Identity Theft: What to Do in the First 24 Hours
If fraud is active, stop the account damage first, then create the records and credit controls that make the next days easier.
Choose the situation first. The guides are organized around the person who has to act, not around a wall of security jargon.
Contain the damage, create official reports, and repair records.
12 guides →Tax, medical, child, criminal, employment, and breach paths.
7 guides →Freeze, authentication, privacy reduction, and monitoring.
13 guides →A realistic baseline for teams under twenty people.
5 guides →Recognize the pattern and stop a bad moment becoming a larger loss.
5 guides →If fraud is active, stop the account damage first, then create the records and credit controls that make the next days easier.
A freeze, fraud alert, and bureau lock are different controls; choose based on whether you need to block access, add verification friction, or use a bureau product.
Freeze Equifax, Experian, and TransUnion as three separate tasks, save access details, and plan how you will temporarily lift a file later.
Treat tax identity theft as an IRS-account problem first: follow the rejection or notice instructions, file the real return, and use Form 14039 only when the IRS process calls for it.
A breach letter matters most for the data types it names; map each exposed identifier to the control that can actually reduce its misuse.
For a team under twenty, account security and recovery discipline usually matter more than buying a large security stack.