Identity theft checklist: the first 48 hours, hour by hour

Identity theft. Updated 2026-09-13. About 5 minutes to read.

Call your bank, secure your email, freeze your credit, then file an official report before you start disputing accounts.

If someone has opened an account, filed a tax return or made charges in your name, act in a set order. First stop more damage, then lock your credit, then report it officially, then dispute each fraudulent item. The official report matters because banks, bureaus and debt collectors ask for it.

This checklist covers the US, Australia, the UK and Canada. Keep a notebook or a document open from the first call, and write down the date, the person you spoke to and any reference number every time.

Hours 0 to 2: stop the damage

  1. Call the fraud line of any bank or card company where you saw misuse, using the number on your card or statement. Ask them to block or close the affected account.
  2. Change your email password and turn on two-factor authentication, because email is how criminals reset everything else.
  3. Change passwords on your bank, phone carrier and any account that was accessed, and sign out all other sessions.
  4. If your phone suddenly lost signal or you got an unexpected SIM change message, call your carrier from another phone and ask for the number to be locked.
  5. Start your log: date, time, company, person spoken to and reference number.

Hours 2 to 12: lock your credit

  • US: place free freezes at Equifax, Experian and TransUnion, and a fraud alert at one bureau, which must pass it to the other two.
  • Australia: request a free ban on your credit report with Equifax and Experian. It lasts 21 days and can be extended.
  • UK: check your credit reports at Experian, Equifax and TransUnion, and apply for Cifas Protective Registration.
  • Canada: place fraud alerts with Equifax Canada and TransUnion Canada, or freezes if you live in Quebec or Ontario.

Hours 12 to 24: report it officially

  • US: report at IdentityTheft.gov. You get an FTC Identity Theft Report, a personal recovery plan and pre-filled letters for bureaus, businesses and debt collectors. For help in other languages call 1-877-438-4338.
  • US tax fraud: if the IRS tells you to, or you cannot use its identity verification service, file Form 14039, the Identity Theft Affidavit, through IdentityTheft.gov or with the IRS.
  • Australia: call IDCARE on 1800 595 160 for free, tailored support. Report cybercrime through ReportCyber at cyber.gov.au and scams to Scamwatch.
  • UK: report to Report Fraud, the service that replaced Action Fraud, at reportfraud.police.uk or 0300 123 2040 if you live in England, Wales or Northern Ireland. In Scotland, call Police Scotland on 101.
  • Canada: report to the Canadian Anti-Fraud Centre on 1-888-495-8501 or through reportcyberandfraud.canada.ca, and contact your local police.

Some creditors still ask for a police report. File one with your local police if a company requires it or if you know who the thief is.

Hours 24 to 48: dispute and document

  1. Get your credit reports. In the US, weekly reports from all three bureaus are free at AnnualCreditReport.com.
  2. List every account, inquiry and address you do not recognise.
  3. Call the fraud department of each company with a fraudulent account and ask it to close the account and confirm in writing that you are not responsible.
  4. Send dispute letters to each bureau. US victims can use the pre-filled letters from IdentityTheft.gov and ask the bureaus to block fraudulent information using the Identity Theft Report.
  5. Keep copies of everything you send and receive in one folder.

Special cases: tax, medical, ID documents and mail

  • Tax: US victims can get an IRS Identity Protection PIN, which stops anyone filing a return with their Social Security number.
  • Medical: read every insurer statement for treatment you did not receive and ask your providers to correct your records.
  • Driver's licence or passport: report it lost or stolen to the issuing agency and ask about a replacement. In Australia, IDCARE can advise which documents to replace.
  • Mail: if post is missing, check for a change of address you did not make. US residents can sign up for USPS Informed Delivery to see incoming mail.
  • Phone number: a SIM swap needs a call to your carrier and a port-out lock afterwards.

After 48 hours: the recovery weeks

  • US victims with an Identity Theft Report can place an extended fraud alert, which lasts seven years.
  • Check your credit reports again every few weeks until every fraudulent item is removed.
  • Answer debt collector letters in writing, include your Identity Theft Report, and do not pay a debt that is not yours.
  • Keep your credit freeze in place long term. It costs nothing.

What not to do

  • Do not pay a company that cold-calls offering to recover your identity or your money. That is a common follow-up scam.
  • Do not ignore letters about debts you did not take on. Unanswered, they can become judgments.
  • Do not rush to change your Social Security number. It is rarely granted and does not erase old records.

Frequently asked questions

Do I need a police report for identity theft?

In the US, an FTC Identity Theft Report from IdentityTheft.gov is enough for most disputes. File a police report as well if a creditor asks, if you know the thief, or if your country's process expects one.

How long does it take to recover from identity theft?

Simple card fraud can be fixed in days. Fraudulent loans, tax returns or collections can take months. Tackle it in the order above, keep a log, and follow up in writing.

What does an FTC Identity Theft Report actually do?

It is official evidence that you reported the theft. You can use it to place a seven-year extended fraud alert, ask bureaus to block fraudulent information, and show businesses and collectors that you are a victim.

Can I get my money back?

Often, if you act fast. Card issuers generally refund unauthorised charges. For US debit cards and bank transfers, federal rules limit your loss to 50 dollars if you report within two business days of noticing, and the limit rises if you wait.

Who do I call in Australia, the UK or Canada?

Australia: IDCARE on 1800 595 160. England, Wales and Northern Ireland: Report Fraud on 0300 123 2040. Scotland: Police Scotland on 101. Canada: the Canadian Anti-Fraud Centre on 1-888-495-8501.

Tools that help

Related guides

Sources