Most people checking for identity theft start and stop with their bank statement or credit report. Security researchers say that habit leaves a lot of fraud undetected, because someone using your personal information can open a phone line, start utility service, use your medical benefits, or rack up a buy-now-pay-later balance without any of it ever touching your usual accounts.
Here are eight places worth reviewing, starting with the ones that can do the most damage if left unchecked.
Bank and payment accounts
Look over checking, savings, credit card, investment, retirement, and payment-app activity for anything unfamiliar. Watch for more than stray purchases — a new external bank connection, an added authorized user, a changed mailing address, or a new phone number on the account can all signal fraud. Turn on transaction and security alerts if your institution offers them, and if something looks wrong, contact the bank through its official website or the number on your statement rather than a number from a text or email.
Credit reports
Check all three major credit bureaus for accounts, hard inquiries, collections, addresses, or employers you don’t recognize. You can pull reports for free, once a week, through AnnualCreditReport.com from Equifax, Experian, and TransUnion. Not every unfamiliar entry is fraud — some lenders operate under different business names — so verify with the company before disputing anything. Freezing your credit with all three bureaus is free, doesn’t affect your score, and makes it harder for someone to open new accounts in your name.
Buy-now-pay-later and store financing
These accounts are easy to miss because they don’t feel like traditional credit cards, and some loans don’t show up on standard credit reports at all. Check for unfamiliar orders, payment plans, or saved addresses, and search your email for purchase confirmations and payment reminders you didn’t expect. Go to the retailer’s official app or type the web address yourself rather than clicking a link in a suspicious message.
Your phone account
Your phone number can be a gateway to everything else, since it often receives verification codes and password resets. Check your carrier account for unfamiliar devices, lines, eSIMs, address changes, or PIN changes. A sudden loss of cell service can be an early sign of a SIM swap — ask your carrier about account PINs and port-out protection as extra safeguards.
Utility accounts
Someone could try to open electric, gas, water, or internet service in your name, and this kind of fraud may not show up on your credit report right away. A bill or shutoff notice you didn’t expect is worth investigating. You’re entitled to one free report every 12 months from the National Consumer Telecom & Utilities Exchange, which can reveal service requests missing from standard credit reports.
Medical records and benefits
Watch for explanations of benefits, bills, or prescription notices tied to care you never received. Beyond an unexpected bill, medical identity theft can corrupt your actual medical record if someone uses your insurance to get treatment. Don’t ignore a small bill — the inaccurate medical information behind it may matter more than the charge itself.
Tax and government benefits
Look for notices from the IRS, Social Security Administration, or a state benefits agency that don’t match your situation — income from an unfamiliar employer, a tax return you didn’t file, or unemployment benefits claimed under your name. Review your IRS online account and your Social Security earnings history, and consider requesting an IRS Identity Protection PIN, a free six-digit number that helps block fraudulent tax filings. Always reach government agencies through official websites rather than links in unexpected messages.
Email and social accounts
These won’t show a financial loss, but they reveal whether someone is trying to take over your digital identity. Review sign-ins, forwarding rules, recovery addresses, and connected apps, especially on email — access to your inbox can let someone reset passwords elsewhere. If you spot unfamiliar activity, change your password from a trusted device, sign out other sessions, and switch to an authenticator app, passkey, or security key instead of text-message codes.
What to do if you find something
An unfamiliar entry doesn’t automatically mean fraud — a lender may use a different business name, or a family member may have used a shared device. But a new account paired with an unfamiliar address, phone change, or collection notice deserves immediate attention. Keep the original bill or email without clicking any links in it, write down the date, company, and account involved, and if you call the company, log the case number. If fraud is confirmed, get a fraud case number and written instructions, then check whether related activity shows up elsewhere.
If time is short, prioritize four areas first: email, bank accounts, phone account, and credit reports. A clean credit report doesn’t rule out identity theft, so circle back to the other categories when you can.
Add comment