Identity Theft Recovery: How to Rebuild After a Scam

You’ve discovered your identity was stolen. You’ve filed your FTC report and your police report. You’ve frozen your credit and contacted the relevant institutions. Now comes the longer, harder part: the actual recovery — disputing fraudulent accounts, correcting damaged credit, resolving tax problems, clearing medical records, and eventually rebuilding the financial and personal standing you had before this happened.

This guide walks you through every phase of recovery, from the first 72 hours through the months or years it may take to fully restore your financial profile. It is designed to be used alongside the FTC’s personalized recovery plan from IdentityTheft.gov, not to replace it.

—

Week 1 — Stop the Bleeding

The first week of identity theft recovery is about stopping further damage from occurring, not yet about reversing what’s already happened.

Freeze your credit if you haven’t already. This is your most urgent action. Contact Equifax, Experian, and TransUnion immediately. A freeze prevents any new fraudulent accounts from being opened while you work on resolving existing ones.

Close or freeze compromised accounts. Any account — bank, brokerage, credit card — that was accessed or created by the thief should be closed or the account numbers changed. Do not simply monitor them; close them.

Change passwords and enable 2FA on all financial accounts. Even accounts that weren’t directly affected deserve immediate password changes, since the breach that affected one account may have exposed credentials for others.

Enable all available account alerts. Set transaction alerts on every remaining legitimate account so any further unauthorized activity is caught immediately.

Review your credit reports at all three bureaus. Make a complete list of every fraudulent entry — accounts, inquiries, addresses — that you’ll need to dispute.

Collect documentation. Every piece of paper, every email, every account statement related to the fraud should be gathered and organized. You’re building your case file.

—

Month 1 — Dispute Fraudulent Accounts and Charges

With your credit frozen and your documentation in order, Month 1 is about systematically working through every fraudulent account, charge, and inquiry.

Contact each creditor’s fraud department. For every fraudulent account on your credit report, contact the issuing creditor directly. Provide your FTC Identity Theft Report, your police report number, and a written request to close and remove the account. Follow every phone call with a certified letter.

File formal disputes with each credit bureau. Under Section 605B of the Fair Credit Reporting Act, credit bureaus must block information that results from identity theft when you provide a valid FTC Identity Theft Report. This is a stronger remedy than a standard dispute — use it.

Dispute all fraudulent hard inquiries. Inquiries from lenders you didn’t contact can be disputed as well. They don’t affect your score as heavily as accounts, but removing them cleans up your report.

Handle fraudulent checks and bank accounts. If the thief opened fraudulent bank accounts in your name, contact both the bank and ChexSystems (the banking equivalent of a credit bureau). Request that the fraudulent accounts be removed from your ChexSystems report.

Address fraudulent utility accounts. Utility companies report to specialized databases like the National Consumer Telecom and Utilities Exchange (NCTUE). If fraudulent utility accounts were opened in your name, contact those companies and request dispute resolution.

Track your progress. Keep your log updated with every contact, every response, every reference number. You will need this documentation if a creditor is slow to respond or a bureau fails to remove a verified fraudulent account.

—

Month 2–6 — Rebuild Your Credit

Once fraudulent accounts are disputed and credit bureaus begin removing them, your focus shifts to repairing any legitimate credit damage and actively rebuilding your credit profile.

Monitor the removal of disputed items. Credit bureaus have 30 days to investigate disputes and respond. Follow up if you don’t receive a response within 35 days. If an item is verified as legitimate despite your dispute, you can request reinvestigation or escalate with the CFPB.

Address any legitimate credit damage. If the fraud caused missed payments on legitimate accounts (because you were unaware of them), contact those creditors and explain the situation. Many will work with identity theft victims to waive late fees and remove late payment notations.

Consider a secured credit card or credit-builder loan. If your credit score suffered significantly, a secured card (where you deposit collateral equal to your credit limit) or a credit-builder loan from a credit union can help establish positive payment history.

Become an authorized user on a trusted person’s account. If a family member or close friend has a long-standing, well-managed credit card account, being added as an authorized user can help rebuild your score by adding their positive history to your report.

Keep your credit utilization low. As fraudulent accounts are removed and your available credit profile clears, keep your remaining legitimate account balances at 30% or less of their limits.

—

How to Remove Fraudulent Items From Your Credit Report

The process for removing a fraudulent account from your credit report involves three parallel tracks:

Track 1: Direct creditor contact. The creditor can instruct the bureaus to remove the account. This is the fastest resolution path when the creditor acknowledges the fraud.

Track 2: Bureau dispute under Section 605B. The bureau must block identity theft-related items within four business days of receiving your FTC report. Follow up in writing if they don’t.

Track 3: CFPB complaint. If a bureau or creditor fails to respond appropriately to your disputes, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. CFPB complaints typically generate faster, more substantive responses from institutions.

If all else fails: you have the right to sue both credit bureaus and creditors in federal court under the Fair Credit Reporting Act for failing to investigate and correct inaccurate information. This is a last resort but a real one — and many consumer protection attorneys take these cases on contingency.

—

How to Handle Fraudulent Tax Returns

Tax identity theft recovery runs on the IRS’s timeline, which is unfortunately slow. Here’s what to expect:

After you file Form 14039 and your paper return:

The IRS will open an investigation. This is an internal process that you cannot significantly accelerate. The IRS has dedicated units that handle identity theft cases.

You will receive an IP PIN. An Identity Protection PIN is issued to confirmed tax identity theft victims and must be included on all future returns. Guard this number carefully — it prevents fraudulent filing in your name.

Your legitimate refund will eventually be issued. Once the fraudulent return is identified and your legitimate return is processed, your refund is issued — plus any applicable interest for the delay.

The timeline is typically 120–180 days from filing your paper return, though it can be longer in periods of high IRS caseload. The IRS Taxpayer Advocate Service (taxpayeradvocate.irs.gov) can assist if your case is experiencing unusual delays or hardship.

—

How to Deal With Medical Identity Theft Damage

Medical identity theft has two distinct damage tracks: financial (fraudulent billing) and medical record contamination.

Financial track: Contact your insurer’s fraud department and dispute every fraudulent claim. Follow the same documentation and dispute process as financial identity theft. The insurer will investigate and, if claims are verified as fraudulent, remove them from your account.

Medical record track: This is more complex. You have the right under HIPAA to:

– Request a complete copy of your medical records from every provider

– Request corrections to any inaccurate information

– Request an accounting of disclosures — a list of who has received copies of your records

Submit written correction requests to each provider where inaccurate information appears. If they refuse, you can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/hipaa.

Be particularly vigilant about your insurance’s benefit database and your pharmacy records — these are often the most difficult to fully correct and the most medically consequential.

—

The Emotional Toll of Identity Theft

Recovery from identity theft is not only a financial and administrative process. It is an emotionally exhausting one. Many victims describe feelings that closely resemble those associated with other personal violations: violation of privacy, anxiety, helplessness, anger, and ongoing hypervigilance about their financial life.

These feelings are normal and valid. Identity theft is a genuine trauma — your personal information, your financial reputation, and sometimes your physical security have been compromised by someone you’ve likely never met.

Give yourself permission to feel the difficulty of the situation without minimizing it. At the same time:

Set manageable goals. Don’t try to resolve everything in a week. Break the recovery process into specific, achievable tasks and focus on one at a time.

Ask for help. Identity theft recovery is not something you have to navigate alone. The FTC’s tools, the Identity Theft Resource Center (idtheftcenter.org | 888-400-5530), and consumer protection attorneys all offer assistance.

Limit repeated exposure to the trauma. Checking your credit report obsessively multiple times per day does not help the situation and does contribute to anxiety. Set a schedule for monitoring and stick to it.

Recognize when you need additional support. If the stress of identity theft recovery is affecting your daily functioning, sleep, or relationships, consider speaking with a mental health professional. This is not an overreaction — it’s appropriate self-care.

—

How Long Does Identity Theft Recovery Take?

Simple cases (one fraudulent credit card account, caught quickly): 4–8 weeks.

Moderate cases (multiple accounts, credit damage): 3–6 months.

Complex cases (tax fraud, medical fraud, criminal record, multiple account types): 12–24 months.

Severe cases (long-running undetected theft, major credit damage): up to several years.

The single biggest determinant of recovery time is how quickly the theft was discovered. The sooner you catch it, the faster you recover.

—

Free Resources for Identity Theft Victims

FTC IdentityTheft.gov — personalized recovery plans, FTC Identity Theft Report generation, step-by-step guidance.

Identity Theft Resource Center (idtheftcenter.org, 888-400-5530) — free, confidential assistance from trained identity theft advisors. Available by phone, chat, and email.

Consumer Financial Protection Bureau (consumerfinance.gov/complaint) — for complaints against financial institutions, creditors, and credit bureaus.

IRS Taxpayer Advocate Service (taxpayeradvocate.irs.gov) — for taxpayers experiencing hardship due to IRS identity theft cases.

HHS Office for Civil Rights (hhs.gov/hipaa) — for complaints related to medical identity theft and HIPAA violations.

National Association of Consumer Advocates (naca.net) — for finding consumer protection attorneys who handle identity theft cases.

—

Internal Links:

→ Pillar: https://www.scammed.org/identity-theft/

→ How to report: https://www.scammed.org/identity-theft/how-to-report/

→ Protection services: https://www.scammed.org/identity-theft/protection-services/

→ Site-wide utility: https://www.scammed.org/how-to-report-a-scam/