Identity theft is a real threat worth worrying about. Not only is someone stealing from you and committing fraud in your name, but the negative impacts of identity theft can take months or even years to recover from.
Worst of all is the sense of helplessness: Not only are most “identity theft protection” services kind of useless, the very nature of the crime means you likely won’t be aware that you’ve been compromised until it starts affecting your finances and reputation—at which point quick action is necessary, including contacting a seemingly endless list of businesses, financial institutions, credit bureaus, and government agencies.
While you can't always prevent identity theft, you can look for the earliest and most subtle signs that it might be happening to you. Sometimes the first ripples can seem like one-off oddities or simple mistakes you can just ignore—but acting promptly when confronted with these subtle signs of identity theft can go a long way towards limiting the damage you’ll suffer.
Unrecognized 2FA logins
Two-factor authentication (2FA) is a powerful security tool, and you’re likely pretty used to having to type in a code you received via email, authenticator app, or text when you access your online accounts. So used to it, in fact, that you might be tempted to ignore a stray 2FA notice, especially if it’s from a service or business you don’t actually use.
The opposite is true: If you start seeing 2FA alerts that you didn’t initiate, it could be a sign that someone is at least partway through the process of stealing your identity. They may have most of the information they need to access your accounts, or they may have taken over some but not others, or simply made a mistake. If you see a 2FA you don’t recognize, check in on your online accounts, change your passwords, and check your credit reports.
Weirdness with your streaming accounts
If you launch Spotify and some strange music that’s 100% not in your wheelhouse starts playing, or if weird shows and films starts showing up in your Netflix queue, it could be a sign that someone is at chipping away at your identity. A hijacked Spotify account doesn’t necessarily mean a criminal has completely stolen your life, but it could be an early warning sign that someone is at least trying to do so, and that at least one of your passwords has been compromised.
Test charges on your credit cards
Similar to unexpected 2FA alerts, unrecognized test charges on your credit cards are a warning sign. Companies sometimes place a tiny charge on your card when you first sign up for a service—often just a penny—to test that you’ve given them a real form of payment; they then quickly refund the charge. If you don’t check your accounts regularly, you might even miss a test charge, because it probably never actually posts to your account. Alternatively, some fraudsters often apply small test charges to accounts to ensure they’re active.
In either case, test charges for accounts you’re unfamiliar with are often a sign that someone has your identity in hand and is setting up a whole separate financial identity, and they should be investigated immediately.
Credit score fluctuations
Do you check your credit score and credit reports regularly? You really ought to. Not only will it give you a general idea of your overall financial health, these tools serve as early warning signs that you’ve been compromised. Checking your credit reports will show the obvious signs, like lines of credit that you never applied for and don’t control that are nonetheless listed under your name.
But your credit score can be an even better tool, because it’s easier to track. Your credit score will naturally fluctuate a little over time, but dramatic changes are often a sign that a third party is monkeying with your credit. Even if your credit score temporarily goes up, it could be a sign that someone is opening new lines of credit, because they’re unintentionally improving your debt ratio—which makes your score jump. Then, of course, they tank your credit score when they max out those credit lines and fail to make payments.
Weird junk mail
If you have started to receive advertisements for stuff that’s far from your usual interests—or way out of your financial league—be wary. If folks are spending money you don’t have in your name, you can land on purchased mailing lists that send out all that glorious junk mail. If you’re suddenly being asked about your recent interest in luxury furniture, it’s time to do a little investigating.
The other sign someone’s playing fast and loose with your identity, oddly, is receiving mail in someone else’s name. If you start getting mail with your address but someone else’s name, it could be a sign of what’s known as “synthetic identity theft.” This is when thieves mix your personal data with other pieces of information (some real, some invented) to create a wholly artificial identity. This can still be a huge problem for you, so it’s a good idea to review those credit reports.
Missing bank and credit card statements
Another way your mail can warn you that you’re the victim of identity theft? A lack of mail (and email). If you suddenly stop receiving statements, bills, and other correspondence from your banks or credit card issuers, it could be because someone has taken over the accounts and switched all your mailing info to hide it from you.
If you realize you haven’t seen a statement or bill in the physical mail or your email inbox in a while, take the following steps:
Log into your account. Make sure you still have access. If you do, change your passwords and add any security layers you can, like 2FA.
Review payments and charges. See if you’ve missed any payments or if there are any charges you don’t recognize. If so, notify the business’ fraud department.
Check the address. See if your mail address and email preferences are correct. If so, the glitch might be with the post office. Also check that you’re supposed to get paper statements—this might have been switched to digital statements. If the address on file is not your address, assume your identity has been stolen and take all the steps.
Credit card problems
One of the most subtle signs of identity theft is the sudden onset of problems using your credit cards. If you get unexpected denials when trying to buy things with your cards, it may be because your bank or financial institution has placed a hold on them. If the card starts working again some time later, that doesn’t necessarily mean it was just a random glitch—you should contact the card issuer and get to the bottom of the problem. Your card could be physically damaged, or it could just be a weird coincidence—but why take the chance?
Tax issues
Identity theft usually conjured up an image of criminals running up big credit card bills or taking out huge loans in your name, but one common strategy no one thinks about is tax fraud: Criminals steal your identity and actually file your taxes, claiming a much higher income in order to get a plump refund. Some signs this is happening include:
Rejected filing. If you try to file your taxes and the IRS tells you that you’ve already filed, take action immediately.
Unexpected refund. You got a refund check in the mail and you didn’t even file your taxes yet? Don’t assume it’s just the federal government being weirdly efficient for once. It may be the result of identity chicanery.
Any unexpected records from the IRS. Fraudsters sometimes mess up when trying to steal your tax identity, and the IRS suddenly sends you information you “requested,” like tax transcripts. If you get something like that in the mail you didn’t ask for, contact the IRS immediately.