Eight Places to Check for Signs of Identity Theft

When people worry about identity theft, they often check their credit reports or bank statements first. Those are good places to start, but they don’t tell the whole story. Someone could use your information to open a phone line, arrange utility service, access medical benefits or set up a payment plan that never appears on your usual accounts.

Fraud can be easy to miss when it happens outside your main financial accounts. You don’t need to check every record at once. Start with the accounts where unauthorized activity could do the most harm, then work through the rest.

1. Bank accounts, cards and payment apps

Review checking, savings, credit card, investment, retirement and payment-app activity for anything you don’t recognize. Look beyond purchases: a new linked bank account, authorized user, payment method, mailing address or phone number could also point to an unauthorized change.

Turn on transaction and security alerts where they’re available. If you spot something suspicious, contact the institution using its official website or the phone number on a statement—not a number in an unexpected text or email.

2. Credit reports

Check your reports from Equifax, Experian and TransUnion for unfamiliar accounts, hard inquiries, collections, addresses or employers. A fraudulent card, personal loan or retail-financing account could show up there even if your bank account looks normal.

You can get free online reports from all three bureaus through AnnualCreditReport.com. At present, you can request them once a week. An unfamiliar entry isn’t necessarily fraud; some lenders operate under names you may not know. Verify questionable information with the company before filing a dispute.

Consider freezing your credit with all three bureaus. A freeze is free, won’t affect your credit score and can make it harder for someone to open new credit in your name.

3. Buy now, pay later and store-financing accounts

These accounts can be easy to overlook because they don’t always feel like traditional credit cards. Check services you’ve used for unfamiliar orders, payment plans, saved addresses or account-opening notices. Some buy now, pay later loans may not appear on standard credit reports; reporting varies by provider and loan type.

Search your inbox for unexpected purchase confirmations, shipping notices or payment reminders. To check an order, open the retailer’s official app or type its web address yourself rather than following a link in an unexpected message.

4. Your phone account

Your phone number may be used to receive verification codes or password-reset messages, so changes to your wireless account can put other accounts at risk. Look for unfamiliar devices, lines, eSIMs, upgrades, address changes or changes to your account PIN.

A sudden loss of cellular service can be an early sign of a SIM swap, though outages and equipment problems can have other causes. If a change doesn’t make sense, contact your carrier through an official channel. Ask about account PINs, port-out protection and SIM-swap safeguards.

5. Utility and household-service accounts

Check electric, gas, water, internet and other service accounts. Someone could use your information to start service, change an account or leave an unpaid balance. Utility fraud may not appear on a credit report right away.

A bill, welcome email, service appointment or shutoff notice for something you didn’t request is worth looking into. You can also request a report from the National Consumer Telecom & Utilities Exchange (NCTUE), a specialty reporting service that collects information from participating phone, pay-TV and utility companies. You’re entitled to one free report every 12 months. It may show accounts or service requests that don’t appear on traditional credit reports, but it doesn’t cover every provider.

If you find an unfamiliar account, note the date, address and service details. Then contact the company and ask what information was used to open or change it.

6. Medical bills and insurance records

Look for explanations of benefits, medical bills, prescription notices or insurance communications about care you didn’t receive. Medical identity theft can lead to an unexpected bill, but it may also put incorrect information in your medical record. Someone might use your insurance details for treatment, leaving records that could affect future care or claims.

If something looks wrong, contact the provider or insurer directly and ask for the records connected to the claim. Don’t dismiss a small bill as unimportant; the inaccurate medical information may be the bigger concern.

7. Tax, Social Security and benefit records

Pay attention to notices from the IRS, Social Security Administration or a state benefits agency that don’t fit your situation. Warning signs may include income from an unfamiliar employer, a tax return you didn’t file or unemployment benefits claimed in your name.

You can review tax information through your IRS online account and check your earnings history through your my Social Security account. If you see unfamiliar earnings, contact the Social Security Administration about correcting your record.

You can also request a free IRS Identity Protection PIN, a six-digit number that helps prevent someone else from filing a federal tax return using your Social Security number. Use official government websites to check or report suspicious activity. If an unexpected message claims to be from an agency, find the agency’s website independently rather than following its links.

8. Email and social accounts

Your email or social accounts may not show a direct financial loss, but they can reveal an attempt to take over your digital identity. Review recent sign-ins, sent messages, forwarding rules, recovery addresses, trusted devices and connected apps.

Email deserves particular attention. Someone with access to your inbox may be able to reset passwords for other accounts. If you find unfamiliar access, change your password from a trusted device, sign out of sessions you don’t recognize and enable stronger multifactor authentication. When available, an authenticator app, passkey or security key is generally preferable to relying only on text-message codes.

What to do if you find something suspicious

An unfamiliar message or account doesn’t automatically mean identity theft. A lender may use a business name you don’t recognize, a family member may have used a shared device, or a provider may have changed its billing name. Check for other clues. A new account alongside an unfamiliar address, phone change or collection notice calls for prompt attention. Even one unauthorized transaction or account opening should be investigated.

Compare the record with your own statements and contact the company using verified contact information. Don’t confirm sensitive personal details to an unexpected caller. Ask when the account was opened, what address is associated with it and how the company can confirm whether it belongs to you. If the company confirms fraud, request a case number and written instructions.

Keep the original bill, email or letter, but don’t click links in unexpected messages. Record the date, company, account or service involved and what first alerted you. If you call, write down the department, case number and follow-up date. Save relevant credit reports, account-change notices and screenshots, and store them securely.

Consider spreading account reviews across four short sessions. If you have only a few minutes, start with your email, bank accounts, phone account and credit reports. Those checks may help reveal attempts to access your information, move money, receive verification codes or open new credit. A clean credit report doesn’t rule out identity theft, so check the other areas when you can.

Keep a note of when you review your accounts, but don’t wait for your next scheduled check if you receive a suspicious alert or spot a potentially fraudulent transaction. Investigate it right away.

Identity monitoring

Identity monitoring services may watch for certain changes involving your personal information and alert you to suspicious activity. Depending on the provider, they may monitor credit activity, financial accounts, information found in data breaches or some types of account openings. Some plans also include restoration specialists who can help with recovery.

Services don’t all offer the same coverage, and none can catch every type of identity theft. Before signing up, check what information a service monitors, how quickly it sends alerts and what help it provides if your identity is misused. Monitoring can add another layer of protection, but it works best alongside regular account checks and strong security settings.