Call the affected provider first. If a card, bank account, login, loan, or mobile account is exposed, ask that company to secure it. Then contact the reporting agencies.

Next, create an identity theft report at IdentityTheft.gov. The FTC service builds a report and a recovery plan.

Scripts keep calls on point. They don't replace a written dispute, a credit freeze, or an IRS form.

This is U.S. consumer guidance. Use a number from an official website, your account app, or a current statement. Don't trust a number in a text, email, pop-up, or unexpected call.

Stop the active harm first

Identity theft is not one problem. A card issuer may handle a bad charge, while a credit bureau handles your file and the IRS handles tax fraud.

Thing is, an agency report can support your case. It usually can't stop a transfer, login, or card already in motion.

1. Contact the affected company. Tell the bank, card issuer, lender, merchant, carrier, or payment app that you didn't authorize the activity. Ask it to secure the account and open a fraud case.
2. Save the evidence. Keep statements, screenshots, emails, letters, alerts, and the date you found each problem.
3. Protect your credit file. If someone opened, or may open, credit in your name, choose between a fraud alert, a freeze, or both.
4. File the FTC report. Use IdentityTheft.gov.
5. Handle special cases separately. Tax fraud goes to the IRS, and Social Security fraud goes to the SSA Office of Inspector General. Use a police report when a business or local office asks for one.

Don't wait for a police report to secure an account.

A fraud alert, credit freeze, FTC report, and Form 14039 do different jobs

A fraud alert is not a freeze. The FTC says one nationwide bureau can take a fraud alert and notify the other two. A freeze takes a separate request with each bureau. It stays until you remove it. See the FTC's credit freeze and fraud alert guidance.

An initial fraud alert lasts one year, according to Experian's fraud alert information. A freeze does not remove an existing fake account. Dispute it with the bureau, creditor, or both.

Form 14039 belongs to the IRS. It isn't the FTC form.

Prepare one short call sheet

Write the facts before you dial. Keep the note plain: account name, last four digits, date found, amount or activity, and any case numbers.

Use the last four digits of the account or Social Security number in your opening line. A verified representative may need more information through the company's normal authentication. Don't volunteer passwords, PINs, security answers, or one-time codes.

To be honest, people often overshare to sound credible. Clear dates beat a long story.

Write it down even if it feels fussy, because two days later the representative's name, the time zone, and whether the agent said review or closed can blur together and you're trying to rebuild a basic call from memory.

Script for a bank, card issuer, lender, carrier, or payment app

Start with the company tied to the loss or takeover. Say what happened and what you need, then give a safe callback method.

"I believe my personal information was used without my permission. On [date], I found [unauthorized transaction, new account, login change, or transfer] involving [account ending in last four digits]. I did not authorize it. Please secure the account, open a fraud case, and tell me the immediate steps. What is the case number, and where should I send supporting documents?"

If access changed, add this:

"Please check whether my contact information, password, recovery email, mailing address, or authorized users were changed. I need to know what changed and when."

Ask whether you need a formal dispute by app, secure portal, mail, or another channel. The path can differ for a credit card, checking account, payment app, loan, or mobile account.

Don't demand instant removal. Ask for the fraud case number, the document route, and the next deadline.

FTC identity theft report: start online

The main FTC route is IdentityTheft.gov. File there to create an Identity Theft Report and a recovery plan based on your details.

If you need help using the service, use simple language:

"I need help reporting identity theft through IdentityTheft.gov. I discovered [brief description] on [date]. I want to create an Identity Theft Report and follow the recovery steps for my situation."

Save the report and plan. A business may ask for them.

Don't describe this report as IRS Form 14039. That form is for tax-related identity theft.

Exact words for credit bureau calls

Decide what you want first. For a freeze, ask each bureau to restrict access to your file. For an initial fraud alert, ask one nationwide bureau to add the alert and notify the other two.

For a freeze, contact Equifax, Experian, and TransUnion individually through official channels. Freezing and unfreezing are free, but each bureau controls its own freeze.

Security freeze script

"I want to place a security freeze on my credit file because I suspect identity theft. Please tell me the verification steps, confirm when the freeze is active, and give me a confirmation number. I also need the secure process to lift it later if necessary."

Initial fraud alert script

"I want to place an initial fraud alert because I suspect identity theft. Please confirm that the alert will be added to my file and that the other nationwide credit bureaus will be notified. What is my confirmation number?"

Fraudulent account dispute script

"I am disputing an account I do not recognize: [creditor name and account ending in last four digits]. I believe it resulted from identity theft. I can provide my Identity Theft Report and supporting documents. Please give me the dispute reference number and the secure way to submit evidence."

Review your credit files for unfamiliar accounts, inquiries, addresses, or collections. A freeze blocks future applications. A dispute fixes what is already showing.

IRS, Social Security, and police calls need narrower details

Use IRS Form 14039 only when tax identity theft applies. That can mean a rejected return, an IRS notice, or a suspected fraudulent return. The IRS says eligible taxpayers can file Form 14039 online or use the paper form for mail or fax. Read the IRS's Form 14039 guidance before submitting.

IRS identity theft script

"I believe my tax information may have been used without my permission. The issue is [rejected tax return, IRS notice, suspected fraudulent return, or other tax problem]. I want to follow the correct identity theft process. Please tell me whether Form 14039 or identity verification is required and give me a reference number."

After confirming an IRS letter is real, follow its instructions. Some taxpayers who receive Letter 5747C may need to verify identity in person at a Taxpayer Assistance Center.

Avoid duplicate Form 14039 filings. The IRS says duplicate forms and status calls can delay the case. Its identity theft victim assistance page explains the workflow.

Social Security fraud script

"I want to report suspected fraud connected to Social Security. On [date], I found [suspicious notice, account issue, payment issue, or impersonation attempt]. I can provide details through the official reporting process. Please tell me the correct route and how to preserve this information."

Report suspected Social Security fraud through the SSA Office of Inspector General reporting channel. If you need a change to your Social Security account or benefit payment, use SSA's verified account-service channel. An OIG fraud report isn't an account fix.

Local police report script

"I want to report suspected identity theft. I discovered [brief facts] on [date]. The information involved was [account, identifying information, or document], and the known fraudulent activity is [brief description]. I have supporting records and an FTC Identity Theft Report. What does your department need to create a report, and what is the report number?"

Use a non-emergency route unless someone is in immediate danger. Departments set their own procedures. Some may ask you to report online or in person.

Ask businesses for records tied to the fraud

A creditor, merchant, lender, or debt collector may have records that show how the fraud happened. The FTC says Fair Credit Reporting Act Section 609(e) requires businesses to give identity theft victims, or law enforcement at the victim's request, records tied to the theft. See the FTC's guidance on identity theft records.

Prior access isn't a valid reason to deny it.

Use this request:

"I am requesting records related to identity theft involving [account or transaction]. I am the identity theft victim and can provide my Identity Theft Report. Please tell me how to submit a request for the records tied to this account or transaction."

Ask for the submission address, case number, and response method. Keep a copy of the request and proof you sent it.

Keep a call log that another person can understand

Use one line for every contact:

[date and time] | [organization] | [representative name or ID] | [case number] | [what was promised] | [next date]

Turns out, a case number only helps when it's tied to a promise. Write whether the company froze a card, closed access, opened a dispute, requested documents, or sent you elsewhere.

Send copies through the secure route the organization gives you. Keep originals somewhere safe.

Mistakes that can slow recovery

The worst delay usually starts with a bad phone number. If a text, email, pop-up, or unexpected caller gives you a number, stop. Find the official channel yourself.

A freeze doesn't dispute an account already on your credit file.

Don't send duplicate IRS Form 14039 forms. Don't keep calling the IRS just for status. The IRS says this can delay handling.

Never share a password, PIN, or one-time code. Save case numbers, confirmations, and documents.

Make one verified call now to the provider that can still authorize money, access, or service. Then protect your credit files, create the FTC report, and keep the log open while each organization works its part.