Identity theft is the most common consumer crime in the country. Almost every "protection plan" you see advertised is selling you something the federal government already gives you for free. Credit freezes, fraud reports, recovery plans, IRS PINs are all free, all official, all linked below.

If your identity has been stolen, or you think it's about to be, this page tells you what to do, in what order, and which government number to call. No upsells. No "premium" tier. Just the agencies that actually have the power to fix it.

Report Identity Theft, FTC & Federal Resources

Start at IdentityTheft.gov. It is the FTC's official recovery site, and it does three things no paid service can do better. It builds you a personalized recovery plan based on what was actually stolen. It pre-fills the dispute letters you will need to send to creditors. And it generates an FTC Identity Theft Report, the document that banks, the IRS, and the police will ask for. Free, no login wall, no signup pitch.

Tax Fraud & Government Benefit Fraud

Tax-related identity theft is when someone files a return with your Social Security number and pockets your refund before you file your real one. The fix is an IRS Identity Protection PIN. It is a six-digit number only you and the IRS know, required on every return filed under your SSN. Anyone can sign up. You don't have to be a victim first. If you've ever wondered whether to bother, the answer is yes, and it takes about ten minutes.

Credit Freeze & Fraud Alerts

A credit freeze is the strongest free tool you have. It blocks any new lender from pulling your credit file, which means a fraudster cannot open a new account in your name even if they have your SSN. Federal law made it free at all three bureaus in 2018. A fraud alert is the lighter version. It does not block applications. It just forces lenders to verify identity before approving. Use a freeze if you're not actively applying for credit. Use an alert if you are.

State Attorney General Fraud Resources

When the federal channels cannot help, usually because the fraud is local, the company is small, or the dollar amount is below FBI thresholds, your state attorney general can. State AGs have direct enforcement power against businesses operating in their state, and most have a consumer protection division that takes complaints by phone, mail, or online form. State AG offices are the unsung workhorse of fraud enforcement.

Search by State

Select your state to find state-specific public records resources.

Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming

Frequently Asked Questions

What is the first thing I should do if my identity is stolen?

Open IdentityTheft.gov in another tab right now. Do not read more, do not research, just go. The site asks what was stolen, builds you a recovery checklist, and writes the dispute letters for you. Once that is running, freeze your credit at Equifax, Experian, and TransUnion. Three phone calls or three online forms, ten minutes each, free. That single hour stops most of the bleeding.

What is an IP PIN from the IRS and should I get one?

An IP PIN is a six-digit code only you and the IRS know. If your tax return shows up without it, the IRS rejects the return. Since 2021, anyone can request one. You do not have to have been a victim first. Given how common tax refund fraud is, getting an IP PIN is one of those ten-minute fixes that pays off the first time someone tries to file in your name.

How long does it take to recover from identity theft?

The FTC's own data says the average case takes six months to a year and over 200 hours of work. Cases that touch criminal records, government benefits, or multiple stolen accounts can run for years. The single biggest accelerator is good documentation early. That means the FTC report, the police report, and a written log of every call you make. People who keep that log finish faster than people who do not.

Is a credit freeze the same as a credit lock?

Not the same. A credit freeze is a federal right under the Fair Credit Reporting Act. It is free, legally enforceable, and what every fraud expert recommends. A credit lock is a product the bureaus sell, usually as part of a paid monitoring subscription. The freeze is stronger, the lock costs money. There is no situation where paying for a lock makes more sense than using the free freeze.

Can I report fraud anonymously?

Yes, the FTC's ReportFraud.gov and the FBI's IC3 both accept anonymous reports. The catch is that investigators cannot follow up with you for details, which makes anonymous tips much less actionable. If the fraud involves your own SSN or accounts, you will need to verify your identity to get the recovery tools that come with the report. Most state AG offices accept anonymous complaints too, but again, they are more useful when you can be reached.

Should I pay for an identity theft protection service?

Honest answer: probably not. The big-name "protection" services mostly do three things. Credit monitoring, dark web scanning, and insurance. Credit monitoring you can get free at every major bank and at AnnualCreditReport.com. Dark web scanning is mostly theater. Your data is already out there from past breaches. The insurance pays for recovery costs, but the recovery work itself is free at IdentityTheft.gov. If you have $15 a month to spend on peace of mind and want someone else handling the paperwork, fine. But you are paying a subscription for tools the federal government already gives you. The freeze is the protection. Everything else is marketing.