If a claim you didn't file, an address you never changed, or a policy you never opened showed up on your records, you have a dispute. Call the insurer on an official number. Put that dispute in writing too.
Protect the account at the same time, and don't wait until every document is in order.
The Federal Trade Commission's identity theft tools can help you organize the broader recovery, while the insurance problem itself belongs to the insurer's claims, fraud, or account-review process. You can't swap one for the other.
Are you still covered today? Ask that during the first call, especially if a cancellation notice showed up or you found an unfamiliar claim.
Call the insurer using a trusted number
Pull the number from your insurance card, the policy packet, a billing statement, or the company's official website instead of trusting a random message. Skip anything that arrived in a suspicious note. Suspicious messages often include fake support details.
Tell the representative this: "I believe my identity was used in connection with this policy or claim. I want to dispute the activity and open a fraud or identity theft review."
Get a case number, the person's name, and a secure channel for documents. Ask which item is disputed, when it was added or changed, and whether coverage is active right now.
That first call won't always close the file. A documented case still gives you a follow-up reference.
Write down the date, time, number you called, who spoke with you, what they said, and any promised next step, even if the conversation felt ordinary, because those small details tend to matter later when the same story has to be repeated.
Work through the problem in a practical order
Start with the insurer. Then build the rest of your recovery file.
- Secure your account access. Change the password for your insurance login and email account, turn on multi-factor authentication if the service offers it, and review saved contact details, payment methods, and authorized users.
- Create a simple timeline. Note when you found the problem, what looked wrong, and any notices you received. Include claim numbers, policy numbers, dates, and dollar amounts only if they appear in your records.
- Make the insurer's report in writing. A call is useful, but a secure message, online submission, or letter gives you a record of what you disputed.
- Report the identity theft to the FTC. IdentityTheft.gov can help you create a recovery plan based on what happened.
- Send supporting documents through the channel the insurer specifies. Keep copies of every file and confirmation screen. Don't send passwords or account access codes.
- Follow up on the date the insurer gives you. If it doesn't provide a date, check in after a reasonable interval and refer to the case number.
Turns out, a clean timeline is often more useful than a large pile of unlabeled documents.
Gather evidence that fits the dispute
A disputed auto claim needs different paperwork than an unauthorized address change or a policy opened in your name. Match the records to that event.
Pull these if you have them:
- Insurance notices, declarations pages, claim letters, billing statements, and cancellation notices.
- Screenshots of account changes, emails, texts, or alerts that show the disputed activity.
- Your timeline of calls, messages, dates, and case numbers.
- Your FTC identity theft report or recovery-plan confirmation.
- A police report, if you file one or the insurer asks for one.
Send copies, not originals. If the insurer wants identification, ask whether it has a secure upload portal and what information it actually needs. Redact unrelated account numbers where you can.
A police report can add another dated record of the incident. Don't delay notifying the insurer while you wait on one. Ask the company whether it needs a report for its review. Not every identity theft dispute has the same requirement.
Use the FTC recovery plan for the wider identity theft problem
You can describe what happened at IdentityTheft.gov. The FTC's Recovering from Identity Theft material shows how a consumer can answer questions, document the crime, and receive a personalized letter to request corrections from a company. Keep the report confirmation and any letters the tool generates.
Several organizations may ask for the same facts. Those files help you stay consistent.
An FTC report is a record of the identity theft. The insurer still reviews the facts tied to its policy or claim file. No single FTC form establishes insurance coverage, reverses a claim, restores coverage, or corrects a policy record.
Identify exactly what needs to be corrected
Use precise language. Saying "my insurance was hacked" may not tell the company whether you're disputing a claim, a new policy, a payment, or a cancellation. You have to name the event.
| What you found | Ask the insurer to review | Written result to request |
|---|---|---|
| A claim on your existing policy | Claim number, loss date, status, and the activity you dispute | The investigation outcome and whether records will be corrected if fraud is confirmed |
| An unfamiliar policy in your name | Policy number, effective dates, billing records, and contact details used | Confirmation of the policy's status and what the company will do with the disputed account |
| An unauthorized address, driver, beneficiary, or contact change | When the change occurred and how it was requested | Confirmation that the correct details were restored |
| A cancellation or nonrenewal notice | The stated reason, effective date, and current coverage status | The available review, reinstatement, or appeal steps |
The insurer's internal procedures govern its review of account activity and claims. The policy contract and applicable state insurance rules can also matter, especially for cancellation, nonrenewal, and coverage questions. Those rules vary by state and insurance product.
Send a focused written dispute
A short message is usually stronger than a long theory about what might have happened. State the disputed event, say that you didn't authorize it, list your attachments, and ask for a written response. Keep the theory out of it.
Here's wording you can adapt for a secure message, letter, or insurer portal:
Subject: Identity theft dispute for policy [policy number]
I am disputing [describe the claim, policy, payment, or change] dated [date]. I did not authorize this activity and believe my identity may have been used without permission.
Please investigate the disputed activity, preserve the related records, and tell me in writing what additional information you need. I request correction of inaccurate policy or claim records if your investigation confirms fraud.
Attached are copies of [list documents].
Name: [your name]
Best contact method: [phone or email]
Insurer case number: [case number]
Use the submission method the insurer directs. If you mail documents, keep a copy and a delivery record. If you upload files, save the confirmation screen or email.
Escalate when the insurer's response is incomplete
Start inside the company. Ask for a supervisor, fraud specialist, claims representative, or written appeal instructions, depending on the issue.
If nobody acknowledged your report, follow up in writing with the case number and the date of your first contact. Ask the insurer to confirm it received your documents.
Request the reason in writing when a denial doesn't add up. Ask what information, policy term, or record the insurer relied on, and whether an internal review or appeal is available. Name the exact correction still needed if an account error remains, such as removal of an unauthorized contact change or confirmation that a disputed policy is closed. Put the request in writing too.
If the insurer won't address the issue, consider filing a complaint through the official website of the state insurance department that regulates the policy. Include your timeline, case number, written dispute, and the insurer's response. The department's process and authority can differ by state.
Thing is, the urgent question may be whether you have active coverage right now. Get the insurer's answer in writing before you rely on the policy for a new claim or drive under the assumption that coverage remains in force. Don't treat a maybe as coverage.
Keep credit and insurance issues separate
A policy dispute isn't automatically a credit-report dispute, so check for unfamiliar financial activity and follow the steps in your FTC recovery plan when another company is involved, keeping separate folders or notes for each organization because the insurer needs facts about the policy or claim while a bank, lender, or credit reporting company may need different records and a separate dispute.
Don't assume an insurance correction will fix a different account. This is where people lose track of paperwork, especially after several calls and notices arrive close together.
Avoid mistakes that slow the review
Mailing original documents is a bad idea, and so is dialing a number that arrived in a suspicious message or pasting passwords into a regular email. Verification codes and full account access don't belong there.
A verbal assurance is not enough on its own, so ask for a case number and written confirmation. Stick to facts you can support instead of accusing a specific person when you don't have proof.
To be honest, the useful move is small and specific. Call the insurer using a trusted number, get a case number, and send a short written dispute today. Then you'll want to create or update your recovery plan at IdentityTheft.gov and keep every record in one place.