Learn how to identify, document, and dispute inaccurate items with the three major credit bureaus, plus timelines, privacy tips, and what to do if a dispute ...
If you’ve ever looked at your credit report and felt your stomach drop, I get it. When my score was a mess years ago, I avoided my reports because I assumed every bad item was “just my problem.” But identity theft doesn’t announce itself politely. It shows up as tiny clues that are easy to miss if you don’t know what to look for.
This checklist walks you through seven warning signs on your credit report that can point to identity theft, plus what to do if you spot one. Think of this as a quick self-defense scan for your credit profile.
Before you start: pull the right reports
You’ll want to review your credit reports from all three bureaus, because fraud doesn’t always hit them equally. In the US, the official place to get free reports is AnnualCreditReport.com. Availability and how often you can pull them can change, so check the site for the current terms. When you read your reports, keep a pen handy and circle anything you don’t recognize.
Quick tip: Start with “Personal Information,” then “Accounts,” then “Inquiries,” then “Collections,” then “Public Records” (if your report includes them). Identity theft often leaves fingerprints in more than one section.
1) Hard inquiries you don’t recognize
A hard inquiry means a lender reviewed your credit because someone applied for credit. If you see inquiries from banks, card issuers, auto lenders, or retail financing you never applied for, that’s a major red flag.
What it can mean
- Someone is applying for a credit card or loan in your name
- Your information is being used for “test applications” before bigger fraud
What to do next
- Call the company listed on the inquiry and ask for their fraud department. Tell them you didn’t apply.
- Place a fraud alert with one bureau. The bureau you contact is required to notify the other two. (There are different types, including an initial alert and an extended alert with extra documentation.)
- Consider freezing your credit with all three bureaus if you suspect active fraud. A freeze blocks most new credit from being opened, but it won’t stop fraud on existing accounts.
2) New accounts you never opened
This is the most obvious sign, and also the most damaging if it goes unchecked. You might see a brand new credit card, personal loan, buy now pay later line, or store account that isn’t yours.
What it can mean
- A thief successfully opened credit using your Social Security number and personal details
- The fraud may start with a soft pull or pre-approval and then get finalized as a real account
What to do next
- Freeze your credit at all three bureaus immediately. In the US, credit freezes are free, and you have to place them at each bureau separately.
- Contact the creditor’s fraud department and ask for their steps to close the account as identity theft.
- Dispute the account with the credit bureaus and include identity theft documentation when available (like an FTC Identity Theft Report).
3) A sudden credit score drop with no clear cause
Scores do move around, but a sharp drop can be a smoke alarm, especially if you haven’t missed payments, maxed out cards, or applied for new credit.
What it can mean
- A fraudulent account reported a high balance or late payment
- A collection account hit your file
- Multiple unauthorized inquiries showed up close together
What to do next
- Pull your full reports (not just a score app summary) and compare line by line.
- Look for new negatives such as collections, charge-offs, or late payments that don’t match your life.
- Move fast: freeze your credit, save the report pages showing the issue, then start the FTC report and disputes if it’s clearly fraud.
4) Unfamiliar collection accounts
A surprise collection account can be identity theft, a billing error, or a forgotten old balance. The difference matters, because the strategy changes.
What it can mean
- Someone opened an account and never paid
- Medical identity theft (care received under your name) leading to bills and collections
- A utility or telecom account was opened using your identity
What to do next
- Contact the collection agency in writing and request debt validation. If you request validation within 30 days of their first written notice, you typically have stronger rights under federal law.
- Check the original creditor and the date of service or account opening to see if it matches where you lived and what you used.
- File an identity theft report if the debt truly isn’t yours, then dispute with the bureaus using that documentation.
5) New personal info you don’t recognize
Don’t ignore errors in your name variations, addresses, phone numbers, or employers. One random typo is common. But a new address in a city you’ve never lived in, or a different employer that appeared recently, can be a sign your file is being mixed with someone else’s information or actively used by a fraudster.
What it can mean
- Someone used your identity and listed their address or phone number
- Your credit file was merged with another person’s data (a mixed file)
What to do next
- Dispute incorrect personal information with each bureau where it appears.
- Ask the bureaus to remove addresses you never used, especially if they’re tied to fraudulent accounts.
- Save proof like lease agreements, utility bills, or bank statements showing your real address history if needed.
6) Existing accounts change in strange ways
Identity theft isn’t only new accounts. Sometimes thieves take over an existing account or use your data to access it. A credit freeze helps prevent most new accounts, but it doesn’t automatically stop account takeover.
What it can mean
- An account takeover where someone changes contact info and runs up charges
- A fraudulent authorized user was added
- A new balance shows up that you can’t explain
What to do next
- Check your existing accounts for recent address, email, password, or phone changes.
- Call your card issuer and ask whether any authorized users were added or contact info was updated.
- Change passwords, enable multi-factor authentication, and consider replacing compromised cards.
7) Duplicate accounts or wrong dates
This one is sneakier. You might see an account that looks similar to one you had, but the opened date is off. Or an account appears twice with slightly different numbers. Or a closed account suddenly looks open again.
What it can mean
- Reporting errors caused by data furnishing problems
- Mixed file issues
- In rare cases, illegal “re-aging,” where the date tied to the first delinquency is changed to keep a negative account on your report longer than allowed
What to do next
- Compare account numbers (the report usually masks most digits, but you can still see whether they differ).
- Check key dates, including the first delinquency information and expected removal date when the report provides it, especially for collections and charge-offs.
- Dispute inaccurate dates and statuses with the bureaus and request supporting documentation from the creditor if the account isn’t yours.
If you spot a red flag: a 30-minute action plan
If you’re staring at something that clearly isn’t you, don’t spiral. Do this in order.
- Freeze your credit with Equifax, Experian, and TransUnion. This blocks most new accounts from being opened.
- Place a fraud alert if you prefer that route, or use it in addition to a freeze.
- Pull and save copies of your reports showing the suspicious items. Screenshot or download the pages so you have a time-stamped record.
- File an identity theft report at IdentityTheft.gov and save your FTC report number.
- Contact the creditor(s) tied to the fraud and ask for their identity theft process.
- Dispute with the bureaus and attach your FTC report and any supporting documents (ID, proof of address, and any letters you received).
One important mindset shift: you’re not “asking” the system for mercy. You’re asserting your rights under consumer protection rules that exist because this stuff happens to good people every day.
FAQ
How often should I check my credit report for identity theft?
If you’re actively rebuilding credit or you’ve had a breach, monthly monitoring is reasonable. Otherwise, checking each bureau a few times per year can work, as long as you actually read the details and not just the score.
Is a soft inquiry a sign of identity theft?
Usually no. Soft inquiries are often from account reviews, pre-approvals, or services you already use. The bigger concern is hard inquiries you didn’t authorize.
What if the account is mine, but the information is wrong?
That can still hurt you. Dispute the inaccurate details and also contact the creditor to correct their reporting on the furnisher side. Fixing both is often faster than relying on one route.
Can identity theft hurt my score even if I catch it early?
It can, especially if a new account reports a balance, your utilization spikes, or a payment goes late. The goal is to move quickly so negative updates don’t stack up.
Final gut check
If you found one of these warning signs, you’re not overreacting. Credit reports aren’t just paperwork. They’re the story lenders use to decide if you can rent an apartment, finance a car, or sometimes even get a job. You have every right to protect your name.
Start with the freeze, document everything, and take it one step at a time. A bad credit report entry is a math problem. Identity theft is a paperwork problem. Both are fixable.
