9 warning signs of identity theft you should never ignore

Identity theft can start quietly. You may not see a drained bank account or a maxed-out credit card. The first warning could be a strange letter in the mail, an unfamiliar inquiry on your credit report or a password-reset alert you never requested.

Those little clues are easy to brush off, but catching them early can give you more time to protect your money, credit and accounts. One unusual message does not automatically mean someone has stolen your identity, so do not panic. Instead, verify what happened and pay attention to anything else that looks out of place.

Here are nine identity theft warning signs you should never ignore.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Our free CyberGuy LIVE class, Protect Your Money From Today’s Biggest Threats , has ended, but you can still watch the full replay and download our financial protection checklist. Kurt "CyberGuy" Knutsson walks you through five simple ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. You’ll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.

Get the free replay and checklist now at CyberGuyLive.com

CYBERCRIME LOSSES NEAR $21B: 5 WAYS TO PROTECT YOUR MONEY

A company may contact you after discovering that customer information was exposed. The notice could come from a bank, retailer, employer, healthcare provider, insurer, school or another organization.

Read it carefully. Find out what information may have been involved, when the incident occurred and whether the company is offering steps such as password changes or credit monitoring. Save the notice with your other records.

A breach notice shows possible exposure, not confirmed identity theft. Still, it is a good reason to review your accounts and strengthen your security.

Check your credit reports for hard inquiries you do not recognize. A hard inquiry generally appears when a lender reviews your credit after you apply for credit.

Also look for new accounts, unfamiliar addresses, collections accounts or loans you never requested. Identity thieves may use stolen information to apply for credit before you notice anything unusual.

Check all three major credit bureaus rather than relying on a single report. Details can differ from one report to another, so reviewing only one may leave gaps.

If you find an inquiry or account that does not belong to you, contact the lender using a trusted phone number or website, rather than contact information from a suspicious message.

A bill for a credit card, utility service, medical account or buy-now-pay-later purchase you did not make is a serious warning sign. So is a call from a debt collector about a debt that does not belong to you.

Do not ignore the notice simply because you believe it is a mistake. Ask the organization for details, dispute the account and keep copies of your correspondence.

Be cautious about sharing personal information with an unexpected caller. If you need to contact a company, find its official number independently.

Review checking, savings, credit card, payment app, investment and retirement accounts regularly. Look for small test charges, unfamiliar withdrawals, new payees, password changes, profile updates or transfers you did not authorize.

Scammers sometimes begin with a small transaction to see whether an account is active. Other times, they try to take over the account entirely.

Contact the financial institution immediately through its official app, website or statement. Ask what steps are needed to secure the account, replace cards, investigate transactions and protect any linked accounts.

Turn on account alerts for purchases, transfers, password changes and other important activity. Alerts are useful, but they work best when you still review statements yourself.

Pay attention to unexpected letters or online notices from the IRS, Social Security Administration or a state agency. Examples include a tax return you did not file, benefits you did not request or a claim connected to an employer you do not recognize.

Do not respond using a link or phone number in an unsolicited message. Visit the agency's official website or use a phone number from a statement or a previously verified account.

Keep every notice. Government-related identity theft can take time to resolve, and a clear record of dates and communications may help.

A phone that unexpectedly loses service can have an innocent explanation, such as an outage or billing problem. But it can also be a sign that someone transferred your number to another device or took over your mobile account.

That is exactly what happened to Patricia Escriva, whose phone suddenly lost service before scammers used a SIM swap attack to get into her accounts and steal thousands of dollars. We broke down her story and what you can learn from it in The CyberGuy Report podcast: How hackers drain your bank account in minutes.

If your phone suddenly goes offline and you cannot explain why, treat it as a warning sign. Contact your wireless provider right away from another phone and ask whether there was a recent SIM change, number transfer or account update. A SIM is the small card or digital profile that connects your phone to a mobile network.

Once your number is secure, review important accounts for password resets or login attempts. Ask your carrier about an account PIN or other protections against unauthorized changes.

HEALTHCARE DATA BREACH EXPOSES 3.75M PATIENT RECORDS

An unexpected password-reset email, multifactor authentication code or sign-in alert may mean that someone is trying to access an account. It may also be a fake message designed to trick you into clicking a link.

Do not share a verification code with anyone who calls or messages you. Open the account through its official app or type the website address yourself, then review recent activity and change the password if needed.

Start with your primary email account. Email often acts as the doorway to password resets for banking, shopping, healthcare and other services. Use a long, unique password and turn on multifactor authentication, which requires an extra verification step beyond your password.

Avoid reusing passwords. If one website is breached, a reused password may give criminals an opportunity to try the same combination elsewhere.

A sudden wave of calls, texts or emails that use your correct name, address, family details or account information deserves attention. This does not prove identity theft, but it may indicate that personal data is circulating among scammers.

Be especially cautious when a message creates urgency, demands payment, asks for a verification code or tells you to move money to "protect" it. Banks, government agencies and legitimate companies do not need you to hand over a one-time code to keep your account safe.

Instead of replying, contact the organization through a trusted channel. Then review your accounts, credit reports and recent security alerts.

An unfamiliar mailing address on a credit report, a changed email address on an account or a notification that your identity was verified somewhere you do not recognize can signal an attempted takeover.

Review account recovery information, authorized users, linked devices and connected apps. Remove anything you do not recognize and change the password from a trusted device.

If the change involves a bank, credit card, phone provider or government account, contact that organization promptly. A small profile change can be an early step in a larger attempt to control the account.

First, slow down and verify the information. A suspicious text may be a scam, and a legitimate account alert may be the result of a family member's purchase or a forgotten subscription.

If the activity is confirmed or you cannot explain it, take these important steps:

Use a trusted number or official app. Ask the organization to secure the account and investigate.

A credit freeze restricts access to your credit file, making it harder for someone to open new credit in your name. Place a freeze with all three major credit bureaus if appropriate for your situation.

A fraud alert asks lenders to take extra steps to verify your identity. It provides another layer of protection and works differently from a credit freeze.

Change important passwords, use a password manager to create and store strong, unique passwords, review recovery settings and add account protections through your wireless provider.

Check banking, credit cards, payment apps, investments, retirement, healthcare, utilities and government services.

Save breach notices, screenshots, dates, names, dispute numbers and copies of letters.

If you confirm that someone has used your identity, report it to the Federal Trade Commission at IdentityTheft.gov. The site will help you create an FTC Identity Theft Report and build a personalized recovery plan. You can also use that report when working with credit bureaus, businesses and debt collectors to dispute fraudulent accounts or information. Some companies may also ask for a police report.

If your information appears in a breach, you may not be able to remove it completely. Focus on making the exposed information less useful: freeze your credit, secure your accounts, limit unnecessary public information and keep watching for new warning signs.

You can take many important steps to protect yourself, including checking your accounts, using unique passwords and freezing your credit. An identity theft monitoring service can add another layer by watching for signs that your personal or financial information may be misused.

Depending on the service and plan you choose, monitoring can include credit reports, checking and savings accounts, investments and 401(k) accounts, bank account takeovers, home title changes, phone takeovers, identity verification, dark web exposure, data breaches and social media activity.

That broader monitoring can be helpful because identity theft can show up in more places than your credit report. If fraud occurs, restoration support may also help reduce the burden of dealing with calls, paperwork and disputes.

Monitoring works best as an added layer of protection rather than a replacement for good security habits. Continue reviewing your accounts, watching for unusual activity and acting quickly when something looks wrong . See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

NEW BANK SCAM LAWS COULD STOP SUSPICIOUS PAYMENTS

Identity theft often gives you warning signs before serious damage is done. A strange charge, an account you do not recognize or even a password-reset alert you never requested can be your cue to take a closer look. Trust your gut when something feels off, verify what happened and act quickly to lock down your accounts and credit. A few minutes spent checking now could save you a much bigger headache later. The key is to stay alert without living in fear. Keep an eye on your accounts, use strong security protections and know what steps to take if your information ends up in the wrong hands.

Have you ever spotted one of these identity theft warning signs, and what tipped you off that something was wrong? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.