Setting up and protecting your money
Your information was stolen, or a breach notice just arrived
Identity theft is different from being scammed. Nobody tricked you — someone stole your personal information, often from a company you trusted, and is now using it to open accounts or claim money in your name.
The single most effective protection is free and takes fifteen minutes, and almost nobody does it. This section covers that, plus exactly what to do if it has already happened.
Freezing your credit at all three bureaus is free by federal law and blocks new accounts from being opened in your name. Most paid identity protection services only monitor — they tell you after it has already happened.
Source: Fair Credit Reporting Act as amended; CFPB guidance on security freezes.
Breach notice versus actual identity theft
A breach notice means a company lost your data. It does not mean anyone has used it yet. Take it seriously and don't panic.
Actual identity theft means someone is opening accounts, filing taxes, or getting medical care in your name. The signs: a bill for something you didn't buy, a collections call about a debt you don't recognize, a credit report showing an account you never opened, or a tax return rejected because one was already filed under your Social Security number.
Free credit monitoring offered after a breach is worth accepting. It is not the same as protection, and it detects rather than prevents.
The free thing that actually prevents it
Freeze your credit at all three bureaus. Equifax, Experian, and TransUnion, each separately, each free by federal law.
A freeze blocks new accounts from being opened in your name, because a lender who can't pull your report generally won't lend. This is the single most effective step available to you and it costs nothing.
You unfreeze temporarily when you apply for something, and it takes minutes online. The inconvenience is real and small.
A fraud alert is the weaker cousin — it asks lenders to verify identity rather than blocking access. Free, lasts a year, better than nothing.
If it has already happened
Go to IdentityTheft.gov. It is the federal recovery site, it is free, and it builds you a personalized step-by-step plan plus the letters you need to send.
File there before you start calling companies. The report it generates is what banks and credit bureaus will ask you for, and having it makes every later conversation shorter.
Then: freeze your credit, change the password on your email first, and contact the fraud department of any affected company in writing.
You are not liable for accounts opened fraudulently in your name. Say the word 'fraud' and ask for the fraud department, not customer service.
The kinds aimed at people your age
Tax identity theft — someone files a return using your Social Security number to take a refund. Filing early is the best defense.
Employment identity theft — someone works under your Social Security number. You find out when the IRS says you underreported income you never earned.
Medical identity theft — someone gets care in your name, and their information ends up in your medical record.
Synthetic identity theft — your Social Security number combined with a fake name and date of birth. This one specifically targets people with thin or no credit history, which describes most young adults.
Reducing what's exposed
Two-factor authentication on email and banking. Your email is the master key.
Different passwords for financial accounts than for anything else.
Stop giving your Social Security number to anyone who asks by default. Ask why they need it and whether something else will do. Many organizations ask out of habit.
Shred anything with account numbers. Mail theft is still how a lot of this starts.
What you can do
- Freeze your credit at Equifax, Experian, and TransUnion today. It's free.
- Turn on two-factor authentication for your email and bank.
- If anything has happened, start at identitytheft.gov before calling anyone.
- Pull all three credit reports at annualcreditreport.com and read them.
- File your tax return early to block tax identity theft.
- Ask 'why do you need this?' the next time someone requests your Social Security number.
Where to check this yourself
identitytheft.gov for the federal recovery plan. annualcreditreport.com for free reports. Credit freezes go through Equifax, Experian, and TransUnion directly — always free, never through a paid middleman.