What to Do When a Scammer Has Your Personal Information: A Step-by-Step Recovery Guide

If a scammer has your personal information — stay calm and act fast

Finding out a scammer has your personal data (name, SSN, bank account, or passwords) is stressful — but quick, organized action can limit damage and speed recovery. This guide walks you through immediate steps, who to contact, and how to restore your identity and accounts.

First 24–48 hours: immediate actions

• Stay calm and document everything
  • Write down what happened, when, how you learned the data was compromised, and what information was exposed.
  • Save screenshots, emails, texts, call logs, and copies of any suspicious messages.
• Cut off access if possible
  • If a password or account is compromised, change that account password immediately from a trusted device. If you can’t log in, use account recovery channels and note the recovery steps you followed.
  • If bank or credit card numbers were exposed, contact the bank or card issuer to freeze or close the account and request replacement cards.
• Protect your phone
  • If you think your phone number was targeted for SIM swap, contact your mobile carrier immediately and ask them to lock the account and add a port freeze or unique PIN.
• Alert close contacts if necessary
  • If scammers may contact friends, family, or coworkers pretending to be you, let those people know so they can ignore suspicious requests.

Within 72 hours: lock down credit and accounts

• Place a fraud alert or freeze your credit
  • Contact one major credit bureau (Equifax, Experian, or TransUnion) to place an initial fraud alert — they will notify the other two. For better protection, place a credit freeze on all three bureaus to stop new credit lines.
• Change passwords and enable two-factor authentication (2FA)
  • Update passwords on your email and financial accounts first. Use long, unique passwords and a password manager if possible.
  • Turn on 2FA using an authenticator app or hardware key — avoid SMS 2FA if the phone number may be compromised.
• Secure your email
  • Email is the recovery hub for many accounts. Strengthen your email password and 2FA, review account recovery options, and remove unknown forwarding rules or linked addresses.

Report the identity theft and file official records

• File a report with the Federal Trade Commission (FTC)
  • At IdentityTheft.gov you can report the theft, get a personalized recovery plan, and generate an Identity Theft Report to help with disputes.
• File a police report
  • Report to your local police department and get a copy of the report. Some creditors and government agencies require a police report for investigations.
• Notify specific agencies when relevant
  • Social Security: contact the Social Security Administration if you suspect your SSN is being misused.
  • IRS: if you suspect tax-related identity theft, file IRS Form 14039 and follow IRS guidance.
  • State DMV: if your driver’s license was stolen or used fraudulently, alert your state DMV to prevent fraudulent license use.

Contact banks, credit card companies, and other institutions

• Report fraud to every financial institution that might be affected
  • Ask them to close or freeze accounts, reverse unauthorized charges, and issue new account numbers or cards.
• Dispute fraudulent transactions
  • Submit written disputes when required and keep copies. Follow up until charges are resolved.
• Keep a log of every call
  • Record dates, times, representatives’ names, and case numbers.

Ongoing recovery: monitoring and restoration (weeks to months)

• Monitor credit reports and accounts closely
  • Check each credit report for new accounts or inquiries. You’re entitled to a free credit report from each bureau periodically; consider spacing these checks over months.
• Consider extended fraud alerts or professional monitoring
  • An extended fraud alert (7 years in many cases) can be requested with an Identity Theft Report. Paid credit monitoring or identity restoration services can help, but review terms and reputation first.
• Replace stolen IDs and accounts
  • Replace driver’s license, passport, Social Security card (if necessary), and any other documents that were stolen.
• Repair your online presence
  • Check social media privacy settings, remove suspicious linked apps, and update usernames if needed.

If tax or government benefits are affected

• Tax identity theft: contact the IRS and follow their steps for identity verification and filing.
• Social Security fraud: contact the SSA if your benefits or SSN were used to file false claims or work records.

Additional security measures and prevention tips

• Use a password manager for unique, complex passwords
• Prefer authenticator apps or hardware keys for 2FA
• Set a phone account PIN or passcode with your carrier to prevent SIM swap
• Shred sensitive paperwork and secure mail (rent a PO box or add a locked mailbox)
• Be wary of unsolicited calls and phishing attempts — verify callers independently
• Limit what personal details you share online and in public documents

What to include in your dispute and recovery documentation

• Copies of communications with institutions
• Police report number and a copy of the report
• FTC Identity Theft Report or recovery plan from IdentityTheft.gov
• Any receipts or proof of fraudulent transactions

Quick checklist (copy and use)

• Document what was stolen and how you found out
• Change passwords and secure email
• Contact banks and credit card companies
• Place a fraud alert and freeze credit reports
• Contact mobile carrier to prevent SIM swap
• File FTC report at IdentityTheft.gov
• File a police report and save a copy
• Dispute fraudulent transactions in writing
• Replace IDs and update agencies (SSA, DMV, IRS)
• Monitor credit and accounts for at least 12–24 months

Final notes — stay patient and persistent

Recovery takes time. Keep clear records of each step and follow up with creditors and agencies until issues are resolved. If the scale of the fraud is large or complex, consider consulting a consumer law attorney or a reputable identity restoration service.

If you received a scam call or message that led to this exposure, save the caller info and report it — sharing the details helps others avoid the same trap.

You don’t have to fix everything at once. Prioritize stopping ongoing theft (bank accounts, credit cards, SIM swap) and then methodically work through disputes and monitoring.