Identity Theft Prevention: 10 Steps to Protect Yourself

Every 22 seconds, someone in the United States becomes a victim of identity theft. In 2024, the FTC received over 1.4 million identity theft reports, with losses exceeding $10 billion. And those are just the reported cases.

Identity theft is not a matter of bad luck. It is the result of exposed personal information meeting an opportunistic criminal. The good news is that most identity theft is preventable with the right habits.

How Identity Theft Actually Happens

Understanding the attack vectors helps you defend against them.

Data Breaches

The most common source. When a company gets hacked, your name, Social Security number, and financial data end up for sale on the dark web. You cannot prevent breaches, but you can minimize the damage.

Mail Theft

Physical mailboxes remain a goldmine. Pre-approved credit card offers, bank statements, tax documents — all contain enough information to open accounts in your name.

Phishing

Emails, texts, or calls that trick you into revealing personal information. Modern phishing is sophisticated — attackers use data from previous breaches to make their messages extremely convincing.

Social Engineering

A phone call from "your bank's fraud department" asking you to verify your Social Security number. A message from "the IRS" threatening legal action. These prey on fear and urgency.

Dumpster Diving

Discarded documents with personal information — bank statements, medical bills, old tax returns. If it has your name and account numbers, it should be shredded.

Public Wi-Fi Interception

Unsecured Wi-Fi networks at coffee shops and airports can be monitored by attackers who capture login credentials and personal data transmitted over the network.

The 10 Steps to Prevent Identity Theft

1. Freeze Your Credit

A credit freeze is the single most effective step you can take. It prevents anyone — including you — from opening new credit accounts until you lift the freeze.

How to freeze (free at all three bureaus):

• Equifax: equifax.com/personal/credit-report-services
• Experian: experian.com/freeze
• TransUnion: transunion.com/credit-freeze

You receive a PIN to temporarily lift the freeze when you need to apply for credit. This takes minutes, not days.

2. Use Unique Passwords Everywhere

Password reuse is the number one enabler of identity theft. When one service gets breached and your password leaks, attackers try it on every other service.

• Use a password manager (1Password, Bitwarden, Apple Keychain)
• Generate random passwords of 16+ characters
• Never reuse a password across accounts
• Change passwords immediately after any breach notification

3. Enable Two-Factor Authentication on Every Account

Even if your password is stolen, 2FA adds a second barrier.

Account Type	Minimum 2FA
Email	Authenticator app or hardware key
Banking	Whatever the bank offers (usually SMS + app)
Social media	Authenticator app
Cloud storage	Authenticator app or hardware key

4. Monitor Your Credit Reports

Check your credit reports regularly for accounts you did not open.

• AnnualCreditReport.com — Free weekly reports from all three bureaus
• Credit Karma — Free ongoing monitoring
• Your bank — Many banks offer free credit score monitoring

Set calendar reminders to check quarterly at minimum.

5. Secure Your Physical Mail

• Use a locking mailbox or PO Box
• Opt out of pre-approved credit card offers at OptOutPrescreen.com
• Switch to paperless billing for all accounts
• Collect your mail promptly — do not let it sit overnight
• When moving, file a change of address with USPS immediately

6. Shred Sensitive Documents

Any document with personal information should be cross-cut shredded before disposal:

• Bank and credit card statements
• Medical bills and insurance documents
• Tax returns and W-2 forms
• Pre-approved credit offers
• Old ID cards and expired credit cards

7. Be Careful What You Share Online

Social media profiles are a treasure trove for identity thieves:

• Birthdate — Combined with your name, this is a powerful identity verification tool
• Mother's maiden name — A common security question answer
• Pet names, schools, streets — All common security question answers
• Vacation posts in real time — Signals that your home and mailbox are unattended

8. Protect Your Social Security Number

Your SSN is the master key to your financial identity.

• Never carry your Social Security card in your wallet
• Do not give your SSN unless legally required (medical forms, tax documents, employment)
• Ask why it is needed and how it will be protected
• When you must share it digitally, use a secure, expiring channel like LOCK.PUB instead of email or text

9. Use Secure Networks

• Avoid logging into financial accounts on public Wi-Fi
• Use a VPN when on untrusted networks
• Ensure websites use HTTPS before entering personal information
• Keep your devices updated with the latest security patches

10. Set Up Fraud Alerts and Identity Monitoring

• Fraud alert — Place a free one-year fraud alert at any credit bureau (it notifies all three)
• Identity monitoring services — Consider services like IdentityForce, LifeLock, or Aura
• IRS Identity Protection PIN — Apply at irs.gov to prevent tax identity theft
• Bank alerts — Set up notifications for every transaction on all accounts

Warning Signs of Identity Theft

Act immediately if you notice:

Warning Sign	Possible Meaning
Unfamiliar accounts on credit report	Someone opened accounts in your name
Bills for services you did not order	Accounts opened using your identity
Calls from debt collectors about unknown debts	Fraudulent accounts went to collections
Denied credit unexpectedly	Fraudulent accounts damaged your credit
Missing mail	Mail redirected by a thief
IRS says your tax return was already filed	Tax identity theft
Medical bills for treatments you did not receive	Medical identity theft

What to Do If Your Identity Is Stolen

1. File a report at IdentityTheft.gov — The FTC creates a personalized recovery plan
2. File a police report — Required by many creditors and agencies
3. Place a fraud alert or credit freeze — At all three credit bureaus
4. Contact affected companies — Close fraudulent accounts
5. Review credit reports — Dispute any unauthorized accounts or inquiries
6. Document everything — Keep records of all calls, reports, and correspondence

Share Sensitive Information Safely

One of the easiest ways criminals obtain your personal information is through insecure communication channels. When you send your SSN, driver's license number, or financial details through iMessage, email, or Messenger, that information lives permanently in chat histories and email servers.

Instead, use LOCK.PUB to create a password-protected memo that auto-expires. Share the link through one channel and the password through another. Once the timer runs out, the information is gone — no permanent record in anyone's chat history.

Identity theft prevention is not about being paranoid. It is about building simple habits that make you a harder target. Start with the steps above, and make protecting your identity part of your routine.

Create a Secure Memo →