Identity theft is the misuse of another person’s personal information, such as a Social Security number or account credentials, to impersonate that person or commit fraud. Its meaning becomes clear when a stranger uses those details to open a credit account, claim a tax refund, or obtain medical care in someone else’s name. An unfamiliar entry is a reason to investigate; it does not, on its own, establish who caused it.
Identity Theft Definition: How Misuse Happens
What is identity theft? An identity theft definition starts with personal information being used without authorization to pose as someone else. The information may come from a stolen wallet, a data breach, a fraudulent message, or an account takeover. The harm depends on what the person using it does: a stolen password might expose one account, while a Social Security number may be used in applications to several businesses.
Knowing what identity theft means also helps distinguish exposure from misuse. A breach notice says information may have been exposed; it does not establish that someone has used it. An unauthorized account or a tax filing the person did not submit is a more specific reason to pursue the facts with the institution involved.
Identity theft crime can affect finances, government records, health care and everyday services. A victim may spend time closing accounts and correcting records even when a fraudulent charge is removed. The meaning of identity theft extends beyond credit: the record affected determines the remedy.
Common ways personal information is misused
The following identity theft examples show how the same kind of information can be used in different settings:
- New credit: Someone applies for a card or loan using another person’s name and Social Security number. A bill or collection notice may arrive for an account the named person never opened.
- Existing accounts: A thief signs in to a bank or shopping account and makes purchases or changes the contact details. The account owner may notice a transaction or security alert first.
- Taxes: Someone files a return using another person’s information and seeks a refund. The legitimate taxpayer may learn of it when an electronic return is rejected as a duplicate.
- Medical care: Someone uses another person’s identity or insurance details to obtain treatment. A bill or insurance statement for unfamiliar care can be a lead to investigate.
- Utilities or phone service: Someone opens service in another person’s name and leaves unpaid bills associated with that identity.
These cases of stolen identity show different types of misuse. Other examples of identity fraud can involve phone or utility accounts; the response depends on the record. A bank can investigate an account transaction; a health insurer can review an explanation of benefits; a credit bureau can handle a dispute about an entry it reports. The first task is to identify the organization that holds the questionable information.
Recognize a warning and check the record
Signs of identity theft include unfamiliar accounts or inquiries on a credit report, bills for services never requested, unexpected account changes, or collection calls about an unknown debt. Another warning of identity theft is a notice about an account the recipient did not open, especially if it includes a balance or a creditor’s contact information.
These possible signs of stolen identity are clues, not a final diagnosis. A creditor’s name may differ from a store’s name, an authorized user may have forgotten an application, or a reporting error may have mixed records. Contact the company through a number on its official website or a known statement rather than a number supplied in a suspicious message. Ask when the account was opened, what it concerns and how to contest it.
A credit report can reveal accounts and inquiries that a person has not seen elsewhere. The FTC directs consumers to AnnualCreditReport.com for free reports from Equifax, Experian and TransUnion; each can be checked online weekly. Review identifying details, account names, balances and inquiries across all three reports. A company may report to only some bureaus, so the reports can differ.
An identity theft credit report dispute begins by identifying the entry and the bureau reporting it. Save a copy, mark the unfamiliar item and contact the business that supplied the information as well as the bureau. Ask each how to submit the dispute and what documents are needed. A simple mistake and a fraudulent account may call for different corrections. In practice, identity theft means someone has used the information to pose as its owner; an inaccurate entry alone may have another cause.
Protect accounts and report confirmed misuse
If an account shows unauthorized activity, call the company’s fraud department promptly using a trusted contact method. Explain which transactions or accounts are unfamiliar and ask it to freeze or close affected accounts. Change passwords and PINs for affected accounts, including an email account that can reset other passwords. Use a different password for each important account and turn on multifactor authentication where available.
For suspected fraud, an initial fraud alert is free and lasts one year. Contact one of the three nationwide credit bureaus; it must notify the other two. The alert tells businesses to take steps to verify identity before granting new credit. A credit freeze is a separate free measure that restricts access to a credit file. Request it from each bureau, and lift it when applying for credit if the lender needs access. A freeze does not stop misuse of an existing account, so contact that account provider as well.
The FTC’s IdentityTheft.gov recovery steps provide a place to report identity theft and obtain a recovery plan. The site explains how to create an FTC Identity Theft Report and use it when addressing fraudulent accounts or credit entries. Its identity theft articles and practical instructions also cover particular situations, including tax and medical identity misuse. For tax-related problems, follow the relevant IRS instructions linked from the recovery guidance; for medical records, contact the provider or insurer holding the record.
Keep copies of reports, letters and statements. Record the date, the person or department contacted, and any case number. Ask for written confirmation when a fraudulent account is closed or corrected, then check later reports to see whether the disputed information has changed. A local police report may also be useful; the FTC describes what documents to bring if one is filed.
First actions at a glance
The affected record determines the next action. Contact the affected company, secure the account and examine all three credit reports. Place a fraud alert or freezes as appropriate. If misuse is confirmed, report it at IdentityTheft.gov, follow the recovery plan and keep a record of each correction request.
