Skip to content


Identity Theft

En español | Identity theft occurs when someone obtains someone else’s personal information, such as a Social Security number, home address, date of birth or bank account data, and uses it for fraud or other illicit purposes. It's widespread, and getting more so: The Federal Trade Commission (FTC) fielded nearly 1.4 million complaints about identity theft in 2020, more than double the 2019 total.

And it comes in many forms: Credit-reporting agency Experian lists 16 distinct types. (Some, such as tax ID theft and Social Security number scams, are discussed in greater detail elsewhere in the Fraud Resource Center.) Identity thieves swarm the internet and often target older Americans, who tend to be slow to adopt new fraud-prevention technologies and are loath to change their online habits even when they've experienced fraud, according to an October 2020 study produced by digital finance consulting firm Javelin Strategy and Research and sponsored by AARP.

Have you seen this scam?

Sign up for Watchdog Alerts for more tips on avoiding scams.

Identity thieves have a range of tactics to get what they need, from old school (stealing your mail) to high tech (massive hacks of banks, retail chains and other companies that stockpile consumer data). Often they claim to represent government agencies, requesting personal or financial information on the pretext of helping you collect benefits or navigate bureaucracy. This tactic increased an astounding 2,900 percent in 2020, according to the FTC data, as scammers exploited the federal distribution of trillions of dollars in COVID-19 relief.

Scammers might also pretend to be from utilities, banks or big tech firms to get their hands on identifying information, or send phishing emails with links that infect your device with data-harvesting malware.

Once they have your private data, fraudsters may use it to open new credit accounts and make big-ticket purchases you might not discover until the bills come due. They might get medical treatment, file tax returns or take out loans in your name. The costs are counted not just in money but in time spent chasing down phony accounts, repairing damaged credit and re-establishing your identity with government and financial institutions.

As many ways as there are for fraudsters to poach your identity, there are also many simple steps you can take to help keep them at bay.

Warning Signs

  • Bank and credit card statements list withdrawals or purchases you don’t remember making.
  • You get a bill or invoice for financial activity you don’t recognize or medical services you didn’t receive.
  • Your credit report lists accounts or liabilities you don’t recognize.
  • You are contacted by a debt collector about a debt you don’t owe.
  • You have trouble filing your taxes because the Internal Revenue Service says it already has a return from you.
  • You receive notice from a bank or company you do business with that it has suffered a data breach.


  • Do go to the FTC's site to report identity theft and create a personal, step-by-step recovery plan.
  • Do use security software on your devices, and keep it updated.
  • Do set up online access to your bank and credit card accounts. Check them regularly and contact the bank or card provider immediately if you spot any suspicious activity.
  • Do switch to paperless billing and financial statements, so you get less sensitive information in the mail.
  • Do check your credit reports. Through April 20, 2022, you can get one free report per week from each of the three major reporting agencies, Experian, Equifax and TransUnion.
  • Do consider putting a fraud alert or freeze on your credit report. A freeze prevents anyone from opening a credit account in your name; an alert requires prospective lenders or creditors to verify your identity.
  • Do file your tax return as early as possible. Tax ID thieves who’ve obtained your personal information will try to beat you to it.
  • Do shred bank statements, tax forms, medical bills and other documents containing personal or financial data before you throw them out.
  • Do use a PIN or other type of passcode for unlocking laptops, tablets and smartphones. If a device is lost or stolen, it will be harder for thieves to get at what’s on it.


  • Don’t use the same password for multiple online accounts. Create strong and varied passwords, and use two-factor authentication if available — it prevents people from accessing your accounts with just the password.
  • Don’t carry your Social Security card, and only carry documents with your Social Security number on them when necessary.
  • Don’t give out your Social Security number or other personal information over the phone unless you are certain who’s asking for it and why.
  • Don’t check email, use social media, or do online shopping or banking on public Wi-Fi networks. Many are poorly secured, leaving openings for hackers to intercept sensitive data.
  • Don’t leave personal information in your car, even if it’s locked.

More Resources

Updated May 13, 2021

About the Fraud Watch Network

Whether you have been personally affected by scams or fraud or are interested in learning more, the AARP Fraud Watch Network advocates on your behalf and equips you with the knowledge you need to feel more informed and confidently spot and avoid scams.

More From the Fraud Resource Center