How a thief opens an account in your name, and when monitoring notices

Services that watch your identity are sold on the promise of early warning, and early warning is a real thing to want. But it helps to follow the sequence an actual account-opening runs through, because it makes visible where an alert can appear and where it cannot. The short version: monitoring notices at step four. A credit freeze prevents step three.

Step one: the thief needs data about you

An application for credit succeeds or fails on whether the applicant can supply the identifying details a lender checks. That data comes from somewhere — a breach at a company you dealt with, a phishing message that persuaded you to type it in, or information that was already public.

The scale of the first route shows in the FBI’s complaint data: personal data breach was the fourth most-reported crime type in the 2025 IC3 report, at 67,456 complaints, with phishing and spoofing first at 191,561. This is the stage at which you usually have no visibility at all, and no monitoring service can give you any, because nothing about your credit file has changed yet.

Step two: they apply somewhere you have never heard of

The application goes to a lender of the thief’s choosing, not yours, and it is made with your details. Nothing at this point involves your accounts, your email or your devices.

This description is general reasoning about how credit applications work rather than a claim quoted from a source, but the consequence is the part that matters and it is sourced: the FTC describes a credit freeze as meaning nobody can open a new credit account in your name, including you. The freeze acts here, at the point of the lender’s check, which is why it is the only measure in this article that stops the sequence rather than reporting on it.

Step three: the account exists

Once opened, the account appears on your credit file, and borrowing begins in your name. From here on, everything available to you is recovery.

This is the moment monitoring services are built around, and it is worth being precise about what they can offer: not prevention, but a shorter interval between the account appearing and you learning about it. That interval has value. It is simply a different product from the one people think they are buying.

Step four: what gives it away

You can watch for all four of these yourself for nothing. All three bureaus have permanently extended free weekly credit reports, available only at AnnualCreditReport.com or 1-877-322-8228. Be careful with lookalike sites: the FTC warns about names using terms like “free report” and URLs that purposely misspell the real address, and notes the bureaus will not email you asking for your Social Security number or account information.

• Accounts in your name that you don’t recognise.
• Charges for things you didn’t buy.
• Withdrawals you didn’t make.
• A bill that stops arriving — the FTC notes that if you stop getting a bill, that could be a sign, because the address on the account may have been changed.

Interrupting the sequence rather than observing it

1. Place a credit freeze at Equifax, Experian and TransUnion. Free, lasts until you lift it, no effect on your credit score. The FTC repeated the recommendation in a consumer alert dated 10 September 2025.
2. Lift it per bureau when you need a credit check, and put it back afterwards. Lifting is free, and if you know which bureau a lender uses you can lift at that one only.
3. Add a fraud alert if you want lenders to verify your identity as well — one year for an initial alert, renewable; seven years for an extended alert; one year for active duty. It does not block access to your report, so it is a supplement, not a substitute.
4. Opt out of prescreened credit and insurance offers at optoutprescreen.com or 1-888-5-OPT-OUT.
5. Read your reports on a schedule you will actually keep.

If it already happened

Go to IdentityTheft.gov, or call 877-438-4338 between 9:00am and 5:00pm ET, pressing 3 for other languages; the Spanish site is RobodeIdentidad.gov. It produces a personal recovery plan that walks you through each step, lets you track progress, prints pre-filled letters and forms for credit bureaus, businesses and debt collectors, and covers more than 30 types of identity theft.

Report the underlying scam at ReportFraud.ftc.gov and internet-enabled crime at IC3.gov. Then place the freeze, if you had not already.

Sources: FTC — What to know about credit freezes and fraud alerts · FTC — What to know about identity theft · FTC — Free credit reports · FBI IC3 — 2025 Internet Crime Report · FTC consumer alert — Get a credit freeze to stop identity thieves (10 September 2025)

Reviewed 27 August 2026 by the CyberArtical editorial team against primary guidance from the FTC and the FBI. Security guidance changes over time; where our earlier version of this page said something different, we say so in the article rather than editing it out quietly.