Subjects and lessons to explore.

Law

Personal Finance · Foundations

Identity Theft

9 min read 5 practice questions
8 key termsSourcesReport an error
Want it in plain words first? Jump to Eli explains — the same idea, no jargon.
On this page 9 sections
  1. In 30 seconds
  2. Why this matters
  3. The college version
  4. Eli explains
  5. Worked example
  6. Key takeaway
  7. Quick check
  8. Study tools
  9. Sources & references

In 30 seconds

is when someone uses your personal or financial information without your permission, usually for money — the FTC's working definition. It gets in through data breaches, messages, stolen mail, and card skimmers. The warning signs are unexpected bills, unfamiliar accounts, and being denied credit you expected. Strong passwords, shredding, and guarding your protect you. If it happens, the FTC's recovery steps are report, freeze, and dispute.

Why this matters

Identity theft matters because a single piece of information — a card number, a Social Security number, a billing address — can become a key to money that was never yours to lose. A thief who opens accounts in your name does not just take purchases; the accounts, missed payments, and debts they abandon land on your credit reports, where they can follow you for years. Most people do not discover it through a dramatic event; they notice a bill they never owed or an account they never opened. Knowing the warning signs and the recovery steps turns a vague, scary problem into a short list of concrete actions — which is exactly how the FTC frames it.

The college version

What identity theft is: a crime of access

The FTC's working definition is one sentence: identity theft is when someone uses your personal or financial information without your permission. The Consumer Financial Protection Bureau says the same thing in slightly different words: identity theft occurs when someone steals your identity to commit fraud — using personal information without permission. What a thief can do with that information is wide: buy things with your credit cards, open new credit cards in your name, start a phone, electricity, or gas account, rent an apartment, receive government benefits or a tax refund, or even pretend to be you if they are arrested. The information itself is ordinary — name and address, card and bank account numbers, a Social Security number, medical insurance account numbers — which is why the honest frame matters: the thief got access to information that was never meant to be public. An original example carries it: Nadia discovers that someone used her name and address to open a cell phone plan she never asked for. She never met the person, never handed over her details, and had no reason to distrust anyone. The thief simply gained access to information that should have stayed private. That is the whole shape of the crime — not a failure of trust, a failure of access.

How it happens: four common channels

Data breaches. A company that holds customer information is hacked, and personal details spill out to people who should not have them. The FTC's guidance after a breach notice is to act quickly: change your passwords, especially if you reuse them, and turn on extra login security. Phishing. Fraudulent emails, texts, and calls pretend to be a real company and ask you to click a link, enter a password, or confirm account details; the FTC's rule of thumb is that when an unexpected message asks you to act, contact the company through a phone number or website you know is real. Stolen mail. Statements and bills are full of personal information, so a thief who takes mail from a mailbox can harvest account numbers — and if your bills stop arriving, a thief may have quietly changed your billing address. Card skimmers. A is an illegal card reader attached to a payment terminal, like a gas pump or an ATM, that copies the data off your card's magnetic stripe when you swipe; you often find out only later, when a statement shows charges you never made. Four different doors, and the same thing walks through each: your information, used without your permission.

The warning signs and what they are not

The classic signs are three. Unexpected bills: a charge for something you never bought, or a bill from a company you never dealt with. Unfamiliar accounts: a credit card, loan, or utility account in your name that you never opened — the kind of thing that shows up on your credit reports. Denied credit: when a thief's accounts and missed payments sit on your file, a legitimate application you make can be turned down, and under federal rules a denial based on your entitles you to a free copy of that report. The CFPB adds quieter signs: small withdrawals you did not make (sometimes a test before a larger one), inquiries from companies you never contacted, and calls from debt collectors about debts that are not yours. None of these means you did something wrong. They are how a crime of access shows up in ordinary paperwork, and spotting them early is what makes recovery shorter.

Protecting information, and the FTC's recovery path

Protection is general practice, not paranoia. Use strong passwords, and the FTC also recommends two-factor authentication where an account offers it. Shred documents that carry personal information before throwing them out. Take mail out of the mailbox promptly. Guard your Social Security number: ask why an organization needs it, whether fewer digits will do, and what happens if you refuse. Credit freezes and fraud alerts sit on top of all of it — a freeze blocks new credit accounts from being opened in your name, free to place and lift, and a makes businesses verify your identity before granting new credit. If identity theft still happens, the FTC's recovery path has three named steps: report the theft at IdentityTheft.gov, where you get a free personal recovery plan with next steps; freeze your credit so the thief cannot open more accounts; and dispute the fraudulent accounts with the businesses and credit bureaus involved. Fraud can damage your credit reports — the accounts a thief opens and abandons appear there, and how reports work is the sibling topic credit-reports. The closing frame stays honest: this is a crime of access, and the fix is a process, not a verdict on you. The steps above are the FTC's general guidance, not legal advice.

Eli, the EliExplains learning guide

Eli explains

The same idea, in plain words

Explain it like I’m 10

Identity theft is when someone else uses your personal information — your name, your card numbers, your Social Security number — without your permission, usually to spend money or open accounts as if they were you. It can get in through a data breach at a company that holds your information, a phishing message that tricks you into typing a password, a stolen bill from your mailbox, or a skimmer attached to a card reader. The signs are things you don't recognize: bills you never owed, accounts you never opened, credit you were denied. The FTC's recovery path is report, freeze, and dispute: report the theft at IdentityTheft.gov, freeze your credit so no new accounts can be opened, and dispute the accounts that were opened without your permission.

Picture it like this

Think of your personal information as a key ring. Each key opens something specific: one opens your mailbox, one opens your card accounts, one opens your credit file. You keep the ring on your own belt, but a breach is a copy of the ring made at a shop you used, phishing is someone asking to 'borrow' a key and copying it, a stolen bill is a key taken from an unlocked drawer, and a skimmer is a machine that copies your key while you use it. The thief never needed you to trust them — they needed a copy of a key.

Where the picture stops working

The key-ring picture has a limit: keys can be re-cut and locks changed, but stolen personal information cannot be fully 'un-stolen' — your Social Security number does not get replaced like a lock. That is why the FTC's steps focus on limiting what the thief can still do, by freezing new credit and reporting the fraud, rather than on making the information private again.

Worked example

Marcus checks his credit card statement and finds a $214 charge from an electronics retailer he has never visited, on a day he was at work. He calls the card issuer's fraud line, which cancels the card and removes the charge. Because he now suspects identity theft, he follows the FTC's path: he reports the incident at IdentityTheft.gov and receives a personal recovery plan; he places a fraud alert and a credit freeze so no one can open new credit accounts in his name; and he reviews his credit reports, where he finds — and disputes — a phone account he never opened. Within a few weeks the fraudulent account is removed and new cards are issued.

Key takeaway

Identity theft is a crime of access, not of trust: someone got at information that should have been private. Protect it simply, watch for unfamiliar bills and accounts, and if it happens, follow the FTC's path — report, freeze, dispute.

Quick check

3 questions here, of 5 in this lesson’s practice set. Answers stay hidden until you check.

Question 1 of 3foundational

According to the FTC, what is identity theft, stated in one line?

Choose an answer, then check it.
Question 2 of 3foundational

Which of these is a warning sign that someone may be using your identity?

Choose an answer, then check it.
Question 3 of 3intermediate

Maya checks her credit report and finds a loan she never applied for. What should she do first, following the FTC's guidance?

Choose an answer, then check it.
Practice all 5

Keep learning

Ready to build on this? Continue to the next lesson.

Practice this lesson
Study tools & related lessonsYou’ll learn to · Common mistakes · Key vocabulary · Related

You’ll learn to

  • Define identity theft as someone using another person's personal or financial information without permission, usually for money, attributing the working definition to the FTC.
  • Name four ways identity theft happens — data breaches, phishing, stolen mail, and card skimmers — each with an original example.
  • Recognize the warning signs of identity theft: unexpected bills, unfamiliar accounts, and being denied credit you expected.
  • Describe the general practices that protect personal information: strong passwords, shredding documents, and guarding the Social Security number.
  • Name the FTC's recovery steps if identity theft happens — report, freeze, and dispute — and explain how fraud can damage credit reports.
  • Explain the honest framing that identity theft is a crime of access, not a sign that the victim trusted the wrong person.

Common mistakes

  • Waiting for a big, dramatic sign. Most identity theft shows up quietly — a small charge, a stray bill, an account you don't recognize. The CFPB warns that even a tiny withdrawal can be a test before a much larger one, so small anomalies deserve attention, not dismissal.

  • Blaming yourself and hiding it. Identity theft is a crime of access; a thief getting your information does not mean you were careless or too trusting. The FTC's guidance is to act fast, because reporting sooner limits the damage — and hiding it only gives the thief more time.

  • Assuming a credit freeze locks your own cards. A freeze blocks new credit accounts, not purchases on cards you already have; existing accounts keep working, and you can temporarily lift the freeze when you legitimately need new credit.

  • Handing over your Social Security number without asking why. Some organizations truly need it; many do not. The FTC's advice is to ask what it is for, whether the last four digits will do, and what happens if you refuse — and to remember that real organizations do not call, email, or text asking for it.

Key vocabulary

Identity theft
When someone uses another person's personal or financial information without permission, usually to get money or credit; the FTC's working definition.
Data breach
An incident in which a company or organization that holds personal information is accessed by someone unauthorized, exposing that information to thieves.
Phishing
Fraudulent emails, texts, or calls that pretend to be a real company in order to trick people into revealing passwords, account numbers, or other personal information.
Skimmer
An illegal card reader attached to a payment terminal that copies the data from a credit or debit card's magnetic stripe when the card is swiped.
Credit freeze
A protection that blocks new credit accounts from being opened in your name; it is free to place and lift and does not affect your credit score.
Fraud alert
A note on your credit reports telling businesses to verify your identity before opening a new credit account in your name; an initial alert lasts one year.
Social Security number
The nine-digit U.S. government identification number assigned to most Americans; thieves target it, so it should be shared only when an organization truly needs it.
Credit report
A record of a person's credit history kept by credit bureaus; fraudulent accounts opened in your name can appear on it.

Sources & references

  1. What To Know About Identity Theft — U.S. Federal Trade Commission (FTC), Consumer Advice
  2. What is identity theft? (Ask CFPB) — Consumer Financial Protection Bureau (CFPB)
  3. How to tell if someone is using your identity — U.S. Federal Trade Commission (FTC), Consumer Advice
  4. How can I spot identity theft? (Ask CFPB) — Consumer Financial Protection Bureau (CFPB)
  5. Have you been affected by a data breach? Read on — U.S. Federal Trade Commission (FTC), Consumer Advice
  6. How To Recognize and Avoid Phishing Scams — U.S. Federal Trade Commission (FTC), Consumer Advice
  7. Watch out for card skimming at the gas pump — U.S. Federal Trade Commission (FTC), Consumer Advice
  8. Credit Freezes and Fraud Alerts — U.S. Federal Trade Commission (FTC), Consumer Advice
  9. How to recover from identity theft — U.S. Federal Trade Commission (FTC), Consumer Advice
  10. What do I do if I am a victim of identity theft? (Ask CFPB) — Consumer Financial Protection Bureau (CFPB)
  11. Free Credit Reports (FTC Consumer Advice) — Federal Trade Commission (FTC)
  12. Protect Your Personal Information From Hackers and Scammers — U.S. Federal Trade Commission (FTC), Consumer Advice

EliExplains lessons are original prose written from the open, credible references above. See Copyright & Licensing.

Researched 2026-08-21

Educational content only. It is not medical, legal or professional advice. Found an error? Tell us.