Imagine logging into your credit app and seeing a Chase card you never applied for, with a $3,400 balance from another state. That sinking feeling is shared by about 1.4 million Americans every year, according to the FTC. Credit card fraud accounts for roughly a third of all identity theft cases, and the first few hours after you spot it matter a lot.
Here is a clear, step-by-step plan for what to do if someone opens a credit card in your name, plus a look at how thieves pull this off in the first place.
How Thieves Open Cards in Your Name
Knowing the playbook makes prevention easier. Most fraudulent accounts start one of these ways:
- Stolen personal info from a data breach. Your name, date of birth, Social Security number, and address leak in a breach, then show up for sale on the dark web.
- Phishing. A fake email or text tricks you into entering credentials on a lookalike site.
- Mail theft. Pre-approved offers, tax documents, or new cards get stolen from unlocked mailboxes.
- Family fraud. Sadly, about 1 in 7 identity theft cases involve a relative or household member with easy access to documents.
- SIM swap attacks. Your phone number gets ported to the thief's device, letting them intercept two-factor codes.
Once they have enough, they apply for credit online in your name using your real SSN and a mailing address they control.
Step 1: Contact the Card Issuer's Fraud Department Right Away
Call the bank that issued the fraudulent card, not the general customer line. Every major issuer has a dedicated fraud team number on the back of cards and on their websites. Tell them the account was opened without your authorization.
Ask the fraud department to:
- Close the fraudulent account immediately
- Flag it as fraud in their records
- Remove any charges and balance
- Send you written confirmation the account has been closed as fraud
- Provide copies of the original application on file
Get a reference number for every call. Write down names, dates, and what each rep promised. If specific charges posted to the fraudulent account, the same playbook applies as disputing a credit card charge.
Step 2: File an IdentityTheft.gov Report
IdentityTheft.gov is the FTC's official identity theft tool, and it is free. Create a report that describes every fraudulent account you have found. The site generates an Identity Theft Report, which has legal weight under the Fair Credit Reporting Act and forces creditors and bureaus to take your disputes seriously.
Keep the PDF. You will reference it in almost every step that follows.
Step 3: Freeze Your Credit at All Three Bureaus
A credit freeze blocks new accounts from being opened in your name. It is free, does not affect your credit score, and you can lift it any time you actually want to apply for credit.
Freeze with each bureau separately:
- Equifax: equifax.com/personal/credit-report-services
- Experian: experian.com/freeze
- TransUnion: transunion.com/credit-freeze
While you are there, also place a free fraud alert. A fraud alert requires lenders to verify your identity before opening new accounts, and one call to any bureau sets it at all three. See credit freeze vs fraud alert if you are unsure which one fits your situation.
If you want to be extra careful, freeze your ChexSystems and National Consumer Telecom & Utilities Exchange files too. Thieves sometimes open checking accounts or utility accounts in your name as well.
Step 4: Dispute the Fraudulent Accounts With the Bureaus
Even after the issuer closes the account, it can still show up on your credit report. Dispute it with each of the three bureaus and include a copy of your Identity Theft Report. Under the FCRA, the bureau must investigate within 30 days and block confirmed fraud information from appearing.
If you would rather not handle disputes manually, services can help. Creditship automates credit report disputes. Dovly and Lexington Law Firm also offer dispute help, though only you can file the police report and the FTC report.
Step 5: File a Police Report (When Needed)
You do not always need a police report, but file one if:
- The thief used fake ID in person
- You know or suspect who did it (including family)
- A creditor or bank asks for one before removing charges
- The amount stolen is significant
Bring your Identity Theft Report, the fraudulent account statements, and a government ID. Request copies of the filed report for your records. If you prefer to write your own follow-ups to lenders and bureaus, see credit repair letters that work for templates you can adapt.
Step 6: Monitor Your Credit and Accounts Going Forward
Thieves often try more than once with the same stolen information. For at least a year after the fraud:
- Check your credit reports every month at AnnualCreditReport.com (free weekly)
- Review bank and card statements line by line
- Enable transaction alerts for every card and account you have
- Keep the credit freezes on until you need to apply for something yourself
- Watch for medical bills, utility bills, or tax refund delays that do not match your records
If your SSN is exposed, consider filing IRS Form 14039 (Identity Theft Affidavit) so someone cannot file a fake tax return in your name.
What If the Fraud Is Already Hurting Your Score?
Even after accounts are removed, a dip in your score can linger for a few months while bureaus update their records. Keep paying everything on time, keep your own card balances low, and consider adding a clean positive tradeline. Once the fraud is cleared, your score should recover, often within 3 to 6 months.
What It Is Going to Cost You (Usually Zero)
Under federal law, your liability for fraudulent credit card charges is capped at $50, and most issuers waive even that. Debit cards have different rules, so report those within two days to keep liability at $50.
The bigger cost is time. Expect to spend 10 to 30 hours sorting it all out over a few months. That is why filing the FTC report and freezing your credit early pays off: they prevent the problem from spreading.
Frequently Asked Questions
How did they get my Social Security number?
Most often from a data breach. Equifax, T-Mobile, healthcare networks, and retailers have all leaked millions of SSNs over the past decade. Assume your SSN is already out there and protect yourself with a credit freeze.
Will disputing the fraud hurt my credit score?
No. Disputing an account and having it removed as fraud should help your score if the fraudulent account was hurting your utilization or payment history. The dispute process itself is not visible to lenders or scoring models.
How long do fraudulent accounts stay on my report?
If properly reported and documented, they should be blocked and removed from your report within 30 to 90 days. Without documentation, they can linger for up to 7 years, which is why the Identity Theft Report is so important.
Should I pay a credit repair company to help?
You can do most of this for free yourself. A reputable service can save you time if your case is complicated or involves multiple accounts. Skip anyone who asks for upfront fees or promises to remove accurate, non-fraudulent items.
