Your identity was stolen? What to do in the first 24 hours
Identity stolen? Learn what to do in the first 24 hours to secure accounts, freeze your credit, report fraud and protect your information.
At a glance
- The first 24 hours after identity theft are critical for limiting further damage.
- Contact your bank, change compromised passwords and secure important accounts immediately.
- Freeze your credit for free with all three major credit bureaus to help prevent new accounts.
- Report identity theft to the FTC, document suspicious activity and keep monitoring your accounts.
Discovering that your identity has been stolen can leave you feeling angry, frightened and unsure where to begin. Maybe someone drained your bank account, opened a credit card in your name or filed a fraudulent tax return using your Social Security number. Whatever happened, your next steps can help limit the damage.
The first 24 hours are especially important because identity thieves may continue using your information until you secure your accounts. Fortunately, you can take several steps right away to protect yourself and begin recovering.
Why the first day is so important
Identity theft can quickly spread beyond the account where you first discovered the problem. Someone who gains access to your email, for example, might use it to reset passwords for your banking, shopping or other accounts. That’s why acting quickly can make a difference.
However, you don’t have to solve everything in one day. Identity theft recovery can take weeks or even months, depending on the circumstances. Your immediate goal is to stop additional fraud, protect your information and create a record of what happened.
What to do in the first 24 hours after identity theft
The following checklist breaks the process into manageable steps. The time frames are guidelines, so prioritize active fraud and compromised accounts rather than waiting for a particular hour.
Hour 1: Stop the immediate damage
Start with the accounts most likely to expose your money or personal information.
- Contact your bank or credit card company. If someone accessed your account or made unauthorized transactions, call the number on your card or the institution’s official website. Report the fraud and ask whether the account should be locked, frozen or replaced. Also ask about disputing unauthorized transactions.
- Change compromised passwords. Start with the affected account and your primary email address if it may have been exposed. Use strong, unique passwords and a trusted device.
- Turn on two-factor authentication (2FA). Protect your email, financial accounts and other important services. Use an authenticator app or passkey when supported.
- Check for unauthorized account changes. Review recovery email addresses, phone numbers, forwarding rules and active sessions. Sign out of unfamiliar devices.
Important: If money has been stolen, report it to your financial institution immediately. Federal protections and reporting deadlines vary by account and transaction type.
Hours 2 to 4: Protect your credit
Next, make it harder for criminals to open additional accounts using your personal information.
- Place a fraud alert on your credit file. Contact Equifax, Experian or TransUnion. The bureau you contact must notify the other two. An initial fraud alert is free and generally lasts one year.
- Freeze your credit with all three bureaus. A credit freeze is free and restricts access to your credit reports, making it harder for someone to open new credit accounts in your name. You must contact each bureau separately.
- Review your credit reports. Visit AnnualCreditReport.com to check reports from all three bureaus. Look for unfamiliar accounts, inquiries and incorrect personal information.
You can freeze your credit even if you expect to apply for a loan or credit card soon. Simply lift the freeze temporarily when necessary.
Hours 4 to 8: Report the identity theft
Creating an official record can help you dispute fraudulent accounts and recover your identity.
- Report identity theft to the Federal Trade Commission. Visit IdentityTheft.gov to create an identity theft report and receive a personalized recovery plan.
- Contact local police when appropriate. A police report may be helpful if your identification was stolen, you know who committed the theft or a creditor requests additional documentation.
- Save your report information. Keep copies of your FTC report, police report if applicable and confirmation numbers.
An FTC identity theft report can help you exercise certain rights under federal law, including requesting that credit bureaus block fraudulent information. However, you generally do not need to file an FTC report before notifying a bank about unauthorized transactions.
Hours 8 to 16: Secure your other accounts
Identity thieves sometimes try to use stolen information across multiple services.
- Review other important accounts. Check email, banking, retirement, shopping and payment accounts for suspicious activity. Replace any reused passwords.
- Contact your mobile carrier. If you suspect a SIM swap or unauthorized phone number transfer, report it immediately. Ask about account PINs, number locks and additional verification.
- Notify your employer when necessary. A compromised work email, payroll account or employee benefits account may expose additional information.
- Check your devices. If malware or phishing may have caused the theft, update your software, run a strong antivirus software scan where supported and remove suspicious apps or browser extensions.
- Protect your tax identity if necessary. If someone used your Social Security number to file a fraudulent tax return, contact the IRS. You may need to complete Form 14039, Identity Theft Affidavit. You can also request an Identity Protection PIN (IP PIN) at IRS.gov to help prevent fraudulent federal tax returns using your information.
Hours 16 to 24: Document everything
Once you’ve addressed the most urgent threats, organize your recovery efforts.
- Create a fraud recovery record. Write down dates, times, account numbers or case references, representatives’ names and the steps you’ve taken. Store sensitive details securely.
- Make a follow-up checklist. Identify remaining accounts, disputes and organizations you still need to contact.
- Schedule additional credit checks. Continue reviewing your credit reports and financial statements because suspicious activity may appear later.
- Save copies of important documents. Keep correspondence, dispute letters and identity theft reports in a secure location.
Common identity theft recovery mistakes to avoid
Even when you’re moving quickly, certain mistakes can create additional problems.
- Trying to handle everything at once. Focus on active fraud and the most sensitive accounts first. Other tasks can follow.
- Assuming a credit freeze fixes existing fraud. A freeze helps prevent certain new accounts from being opened, but it doesn’t remove fraudulent accounts or stop unauthorized transactions on existing ones.
- Calling numbers from suspicious messages. Always contact institutions through independently verified phone numbers or official websites.
- Failing to document conversations. Keep records of who you contacted, what they said and any deadlines they provided.
- Stopping after securing one account. Review other accounts that may share passwords or recovery information.
What can wait beyond the first day
Some recovery tasks will continue beyond the first day, including disputing fraudulent accounts, correcting credit reports and following up with creditors. However, report unauthorized financial transactions immediately. Federal protections and reporting deadlines vary depending on the type of account and transaction. Your initial priority is to stop additional fraud and secure your information.
How identity theft protection can add another layer of security
Recovering from identity theft is rarely just one phone call; it often means juggling multiple institutions, disputes and follow-ups at once, which is exactly where dedicated recovery support becomes valuable.LifeLock (CyberGuy Deal: 24% off provides U.S.-based Restoration Specialists who can help organize the recovery process, from explaining next steps to helping coordinate with affected institutions.
What LifeLock can help with
- Identity recovery support: A dedicated Restoration Specialist to help guide you through disputes, paperwork and phone calls during a stressful time.
- Identity theft coverage: If you become a victim, that support extends to real financial backing — LifeLock Total provides up to $3 million in coverage, including up to $1 million each for stolen funds, eligible personal expenses, and the lawyers and experts who help resolve your case, so recovery doesn’t have to come entirely out of your own pocket.
- Ongoing monitoring: Continued alerts after the initial incident, since identity thieves sometimes attempt further fraud using the same stolen information.
- A starting point when you’re not sure what to do next: A 24/7 Virtual Advisor for guidance in the moment, before you’ve had time to research every step yourself.
LifeLock can’t undo fraud that has already occurred or guarantee a particular outcome from a dispute, but having organized, knowledgeable support during those first chaotic hours can make a meaningful difference in how manageable the whole process feels.
CyberGuy LifeLock deal
CyberGuy readers can save 24% on LifeLock annual plans with options for individuals, couples and families.
If you’re helping someone else through this
Many people go through this first-24-hours checklist not for themselves, but for an aging parent, a spouse or another family member. If you’re the one helping, the same order of operations applies: contain, freeze, report, secure, document, but plan on the process taking longer, since you may need permission or account access to act on someone else’s behalf. Patience matters here too: this can be a frightening experience for the person affected, and calm, steady support often makes as much difference as the technical steps themselves.
Recovery moves smoother when you treat the first day as triage rather than a finish line. Contain what you can, document what you learn, and trust that the remaining steps will fall into place once the most urgent accounts are secured and the right institutions have finally been notified of what actually happened to you.
LifeLock’s Core, Advanced and Total plans scale their monitoring limits to match how complex someone’s accounts are, with Total covering the broadest range for people with investments or property. A Restoration Specialist helps coordinate recovery, though you’ll still verify details yourself.
In the days that follow
Once the first 24 hours are behind you, continue working through your list: dispute each fraudulent charge or account individually, follow up on your identity theft report, request that fraudulent accounts be removed from your credit reports, and keep monitoring your accounts for several months. Recovery timelines vary, but most people see meaningful progress within a few weeks of taking these initial steps.
It can also help to keep a trusted contact in the loop during those first hours, a spouse, adult child or close friend who can make calls, take notes or help you think clearly when stress makes it hard to focus. Identity theft recovery is not a test of handling everything alone, and a second set of eyes can catch something you might otherwise miss during a long, stressful recovery process.
Related Links:
- The alarming surge of home title theft and how to protect your property
- How to stop scam texts from targeting aging parents
- Why scammers are targeting grandparents harder than ever
Kurt’s key takeaways
When someone steals your identity, it’s easy to feel like you’ve lost control of your financial life. I’ve seen how quickly one compromised account can lead to bigger problems, especially when criminals get access to email or other personal information. My advice is to focus on what you can control right away. Contact your bank, secure your most important accounts and freeze your credit with all three bureaus. Then report the theft and keep a record of every conversation. You don’t need to pay a company to take these initial steps. I also recommend keeping an eye on your accounts long after the first day. Identity thieves may try to use stolen information again, even after you’ve addressed the original problem. A little extra attention now can help you catch suspicious activity before it causes more damage.
Have you or someone you know ever dealt with identity theft? What was the hardest part of getting everything back under control? Let us know in the comments below.
FOR MORE OF MY TECH TIPS & SECURITY ALERTS, SUBSCRIBE TO MY FREE CYBERGUY REPORT NEWSLETTER HERE
We created this article in partnership with LifeLock
Copyright 2026 CyberGuy.com. All rights reserved. CyberGuy.com articles and content may contain affiliate links that earn a commission when purchases are made.
What's Your Reaction?
