How to File an Identity Theft Report: Step-by-Step for Seniors and Families

When a parent's identity has been stolen — whether through a scam call, a data breach, or a stolen wallet — the instinct is to act immediately. But most people don't know exactly which agencies to contact, in what order, or what each report actually does.

This guide walks through the process step by step: FTC first, then local police if needed, then the Social Security Administration if the Social Security number was compromised. Each step is distinct and serves a different purpose.

Why Reporting Matters (and What It Actually Accomplishes)

Filing a report is not just bureaucratic paperwork. The official identity theft report from the FTC creates a legal document that:

• Triggers specific rights under the Fair Credit Reporting Act (FCRA)
• Allows your parent to dispute fraudulent accounts with credit bureaus as an identity theft victim (not just as a generic dispute)
• Can be required by banks, creditors, and the IRS when resolving fraud
• Creates an official record that strengthens any future legal action

Without a filed report, your parent is a consumer making a complaint. With a filed report, they are an identity theft victim with documented legal rights — and creditors and bureaus treat those two situations very differently.

Step 1: File an FTC Identity Theft Report at IdentityTheft.gov

The Federal Trade Commission's IdentityTheft.gov is the right starting point for all US residents. This is not just a reporting form — it generates a personalized recovery plan specific to what happened.

How to do it:

1. Go to identitytheft.gov (not the FTC's main website — the specific identity theft site)
2. Click "Get started" and select the type of theft that occurred (options include: someone opened accounts in my name, someone filed a tax return in my name, someone used my existing accounts, etc.)
3. Answer the questions about what happened
4. The site generates a personal recovery plan with specific action items in priority order
5. At the end, click "Create your FTC Report" to generate and download the official Identity Theft Report as a PDF

What you get: A formal Identity Theft Report with a case number. This document has legal weight. Keep multiple copies — digital and printed.

What happens next: The FTC does not investigate individual identity theft cases. That is not what this report is for. Its purpose is to create your legal documentation. The FTC aggregates data across reports to identify patterns and pursue enforcement actions against fraud operations, but your recovery is driven by how you use the report, not by FTC intervention.

Account creation: IdentityTheft.gov lets you create a free account to track progress on your recovery plan. If your parent is overwhelmed, you can set this up on their behalf and manage it for them — there is no requirement that it be the victim's own email address.

The Recovery Plan Covers

Depending on what was stolen, the personalized plan will include specific instructions for:

• Which credit bureaus to contact and what to request (freeze vs. fraud alert)
• Which businesses opened fraudulent accounts to contact and what to say
• How to dispute fraudulent accounts using the FTC report as documentation
• Whether to file with the IRS if a fraudulent tax return is a concern
• Whether to notify Social Security if the SSN was compromised

Work through the plan items in the order given — the priority sequencing matters.

Step 2: Place Fraud Alerts or Credit Freezes

While working through the FTC recovery plan, place either a fraud alert or a credit freeze at all three major bureaus. This is typically the first or second item on the recovery plan.

Fraud alert: Notifies lenders to take extra steps to verify identity before opening new credit. It lasts one year (extended to seven years for identity theft victims with an FTC report). A fraud alert at one bureau automatically notifies the other two.

Credit freeze (stronger): Completely locks the credit file so no new accounts can be opened at all. Must be placed at each bureau separately. It stays in place until you actively lift it.

For most seniors who have experienced identity theft, a credit freeze is the better option. It is free, it is permanent until lifted, and it prevents new accounts from being opened even if the scammer still has your parent's information.

Note: If your parent has a ChexSystems file (used by banks for checking account approvals), place a freeze there too: chexsystems.com. Scammers sometimes open fraudulent bank accounts, not just credit accounts.

Step 3: File a Police Report (When You Need One)

An FTC report is sufficient for most identity theft recovery. However, you will need a police report in specific situations:

• A creditor requires it (some businesses will only accept a police report, not an FTC report, when resolving fraud)
• A fraudulent bank account was opened and the bank requires it
• Criminal charges are being pursued against a known perpetrator
• The theft involved physical documents (stolen wallet, mail theft)

How to do it:

1. Go to your parent's local police department in person, or use their online reporting system if available (many departments have this for non-emergency property crimes)
2. Bring: a copy of the FTC Identity Theft Report, photo ID, and any evidence of the fraud (statements showing unauthorized accounts, collection letters for accounts they didn't open, etc.)
3. Ask specifically for an identity theft police report (not just a general fraud report)
4. Get the report number in writing

What to expect: Local police departments do not typically investigate identity theft cases that involve out-of-state or international fraud operations — which most scams do. The report is primarily a legal document for your parent's use, not a promise of investigation.

If the fraud crossed state lines or involved wire transfers, also consider reporting to the FBI at ic3.gov.

Step 4: Contact the Social Security Administration (If SSN Was Compromised)

If your parent's Social Security number was specifically given to a scammer — through a government impersonation scam, a phishing call, or a data breach — notify the SSA.

Options:

Online: Create or log into a My Social Security account at ssa.gov/myaccount. From there you can review earnings records for fraudulent entries and request a Social Security Statement.

By phone: 1-800-772-1213 (TTY: 1-800-325-0778), Monday through Friday 8am-7pm Eastern.

What to report: Tell them the SSN was compromised and ask them to flag the account. Ask them to review the earnings record for unauthorized employment entries — this happens when a scammer uses the number to work illegally, which can affect future Social Security benefits.

SSN replacement: The SSA can issue a new Social Security number in cases of ongoing, documented harm — but this is a significant step with its own complications (the old number does not disappear from existing credit files, employment records, or tax records). Most identity theft situations do not require a new SSN; the credit freeze and FTC report are sufficient.

Step 5: Notify Affected Financial Institutions

The FTC recovery plan will include steps for contacting each affected institution. For your parent's existing banks and credit card companies:

1. Call the fraud department directly (not the general customer service line)
2. Provide the FTC report number
3. Ask them to flag the account for suspicious activity and restrict online access changes
4. Request new account numbers if any existing accounts were accessed (not just opened)

Script to use: "I am calling to report that my [parent/I] is a victim of identity theft. I have filed an FTC Identity Theft Report, case number [X]. I need to report unauthorized activity on account [X] and request a fraud investigation."

Step 6: Check and Dispute Credit Report Errors

Under the FCRA, identity theft victims with an FTC report have the right to have fraudulent accounts blocked from their credit reports — this is stronger than a standard dispute. A block removes the account entirely; a standard dispute may not.

How to request a block:

1. Get free credit reports from all three bureaus at annualcreditreport.com
2. Identify any accounts or inquiries your parent does not recognize
3. Write a dispute letter to each bureau that shows a fraudulent account. Include:
   • Their name, address, and SSN
   • The account(s) being disputed
   • A statement that they are an identity theft victim
   • A copy of the FTC Identity Theft Report
   • A copy of photo ID
4. Send via certified mail with return receipt

Bureaus have 4 business days to block the fraudulent information once they receive a valid identity theft report.

Keeping Records: What to Save

Throughout this process, document everything:

• Date and time of every call, with the name of the representative spoken to
• Case numbers from FTC, police, and SSA
• Certified mail tracking numbers
• Copies of every letter sent and received
• Screenshots of any online submissions

This documentation protects your parent if a dispute is challenged, if a debt collector contacts them about a fraudulent account, or if the matter is ever escalated legally.

A Note on Timeline

Identity theft recovery for seniors often takes months, not days. Credit bureau disputes take up to 30 days to resolve. Fraudulent accounts may need to be disputed individually with multiple creditors. New fraudulent accounts may surface in the weeks after the initial breach.

Check your parent's credit reports again 30 and 90 days after filing the initial reports to catch anything that appears later. The credit freeze prevents new damage while you work through the existing problems.

The process of reporting identity theft is manageable, but most families don't know the full system until they're in the middle of it. The Elder Scam Shield guide includes a pre-formatted identity theft response checklist, contact information for all major agencies, and letter templates for disputing fraudulent accounts — so you have everything ready before a crisis happens, not after.