | |
| Other | $ | Y / N |
Resolution Milestones
- All fraudulent accounts identified
- Credit bureaus notified
- Fraud alerts placed
- Credit frozen
- Police report filed
- FTC report filed
- All dispute letters sent
- Received first response from creditor
- First fraudulent account closed
- All fraudulent accounts closed
- Credit report cleaned
- Credit score recovered
- Extended fraud alert placed
- Legal matters resolved
- Full recovery achieved
Get Help
Identity Theft Resource Center
Free victim assistance and case management
888-400-5530
idtheftcenter.orgFederal Trade Commission
Official identity theft reporting and recovery plans
1-877-FTC-HELP (382-4357)
identitytheft.govAARP Fraud Watch Network
Scam tracking and victim support helpline
877-908-3360
aarp.org/money/scams-fraudDo's
- Act quickly โ time is critical
- Document everything in detail
- Keep all correspondence organized
- Follow up on all disputes
- Continue monitoring even after resolution
- Use certified mail for important letters
- Request written confirmation of all actions
Don'ts
- Don't ignore warning signs
- Don't pay fraudulent debts
- Don't throw away documents without shredding
- Don't give up if initial attempts don't work
- Don't assume it's resolved until confirmed
- Don't forget to monitor children's credit too
- Don't share personal information unnecessarily
Download the Complete Kit
Get the printable PDF version with fillable fields, all templates, and tracking sheets.
This kit provides general guidance for identity theft victims. It is not legal advice. For specific legal questions, consult with an attorney.