AI credit & debt management — disputes, education, and debt support in one secure portal.
Skip to content
NewLeaf

Identity theft: your first 48 hours (the FTC path)

Your rights7 min readReviewed: NewLeaf Legal Education Team

Discovering identity theft feels like finding a stranger living in your house. The violation is real — and so is the federal playbook built for exactly this. The FTC's recovery path, executed in the order below, resolves the large majority of cases. Your job is not to investigate the crime. Your job is to report fast, freeze fast, and document everything.

Read the video transcript

Identity stolen? There's a federal recovery plan, and order matters.

First 48 hours: report it, freeze your files, and start the folder.

That folder does the heavy lifting — every call, letter, and reference number lives there.

Then report, freeze, dispute — the federal sequence, in that order.

Stay organized through it. Recovery rewards the documented.

Our identity-theft plan lists each step. Free, link below.

This happened to you; it says nothing about you. Efficient victims recover fastest — here is how to be one.

The 48-hour path

  1. Hour 0–6Phase 1 of 3

    Report and freeze

    Speed matters most in the first hours. Two actions blunt nearly every common misuse of your identity.

    • File at IdentityTheft.gov — the FTC builds your personal recovery plan and pre-fills dispute letters.
    • Freeze credit at all three bureaus (free, fast, reversible). Fraud alerts alone are thinner armor.
    • Change passwords on email and financial accounts first — email is the master key to everything else.
    • Screenshot everything suspicious before it disappears: accounts, charges, messages.
  2. Hour 6–24Phase 2 of 3

    Contain the accounts

    With the report number in hand, each institution you call takes you more seriously. Work outward from money.

    • Call each affected bank or creditor's fraud department — not customer service. Get case numbers.
    • File a police report where accounts were opened or used; bring the FTC report with you.
    • Dispute fraudulent accounts with each bureau, attaching the FTC Identity Theft Report.
    • Place a ChexSystems freeze too — thieves open bank accounts, not just credit cards.
  3. Day 2Phase 3 of 3

    Paper the trail

    Recovery is a documentation project wearing a crime's clothing. Day two builds the folder that wins every dispute.

    • Send written disputes (certified mail) for every fraudulent item — keep the FTC report copy with each.
    • Request your free reports and circle everything unfamiliar, even small items.
    • Set calendar reminders: 35 days for investigation results, 90 days for a full re-check.
    • Keep a call log: date, company, representative name, case number, what was promised.

General education only, not legal advice; no outcome promised. If misuse continues after proper disputes, a consumer attorney consult — often free — is the correct escalation.

Step by step

Your recovery folder, documented

  1. Step 1

    Print the FTC plan

    IdentityTheft.gov generates a personal recovery plan with pre-filled letters — the backbone of your case.

  2. Step 2

    File the freezes

    Three bureaus plus ChexSystems. Save every confirmation number on one page.

  3. Step 3

    Mail the disputes

    Certified, return receipt, FTC report attached. One fraudulent item cluster per letter.

  4. Step 4

    Log everything

    Every call, every letter, every promise — dated. This log wins escalations.

Questions

What people ask next

Will I have to pay fraudulent debts?

Federal law generally limits your liability for fraudulent accounts once you report and dispute them properly — which is exactly why the written trail matters. Keep disputing until each item resolves.

How long does recovery take?

Simple cases resolve in weeks; complex ones take months. The folder system in this guide is what keeps a long case from becoming a lost one.

Should I pay for monitoring?

Free freezes plus free weekly reports cover most of what paid monitoring sells. Spend the money on certified mail instead.

What if the thief is someone I know?

A large share of identity misuse involves someone known to the victim. The process is identical — and the police report step matters even more, since creditors scrutinize familiar-fraud claims.

Get organized with NewLeaf

Already a client? Open your dashboard.

Educational only — not legal advice. Not credit counseling. No score or timeline promises. Back to Journal.