Blog / Breaches & Passwords

Breaches & Passwords

7 Early Signs Your Identity May Be Stolen

By the RedactZero Team · August 5, 2026 · 9 min read

1. Charges or withdrawals you did not make

The most common early sign is money moving without you. The FTC says charges for things you did not buy, a new bill you did not expect, or bank withdrawals you cannot explain are all classic signals that someone is misusing your information. Even a tiny unfamiliar charge deserves attention.

Thieves often "test" a stolen card number with a small purchase before running larger ones, so a stray charge of a few dollars is not too small to matter. This is also the most common flavor of identity theft overall: credit card fraud accounted for 449,032 of the FTC's identity theft reports in 2024, more than any other named type. Stolen card numbers frequently trace back to breached accounts and reused passwords, which is why the fix goes beyond replacing the card.

2. Bills or statements stop arriving

Silence can be a signal. If a bill you normally receive suddenly stops coming, the FTC warns that someone may have changed your billing address - a step thieves take so you will not see the fraudulent charges piling up on your own account.

The same goes for physical mail generally: mail that stops coming, or goes missing from your mailbox, is on the official warning-signs list at USA.gov. Keep a rough mental calendar of what bills you owe and when they arrive. A statement that is a few days late is nothing; a billing cycle that vanishes entirely is worth a phone call to the company that sends it.

3. Debt collectors call about accounts you never opened

A collection call for a debt that is not yours is one of the clearest signs on the government's list. It usually means someone opened an account in your name, ran up a balance, and never paid - and the unpaid bill has now worked its way to a collector with your name attached.

Do not pay "just to make it stop," and do not assume it is a simple mix-up. Ask the collector for written validation of the debt, then check your credit reports for the account it came from. If the account is fraudulent, an identity theft report from IdentityTheft.gov gives you pre-filled letters to send the collector and the credit bureaus to dispute it.

4. Accounts on your credit report you do not recognize

Your credit reports are where new-account fraud surfaces first. The FTC's advice is direct: get and review your credit reports, because accounts in your name that you do not recognize could be a sign of identity theft. You can check all three bureaus free every week at AnnualCreditReport.com.

The FTC's 2024 numbers show why this matters - new accounts are not limited to credit cards. Here is what Americans reported, by type:

Loans, leases, bank accounts, phone plans - each of those shows up on a credit report or a bill long before most victims would otherwise notice.

5. You are denied credit you should have qualified for

An unexpected loan or credit denial is on USA.gov's official warning-signs list. If your finances have not changed but a lender says no, someone may have opened accounts or run up debt in your name, dragging down the credit history the lender just checked.

The denial letter itself helps you here: lenders must tell you which credit bureau they used. Pull that report the same day and look for accounts, balances, or missed payments that are not yours. A surprise drop in your credit score, or a card application getting flagged for "verification," deserves the same response.

6. Your tax return bounces, or a W-2 arrives from a job you never had

Tax season exposes identity theft that is invisible the rest of the year. The IRS lists a rejected e-filed return among its top warning signs - it often means someone already filed using your Social Security number to claim your refund.

Other tax red flags from the IRS: a Form W-2 or 1099 from an employer you never worked for, unemployment benefits you never applied for, or an IRS notice about unreported income. Employment and tax-related fraud drew 87,470 reports to the FTC in 2024. If any of these happen, the IRS points victims to IdentityTheft.gov and recommends getting an Identity Protection PIN, a code that stops anyone else from filing a return with your number.

7. Breach notices and login alerts you did not trigger

A "your password was reset" email you did not request, a two-factor code arriving out of nowhere, or a data breach notification all mean someone may be working on getting into your accounts. The IRS includes both password-reset alerts and breach exposure on its warning-signs list.

A breach alone does not mean your identity has been stolen - it means the raw material is out there. Check what actually leaked: a breached password is urgent, a leaked phone number raises your SIM-swap risk. You can look up your email against known breaches, or run RedactZero's free exposure scan, which checks breaches, public profiles, and likely data-broker listings in one pass - nothing you scan is stored.

What to do the day you spot a sign

Move the same day; every one of the core defenses is free. Report first, contain second, then lock the doors. The order below comes from the FTC's own recovery guidance, and none of it requires a paid service.

• Report it at IdentityTheft.gov. The FTC's site gives you a free personal recovery plan and pre-filled dispute letters for bureaus, businesses, and debt collectors. That report also unlocks the seven-year extended fraud alert.
• Call the fraud department at any bank, card issuer, or company where the fraud happened and close or freeze the affected account.
• Freeze your credit at Equifax, Experian, and TransUnion. Free to place and lift, no effect on your score, and nobody can open new credit in your name while it is on.
• Or place a fraud alert if you are not ready to freeze: free, lasts one year, and the one bureau you contact must tell the other two.
• Keep watching: pull your free weekly reports at AnnualCreditReport.com for the next few months.

Then make the next attempt fail. Give every account a unique password and turn on two-factor authentication, get an IRS IP PIN before next filing season, and shrink what thieves can learn about you: people-search profiles hand out the addresses, phone numbers, and relatives used to impersonate you, and our free opt-out guides walk you through removing them. Our post-breach checklist covers the full sequence, and the rest of our breach guides go deeper on each defense.

Frequently asked questions

Sources: FTC Consumer Sentinel Network Data Book 2024 (ftc.gov, March 2025); FTC consumer guidance "What To Know About Identity Theft", "Credit Freezes and Fraud Alerts", and "Free Credit Reports" (consumer.ftc.gov); IRS "Taxpayer guide to identity theft" (irs.gov); USA.gov identity theft warning signs (usa.gov).