Where Is the Best Place to Report Identity Theft?
IdentityTheft.gov is the best place to start, no matter what kind of identity theft you’re dealing with. It’s run by the FTC, it’s free, and it builds your recovery plan for you. But it’s rarely the only place you need to report to. Depending on what actually happened — a stolen credit card, a fraudulent tax return, a misused Social Security number — one or two other specific agencies need to hear from you too. Here’s exactly where each type of identity theft belongs.
Start at IdentityTheft.gov, Then Branch Out From There
Think of IdentityTheft.gov as your home base, not your only stop. When you file there, you get three things: a personalized recovery plan, pre-filled letters ready to send to banks and creditors, and an official Identity Theft Report — your sworn statement about the crime, carrying the same legal weight as a police report in most situations.
That report becomes the document you hand to almost every other agency and company below. It’s why this is always step one, regardless of what type of fraud you’re dealing with.
Where to Report Based on What Actually Happened
A stolen credit card or a new account you didn’t open
Report it directly to the bank or card issuer first — their fraud department can freeze the account immediately, which IdentityTheft.gov can’t do for you. Then place a fraud alert with one credit bureau. By law, that bureau has to notify the other two, so one phone call covers Equifax, Experian, and TransUnion at once.
Wrong information sitting in your credit file
If you’re seeing an address, employer, or account that isn’t yours, the credit bureaus are who you dispute it with, not the FTC. Send a written dispute naming the exact line that’s wrong, and keep a copy of everything you send.
Your Social Security number was misused
Call the Social Security Administration’s Office of the Inspector General at 1-800-269-0271, or report it at oig.ssa.gov, especially if someone used your number to get a job, claim benefits, or open accounts in your name. For the mechanics of exactly how this typically happens, see how Social Security identity theft occurs.
Someone filed a tax return in your name
Contact the IRS Identity Protection Specialized Unit at 1-800-908-4490 and file Form 14039, the IRS Identity Theft Affidavit. You’ll usually find out something’s wrong when your legitimate e-filed return gets rejected because one’s already been filed under your Social Security number.
Your mail was stolen or your address was changed without you
This goes to the U.S. Postal Inspection Service, not the local post office counter. They investigate mail theft and fraudulent change-of-address requests, both common ways thieves intercept new cards, checks, and account statements before you ever see them.
The fraud happened through a scam, a hack, or a phishing site
File a complaint with the FBI’s Internet Crime Complaint Center at IC3.gov. This is the right channel when the identity theft traces back to something online — a fake login page, a data breach, a romance scam, or a hacked account — rather than a stolen wallet or a piece of mail.
You know who did it, or a company demands a police report
This is one of the few situations where a local police report actually matters. Most creditors and bureaus accept your FTC Identity Theft Report on its own, but if you have information that could help an investigation, or a specific company insists on a police report, file one with the department where you live.
Why the One-Call Fraud Alert Rule Matters More Than People Realize
Most people don’t realize they only need to contact one credit bureau to protect themselves at all three. Federal law requires whichever bureau you call — Equifax, Experian, or TransUnion — to notify the other two within days. That single call also entitles you to a free credit report from each bureau, on top of the report you’re already owed once a year. Skip this step and you’re leaving two-thirds of your protection on the table for no reason.
A Quick Reference
| What Happened | Where to Report |
| Any identity theft, as a first step | IdentityTheft.gov (FTC) |
| Fraudulent charges or a new account | Your bank or card issuer, then one credit bureau |
| Wrong personal or account info on your credit file | The credit bureau directly, in writing |
| Misused Social Security number | SSA Office of Inspector General, 1-800-269-0271 |
| Fraudulent tax return filed in your name | IRS, Form 14039, 1-800-908-4490 |
| Stolen mail or a fake change-of-address | U.S. Postal Inspection Service |
| Online scam, phishing, or hacked account | FBI’s IC3.gov |
| You know the thief, or a company demands it | Your local police department |
After You Report: What Actually Comes Next
Reporting is the start of recovery, not the end of it. Once your reports are filed, the real work is disputing fraudulent items, confirming what happens once you’re officially a victim of identity theft, and figuring out whether you’re actually responsible for any of the debt a thief ran up. Federal law limits your liability in most cases, but only if you’ve reported things to the right places and kept your documentation straight.
Where to Report Identity Theft — Frequently Asked Questions
Do I need to report to every agency on this list?
No. Report to IdentityTheft.gov first, then only the specific agencies that match what actually happened to you. Most victims only need two or three of these, not all of them.
What if I don’t know yet what kind of identity theft I’m dealing with?
Start at IdentityTheft.gov regardless. The questions it asks will help you figure out which type of fraud you’re facing and which additional agencies you need to contact.
Is reporting to the FTC the same as reporting to the police?
Not exactly, but it functions the same way in most cases. IdentityTheft.gov is a federal law enforcement agency, and the report it generates is accepted by most banks and creditors in place of a police report.
Do I really only need to call one credit bureau?
Yes. Whichever of the three you contact is legally required to notify the other two, so one fraud alert call covers all three files.
What if the identity theft happened more than a year ago?
Report it anyway. There’s no deadline for filing an Identity Theft Report, and some protections, like disputing fraudulent items on your credit report, remain available regardless of when the theft occurred.
Should I report to my state Attorney General too?
It’s optional but can help, especially if you want your state’s consumer protection office involved or you’re dealing with a company that isn’t responding to your disputes. It’s a supplement to the reports above, not a replacement for any of them.
Sources Used in This Article
- Federal Trade Commission — IdentityTheft.gov: https://www.identitytheft.gov
- Social Security Administration, Office of the Inspector General: https://oig.ssa.gov
- Internal Revenue Service — Identity Theft Affidavit, Form 14039: https://www.irs.gov/identity-theft-fraud-scams
- Federal Bureau of Investigation — Internet Crime Complaint Center: https://www.ic3.gov
- U.S. Postal Inspection Service: https://www.uspis.gov
Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against current guidance from the FTC, SSA, IRS, FBI, and USPS. Last Updated: September 16, 2026.
This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.