> ## Documentation Index
> Fetch the complete documentation index at: https://norton-helpguide.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# How to Protect Your Identity Online: A Complete Guide
> Identity theft strikes millions yearly. Learn to protect your personal information, recognize warning signs, and monitor your identity with Norton.
Identity theft is not a distant, abstract threat — it is a personal violation that upends real lives. According to the Federal Trade Commission, millions of Americans report identity theft every single year, making it one of the most commonly reported crimes in the country. Victims spend hundreds of hours and thousands of dollars trying to undo the damage: disputing fraudulent charges, closing unauthorized accounts, correcting their credit reports, and sometimes even proving to the IRS or medical providers that someone else has been living under their name. The emotional toll — the anxiety, frustration, and sense of violation — can linger long after the financial damage is repaired. Understanding how identity theft works, recognizing the early warning signs, and taking proactive steps to protect yourself are the most powerful things you can do to avoid becoming part of the statistics.
## What Is Identity Theft?
Identity theft occurs when someone obtains and uses your personal information — your name, Social Security number, date of birth, financial account numbers, medical records, or other identifying details — without your permission, typically for financial gain. It is not a single crime but an umbrella term for a wide range of fraudulent activities.
**Common forms of identity theft include:**
* **Account takeover fraud:** A criminal gains access to an existing account — your bank, credit card, email, or social media — and takes control, often by exploiting reused or breached passwords.
* **Synthetic identity fraud:** Rather than stealing a real person's complete identity, a fraudster combines real and fabricated information (often using a legitimate Social Security number paired with a fake name and birthdate) to create a new, fictional identity. This type of fraud is notoriously difficult to detect.
* **Medical identity theft:** Someone uses your name and insurance information to receive medical care, prescriptions, or surgery. This is particularly dangerous because fraudulent entries in your medical records can affect your own future healthcare decisions.
* **Tax identity theft:** A criminal files a fraudulent tax return using your Social Security number to claim your refund. Victims typically discover the fraud only when their legitimate return is rejected by the IRS as a duplicate.
## Warning Signs Your Identity Has Been Stolen
Identity theft often hides in plain sight — buried in a credit report you didn't check, a bill you didn't open, or a voicemail you dismissed. The faster you spot these warning signs, the faster you can stop the bleeding. Know what to look for.
If you receive a credit card statement, utility bill, or loan statement for an account you didn't open, that is a major red flag. Similarly, if you see charges on your existing accounts that you don't recognize — even small ones — take them seriously. Fraudsters often start with a small "test" charge to verify a stolen card is active before making larger purchases. Review every line of every financial statement, every month.
Your credit report is a comprehensive record of every account opened in your name, every hard inquiry, and your payment history. If you see an account you don't recognize — a credit card, auto loan, personal loan, or mortgage — someone may have used your identity to open credit. You're entitled to free credit reports from all three major bureaus (Equifax, Experian, and TransUnion) at AnnualCreditReport.com. Review them at least once a year, or more frequently if you have active monitoring.
Receiving a notice from the IRS saying that a tax return has already been filed under your Social Security number — when you haven't filed yet — is a clear sign of tax identity theft. The IRS will not accept a second return under the same SSN for the same tax year, which means your legitimate refund gets blocked. Respond to IRS notices immediately and follow the agency's Identity Theft Affidavit (Form 14039) process.
Receiving calls from collection agencies about debts you have no knowledge of can indicate that someone opened accounts in your name and defaulted on them. By the time debt collectors are involved, the fraudulent accounts have often been open for months or years. Don't ignore these calls — ask the collector for written verification of the debt and review your credit report immediately.
Medical identity theft is often discovered only when an Explanation of Benefits (EOB) statement arrives for a procedure you never had, or when you receive a bill from a provider you've never visited. This type of theft can corrupt your medical records with incorrect blood types, diagnoses, or medications — with potentially dangerous consequences. Contact your health insurer and healthcare providers immediately if you spot discrepancies.
## How to Protect Yourself
Prevention is always more effective — and far less painful — than recovery. These six proactive steps give you a strong, layered defense against identity thieves.
1. **Freeze your credit at all three bureaus.** A credit freeze (also called a security freeze) prevents lenders from accessing your credit report, which means no new credit accounts can be opened in your name — by you or anyone else — without you first lifting the freeze. It's free to place and lift a freeze at Equifax, Experian, and TransUnion, and it's one of the single most powerful protections against new-account fraud. You'll need to freeze your report at all three bureaus separately, and remember to temporarily lift the freeze when you legitimately apply for new credit.
2. **Use unique passwords and a password manager.** Credential stuffing — where hackers take username/password pairs leaked in one breach and try them across hundreds of other sites — is one of the most common ways accounts are compromised. Using a unique, complex password for every account eliminates this risk. A password manager makes this practical: it generates strong passwords and stores them in an encrypted vault, so you only need to remember one master password.
3. **Monitor your financial accounts regularly.** Don't wait for your monthly statement to review your accounts. Log in to your bank and credit card accounts at least once a week to scan for unauthorized transactions. Most financial institutions offer account alerts — set them up to notify you of every transaction over a small threshold. Early detection limits the damage and simplifies the recovery process.
4. **Shred documents with personal information.** Physical documents — old bank statements, pre-approved credit card offers, medical explanation of benefits, tax documents — are a goldmine for low-tech identity thieves who go through trash. Invest in a cross-cut or micro-cut shredder and use it for anything containing your name, address, account numbers, Social Security number, or date of birth. "Dumpster diving" remains a real and surprisingly common tactic.
5. **Be cautious about what you share on social media.** Many security questions — your mother's maiden name, your high school mascot, your first car, your childhood best friend — can be answered by anyone who has browsed your Facebook or Instagram profile. Oversharing on social media also helps fraudsters build a convincing profile for social engineering attacks, where they impersonate you or manipulate people who know you. Think carefully before sharing personal milestones, travel plans, or biographical details publicly.
6. **Use Norton Identity Theft Protection for 24/7 monitoring.** Even with every precaution in place, data breaches at companies you've done business with are beyond your control. Norton's identity monitoring services continuously scan for your personal information across data brokers, dark web forums, breached credential databases, court records, and financial accounts — alerting you the moment something suspicious surfaces, so you can act before significant damage is done.
## What to Do If Your Identity Is Stolen
Discovering that your identity has been stolen is overwhelming — but acting quickly and methodically can significantly limit the harm. Follow these steps.
Contact your local police department and file an identity theft report. Ask for a copy of the report — you'll need it when disputing fraudulent accounts with creditors and credit bureaus. Also file a report with the FTC at IdentityTheft.gov, which will generate a personalized recovery plan and an official Identity Theft Report you can use in your disputes.
Contact Equifax, Experian, and TransUnion to place a fraud alert on your credit file. An initial fraud alert lasts one year and requires creditors to verify your identity before opening new accounts. If you have a police report, you can request an extended seven-year fraud alert. This is also the right time to request your credit reports from all three bureaus and go through them line by line, identifying every fraudulent account and inquiry.
Notify your bank, credit union, and credit card companies about the theft. Close or freeze accounts that have been compromised. Request new account numbers and debit/credit cards. Ask each institution for their fraud dispute process and confirm that fraudulent charges will be reversed. Keep detailed records of every call — note the date, the representative's name, and what was agreed upon.
Norton LifeLock plans include access to dedicated **U.S.-based Identity Restoration Specialists** who can walk you through the recovery process step by step — from disputing fraudulent accounts to navigating government agencies. This expert guidance can save you dozens of hours and reduce the stress of navigating a complex, fragmented recovery system on your own. If you're a Norton subscriber, activate your restoration support the moment you discover theft.
**Oversharing on social media can make you an easy target.** Publicly posting your full birthdate, hometown, high school, mother's maiden name, or pet's name gives identity thieves the answers to your security questions and the raw material for social engineering attacks. Review your privacy settings on all platforms and think twice before sharing biographical details, even in casual conversation.
**Norton LifeLock identity theft protection plans** offer tiered levels of coverage to match your needs — including credit monitoring across all three bureaus, Social Security number monitoring, bank account and investment account monitoring, home title monitoring, and reimbursement coverage for stolen funds and personal expenses incurred during recovery. Plans are available for individuals and families, so you can protect everyone in your household.