To check your credit report for identity theft, request free copies from all three major credit bureaus — Equifax, Experian, and TransUnion — at AnnualCreditReport.com, then review each report for accounts, inquiries, and personal details you don’t recognize. Weekly access to those reports is now permanently free, so you can pull them as often as you need while you investigate.1Consumer Advice. You Now Have Permanent Access to Free Weekly Credit Reports If you spot something wrong, federal law gives you specific tools to shut it down quickly.
How to Pull Your Reports
The fastest route is the online portal at AnnualCreditReport.com. You can request one, two, or all three bureau reports at once, and since different lenders report to different bureaus, pulling all three gives you the most complete picture. Reports appear on screen immediately after you clear the security questions. Save or print them before you navigate away — sessions expire quickly.2Annual Credit Report.com. Getting Your Credit Reports
Federal law entitles you to at least one free report from each bureau every 12 months through this centralized system.3Office of the Law Revision Counsel. 15 US Code 1681j – Charges for Certain Disclosures The bureaus have voluntarily expanded that to weekly access online, so there’s no reason to ration your checks.4Annual Credit Report.com. Home Page If you’re actively worried about identity theft, pulling all three at once when you first suspect a problem is the right move; after that, rotating one bureau at a time each month is a reasonable habit.
Prefer not to use the website? Call 1-877-322-8228 for an automated phone system. Reports ordered by phone arrive by mail within 15 days.5Consumer Financial Protection Bureau. How Do I Get a Free Copy of My Credit Reports You can also mail the Annual Credit Report Request Form to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. Mailed requests take about three weeks.6Annual Credit Report. Annual Credit Report Request Form Mail is especially useful when online identity verification fails and you need to send supporting documents.
To pull your reports you’ll need your full legal name (with any suffix), Social Security number, date of birth, and current mailing address. If you’ve moved in the last two years, have your previous addresses ready. The online system will also ask multiple-choice questions about your financial history, such as a recent loan payment amount or the bank holding your mortgage, so keep statements nearby. Wrong answers can lock you out temporarily or force you to submit physical ID instead.
What to Look for on the Report
Once you have the reports in hand, work through three sections in order: personal information, inquiries, and accounts.
Personal Information
Check the name, addresses, and employers listed at the top. Misspellings of your name, unfamiliar middle initials, an address where you’ve never lived, or an employer you’ve never worked for often mean someone used your Social Security number on a credit application and entered their own details. An apartment number you don’t recognize can mean a thief is redirecting mail.
Inquiries
The inquiries section shows which companies have pulled your file. Hard inquiries — the kind triggered when someone applies for a loan or credit card — stay on your report for two years and can nudge your score down slightly.7Consumer Financial Protection Bureau. What Happens When a Mortgage Lender Checks My Credit Hard inquiries from banks or retailers where you never applied mean someone else did. Soft inquiries such as promotional pre-approvals and background checks don’t affect your score, but scan them for anything odd anyway.
Accounts
This is where identity theft shows up most clearly. Every credit card, personal loan, auto loan, and mortgage tied to your Social Security number appears here. Go line by line. Pay close attention to the “Date Opened” field: accounts opened during periods when you weren’t applying for anything are a giveaway. A high balance or past-due status on a card you never opened confirms the compromise, and that debt can escalate to collections if you don’t challenge it.
Not every unfamiliar account is fraud. Bureaus sometimes mix files when two people share a similar name or Social Security number. The account still doesn’t belong on your report, and the dispute process is the same.
Specialty Reports Worth Checking
The three major bureaus don’t capture everything. Specialty consumer reporting agencies track narrower data, and identity thieves can leave traces there. The Consumer Financial Protection Bureau publishes a list of these agencies.8Consumer Financial Protection Bureau. List of Consumer Reporting Companies Two are worth checking during an identity theft review:
- ChexSystems, which tracks checking and savings account history. If someone opened a bank account in your name, overdrew it, and walked away, this is where it shows up. A negative record here can block you from opening a legitimate account.
- LexisNexis C.L.U.E., which collects up to seven years of auto and property insurance claims. Fraudulent claims filed in your name would appear here.
You’re entitled to one free report per year from specialty agencies under the same federal law that covers the big three.3Office of the Law Revision Counsel. 15 US Code 1681j – Charges for Certain Disclosures
If You Find Fraudulent Activity
Finding someone else’s accounts on your report is jarring, but sequence matters. Do these things first, roughly in this order.
File at IdentityTheft.gov
The FTC’s IdentityTheft.gov portal produces an official Identity Theft Report and a personalized recovery plan. You can complete the process online or call 1-877-438-4338.9Federal Trade Commission: IdentityTheft.gov. What To Do Right Away The Identity Theft Report is more than a paper trail. It unlocks specific legal rights, including the power to force credit bureaus to block fraudulent information from your file. Create an account so the site can save your progress and pre-fill dispute letters; without an account, print everything before you leave the page.
A local police report is optional in most cases, though some creditors or banks may ask for one before closing fraudulent accounts. The FTC report is generally enough on its own.
Place a Fraud Alert
A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name. Contact any one of the three major bureaus; that bureau is legally required to notify the other two. An initial alert lasts one year and can be renewed. If you have an Identity Theft Report or police report, you qualify for an extended alert that lasts seven years.10Consumer Advice. Credit Freezes and Fraud Alerts Alerts are fast and free, but they depend on lenders following through on the verification step. For stronger protection, freeze your credit.
Freeze Your Credit
A credit freeze blocks the bureaus from releasing your report to new lenders. Since most lenders won’t approve an application without pulling a report, the freeze effectively stops a thief from opening accounts in your name. Federal law requires all three bureaus to let you place and lift a freeze for free.11Office of the Law Revision Counsel. 15 US Code 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
A freeze doesn’t expire. When you need to apply for credit yourself, you lift it temporarily with the specific bureau. By law, the bureau must lift it within one hour if you request online or by phone, or within three business days if you request by mail.12Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report Contact each bureau separately to place the freeze; the “one bureau notifies the others” rule for fraud alerts does not apply here.
The bureaus also sell a product called a credit lock. It works similarly and can often be toggled through an app, but it operates under the bureau’s own terms rather than federal law, and some lock products charge a monthly fee. The statutory freeze gives you the same core protection for free.
Getting the Fraudulent Accounts Removed
Once your alert or freeze is in place, get the fraudulent items off your reports. You have two paths, and which one you use depends on whether you have an Identity Theft Report ready.
Standard Dispute
File a dispute with each bureau reporting the fraudulent account, online, by phone, or by mail. The bureau must investigate within 30 days of receiving the dispute. If you submit additional information during that window, the bureau gets up to 15 extra days.13Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy If the investigation confirms the account isn’t yours, the bureau must remove it.
Identity Theft Block
If you have the Identity Theft Report from IdentityTheft.gov, request a block instead. It’s faster and more definitive. The bureau must block the fraudulent information within four business days of receiving proof of your identity, the Identity Theft Report, identification of the specific fraudulent items, and your statement that you didn’t authorize the transactions.14Office of the Law Revision Counsel. 15 US Code 1681c-2 – Block of Information Resulting From Identity Theft A block is harder for the creditor to reverse than a standard dispute removal, which is why getting the Identity Theft Report first pays off.
Also contact the fraud department of any company where an account was opened in your name. Ask them to close the account and confirm in writing that you aren’t responsible for the debt. Keep copies of every letter and note the date and name of every person you speak with. That paper trail matters if a creditor or collector later tries to hold you liable.
Extra Free Reports You’re Entitled To
Beyond the weekly reports at AnnualCreditReport.com, federal law entitles you to additional free reports in specific situations:
- After an adverse action. If you’re denied credit, insurance, or employment based on your credit report, the denial notice must name the bureau that supplied the report. You have 60 days from the notice to request a free copy from that bureau.15Office of the Law Revision Counsel. 15 US Code 1681m – Requirements on Users of Consumer Reports
- After placing a fraud alert. Placing an initial alert entitles you to a free report from each bureau so you can review your file immediately.
- As an identity theft victim. If you’ve filed an Identity Theft Report, you can request additional free reports beyond the weekly allotment to monitor your file during recovery.16Consumer Advice. Free Credit Reports
The adverse action right is the one people miss most often. If a lender turns you down and the negative items on the report they used aren’t familiar, the denial itself may be your first sign that someone has damaged your credit.