Types & Tactics
Red Flags
Protect Yourself
Laws & Reporting
Consequences & Recovery
100

This tactic uses an email that looks official to trick you into giving login info.


What is phishing?

100

You unexpectedly receive bills or collection notices for accounts you never opened.

What is a sign of identity theft?


100

Using this adds a second step (like a code or app) beyond a password to secure accounts.

What is two-factor authentication (2FA)?

100

If your identity is stolen in the U.S., this federal agency’s website is widely recommended for reporting and getting a recovery plan.

What is the Federal Trade Commission (FTC) / IdentityTheft.gov?

100

Paying bills for charges you didn’t make and contacting the company are initial steps in this process.

What is disputing fraudulent charges?

200

This device, often placed on ATM or gas pumps, copies the magnetic stripe from your card.

What is a skimmer?

200

You get emails about password resets you didn’t request, or alerts about logins from strange locations.

What is suspicious account activity?

200

Tearing up or shredding bank statements and documents before throwing them away helps prevent this.

What is dumpster diving for personal information?

200

You should file this document with your local police to create an official record of the theft.

What is a police report?

200

If identity theft leads to criminal activity falsely linked to you, this important step involves law enforcement to clear your name.

What is filing a police report or obtaining an identity theft report?

300

When criminals combine real and fake information to create a new identity used for fraud.


What is synthetic identity fraud?

300

A sudden drop in this score may indicate fraudulent accounts or missed payments you didn’t cause.


What is your credit score?

300

Free services let you get a copy of this annually from major bureaus to check for unauthorized accounts.

 What is your credit report?

300

After reporting identity theft, you can request an official “fraud” notation on this for creditors to see.

What is a fraud alert on your credit report?

300

This free action places a block so creditors must take extra steps before opening new accounts it’s stronger than a fraud alert.

What is a credit freeze?

400

Gaining access to an existing account (email, bank) and changing password or contact info is called this.


What is account takeover?

400

This mail-related sign: receiving new credit cards, bank statements, or unfamiliar checks in the mail.


What is unexpected financial mail?

400

Locking or freezing this helps prevent new credit accounts from being opened in your name.

What is your credit (credit freeze or credit lock)?

400

This federal law restricts who can access your credit report and allows you to place free fraud alerts or freezes.

What is the Fair Credit Reporting Act (FCRA)?

400

It may take time and repeated actions (credit disputes, creditor calls, freezing accounts) to fully restore this.

What is your financial reputation / credit standing?

500

 A scam where attackers call pretending to be banks, tech support, or government to get personal data by phone.


What is vishing (voice phishing)?

500

You see multiple new accounts on your credit report that you didn’t open — this specific report will show them.


What is a credit report?

500

Using a unique, long phrase or manager and changing them regularly reduces risk of this.

What is password reuse/vulnerable passwords?

500

 For identity theft involving your Social Security number, this federal agency can help if your SSN has been misused.

What is the Social Security Administration (SSA)?

500

If someone used your identity to commit tax fraud or get government benefits, you may need to contact this agency as part of recovery.

What is the IRS (Internal Revenue Service)?