File an FTC identity theft report through IdentityTheft.gov and report the fraud to every affected business before you wait on extra paperwork. Call first if an account is being drained.
Someone else may already control your login, so call that business at the same time you file.
Do you need one identical complaint for the FTC, the police, and the IRS? Most U.S. consumers will not. Each office serves a different job.
This is practical information for U.S. consumers, not legal advice.
Make the FTC identity theft report
IdentityTheft.gov walks you through reporting identity theft and building a personal recovery plan, and the FTC says its IdentityTheft.gov overview can help consumers show businesses that someone stole their identity. Use that report in your own recovery work.
That finished report still will not automatically close an account, remove a credit entry, reverse a transaction, or start a criminal investigation.
Don't wait for every document before telling a bank about an active problem. Fast notice can help the business secure the account.
-
Secure any active accounts. Change passwords for affected accounts, review recovery email addresses and phone numbers, and turn on multi-factor authentication if it's available. If you can't access an account, use the company's verified recovery or fraud channel.
-
Write a simple timeline. Include the accounts involved, unfamiliar transactions, notices received, and any contact you have had with a business. Note when you first noticed the problem.
-
Report the known facts at IdentityTheft.gov. Don't guess about dates, account numbers, or the person responsible. Describe the fraud you can identify.
-
Save your recovery plan and report. Record the report date and any reference number shown by the site. Keep copies in a folder you control.
-
Bring the report to affected businesses. Contact each bank, card issuer, lender, insurer, merchant, or credit bureau separately. Ask what its fraud or dispute process requires.
Stop new damage while reports are pending
Turns out, a complaint creates a record, and it still won't block a thief from using an open account while your reports sit pending. Act on what you can see now.
| What you notice | Practical next move | What to save |
|---|---|---|
| Unfamiliar card or bank transaction | Contact the financial institution through a number on its app, statement, or card | Transaction date, amount, screenshots, and call notes |
| A new credit account or inquiry | Consider a security freeze with each nationwide credit reporting company and review your reports | Creditor name, account number, and report date |
| Stolen email, phone, or password | Reset passwords, review recovery settings, and sign out of unfamiliar sessions where available | Security alerts and account-change confirmations |
| Lost identification or stolen mail | Contact the issuer or agency that issued the document and consider a local police report if physical theft occurred | Copies of notices, replacement requests, and report numbers |
Don't trust a phone number or link in an unexpected email, text, or pop-up. Use contact details you find independently.
Use police and IRS reports for the problems they cover
Police and tax reports aren't automatic second steps for every case. They matter when the facts call for them.
When a police report helps
A local police report can be useful if you know or suspect the thief, the identity theft involved stolen mail or physical documents, there was a break-in or threat, or a creditor asks for one. Local departments set their own intake rules. Intake can be online, in person, or by phone.
Ask for the report or case number. Give the officer a clear timeline and copies of relevant documents, not the originals. Request a copy of the paperwork.
A police report records what you reported, and it doesn't guarantee an investigation or reimbursement.
When to use the IRS identity theft process
An electronic filing may be rejected because a return may already exist. You may receive an IRS notice about income or a return you do not recognize. Use the IRS identity theft process for tax-related misuse, such as a tax return filed in your name. The FTC report documents the broader identity theft, and it won't resolve a tax-account problem by itself. Follow the instructions in any verified IRS notice, and use current IRS identity theft guidance rather than sending tax documents through an email link.
Take the report to the company that shows the fraud
Each company still needs to hear from you directly about credit report entries, fraudulent accounts, and unauthorized transactions, because each business uses its own verification and investigation process. The FTC report can support that conversation.
Thing is, a report only works if the right organization receives it. Tell the company exactly what you dispute. Say when you noticed it and which account or transaction is involved.
Ask how it wants documents delivered. Request written confirmation that it opened a fraud or dispute case.
Here's a message you can adapt for a bank, creditor, insurer, or debt collector:
Subject: Identity theft claim for account ending in (last four digits)
I believe this account or transaction resulted from identity theft. I did not open or authorize it. I filed an FTC identity theft report on (date) and can provide a copy on request.
Please tell me the next steps, the documents you need, and the reference number for this case.
Don't ignore a collection letter for a debt you don't recognize, even if you already filed the FTC report, and tell the collector or creditor that you believe the account involves identity theft. Keep a copy of your message. Ask for account details in writing.
Keep one evidence file
A date and a case reference often matter more than a perfect narrative, so a plain folder is enough whether you keep a paper file, a secure drive, or both.
Keep these items together:
- Your FTC identity theft report and personal recovery plan
- Police paperwork or IRS notices, if those apply
- Statements, credit report pages, transaction screenshots, and letters
- A contact log with dates, names, phone numbers, and case numbers
- Copies of documents you sent and proof of delivery where available
Don't send original identification documents unless an agency or business clearly requires them. If a business asks for more information, write down exactly what it requested before you send anything.
Know what each report cannot do
Your bank, card issuer, lender, insurer, credit bureau, or debt collector still has its own fraud, dispute, and verification process. Different systems control different parts of recovery.
The FTC report helps document identity theft, a police report documents a local complaint, and tax-account issues go to the IRS.
A credit freeze can help limit new credit applications. It does not remove existing accounts, and it won't stop misuse of an account already open.
Keep the payment type clear, too. A disputed credit card charge, a bank-account transfer, a loan opened in your name, and a tax return problem may follow different procedures.
If a business response stalls
Read the reason carefully if the company denies your claim. Respond to the specific missing information or disputed fact.
Written case status is worth asking for, so request it and keep it. Have the representative put any unclear instructions in writing, then use the company's formal complaint or escalation channel and save every response.
To be honest, recovery can involve repeating the same facts to several companies, which is frustrating, and that is why the timeline and contact log matter so much.
Before agreeing to pay a disputed balance or signing a repayment plan, ask the business to explain how that action could affect its identity theft review. Document and dispute new credit report entries and collection notices separately.
Write down the first date you noticed fraud, the affected account, and the business involved. You'll create the FTC report next. Then contact the organization where the immediate damage is happening.