11 types of identity theft you should watch out for

Main types of identity theft

Identity thieves often mix and match various forms of identity fraud to maximize profits. Keeping track of all these different identity threats and knowing the signs of identity theft can feel overwhelming, which is why for many people, identity theft protection is worth it. Familiarize yourself with the main types of identity theft to recognize the signs before becoming a victim. Additionally, learn common ways identity theft occurs.

1. Financial identity theft

Financial identity theft is the most common identity theft that happens when someone steals your credit card details, bank account numbers, or Social Security number for financial gain. Scammers may also commit military identity theft to gain access to financial benefits. Once a criminal has enough information about you, they might open credit card accounts, take out loans, or drain your funds — all while pretending to be you.

Identity thieves may also commit fraud in your name, such as: 

• Account takeover fraud, when an identity thief gets your login details and takes control of your bank account. They can change your passwords, lock you out of your account, and even make purchases or transfers.
• Debit or credit card fraud, when a criminal uses your physical card or personal information to drain your money.
• Mortgage fraud, when identity thieves use your credentials to apply for real estate loans under your name.
• Friendly identity theft, when your friend or family member uses your identity to open credit accounts or take loans in your name.
• Crypto fraud, when scammers hack crypto wallets and create fake exchanges.

It can be difficult to notice that a stranger has stolen your identity. However, unfamiliar charges on your bank statement, calls from debt collectors about unfamiliar purchases, or getting locked out of your bank account may signal that you're a victim of identity theft. If you'd like to learn more, take a look at our guide on what someone can do with your bank account number.

How to protect yourself from financial identity theft

To protect yourself from financial identity theft, keep your Social Security number and bank details close. Never share them with untrusted parties and shred any documents containing your sensitive information before they go to the trash bin. 

Besides safeguarding your physical documents, set up strong and unique passwords for your online accounts. Also, check your bank statements regularly — if you see an unfamiliar charge, contact your bank immediately. This brings up the common question of credit monitoring vs. identity theft protection. While checking your statements is a key part of basic monitoring, full protection services go a step further by watching for a much wider range of threats.

What to do if your bank account has been stolen 

If your bank account has already been compromised, take the following steps:

• Inform. Call your bank, credit union, or any other financial service that may be linked to your compromised account and request to lock your accounts, cancel cards, and open a fraud investigation.
• Report. Once financial institutions have been contacted, file an identity theft report at IdentityTheft.gov and a report with law enforcement, since banks may ask for a police report as proof of the crime.
• Review. Carefully review your credit report, financial statements, and any fees or charges, and dispute anything that you didn't authorize or recognize.
• Secure. Change your online banking passwords, PINs, and security questions. If you reused the same password elsewhere, update those accounts as well, and enable MFA wherever available. Moreover, place a fraud alert or credit freeze with the three major credit bureaus (Experian, Equifax, and TransUnion).

After securing your existing accounts, look for signs of broader identity theft. For example, learning how to check if someone opened a bank account in your name is an important next step in securing your finances after a major security incident.

2. Employment identity theft

Employment identity theft occurs when a criminal uses your information (typically your Social Security number) while applying for a job. This type of identity theft can cause financial harm, such as tax issues, incorrect earnings records, and delayed benefits.

How to protect yourself from employment identity theft:

• Keep your Social Security number and other personal information private. Only share it with trusted employers or organizations that require it for legitimate purposes.
• Be cautious when applying for jobs online. Verify that job postings and recruiters are legitimate before submitting sensitive personal information.
• Review your tax records and Social Security earnings statements regularly to make sure all reported employment is accurate.
• Watch for unexpected tax notices or employment-related documents, as they may indicate someone is using your identity for work.
• Use an identity protection service that monitors your personal information and alerts you to suspicious activity, helping you respond quickly if your identity is misused.

Employment identity theft can create extensive legal complications, particularly if government records no longer match your employment history or reported income. If you suspect employment identity theft, contact the Social Security Administration and the IRS. Employers that use E-Verify may detect discrepancies during the hiring process, but note that E-Verify is an employment eligibility verification system, not an identity theft detection service.

3. Medical identity theft

Medical identity theft happens when a thief uses your personal information to get medical services under your name or use your medical insurance. For example, a criminal can use your driver's license, Social Security card, or your health insurance policy number to get surgery. You probably won't know about this until you get a hefty bill. Plus, these unrelated procedures become your permanent medical record, which could get you misdiagnosed later.

How to protect yourself from medical identity theft:

• Keep your medical records and insurance information as private as possible.
• Never leave sensitive documents unattended and don't share your insurance details with anyone unless absolutely necessary. 
• Review your medical bills and insurance statements for unfamiliar charges. 
• Contact your insurance or medical providers to clarify if you notice something fishy.
• Be cautious about emails and phone calls asking for your medical information — scammers can be sneaky.

Medical identity theft can also enable other types of fraud, like Medicare scams, which can lead to inaccurate records, denied insurance claims, unexpected bills, and disruptions to your healthcare. Resolving medical identity theft is often lengthy, requiring time and effort to correct your records and restore your benefits.

4. Child identity theft

Child identity theft happens when a criminal uses a minor's personal information to open credit cards or apply for loans — all before the child is old enough to drive. By the time they're ready to apply for their first credit card or a student loan, they might find out that their credit score has been wrecked by someone else. Sadly, in most cases, the thief is someone the child knows personally, like a family member.

Usually, child identity theft comes to light only after the victim turns 18. But there are signs to watch out for earlier than that. If a child has a credit report, receives credit card offers in the mail, or gets government benefits denied, it could mean a criminal has stolen their identity.

How to protect your child from identity theft:

• Keep your child's Social Security number and birth certificate secure.
• Freeze your child's credit until they come of age. This will stop identity thieves from opening accounts in their name. 
• Teach your child about how important it is to protect their personal information.

5. Criminal identity theft

Every form of identity theft is a criminal deed, but criminal identity theft is a whole different level. It happens when a thief uses your personal information when caught committing a crime. So, instead of their name on the arrest warrant or investigation, it's yours. Imagine this nightmare — you try applying for a job, renting a place, or traveling and you're flagged as a criminal.

How to protect yourself from criminal identity theft:

• Keep your documents as private as possible. We might sound like a broken record, but keeping information like your Social Security number under lock and key is the cornerstone of protecting yourself against identity theft.
• Be cautious about whom you're handing your documents to (even when renting apartments or cars or applying for a job).
• Get an identity protection service like Coveron. It will send you alerts and notifications if it detects data leaks or suspicious credit activity. Each alert will inform you about the steps you need to take to protect yourself.

6. Identity cloning

Identity cloning is a type of identity theft where a stranger takes your entire identity and pretends to be you. They steal your Social Security number, passport details, and even fingerprints or facial recognition, then open fraudulent accounts, make purchases, get a driver's license, or even travel — all while posing as you. Passports are especially important because a variety of things can be done with your passport number.

How to protect yourself from identity cloning:

• Keep your personal information secure. Be aware of what information cyber criminals steal. 
• Be mindful of what apps you use. Cybercriminals can use even mundane apps like fake QR code scanners to install malware on your device and steal your personal data.
• Don't overshare on social media, and make sure your passwords for online accounts are strong and unique — the harder it is for hackers to access your data, the safer your identity is. 
• Enable two-factor authentication for your online accounts for extra security.

Driver's licenses, passports, and Social Security numbers are some of the most sought-after documents for identity thieves because they contain personally identifiable information (PII) that can be used for other criminal activities.

7. Driver's license or passport identity theft

Your driver's license and passport are valuable targets for many identity thieves. These documents contain sufficient PII that can be used to impersonate you and commit different types of identity fraud. Because they're accepted as valid forms of ID in most establishments and institutions, criminals may use them to pass identity checks or support other fraudulent activities.

These documents are often compromised when they're lost, misplaced, or stolen. Criminals may use the information themselves or sell the documents to other criminals on the black market. Because driver's licenses are commonly carried in wallets and passports may be kept with travel documents, they're at greater risk of being stolen or lost if not properly secured.

How to protect yourself from driver's license or passport identity theft:

• Only carry these documents when absolutely needed.
• Keep them in a secure location when not actively in use. 
• If either of them is stolen, file a police report (especially if fraud is suspected) and contact the DMV or the U.S. State Department for replacement.

8. Social Security number identity theft

Your Social Security number is one of the most valuable pieces of information targeted by identity thieves. SSNs are closely tied to credit, employment, and tax records in the U.S., so a stolen SSN can expose you to serious forms of fraud. Understanding what someone can do with your Social Security number can help you identify potential warning signs and respond quickly to misuse.

Criminals may use your SSN to open new credit card accounts, take out auto or student loans, or set up utility accounts. They can also use your SSN to file fraudulent tax returns to steal refunds. SSNs don't expire, so the damage can persist for years. Thieves can sell SSNs on the dark web or use them to create synthetic identities. For more details, see our guide on how to know if someone is using your SSN. 

What to do if your SSN has been stolen

If your SSN has been stolen, you need to take immediate action. The longer the theft goes unaddressed, the more damage criminals can do.

• Protect your credit. Place a fraud alert with one of the three major credit bureaus (Experian, Equifax, and TransUnion) to let them know that your SSN has been stolen. Freeze your credit files with all three bureaus to prevent new accounts from being opened. Regular credit monitoring also helps. Monitor unfamiliar accounts, hard inquiries, or other suspicious activity.
• File official reports. File an official FTC Identity Theft Report at IdentityTheft.gov; you'll need it as legal proof when disputing fraudulent accounts. You can also file a police report, especially if your stolen SSN has been used for fraud, financial crimes, or other illegal activity.
• Notify federal agencies. Contact the SSA and review your earnings record via your My Social Security account (ssa.gov/myaccount/). Notify the IRS (irs.gov/identity-theft-central) if you suspect tax-related identity theft.
• Monitor continuously. Regularly check your bank accounts, credit card statements, and other financial records. Consider using identity theft protection tools to help detect suspicious activity and enrolling in the IRS IP PIN program for ongoing protection against tax-related identity theft. You should also review your medical records, including your healthcare statements and insurance claims. 

How to protect yourself from SSN identity theft:

• Share your SSN only when necessary.
• Keep documents containing your SSN securely stored.
• Be cautious of unsolicited calls, emails, or messages asking for your SSN.

9. Synthetic identity theft

Synthetic identity theft combines real and fake information to create a whole new false identity. For example, thieves can pair your Social Security number with a fake name, birthdate, and other details. The result is a brand new "person" who can apply for credit cards and loans or commit fraud. According to identity theft statistics, this form of identity theft is becoming increasingly popular among criminals due to its high success rate and the difficulty of detection.

How to protect yourself from synthetic identity theft:

• Make sure your Social Security number stays private. 
• Keep an eye on your credit card statements to catch strange charges.
• Check credit reports belonging to seniors and children in your household.
• Use strong and unique passwords.
• Enable two-factor authentication to help you secure your online accounts.
• Regularly check your credit reports to spot unfamiliar charges.
• Protect your data with Coveron, which scans the dark web to detect if criminals are selling your information.

10. Mail identity theft

Mail identity theft happens when criminals target physical mail to obtain personal information, financial documents, or checks that can be used to commit fraud. This type of identity theft and related check fraud are surging: Suspicious Activity Reports¹ for check fraud nearly doubled between 2021 and 2022 and continued to rise through 2023, largely fueled by organized mail theft.

People who travel frequently or are unable to collect their mail regularly may face a higher risk because their mail can remain unattended for longer periods.

How to protect yourself from mail identity theft:

• Secure your physical mail. Collect your mail promptly each day and use the USPS Hold Mail service when traveling.
• Consider digitizing your documents. Enroll in paperless billing and use secure online banking or payment portals instead of mailing checks. 
• Monitor your mail activity. Destroy unsolicited credit offers and old statements, and review your credit files weekly for unauthorized accounts. Criminals often intercept your mail once they know it's delivered on a predictable schedule, so investigate any delays in mail immediately.

11. Tax identity theft 

Tax identity theft is when someone uses your Social Security number to file a fraudulent tax return. Scammers often obtain this data through phishing emails or fake identity verification forms, data breaches, or even old-fashioned mailbox theft, then file for a tax return early in the season before you have a chance to submit yours.

How to protect yourself from tax identity theft:

• Submit your tax return as early as possible to prevent someone else from laying hands on your application.
• Keep your Social Security number under lock and key.
• Enable two-factor authentication for your online tax account and your email account.
• Avoid using public Wi-Fi to submit your tax return application.
• Respond promptly if you need to verify your identity for the IRS — legitimate verification requests are sent by mail and help protect you from fraud.
• Shred sensitive documents before tossing them into the trash bin. You should also shred old documents, since someone can steal your identity with your discarded ID.

Other types of identity theft and fraud to watch out for

While the types of identity theft above are among the most common, criminals also use other methods to steal identities or commit fraud. Understanding these schemes can help you recognize suspicious activity and protect yourself and those around you.

• Estate or deceased identity theft. It includes stealing the identities of deceased individuals to open credit accounts, apply for loans, or commit other forms of financial fraud.
• Social media impersonations. Fraudsters take over an existing social media account or create a fake profile to impersonate someone. They may use the account to scam the victim's friends and family, ask for money, or collect additional potential information.
• Criminal and character identity theft. A criminal uses your identity when interacting with law enforcement, such as during an arrest. This may cause criminal records or legal issues to be incorrectly linked to your name.
• Crypto account takeover. In this type of identity theft, cybercriminals steal blockchain wallet credentials or private keys to drain digital currency assets. This particular type of theft can be difficult to recover from, given the decentralized nature of the blockchain.
• Internet of Things (IoT) identity theft. It includes hacking connected smart home devices to steal network passwords or personal data. This type of theft is becoming more common as more people connect to unsecured networks or fail to secure their own home networks. 
• Biometric identity theft. It occurs when criminals steal or misuse your biometric data, such as your fingerprint, facial scan, or iris scan, to impersonate you. 

How to report any type of identity theft

The appropriate response varies depending on the type of identity theft. However, the following actions are a good starting point for most cases.

Contact the FTC

If your identity has been stolen, file an official report online at IdentityTheft.gov or call 1-877-438-4338. Run by the Federal Trade Commission (FTC), this government portal provides a personalized recovery plan and generates an official Identity Theft Report. You'll need this official report as legal proof to dispute fraudulent debts, clear your name, and fix your records with companies or credit bureaus.

Alert the credit bureaus and freeze your credit

Place a fraud alert. Contact one of the three major credit bureaus (Experian, Equifax, or TransUnion). The bureau you notify is legally required to alert the other two. A fraud alert lasts for 12 months, prompting lenders to verify your identity before granting credit. Confirmed identity theft victims can also place an extended fraud alert lasting seven years, in addition to the one-year initial alert. Meanwhile, to freeze your credit files, you'll need to individually contact all three bureaus.

Notify impacted companies and secure your accounts

Call the specific bank, credit card company, utility provider, or business where the fraudulent activity occurred. Ask the business to immediately close or freeze any accounts that the thief opened or compromised. It's also essential to update passwords, security questions, and PINs across all of your financial and personal online accounts.

File a police report

You should file a report with your local police department if you know who committed the theft, if your name was used in a crime, or if a business demands a police report to clear fraudulent charges. Bring a printed copy of your FTC Identity Theft Report and a government-issued photo ID. Request a copy of the police report for your records.

Contact specific government agencies

Depending on the type of identity theft, you may also need to notify the relevant government agency.

• Tax identity theft. If a scammer files a fraudulent return using your information, report it to the IRS. You may need to submit IRS Form 14039 (Identity Theft Affidavit).
• Social Security identity theft. If your Social Security number is misused for employment or benefits, report it directly to the Social Security Administration Office of the Inspector General (OIG).
• Mail theft or check fraud. If your mail or checks were intercepted, report the crime to the U.S. Postal Inspection Service.
• Passport theft. If your passport is lost or stolen, report it immediately to the U.S. Department of State to prevent unauthorized travel in your name.

It's important to inform government and state authorities about identity theft as soon as it happens to help protect your records and reduce the risk of further misuse of your personal information. 

References

1 Mail Theft-Related Check Fraud is on the Rise (January 2025). https://www.fbi.gov/investigate/cyber/alerts/2025/mail-theft-related-check-fraud-is-on-the-rise opens in a new tab