For a lot of people, a credit report is where identity theft first becomes visible: an account or inquiry that simply isn't theirs. Knowing the signs means you catch it sooner.
Red flags to watch for
- Accounts you don't recognize: a card, loan, or line of credit you never opened.
- Hard inquiries from lenders you never applied to.
- Addresses or names in your personal-information section that aren't yours.
- A collection for a debt you've never heard of.
If you find one
Don't panic; work in order. Most of the urgent steps are free, and moving quickly on a couple of them stops a thief from doing more damage while you clean up:
- Freeze your credit at all three bureaus (Equifax, Experian, and TransUnion). A freeze is free and makes it much harder for a thief to open new accounts while you sort things out.
- Report the theft at IdentityTheft.gov, the FTC's official site, to get an identity theft report and a step-by-step recovery plan. That report is the document bureaus and companies ask for as you clean things up.
- Contact the company where the fraudulent account was opened, reach its fraud department, and ask it to close the account and confirm in writing.
- Ask the bureaus to block the identity-theft information. With your FTC identity theft report, you can request that each bureau block items that resulted from the theft.
The difference between a block and a dispute is worth knowing. A dispute asks the bureau to investigate whether an item is accurate, which takes time and can come back "verified." An identity-theft block, backed by your FTC report, requires the bureau to remove information that resulted from identity theft (generally within four business days) without waiting on that investigation. When an account clearly isn't yours, the block is often the faster, stronger route, and a freeze can stop further damage while you sort it out.
Checking your report regularly is the simplest habit that keeps small problems from becoming big ones.
Sources: FTC (IdentityTheft.gov) and CFPB guidance on disputing credit report errors and identity-theft blocks under the FCRA.
Common questions
I found an account that isn't mine. What do I do first?
Freeze your credit at all three bureaus (Equifax, Experian, and TransUnion) to make new-account fraud much harder, then report it at IdentityTheft.gov to get an official FTC identity theft report. From there, with that report, you can ask each bureau to block the fraudulent items.
How often should I check to catch fraud early?
A few times a year is a reasonable baseline, and ongoing monitoring can alert you to new accounts or inquiries between checks so a problem doesn't sit unnoticed for months. UltraSolid adds that monitoring, surfacing new accounts and inquiries between your own check-ins.
What's a fraud alert, and should I add one?
It's a free flag that asks lenders to verify your identity before opening credit in your name. It's lighter than a freeze and easy to add, and you can use both together for stronger protection.
Can I get fraudulent accounts removed, and how long does it take?
Yes. For accounts that aren't yours, a documented identity-theft block, backed by your FTC identity theft report and the other required information, generally requires the bureau to remove the item within about four business days, which is often faster than an ordinary dispute (where the bureau generally has about 30 days to investigate).
