How to Fix Your Credit Score After Identity Theft

Discovering that someone stole your identity and trashed your credit is one of the most stressful financial experiences you can have. Fraudulent accounts, unauthorized inquiries, collections for debts you never created — the damage can be massive and overwhelming.

But here's the critical thing to know: you are not responsible for fraudulent accounts, and you have strong legal rights to get them removed. The FCRA gives identity theft victims specific protections that make dispute resolution faster and more effective than standard credit disputes.

This guide walks you through the exact process to recover your credit after identity theft, step by step.

Step 1: File an FTC Identity Theft Report

Go to IdentityTheft.gov immediately. This is the official Federal Trade Commission site for identity theft victims. Filing here does several critical things:

• Creates your official Identity Theft Report — this is a legally recognized document that gives you specific rights under the FCRA
• Generates a personalized recovery plan based on the types of fraud you experienced
• Provides pre-filled letters to send to companies where fraud occurred
• Creates documentation that credit bureaus must accept when you dispute fraudulent accounts

Your FTC Identity Theft Report is different from a standard police report. It carries specific legal weight under the FCRA and triggers enhanced dispute procedures at the credit bureaus.

Also File a Police Report

While the FTC report is the primary document, also file a report with your local police department. Some creditors and bureaus still ask for a police report number. Bring your FTC Identity Theft Report to the police station — it includes all the details they need.

Step 2: Place Fraud Alerts on Your Credit Files

Contact any one of the three major credit bureaus (Experian, Equifax, or TransUnion) and request a fraud alert. By law, that bureau must notify the other two, so one call covers all three. There are two types:

• Initial fraud alert (1 year): Free. Requires creditors to take reasonable steps to verify your identity before opening new accounts.
• Extended fraud alert (7 years): Available to identity theft victims with an FTC report. Requires creditors to contact you directly before approving new credit.

Request the extended fraud alert. You have an FTC report (from Step 1), which qualifies you. This gives you seven years of protection.

Step 3: Freeze Your Credit

A credit freeze (also called a security freeze) is different from a fraud alert and provides stronger protection. A freeze blocks all access to your credit file, meaning no one — including you — can open new accounts until you temporarily lift the freeze.

You must freeze your credit at each bureau separately:

• Experian: experian.com/freeze or 888-397-3742
• Equifax: equifax.com/personal/credit-report-services/credit-freeze or 800-685-1111
• TransUnion: transunion.com/credit-freeze or 888-909-8872

Credit freezes are free (thanks to a 2018 federal law). Each bureau will give you a PIN or password to temporarily lift the freeze when you legitimately need to apply for credit.

Don't Forget These Less-Known Bureaus

Also consider freezing your files at:

• Innovis (fourth credit bureau): innovis.com/securityFreeze
• ChexSystems (bank account reporting): chexsystems.com/security-freeze
• LexisNexis (insurance and employment reports): consumer.risk.lexisnexis.com

Step 4: Pull Your Credit Reports and Identify All Fraud

Identity theft victims are entitled to free credit reports beyond the standard annual ones. Request reports from all three bureaus at AnnualCreditReport.com and flag every item that isn't yours:

• Accounts you didn't open (credit cards, loans, utilities)
• Hard inquiries you didn't authorize
• Addresses you've never lived at
• Collections for debts you don't recognize
• Late payments on accounts that aren't yours
• Balances that don't match your records on legitimate accounts

Create a detailed list. You'll need it for the dispute process.

Step 5: Dispute All Fraudulent Accounts

Identity theft disputes are handled differently than regular disputes — and the process works in your favor. Under the FCRA, when you submit an identity theft dispute with your FTC report:

• The bureau must block the fraudulent information within 4 business days (not the standard 30-day investigation timeline)
• The bureau must notify the furnisher (the company that reported the fraudulent account) that it was blocked
• The furnisher must stop reporting the blocked information

How to File Identity Theft Disputes

1. Write to each bureau identifying every fraudulent item. Use certified mail with return receipt.
2. Include your FTC Identity Theft Report (from IdentityTheft.gov)
3. Include a copy of your government-issued ID and proof of address
4. Clearly mark each item as "identity theft" and state you did not authorize the account
5. Request a block of the fraudulent information, not just an investigation

Contact the Fraudulent Account Companies Directly

Also contact the fraud department of every company where fraudulent accounts were opened. Send them:

• Your FTC Identity Theft Report
• A letter stating you did not open the account and requesting immediate closure
• A request for any application or transaction records associated with the fraudulent account (you're entitled to this under the FCRA)

Step 6: Remove Unauthorized Hard Inquiries

Identity thieves often create multiple hard inquiries when applying for credit in your name. These unauthorized inquiries can be removed by:

1. Sending an inquiry removal letter to each bureau
2. Including your FTC Identity Theft Report as proof
3. Identifying each specific inquiry by date and company name

Hard inquiries only affect your score for 12 months (though they stay on your report for 2 years), so if time has passed, this may be less urgent than removing fraudulent accounts. For more details, see our guide on removing inquiries from your credit report.

Step 7: Set Up Ongoing Monitoring

After cleaning up the initial fraud, monitoring is essential to catch any new activity:

Free Options

• Credit Karma: Free TransUnion and Equifax monitoring with alerts
• Experian free account: Monitors Experian and alerts on changes
• AnnualCreditReport.com: Free weekly reports from all three bureaus

Paid Options Worth Considering

• Identity theft protection services (LifeLock, Aura, IdentityForce) — monitor dark web, public records, and all three bureaus
• These aren't mandatory but can provide peace of mind and catch fraud faster

IRS Identity Protection PIN

If your SSN was compromised, get an IP PIN from the IRS at irs.gov/ippin. This prevents someone from filing a tax return using your Social Security number. Tax identity theft is increasingly common and can create a separate nightmare.

Timeline: How Long Does Recovery Take?

• Week 1: File FTC report, police report, fraud alerts, credit freezes. Pull all reports and document fraud.
• Week 2-3: File identity theft disputes with all three bureaus. Contact companies with fraudulent accounts.
• Week 3-6: Bureaus process identity theft blocks (4 business days per item). Fraudulent accounts begin disappearing.
• Month 2-3: Most fraudulent accounts removed. Score recovering. Follow up on any items not yet resolved.
• Month 3-6: Credit should be largely restored to pre-theft condition. Ongoing monitoring catches any new fraud.

Identity theft credit recovery is actually faster than recovery from your own negative items because you have legal tools (FTC reports, identity theft blocks) that bypass the normal dispute timeline.

Special Situations

Child Identity Theft

If your child's identity was stolen, the process is similar but with additional steps. Children shouldn't have credit files at all, so any file that exists is inherently fraudulent. Contact each bureau to check if your child has a file, and if so, request removal of the entire file.

Synthetic Identity Theft

Sometimes thieves create a "synthetic" identity by combining your SSN with a different name and address. This can create a separate credit file linked to your SSN. If you discover this, report it to the bureaus and the FTC, and request that any files associated with your SSN that aren't yours be removed.

Medical Identity Theft

If someone used your identity for medical services, you may also have medical collections on your report for treatments you never received. Dispute these as fraudulent using the same identity theft process.

The Bottom Line

Identity theft is infuriating, but the recovery process is well-established and legally supported. The key is acting quickly, filing your FTC report, and using the enhanced dispute rights available to identity theft victims. Your credit can typically be restored within 3-6 months — much faster than recovering from legitimate negative items.

The Credit Fix Kit includes dispute letter templates you can adapt for identity theft situations, plus comprehensive guides for writing effective disputes and navigating the credit repair process. Get started completely free.

Don't let a thief steal your financial future. Take control of the recovery process today.