Older Adult Identity Theft Recovery Checklist: What Families Should Do First

When an older adult's identity is stolen, the first few days matter. Families often feel pressure to fix everything at once, but recovery works better when the work is organized: stop active misuse, create an official record, protect credit, notify the right organizations, and keep a clean paper trail.

This guide is educational only. It is not legal, tax, financial, medical, or investment advice. Rules, account procedures, and reporting steps can vary by situation, so use official resources and qualified professionals when the facts are complicated.

Start with a calm 24-hour triage

Identity theft can show up in many ways: a new credit card the older adult did not open, a bank withdrawal, a suspicious Medicare or insurance notice, a debt collection letter, a tax notice, a denied benefit, or a message saying a password was changed. The first goal is not to solve every issue. The first goal is to stop additional damage and preserve evidence.

• Write down what happened. Record the date discovered, who noticed it, account names, last four digits only, transaction amounts, caller names, confirmation numbers, and any deadlines.
• Secure the most exposed accounts. Change passwords on email, banking, credit-card, brokerage, Social Security, Medicare, and tax accounts when the older adult can legally access them. Use unique passwords and turn on multi-factor authentication where available.
• Do not delete messages. Save emails, texts, envelopes, voicemail transcripts, screenshots, and account alerts. These details can help banks, agencies, and investigators understand the timeline.
• Separate urgent money movement from slower cleanup. An active bank transfer, wire, debit-card charge, or account takeover usually deserves a same-day call to the institution's fraud department.

Example: if a daughter notices two unfamiliar online withdrawals from her father's checking account, the same-day priority is the bank fraud call, card or online-banking lock, password reset, written claim number, and list of pending payments that may be affected. Credit reports and agency reports are still important, but they do not replace stopping an active withdrawal path.

Create an official recovery record

For most identity-theft situations, the central starting point is IdentityTheft.gov, the Federal Trade Commission's recovery site. It helps people report identity theft and create a recovery plan. Families can use the report as a reference when contacting creditors, credit bureaus, debt collectors, and other organizations.

If the problem is a scam payment, fraudulent sales pitch, impostor call, or suspicious business conduct rather than a full identity-theft recovery case, the FTC also operates ReportFraud.ftc.gov. Many families use both paths when the facts overlap, such as a government impersonator who captured personal information and then opened accounts.

A police report is not always required for every step, but it may be useful when a bank, creditor, landlord, debt collector, or benefits office requests one. If the older adult is in immediate danger, if a caregiver or family member is suspected of exploitation, or if threats are involved, contact local authorities or Adult Protective Services. The Department of Justice's Elder Justice Initiative explains elder financial exploitation and points families toward reporting options.

Freeze credit and choose the right alert

A credit freeze is one of the strongest broad protections after personal information is misused. The FTC explains that a freeze makes it harder for someone to open a new credit account in the person's name, and it is free to place or lift. A freeze must be placed separately with Equifax, Experian, and TransUnion. Keep each confirmation number in the recovery folder.

The FTC's credit freezes and fraud alerts guidance also explains fraud alerts. An initial fraud alert can be placed by contacting one bureau, which must tell the other two. An extended fraud alert is generally for people who have completed an FTC identity-theft report or filed a police report. A freeze blocks new-credit access until lifted; an alert tells businesses to verify identity before opening new credit. Some families use both.

Pull and review credit reports

Use AnnualCreditReport.com, the federally authorized site for free credit reports, to review reports from the three major credit bureaus. Look for accounts the older adult did not open, addresses they never used, employers that do not fit, hard inquiries they do not recognize, and collection accounts tied to unfamiliar bills.

Make the review practical. Print or save each report as a PDF, mark suspicious items, and track disputes in a simple table. Include the bureau, disputed account, date submitted, method used, documents sent, and response deadline. If the older adult does not use a computer comfortably, a trusted helper can sit beside them and keep the process slow and transparent.

Call account providers in the right order

Families often lose time calling every organization in random order. Start with the places where money, benefits, housing, or health coverage could be disrupted.

• Bank and credit-card providers: report unauthorized transactions, request new cards or account numbers if needed, ask how provisional credits work, and document claim numbers.
• Email and phone accounts: recover access, change passwords, remove unfamiliar forwarding rules, and check whether a phone number was ported or compromised.
• Social Security: if someone is misusing a Social Security number, benefit account, or SSA communication, review official reporting options through the Social Security Office of the Inspector General.
• Tax accounts: if a tax return was filed fraudulently or the older adult received an IRS notice about suspicious filing activity, review IRS identity-theft resources and the Identity Protection PIN program.
• Medical, Medicare, or insurance plans: report unfamiliar claims, bills, explanation-of-benefits entries, or provider visits. Medical identity theft can affect bills and records.
• Debt collectors: ask for validation in writing before paying anything. Do not give payment information to a collector until the debt and identity issue are clear.

Build a family recovery folder

A clean recovery folder keeps the work from becoming a pile of disconnected calls. It also helps if a different family member, attorney, advocate, or agency needs to step in later.

• FTC IdentityTheft.gov report or recovery plan.
• Police report, Adult Protective Services report, or IC3 complaint number, if used.
• Credit freeze confirmations for Equifax, Experian, and TransUnion.
• Fraud alert confirmation and expiration date, if used.
• Copies of disputed credit-report pages.
• Bank, card, insurance, and benefits claim numbers.
• Letters sent and received, with dates.
• A phone log listing date, organization, phone number called, representative name or ID, summary, and promised next step.
• A list of passwords changed and multi-factor authentication added, without writing passwords in the folder.

If legal authority is unclear, pause before a helper signs forms, accesses accounts, or represents the older adult. A power of attorney, representative-payee role, health care proxy, or account-specific authorization may not be interchangeable. When authority matters, confirm with the institution or a qualified legal professional.

Watch for family and caregiver red flags

Identity theft is sometimes committed by strangers, but older adults can also be exploited by someone close to them. Red flags include sudden secrecy around finances, missing cards or checkbooks, new unpaid bills despite adequate income, unusual transfers to a helper, pressure to change passwords, new loans, or a caregiver refusing to let the older adult speak privately.

The CFPB's resources for older adults include guides for people helping older adults with money decisions and fraud concerns. Families can use those materials to structure conversations without taking over more control than necessary.

When internet crime or account takeover is involved

If the theft involved phishing, online account takeover, romance fraud, fake tech support, cryptocurrency, wire transfer fraud, or another internet-enabled crime, families may also consider a complaint through the FBI's Internet Crime Complaint Center. Keep expectations realistic: a report may not produce an immediate personal recovery, but it creates an official record and can help law enforcement identify patterns.

A simple 30-day follow-up plan

Recovery does not end after the first round of calls. Use a 30-day calendar so the older adult and helper know what has been checked and what remains open.

• Week 1: complete the FTC report, place freezes, secure email and financial accounts, call affected providers, and start the recovery folder.
• Week 2: review credit reports, dispute unfamiliar accounts, follow up on bank claims, and check benefit or insurance accounts for changes.
• Week 3: confirm letters were received, update the call log, review mail for new collection notices or account confirmations, and check whether any freeze or fraud-alert confirmations are missing.
• Week 4: decide what needs professional help, such as legal aid, a consumer attorney, a tax professional, bank escalation, Adult Protective Services, or a local aging-services agency.

Family decision points

Before taking over, ask what level of help the older adult wants and what authority each helper actually has. Some people want a family member on speakerphone while they make calls. Others want help opening mail, scanning documents, or making a checklist. If cognition, coercion, or safety is a concern, the family may need a different plan with professional guidance.

Use these questions to keep the work clear:

• Is money currently leaving an account, or is this mainly a risk of future misuse?
• Was a Social Security number, Medicare number, bank login, email account, driver's license, or tax account involved?
• Which organizations have already been contacted, and what proof did they request?
• Who is allowed to speak for the older adult, and is that authority documented?
• What mail, email, and phone alerts should be watched for during the next month?

Sources

• IdentityTheft.gov: report identity theft and build a recovery plan
• FTC Consumer Advice: Identity Theft
• FTC Consumer Advice: Credit Freezes and Fraud Alerts
• AnnualCreditReport.com
• CFPB: Resources for older adults
• Social Security Office of the Inspector General: Report fraud
• IRS: Get an Identity Protection PIN
• Department of Justice Elder Justice Initiative: Financial exploitation
• FBI Internet Crime Complaint Center: File a complaint