Identity theft insurance and the free protections it sits on top of

Identity theft insurance is usually sold as reimbursement and assistance after something goes wrong. This article does not review any policy, name any provider, or tell you whether to buy one — it cannot, because the federal consumer guidance on identity theft does not cover insurance products. What it can do is set out precisely what you already have for free, so that any policy you consider is judged on what it adds rather than on what it duplicates.

The free step comes before the paid one

Place the free credit freeze first. It is the only measure in this whole area that prevents rather than reacts, and no policy substitutes for it.

After that, insurance is a financial question rather than a security one: you are deciding whether to transfer some residual cost, not whether to be protected. Read whatever you are offered with the list above in hand and see how much of it is already covered.

It is also worth checking whether cover is being offered in place of the freeze or alongside it. Offers that arrive after a breach often bundle monitoring and insurance together, and the free measures listed below remain free whether or not you accept.

Prevention, detection and recovery are three different purchases

Most confusion in this market comes from products bundling the three and pricing them as one.

Prevention is the freeze. The FTC’s wording is categorical — with a freeze, nobody can open a new credit account in your name, including you. It is free at Equifax, Experian and TransUnion, placed and lifted per bureau, and the FTC restated the recommendation in a consumer alert on 10 September 2025, describing it as especially helpful if you are dealing with identity theft, a lost wallet or a data breach.

Detection is reading your credit file. Each bureau must give you a free report every 12 months, and all three have permanently extended free weekly access.

Recovery is IdentityTheft.gov, which is not a complaint form but a workflow: a personal recovery plan that walks you through each step, progress tracking, and pre-filled letters and forms to send to credit bureaus, businesses and debt collectors, with advice for more than 30 types of identity theft.

Questions to put to any policy

1. What is actually reimbursed — direct losses, or costs incurred during recovery such as time off work, postage and notarised documents?
2. What is excluded, and what triggers a claim? A policy that pays out only after a formal determination is a different thing from one that pays on notification.
3. Does the assistance element do anything IdentityTheft.gov does not already do for free?
4. Does it place freezes on your behalf at all three bureaus, and what happens to them if you stop paying?
5. If it bundles people-search removal: how many sites, does it report which ones, and how often does it rescan? Those are the FTC’s questions for any removal service.
6. Is it already included in something you have — a bank account, a card, an employer benefit? Paying twice is the commonest error here.

What people get wrong

The first mistake is buying protection and skipping the freeze, which is exactly backwards: the free measure is the strong one, and the paid measure sits downstream of it.

The second is assuming a policy shortens recovery. Recovery is largely correspondence with bureaus, businesses and debt collectors, and the FTC already supplies pre-filled letters and forms for precisely that, free.

The third is treating a people-search removal add-on as identity theft protection. The FTC is clear that opt-outs are impermanent — information could re-appear for sale when public records change — incomplete, because your details may still appear in relatives’ and associates’ reports, and limited, because opting out does not delete anything from public records.

Where to go when something happens

• Identity theft: IdentityTheft.gov, RobodeIdentidad.gov in Spanish, or 877-438-4338, 9:00am–5:00pm ET, press 3 for other languages.
• Fraud that has not become identity theft: ReportFraud.ftc.gov.
• Internet-enabled crime and personal data breach: IC3.gov.
• Freezes and alerts: Equifax, Experian and TransUnion, each separately.
• Free reports: AnnualCreditReport.com only — not a lookalike site with “free report” in the name.

Sources: FTC — What to know about credit freezes and fraud alerts · FTC consumer alert — Get a credit freeze to stop identity thieves (10 September 2025) · FTC — What to know about identity theft · FTC — Free credit reports · FTC — What to know about people search sites that sell your information

Reviewed 27 August 2026 by the CyberArtical editorial team against primary guidance from the FTC. Security guidance changes over time; where our earlier version of this page said something different, we say so in the article rather than editing it out quietly.