How to read your credit report for signs of identity theft

Reading a credit report is not difficult, but the advice around it is out of date in one important way. The long-standing tactic was to spread your three free annual reports across the year, one bureau every four months, to get rough coverage. That is no longer necessary: all three bureaus have permanently extended free weekly reports. The rationing is over, and the routine changes accordingly.

What reading your report actually catches

A credit report shows accounts opened in your name. That makes it the place where the most damaging form of identity theft — someone borrowing as you — becomes visible.

It is a detective control, not a preventive one. By the time an unfamiliar account appears on the report, it has already been opened. That is worth saying plainly, because it is the reason the FTC’s headline recommendation is a freeze rather than a monitoring habit: with a freeze in place, nobody can open a new credit account in your name, including you.

Note that this means three files, not one. Equifax, Experian and TransUnion hold separate records, lenders do not all report to all three, and an account opened fraudulently may sit on one file and not the others. Checking a single bureau and calling the job done is the commonest way this routine fails.

Getting the reports without being scammed on the way

1. Type annualcreditreport.com into the address bar yourself. Do not search for it and do not follow a link from an email.
2. Check the spelling of the address before entering anything. The FTC specifically warns about URLs that purposely misspell it.
3. Request all three — Equifax, Experian and TransUnion. Their files are not identical, and an account may appear on one and not the others.
4. If you would rather not use the site, call 1-877-322-8228.
5. Treat any email claiming to be from the bureaus and asking for your Social Security number or account details as fraudulent. They do not do that.

What you are looking for

The FTC’s signs of identity theft are mostly financial-record anomalies, and they are worth checking against your own records as much as against the report:

• Accounts in your name that you don’t recognise.
• Charges for things you didn’t buy.
• Withdrawals you didn’t make.
• A bill that stops arriving — if you stop getting a bill, that could be a sign.

That last one is the easiest to miss

A missing bill feels like good news, or like a postal problem. It can mean someone has changed the address on the account so that you stop seeing what is happening to it. If a statement you normally receive fails to appear, contact the company on a number you look up yourself rather than waiting for next month.

The same logic applies to enquiries on your report from lenders you have never approached. An application you did not make is an attempt whether or not it succeeded.

If you find something

1. Go to IdentityTheft.gov, or call 877-438-4338 between 9:00am and 5:00pm ET. It builds a personal recovery plan, tracks your progress, and prints pre-filled letters and forms for credit bureaus, businesses and debt collectors, with advice for more than 30 types of identity theft.
2. Place a credit freeze at all three bureaus if you have not already — free, lasting until you lift it, no effect on your score.
3. Consider a fraud alert as well: initial alerts are free for one year and renewable, extended alerts free for seven years, active duty alerts free for one year.
4. Report the underlying scam at ReportFraud.ftc.gov, and internet-enabled crime at IC3.gov.

Where report-reading stops helping

Your credit report will not show fraud on an existing card, a drained bank account, medical or tax identity theft, or a breach at a company that has not yet led to anything. Nor does checking it more often make it more preventive — weekly reading shortens the gap between the account being opened and you seeing it, and that is all.

That gap is exactly what the freeze closes. Read the reports because they tell you what is happening; freeze the files so that less of it can happen.

Two habits make the reading easier. Always pull all three, and keep a short note of what you expected to see, so that next time you are comparing rather than starting from scratch.

Sources: FTC — Free credit reports · FTC — What to know about identity theft · FTC — What to know about credit freezes and fraud alerts · FTC IdentityTheft.gov · AnnualCreditReport.com

Reviewed 27 August 2026 by the CyberArtical editorial team against primary guidance from the FTC. Security guidance changes over time; where our earlier version of this page said something different, we say so in the article rather than editing it out quietly.