Skip to content
    HackFirstAid.com

    Identity stolen: what to do right now

    Someone is opening accounts, taking loans or using your personal details. Freeze your credit, file an official identity-theft report and contact each company involved. It takes time, but it's fixable.

    Do right now

    · Within minutes
    1. 🇺🇸 US

      Go to IdentityTheft.gov — the FTC's official recovery site builds a personalized plan and pre-fills letters.

      More detail

      Why this matters: IdentityTheft.gov generates an official FTC Identity Theft Report — the document banks, creditors, and credit bureaus need to remove fraudulent accounts and inquiries from your record. Walk through the questionnaire, then save and print the report. Keep the report number safe; you'll reference it for months.

    2. 🇺🇸 US

      Place a fraud alert with one credit bureau (free — they notify the others). Equifax 1-800-525-6285 · Experian 1-888-397-3742 · TransUnion 1-800-680-7289.

    3. 🇺🇸 US

      If your SSN was compromised: contact the Social Security Administration.

    4. 🇨🇦 CA

      Report identity theft immediately to the Canadian Anti-Fraud Centre.

    5. 🇨🇦 CA

      Place fraud alerts with both Canadian credit bureaus separately.

    6. 🇨🇦 CA

      If your Social Insurance Number (SIN) was compromised: contact Service Canada to report misuse.

    7. 🇿🇦 ZA

      Place fraud alerts with the three SA credit bureaus: TransUnion, Experian, and XDS.

    8. 🇿🇦 ZA

      If your SA ID number was exposed, secure your SARS eFiling and government profiles — reset the password and turn on two-factor authentication.

    9. 🇮🇪 IE

      Report at your local Garda station and get the PULSE incident number. Bring printed copies of everything.

    Do today

    · Within hours
    1. 🇺🇸 US

      Pull credit reports from all three bureaus — look for accounts you didn't open, unauthorized hard inquiries, or wrong personal info.

    2. 🇺🇸 US

      Freeze your credit at all three bureaus (free, most effective protection).

    3. 🇺🇸 US

      File an Identity Theft Report at IdentityTheft.gov — print and save the FTC report number.

    4. 🇺🇸 US

      Check for tax fraud and request an IRS Identity Protection PIN.

    5. 🇨🇦 CA

      Pull your credit reports from both Canadian bureaus (free annually) — look for unauthorized accounts or inquiries.

    6. 🇨🇦 CA

      File a report with your local police — get a police report number for disputing fraudulent accounts.

    7. 🇨🇦 CA

      Contact the Office of the Privacy Commissioner of Canada if a business mishandled your data.

    8. 🇨🇦 CA

      Check if anyone filed a tax return using your SIN — contact the CRA to flag identity theft.

    9. 🇺🇸 US

      File a police report with your local department — bring your fraud report number.

    10. 🇺🇸 US

      Contact any companies where fraudulent accounts were opened — use your fraud/police report to dispute them.

    11. 🇨🇦 CA

      Contact any companies where fraudulent accounts were opened — use your fraud/police report to dispute them.

    12. 🇿🇦 ZA

      Sign an affidavit at a Commissioner of Oaths (any SAPS station, post office, or bank manager) describing what happened, when you noticed, and which accounts or IDs are affected. Keep multiple certified copies.

    13. 🇿🇦 ZA

      Lay an OB (case) report at SAPS and email SAPS Cybercrime. Bring or attach the affidavit. Save the OB number — you'll need it for every dispute.

    14. 🇿🇦 ZA

      Submit your affidavit along with your fraud / police (OB) report to every company where fraudulent accounts were opened.

    15. 🇮🇪 IE

      Ask the Central Credit Register for a Notice of Suspected Impersonation and request your free credit report.

      More detail

      Ireland has no credit freeze. The notice lasts 90 days and can be extended once for up to 90 more, every lender who checks your report sees it, and you're told within 48 hours if anyone requests your report. Your credit report is free.

    16. 🇮🇪 IE

      If your PPS number or MyGovID is involved, call MyGovID support on 0818 927 999. For tax accounts, reset your Revenue myAccount/ROS password and contact Revenue through MyEnquiries.

    Do this week

    · Within days
    1. 🇺🇸 US

      Dispute fraudulent accounts on your credit reports (each bureau has an online dispute process).

    2. 🇨🇦 CA

      Dispute fraudulent accounts on your credit reports (each bureau has an online dispute process).

    3. Review all financial accounts for unauthorized activity.

    4. If medical identity theft is suspected: contact your health insurance and request a benefits statement.

    5. 🇺🇸 US

      If your driver's license was stolen: contact your state DMV.

    6. 🇺🇸 US

      If your passport was stolen: contact the US State Department.

    7. 🇨🇦 CA

      If your driver's license was stolen: contact your provincial Ministry of Transportation (e.g., ServiceOntario, ICBC, SGI).

    8. 🇨🇦 CA

      If your passport was stolen: contact Immigration, Refugees and Citizenship Canada (IRCC).

    9. 🇨🇦 CA

      If your provincial health card was stolen: contact your provincial health authority to have it cancelled and reissued.

    10. 🇺🇸 US

      Consider an identity theft protection service (LifeLock, Aura, IdentityForce, etc.).

    11. 🇨🇦 CA

      Consider an identity theft protection service (LifeLock, Aura, IdentityForce, etc.).

    12. 🇿🇦 ZA

      Obtain a written confirmation letter from each company where fraudulent accounts were opened, stating the account was fraudulent and has been closed or reversed. Keep the originals.

    13. 🇿🇦 ZA

      Apply for free SAFPS Protective Registration. Submit the affidavit and the confirmation letters with your application.

    14. 🇿🇦 ZA

      Dispute fraudulent accounts and inquiries on your credit file with TransUnion, Experian, and XDS — each has an online dispute process.

    15. 🇮🇪 IE

      If an organisation's mishandling of your data caused this, complain to the Data Protection Commission — it's free.

    Ongoing protection

    · Build the habit
    1. Keep your credit frozen / fraud alert active until needed — thaw temporarily when applying for credit.

    2. 🇺🇸 US

      Monitor your credit reports regularly.

    3. 🇨🇦 CA

      Monitor your credit reports regularly.

    4. 🇿🇦 ZA

      Monitor your Experian and TransUnion reports regularly — you're entitled to one free report from each per year.

    5. 🇿🇦 ZA

      Keep all supporting material and any letters you receive from SAFPS. Provide them whenever you apply for credit in future — SAFPS protective registration lasts 5–10 years and lenders will ask.

    6. Watch for tax issues — file your taxes early each year.

    7. Shred sensitive documents before discarding.

    8. Use a P.O. Box or mail-hold service if mail theft is a concern.

    Is this happening at work?

    If a business account, company device or customer data is involved, the steps change. Get help built for organizations.