Identity Theft First 24 Hours: What to Do

If you suspect your identity was stolen, the first 24 hours are critical for limiting damage. Immediately place a fraud alert on your credit reports, contact your bank and credit card issuers, and file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov. These three steps freeze most new account openings and help you document the theft for creditors and police.

Formula

The effectiveness score is a rough guide to how well your response is going, based on time and actions taken. It is calculated as:

Score = 100 − (2 × hours since discovery) − (5 × accounts compromised) − (0 × credit reports frozen)

• t = hours since you discovered the theft (input, hours)
• a = number of financial accounts you believe were compromised (input, count)
• r = whether you have placed a credit freeze (0 = no, 1 = yes) — the formula gives no credit for freezing because it is already expected

The score starts at 100 and drops as time passes and as more accounts are involved. It is a motivational tool, not a legal or financial metric.

Worked Example

Using the default values: you discovered the theft 24 hours ago, 3 accounts are compromised, and you have already placed a credit freeze (r = 1).

Score = 100 − (2 × 24) − (5 × 3) − (0 × 1)
Score = 100 − 48 − 15 − 0
Score = 37

So your response effectiveness score is 37%. The message is clear: the sooner you act, the higher the score.

Why the First 24 Hours Matter

Identity thieves move fast. Within hours of obtaining your Social Security number or card details, they can open new credit cards, take out loans, or drain bank accounts. The longer you wait, the more accounts they can open and the harder it becomes to untangle the mess. Acting quickly does three things:

• It alerts banks and credit bureaus to watch for suspicious activity.
• It creates a paper trail that helps you dispute fraudulent charges.
• It prevents new accounts from being opened in your name.

Even if you are not sure whether your identity was actually stolen, taking these steps early is low-cost and reversible.

Immediate Steps (First 24 Hours)

1. Place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion). They are required to share the alert with the other two. A fraud alert lasts one year and makes it harder for someone to open new accounts in your name.
2. Contact your bank and credit card issuers to report the theft, freeze or close affected accounts, and change passwords and PINs.
3. File a report with the FTC at IdentityTheft.gov. You will get a personal recovery plan and an identity theft report, which is useful when dealing with creditors.
4. File a police report if you have evidence (e.g., unauthorized transactions) and your local police department accepts them. Bring the FTC report and any documentation.
5. Review your credit reports from all three bureaus (free weekly at AnnualCreditReport.com) and flag any accounts or inquiries you do not recognize.

What to Do After the First Day

Once the immediate steps are done, the next few weeks involve monitoring and follow-up. You should:

• Set up credit monitoring alerts (often free through banks or credit card companies).
• Review your bank and credit card statements every few days for new unauthorized charges.
• Contact the fraud departments of any companies where fraudulent accounts were opened and provide them with the identity theft report.
• Consider placing a credit freeze (free in all U.S. states) if you are not planning to apply for credit soon. A freeze blocks new credit checks entirely, but you must lift it temporarily when you want to open a new account.

Keep a log of every call, email, and letter you send. You may need to reference these later.

Common Mistakes and Misconceptions

Many people assume that identity theft always involves a stranger, but it is often committed by someone you know. Another common error is waiting to see if the problem goes away — it does not. Also, a fraud alert is not the same as a credit freeze; an alert requires creditors to verify your identity, while a freeze blocks access to your credit report entirely. Finally, do not assume that your bank will catch everything; you are responsible for reporting unauthorized transactions within a certain time frame (usually 60 days for credit cards, less for debit cards).

Costs and Free Resources

Most of the immediate steps are free. Placing a fraud alert is free, and credit freezes are free in all U.S. states. The FTC report is free. Police reports are usually free, though some jurisdictions may charge a small fee for copies. Credit monitoring services can cost $10–$30 per month, but many banks offer basic monitoring for free. Be wary of anyone who charges you to “fix� your identity; legitimate help is available from the FTC and state attorneys general.

Alternatives: When You Might Not Need to Panic

If you lost a credit card but the card was never used, you may only need to cancel that card and watch your statement. If a data breach exposed your email address but not your Social Security number, changing your password and enabling two-factor authentication may be enough. The full identity theft protocol is for when you have evidence that someone is using your personal information to open accounts or make purchases. When in doubt, err on the side of caution and place a fraud alert anyway — it costs nothing and lasts a year.

Frequently Asked Questions

What is the difference between a fraud alert and a credit freeze?

A fraud alert is a free notice on your credit file that tells lenders to verify your identity before opening new accounts. It lasts one year and can be renewed. A credit freeze is a stronger measure that blocks access to your credit report entirely, so lenders cannot even see it to approve new credit. Freezes are also free and remain until you lift them.

How do I know if my identity was actually stolen?

Signs include unfamiliar charges on your bank or credit card statements, new accounts you did not open, or a sudden drop in your credit score. You may also receive collection notices for debts you do not recognize. If you see any of these, act as if your identity was stolen and follow the steps above.

Do I need to file a police report?

Not always, but it can help. Creditors and the FTC often ask for a police report when you dispute fraudulent accounts. If the police in your area accept reports for identity theft, file one. If they do not, the FTC report may be sufficient.

How long does it take to recover from identity theft?

It depends on the complexity. Simple cases with one compromised card can be resolved in a few weeks. Cases involving new accounts opened in your name can take months or even years to clear. The key is to act quickly and keep records of everything you do.

Can I prevent identity theft entirely?

No, because data breaches at companies can expose your information even if you are careful. But you can reduce the risk by using strong, unique passwords, enabling two-factor authentication, shredding sensitive documents, and monitoring your credit regularly. Placing a credit freeze is the most effective way to stop new account fraud.

Related

• Frequency from Wavelength: Formula & How to Calculate
• Frequency Band Calculator: Find Your Band
• Time Constant Form Conversion: Step-by-Step

in t | Time since discovery | hours | 24 | 0
in a | Accounts compromised | count | 3 | 1
in r | Credit reports frozen | 0=no, 1=yes | 1 | 0
out score | Response effectiveness score | % | (100 - (t * 2) - (a * 5) - (r * 0)) | 0