What identity theft means for your credit and why lower-income people face higher risk

Identity theft happens when someone uses your personal information — usually your Social Security number, name, or date of birth — to open accounts, take out loans, or make purchases in your name. The damage shows up on your credit report as accounts you never opened and debts you never incurred. For lower-income people, this is especially dangerous because a damaged credit score directly blocks access to the cheapest borrowing options: you pay more for car loans, mortgages, and credit cards, or you cannot get them at all.

Lower-income households face higher identity theft risk for concrete reasons. You may use public Wi-Fi to check bank balances because you do not have home internet. You may receive mail at an address you share with others or leave it in an unsecured mailbox. You may work in jobs where you handle cash and cannot afford to take time off to dispute fraudulent charges. You may have less money in savings to absorb the cost of fixing the damage while you wait for disputes to resolve.

The good news: you do not need money to monitor your credit or place a freeze on your report. You do not need to pay for credit monitoring services. The federal government requires the three credit bureaus to give you free reports and tools, and you can use them to catch fraud early — before it becomes a bigger problem.

Key Takeaways

  • You can check your credit report for free once a year from each of the three bureaus (Equifax, Experian, TransUnion) at annualcreditreport.com, which is the only official site.
  • A credit freeze stops anyone, including you, from opening new accounts in your name without your permission, and it costs nothing to place or remove.
  • If you spot fraud on your report, file a dispute with the bureau directly and also file a report with the Federal Trade Commission at identitytheft.gov.
  • Lower-income people should check their report at least once a year, and more often if you have been a victim of theft or data breach.
  • Protecting your mail, using strong passwords, and checking your bank and credit card statements monthly are the cheapest ways to prevent theft in the first place.

How to get your free credit report and what to look for

The Fair Credit Reporting Act requires Equifax, Experian, and TransUnion to give you one free credit report per bureau per year. The official site is annualcreditreport.com — not creditreport.com or any other variation. Go there, enter your name, address, Social Security number, and date of birth, and you can view your report immediately online or request it by mail.

When you read your report, look for accounts you do not recognize: credit cards, car loans, personal loans, or store cards opened in your name. Look at the dates these accounts were opened. Look at the payment history — fraudulent accounts often show late payments or high balances you never made. Check the "inquiries" section, which lists companies that have checked your credit; too many inquiries in a short time can signal someone is trying to open multiple accounts.

Also check the personal information section at the top. If an address, phone number, or employer you do not recognize is listed, that is a sign someone may have used your information. Write down the exact account numbers, dates, and amounts of anything suspicious — you will need these details when you dispute.

Placing a credit freeze to stop new accounts in your name

A credit freeze tells the three bureaus not to release your credit report to anyone trying to open a new account. This stops a thief from using your name to get a credit card, car loan, or phone contract. You place the freeze directly with each bureau — Equifax, Experian, and TransUnion — and it is free.

To freeze your credit, visit each bureau's website and follow their freeze process. You will need your name, address, date of birth, and Social Security number. Each bureau will give you a PIN or password to unfreeze later. Write this down and keep it somewhere safe — you will need it if you want to unfreeze temporarily to apply for a real loan or credit card.

A freeze does not affect your existing accounts or your credit score. It only stops new accounts from being opened. If you apply for a job that requires a credit check, or you want to open a new credit card, you will need to temporarily unfreeze before the company can pull your report. You can unfreeze for a specific company and a specific time period, then refreeze after.

What to do if you find fraud on your report

If you spot an account or charge you did not make, file a dispute with the credit bureau that is reporting it. You can do this online, by phone, or by mail. The bureau has 30 days to investigate and must contact the company that opened the account. If the company cannot prove you opened it, the bureau must remove it from your report.

At the same time, file a report with the Federal Trade Commission at identitytheft.gov. The FTC does not investigate individual cases, but your report creates an official record and gives you an Identity Theft Report, which you can use to dispute accounts faster and ask creditors to stop collection efforts. The FTC report also helps law enforcement see patterns of theft.

If a fraudulent account has gone to a debt collector, send the collector a written dispute saying you did not open the account. Keep a copy. Collectors must stop collection efforts while they investigate. If the account is in collections and damaging your credit, disputing it with the bureau and the FTC is your fastest path to removal.

Protecting your mail and personal documents

Mail theft is one of the easiest ways for a thief to get your information. If you live in an apartment building or a shared house, do not leave mail in an unsecured mailbox. Collect it promptly or ask the post office to hold it. If you are moving, file a change of address with the post office so old mail does not sit in your former mailbox.

Shred documents with your name, address, Social Security number, or account numbers before you throw them away. This includes old bank statements, credit card offers, medical bills, and tax documents. A cheap shredder costs $20 to $30 and is worth it if you cannot burn documents safely. If you do not have a shredder, tear documents into small pieces or cross out sensitive numbers with a marker.

If you receive credit card offers or bank statements for accounts you did not open, do not ignore them. This is often the first sign of fraud. Call the company, confirm you did not apply, and ask them to close the account. Report it to the credit bureau and the FTC.

Monitoring your bank and credit card statements

Check your bank account and credit card statements at least once a month — more often if you can. Look for charges you do not recognize. If you find one, contact the bank or card company immediately. Federal law limits your liability for unauthorized charges: if you report within 60 days, you are usually not responsible for the charge at all.

If you do not receive a statement you expect, that is a red flag. A thief may have changed the mailing address on your account so you would not see fraudulent charges. Call the bank or card company to confirm your address and ask for a replacement statement.

Many banks and credit card companies offer free text or email alerts when a charge is made. Turn these on if you can — they let you catch fraud within hours instead of weeks. If you do not have a smartphone, ask the bank if they can call you instead.

Securing your passwords and online accounts

Use a different password for each account — bank, email, credit card, social media. If a thief gets one password, they should not be able to access everything. If you cannot remember many passwords, write them down and keep the list in a locked drawer at home, not in your phone or email.

When you create a password, use at least 12 characters and mix uppercase letters, lowercase letters, numbers, and symbols. Avoid using your name, birthday, or address. Do not use the same password across multiple sites.

If you use public Wi-Fi — at a library, coffee shop, or community center — do not check your bank account or credit card balance. Public Wi-Fi is not encrypted, and a thief on the same network can see what you type. Wait until you are home or use your phone's data plan instead.

What to do if your Social Security number is compromised

If you know or suspect your Social Security number has been stolen — for example, after a data breach at a company you do business with — you have options beyond a credit freeze. You can place a fraud alert with the credit bureaus, which tells lenders to verify your identity before opening an account. A fraud alert lasts one year and is free.

To place a fraud alert, call one of the three bureaus and they will notify the other two. You only need to call one. Equifax: 1-800-525-6285. Experian: 1-888-397-3742. TransUnion: 1-800-680-7289. Have your Social Security number and a phone number ready.

A fraud alert is weaker than a freeze because lenders can still open accounts if they verify your identity — but it adds a step that slows down a thief. If you want stronger protection, place a freeze instead. If your Social Security number was exposed in a major data breach, the company that was breached may offer free credit monitoring for a period of time — check their notification letter to see what they provide.

Frequently Asked Questions

Do I have to pay for credit monitoring to protect myself?

No. The three credit bureaus give you one free report per year, and you can place a credit freeze for free. Many companies sell credit monitoring services, but you do not need them. Checking your report yourself once a year and watching your bank and credit card statements monthly is enough for most people.

If someone opened a credit card in my name, am I responsible for the charges?

No. If you report the fraud to the credit card company and the credit bureau, you are not liable for charges you did not make. The card company and the bureau have a duty to investigate and remove fraudulent accounts. This can take weeks or months, but you should not be charged.

Can I freeze my credit if I want to apply for a loan or apartment?

Yes. You can temporarily unfreeze your credit for a specific lender and a specific time period — usually 1 to 7 days. Contact the bureau, give them your PIN, and tell them which company needs to check your credit. After the lender pulls your report, you can refreeze immediately.

What if I find old fraud on my report from years ago?

You can still dispute it. Fraudulent accounts can stay on your report for up to seven years, but you can dispute them at any time. File a dispute with the bureau and the FTC. Even old fraud can hurt your credit score, so it is worth removing if you can.

Where do I report identity theft if I do not have internet access?

Call the Federal Trade Commission at 1-877-438-4338 to report identity theft by phone. You can also visit a library or community center with free internet access to file a report at identitytheft.gov. Many libraries also have staff who can help you navigate the process.