How to Fix Your Credit After Identity Theft in 2026

You check your credit report and there it is — a Capital One card you never opened, a $14,000 auto loan from a dealership you've never visited, and three hard inquiries from last Tuesday. Your stomach drops. Someone stole your identity, and now your credit score is paying for it.

This happens to roughly 1.1 million Americans every year, according to FTC data. The agency received over 6.4 million fraud and identity theft reports in 2024 alone, with credit card fraud and loan fraud topping the list. If you're reading this, you might be one of them.

The good news: fraudulent accounts don't have to wreck your credit permanently. Federal law — specifically the Fair Credit Reporting Act (FCRA) — gives you powerful tools to dispute and remove accounts you didn't authorize. But the process matters. Skip a step or send the wrong letter, and you could spend months chasing your tail.

Here's exactly what to do, in order, to fix your credit after identity theft.

Step 1: File an FTC Identity Theft Report

Before you dispute anything, go to IdentityTheft.gov and file an official report. This isn't just a formality — it generates an Identity Theft Report that carries legal weight under the FCRA.

With this report, you can:

• Force credit bureaus to block fraudulent accounts within 4 business days (not the usual 30-day investigation window)
• Prevent debt collectors from pursuing you for debts the thief created
• Get copies of applications and transaction records from companies where the thief opened accounts

The site walks you through a recovery plan customized to your situation. Save your report number — you'll reference it in every dispute letter you send.

Step 2: File a Police Report

Yes, your local police department. Some people skip this because it feels pointless — the thief is probably in another state or another country. But a police report accomplishes two things:

1. It strengthens your disputes. Creditors and bureaus take fraudulent account claims more seriously when you can attach a police report number.
2. It creates a paper trail. If a creditor later tries to hold you responsible, you have documentation proving you reported the theft immediately.

Bring your FTC Identity Theft Report, your credit reports showing the fraudulent accounts, and any evidence you have (suspicious emails, unfamiliar addresses on accounts, etc.). Most departments will file the report on the spot.

Step 3: Place a Fraud Alert or Credit Freeze

These are two different tools, and you might want both.

Fraud alert (free, lasts 7 years for identity theft victims): Contact any one of the three major bureaus — Equifax, Experian, or TransUnion — and they're required to notify the other two. A fraud alert forces creditors to verify your identity before opening new accounts. You only need to contact one bureau; they'll propagate it.

Credit freeze (free, indefinite): A freeze locks your credit file entirely. No one can pull your credit or open accounts in your name until you temporarily lift the freeze with a PIN. You need to freeze with each bureau separately:

• Equifax: equifax.com/personal/credit-report-services/credit-freeze/
• Experian: experian.com/freeze/center.html
• TransUnion: transunion.com/credit-freeze

Don't forget the secondary bureaus either. Freezing your reports with LexisNexis, ChexSystems, and other specialty bureaus closes gaps that sophisticated identity thieves exploit.

Step 4: Pull All Three Credit Reports

Go to AnnualCreditReport.com — the only federally authorized source — and pull your Equifax, Experian, and TransUnion reports. The thief may have opened accounts that only show up on one or two bureaus, so you need all three.

Go through each report line by line. Flag every account, inquiry, and address you don't recognize. Common signs of identity theft on your credit report include:

• Credit cards or loans you never applied for
• Hard inquiries from lenders you've never contacted
• Addresses where you've never lived
• A sudden spike in your total debt balance
• Collection accounts for debts you didn't incur

Make a spreadsheet. List every fraudulent item, which bureau(s) it appears on, the account number, the creditor name, and the balance. This becomes your dispute roadmap.

Step 5: Dispute Every Fraudulent Account

Here's where federal law works in your favor. Under the FCRA, the credit bureaus must investigate your dispute within 30 days (or 45 if you provide additional information during the investigation). For identity theft disputes backed by an FTC Identity Theft Report, the bureau must block the fraudulent information within 4 business days.

Send disputes to each bureau that's reporting the fraudulent account. Include:

• Your completed FTC Identity Theft Report
• A copy of your police report
• A copy of your government-issued ID
• Proof of your actual address (utility bill, bank statement)
• A clear letter identifying each fraudulent account by name and account number

Send everything via certified mail with return receipt requested. This creates proof of delivery and starts the legal clock on their investigation deadline.

A word of caution: the bureaus sometimes "verify" fraudulent accounts during the investigation because the creditor confirms the account exists. The account does exist — a thief opened it. You may need to dispute multiple times and escalate with additional documentation. This is normal, and it's one of the most frustrating parts of the process.

Step 6: Contact Each Fraudulent Creditor Directly

Don't rely solely on the bureaus. Contact each creditor where the thief opened an account and tell them explicitly: "This account was opened fraudulently. I am a victim of identity theft."

Most major banks and lenders have dedicated fraud departments. Ask them to:

• Close the fraudulent account immediately
• Mark it as fraud (not just "closed by consumer")
• Send you written confirmation that the account was opened fraudulently
• Send you copies of the application and any transaction records — you're entitled to these under the FCRA

That written confirmation becomes powerful supporting evidence for your bureau disputes. Keep every letter, every email, every reference number.

Step 7: Dispute Fraudulent Hard Inquiries

People focus on the accounts and forget about the inquiries. Every time the thief applied for credit in your name, it generated a hard inquiry that's sitting on your report, dragging down your score.

Each hard inquiry can knock 5-10 points off your score. If the thief applied at six different lenders, that's potentially 30-60 points gone from inquiries alone — on top of the damage from the fraudulent accounts.

Dispute each unauthorized inquiry with the bureaus using the same identity theft documentation. You can also write directly to the company that pulled your credit and ask them to remove the inquiry since it was unauthorized. For more detail on this process, check out our guide on how to remove hard inquiries from your credit report.

Step 8: Deal With Collection Accounts From Identity Theft

If the thief ran up debts and then disappeared (which they always do), those unpaid fraudulent accounts will eventually land with collection agencies. Now you've got collectors calling about debts you didn't create.

Under the Fair Debt Collection Practices Act (FDCPA), you have the right to:

• Request debt validation within 30 days of first contact — the collector must prove the debt is legitimate and that you owe it
• Dispute the debt in writing, including your FTC Identity Theft Report and police report
• Demand they stop contacting you if the debt is fraudulent

Send a debt validation letter to every collector pursuing fraudulent debts. If they can't validate the debt — and they shouldn't be able to, since you didn't incur it — they must stop collection activity and remove it from your credit reports.

For a broader look at handling collections, see our guide on removing collections from your credit report.

How Long Does It Take to Fix Credit After Identity Theft?

Straight answer: 3 to 12 months for most people, depending on how many fraudulent accounts were opened and how quickly you act.

Simple cases — one or two fraudulent credit cards caught early — can often be resolved in 60-90 days. The bureaus block the accounts, your score recovers, and you move on.

Complex cases — multiple accounts across different bureaus, collection accounts, and fraudulent address changes — can take 6-12 months of sustained effort. Each dispute round takes 30-45 days, and you may need multiple rounds for stubborn items.

The factors that speed things up:

• Filing your FTC report and police report early
• Disputing all items simultaneously rather than one at a time
• Sending disputes via certified mail with full documentation
• Following up immediately when a dispute comes back "verified"
• Working with a credit repair professional who handles identity theft cases regularly

*Results vary by individual. Crowned Credit cannot guarantee specific outcomes or timelines. Credit repair involves disputing items under your rights provided by federal law, including the FCRA and FDCPA. Individual results depend on the unique details of your credit history and the response of creditors and bureaus.*

When DIY Isn't Enough: Getting Professional Help

Some identity theft cases are straightforward enough to handle on your own. One fraudulent credit card, caught within a week? You can probably manage that with the steps above.

But many cases aren't that simple. When there are fraudulent accounts spread across all three bureaus, collection accounts piling up, creditors refusing to cooperate, and disputes getting rejected — the process gets overwhelming fast, especially when you're also dealing with the emotional stress of having your identity stolen.

This is where working with a professional credit repair company can save you months of frustration. At Crowned Credit, we handle identity theft credit repair cases regularly — disputing fraudulent accounts, hard inquiries, and collections across all three bureaus using your rights under the FCRA. Our team manages the back-and-forth with bureaus and creditors so you're not spending hours on hold or tracking certified mail receipts.

Our plans start at $150 enrollment plus $99/month for the Essential plan, or $249 enrollment plus $199/month for the Accelerated plan if you need more aggressive work across multiple bureaus. We also offer the Momentum plan at $1,095 as a one-time investment for clients who want everything handled at once.

If identity theft has damaged your credit and you want help getting it cleaned up, book a free consultation with our team. We'll review your reports, identify every fraudulent item, and build a dispute strategy specific to your situation. You can also call us directly at 336-310-0090.

Rebuilding Your Credit Score After the Cleanup

Once the fraudulent accounts are removed, your score should start recovering — but it won't necessarily bounce back to where it was overnight. Here are practical steps to accelerate the rebuild:

Keep your legitimate credit utilization below 30%. If you have real credit cards, keep balances low relative to your limits. Under 10% is ideal. This single factor accounts for about 30% of your FICO score. Read more in our credit utilization guide.

Don't close old accounts. Length of credit history matters. Closing your oldest credit card shortens your average account age and can drop your score.

Consider a secured credit card. If the identity theft wiped out your credit profile entirely, a secured card with a $200-$500 deposit can help you start rebuilding with on-time payments. For a complete walkthrough, see our guide on building credit from scratch.

Set up autopay on everything. Payment history is 35% of your FICO score. One missed payment after recovering from identity theft would be devastating. Automate it.

Monitor your credit weekly. After you've been a victim once, you're statistically more likely to be targeted again. Use free monitoring through Credit Karma, your bank's credit monitoring, or a paid service. Catching new fraud early makes the next round of disputes dramatically easier.

Protect Yourself Going Forward

Recovery isn't just about fixing what happened — it's about making sure it doesn't happen again. A few high-impact steps:

• Keep your credit frozen unless you're actively applying for credit. You can temporarily lift a freeze in minutes when you need it. There's zero reason to leave your credit file unlocked 365 days a year.
• Use unique passwords for every financial account. A password manager like Bitwarden or 1Password makes this painless.
• Enable two-factor authentication on your bank accounts, credit card accounts, and email. Email access is how most identity thieves escalate their damage — they reset your passwords through your inbox.
• Opt out of prescreened credit offers at OptOutPrescreen.com. Those "You're pre-approved!" letters in your mailbox are theft opportunities if someone intercepts your mail.
• Check your credit reports at least quarterly. You can pull free weekly reports at AnnualCreditReport.com.

The Bottom Line

Identity theft is a gut punch, but it's not a permanent one. Federal law — particularly the FCRA — gives you real, enforceable rights to dispute and remove fraudulent accounts from your credit reports. The process takes effort and patience, but most people see significant improvement within 3-6 months of starting their disputes.

The most important thing? Start today. Every week you wait gives fraudulent accounts more time to generate missed payments, collections, and deeper damage to your score.

File your FTC report, freeze your credit, and start disputing. If the situation is complex or you'd rather have professionals handle it, schedule a free consultation with Crowned Credit and let us take it from there.