The warning signs of identity theft range from an unfamiliar charge on a bank statement to an IRS notice about a tax return you never filed — and catching one early is often the difference between a quick fix and months of recovery work. This guide walks through 11 specific signs worth watching for, what each one usually means, and what to do the moment you spot it.
For the complete picture — how identity theft actually happens, how to report it, and the full recovery process — see Identity Theft: Complete Guide to Prevention and Recovery. This article focuses specifically on recognizing the early signs.
11 Warning Signs to Watch For
1. Unfamiliar charges or withdrawals on your accounts
A charge you don’t recognize, even a small one, is often a test transaction before a larger fraudulent charge follows.
What to do: Contact your bank or card issuer immediately to dispute the charge and ask about a replacement card.
2. Bills or collection calls for accounts you never opened
Receiving a bill, statement, or collection call for a credit card, loan, or utility account you never applied for is one of the clearest signs someone has opened credit in your name.
What to do: Do not pay the bill. Contact the creditor to report fraud, then file a report at IdentityTheft.gov.
3. A sudden, unexplained drop in your credit score
A significant score drop with no life event to explain it — no missed payment, no new large purchase — often means new debt or missed payments were reported on accounts you don’t know about.
What to do: Pull your full credit report from all three bureaus at annualcreditreport.com and review every listed account.
4. Being denied credit or a loan unexpectedly
If you’re turned down for credit you were confident you’d qualify for, the denial letter is legally required to state a reason — and that reason often points to unfamiliar debt or accounts.
What to do: Request the specific reason for denial in writing, then check your credit report for the accounts referenced.
5. Missing mail, especially bills and bank statements
If routine mail like billing statements suddenly stops arriving, someone may have filed a change-of-address request to reroute your mail and intercept account details.
What to do: Contact USPS to check for an unauthorized mail forwarding request, and log into your accounts directly rather than waiting for paper statements.
6. An IRS notice about a duplicate tax return
If the IRS rejects your e-filed return because one was already filed under your Social Security number, someone likely filed a fraudulent return to claim your refund.
What to do: Follow the IRS identity theft affidavit process (Form 14039) and contact the IRS Identity Protection Specialized Unit directly.
7. Medical bills or insurance statements for care you never received
An explanation-of-benefits statement listing a visit, procedure, or prescription you didn’t have is a sign of medical identity theft, which can also corrupt your actual medical records.
What to do: Contact your insurer’s fraud department and request a copy of your medical records to check for other unfamiliar entries.
8. New accounts on your credit report you don’t recognize
A credit card, loan, or line of credit you never applied for appearing on your report is one of the most direct signs of identity theft.
What to do: Dispute the account with the credit bureau reporting it and place a credit freeze on your file at all three bureaus.
9. Debt collectors contacting you about debts that aren’t yours
Collection calls or letters referencing an account you never opened are frequently the first real-world sign that fraudulent debt has been building for months.
What to do: Ask the collector for written verification of the debt, and do not confirm personal details over the phone until you’ve verified the account is fraudulent.
10. Being locked out of an account, or unexpected password reset emails
If you’re suddenly unable to log into an account, or you receive password reset or verification codes you didn’t request, someone may already be attempting to take it over.
What to do: Try to regain access immediately through the service’s account recovery process, then enable two-factor authentication once you’re back in.
11. A data breach notification followed by unusual activity elsewhere
A breach notification by itself doesn’t mean your identity has been stolen, but unusual activity on other accounts shortly afterward — especially accounts using the same password — is a strong warning sign, since breached credentials are frequently reused against other services.
What to do: Change the password on the breached account and any account reusing that password, and monitor those accounts closely for the following weeks.
Signs Grouped by What They Usually Indicate
| Sign | Usually Points To |
|---|---|
| Unfamiliar charges, new credit accounts, denied credit | Financial identity theft |
| Medical bills or EOBs for care you didn’t receive | Medical identity theft |
| IRS duplicate-filing notice | Tax-related identity theft |
| Missing mail, account lockouts, unexpected verification codes | Active account takeover in progress |
| Collection calls for unfamiliar debts, credit score drop | Debt already accumulated in your name |
Frequently Asked Questions
How many of these signs need to happen before I should worry?
Just one. Each sign on this list is worth investigating on its own; you don’t need multiple signs to justify checking your accounts and credit report.
Can I have identity theft without any of these signs appearing?
Yes, especially in early-stage cases where stolen information hasn’t been used yet. Regularly checking your credit report and account statements — or letting a paid identity protection service do it for you — catches theft these signs haven’t surfaced yet.
Which of these signs is most urgent to act on?
Being locked out of an account or receiving verification codes you didn’t request is the most time-sensitive, since it suggests an active takeover attempt happening right now.
Does a low credit score always mean identity theft?
No. Missed payments, high credit utilization, and closed accounts can all lower your score without any fraud involved — check your full report to see the actual cause before assuming theft.
I found unfamiliar debt on my credit report. What’s the very first step?
Dispute the specific account directly with the credit bureau reporting it, and file a report at IdentityTheft.gov before contacting the creditor.
Will my bank refund fraudulent charges automatically?
Not always automatically, but most banks and card issuers will refund confirmed fraudulent charges once you report them promptly — the sooner you report, the smoother this typically goes.
Can identity theft affect my medical records permanently?
It can, if a thief’s medical history gets merged with yours in a provider’s system. Requesting and reviewing your medical records after a suspected incident helps catch this early.
Should I place a credit freeze after spotting just one warning sign?
It’s a reasonable precaution even for a single sign, since a freeze is free, reversible, and stops new accounts from being opened while you investigate.
Recommended Next Reading
- Identity Theft: Complete Guide to Prevention and Recovery — the full guide to reporting and recovering once theft is confirmed.
- What Are Data Brokers? — one of the ways your information becomes available to identity thieves in the first place.
- How to Remove Your Personal Information from the Internet — reduce your exposure before these signs ever appear.