10 Questions Consumers Ask After Discovering Identity Theft

Finding out that someone used your personal information can feel surreal. One minute you’re checking a bank alert, a credit report, or a tax notice. The next, you’re trying to figure out whether this is a small mistake, a full-blown identity theft problem, or the start of a much larger mess.

That reaction is common. Identity theft often creates confusion before it creates clarity. People want to know what to do first, what can wait, who to call, whether they’re liable for fraudulent charges, and whether a lawyer belongs in the picture.

In this post, you’ll find clear answers to 10 of the most common questions consumers ask after discovering identity theft. If you want a broader overview of the recovery process, it may also help to read this guide on what identity theft recovery often involves from start to finish.

<aside> 💡 Scroll to the bottom for every post in this series.

</aside>

1. Is This Really Identity Theft, Or Just A Scam Attempt?

Sometimes it’s an attempted scam. Sometimes it’s a data breach with no confirmed misuse yet. Sometimes it’s true identity theft already in motion.

In general terms, identity theft usually involves someone using your personal information without permission to open accounts, make purchases, file tax returns, obtain medical services, or access existing financial accounts. The Federal Trade Commission reported more than 1.1 million identity theft reports in 2024 through IdentityTheft.gov, which shows how common these incidents have become in the U.S. (FTC).

A few warning signs often push the issue from “possible” to “probable” identity theft:

• accounts you didn’t open
• charges or withdrawals you didn’t authorize
• debt collection calls about unfamiliar accounts
• a tax return rejection because one was already filed in your name
• a credit inquiry from a lender you never contacted
• medical bills for treatment you never received

If you’re still in the early stage of figuring out what happened, the FTC’s IdentityTheft.gov recovery system can help generate a tailored action plan, and the CFPB explains that fraud alerts, credit freezes, and blocking fraudulent information may all be available tools depending on what you’re seeing (CFPB).

2. What Is The Very First Thing People Usually Do?

Most people focus first on containing the damage.

That often means contacting the affected bank, card issuer, lender, or merchant as quickly as possible and then taking steps to protect credit files. The CFPB notes that if you believe you’re a victim of identity theft, two of the core early responses are placing fraud alerts or security freezes and filing a report through IdentityTheft.gov (CFPB).

People in this situation often start with this basic sequence: