"I think someone stole my identity — what do I do first?"

Someone is using your personal information as if they are you — and it's already in motion

Identity theft happens when someone gains access to a piece of identifying information — your Social Security number, date of birth, driver's license number, account credentials, or some combination — and uses it to impersonate you for financial gain. That might mean opening new credit cards, taking out loans, filing a tax return in your name, accessing your existing bank accounts, or applying for government benefits. The thief doesn't need all your information at once; often a single data breach or a phishing email is enough to start.

What makes this particularly disorienting is that the signs often appear in unrelated places — a credit card bill for an account you never opened, a collection notice for a debt you don't recognize, an IRS letter saying a return was already filed for your Social Security number, or a sudden unexplained drop in your credit score. These aren't coincidences. They're typically the downstream effects of one compromising event — a data breach, a stolen wallet, a phishing email you may not even remember clicking — that happened weeks or months earlier.

The gap between when theft occurs and when most people notice it averages around three months, according to the Identity Theft Resource Center. That window matters, because the longer fraudulent accounts go unreported, the more complex the recovery becomes. Acting quickly — even before you're certain — is almost always the right call.

Identity theft shows up in very different ways — your situation may look nothing like the "obvious" version

The warning signs vary widely depending on what type of information was stolen and how the thief is using it. Check whichever of these fits your experience.

The damage compounds quickly — but early action makes recovery dramatically easier

Identity theft is not a problem that resolves on its own. Left unaddressed, a single stolen Social Security number can be used to open multiple credit lines, file fraudulent tax returns for multiple years, obtain medical care under your name (leaving you with billing complications and corrupted medical records), or even create a criminal record linked to your identity. Each new fraudulent account becomes an additional item to dispute and document. Creditors don't automatically remove fraudulent debts — you have to fight for each one, and the process takes time, paperwork, and persistence.

The good news is that the legal framework around identity theft has teeth. Federal law limits your liability for fraudulent credit card charges to $50 if reported promptly — and most major card issuers apply zero-liability policies. More importantly, the Fair Credit Reporting Act gives you the right to dispute fraudulent accounts, place fraud alerts, and freeze your credit entirely. These tools are free, and using them early is the single biggest factor in how fast and fully people recover.