{"id":248420,"date":"2026-10-18T01:00:26","date_gmt":"2026-10-18T01:00:26","guid":{"rendered":"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/"},"modified":"2026-10-18T01:00:27","modified_gmt":"2026-10-18T01:00:27","slug":"common-identity-theft-alerts","status":"publish","type":"post","link":"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/","title":{"rendered":"Common Identity Theft Alerts and What to Do About Each"},"content":{"rendered":"<div class=\"336cb5b64765e27a1a6c1bb71b941f1a\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-4830628043307652\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- above content -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-4830628043307652\"\r\n     data-ad-slot=\"5864845439\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<\/div>\n<\/p>\n<p>The most common identity theft alerts are charges you don\u2019t recognize, accounts or credit inquiries you never opened, missing mail or bills, medical claims for care you didn\u2019t get, and IRS notices about tax returns or wages that aren\u2019t yours. Each one points to a different kind of theft and a different first move. This guide walks through them in the order people usually run into them, then explains the three tools that matter most in the U.S.: a fraud alert, a credit freeze and an IRS Identity Protection PIN.<\/p>\n<div data-blg-cta=\"after_tldr\" data-blg-cta-layout=\"banner\" style=\"margin:28px 0;font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif\">\n<div style=\"border-radius:26px;padding:min(22px,3.2vw)\">\n<div style=\"background:#ffffff;border-radius:18px;overflow:hidden\">\n<div style=\"padding:34px 30px;text-align:center\">\n<div style=\"margin:0 0 18px\"><span style=\"max-width:100%;border-radius:999px;padding:6px 13px;font-size:12px;font-weight:800;letter-spacing:0.1em;text-transform:uppercase;line-height:1.3;background:#F47F24;color:#ffffff\">Logmeonce<\/span><\/div>\n<div style=\"font-size:26px;font-weight:800;line-height:1.2;letter-spacing:-0.01em;color:#1f2937;margin:0\">Protect Your Accounts and Identity<\/div>\n<div style=\"width:56px;height:6px;border-radius:3px;background:#F47F24;margin:12px 0 14px;margin-left:auto;margin-right:auto\"><\/div>\n<div style=\"font-size:15px;line-height:1.55;color:#64748b;margin:0 0 24px;max-width:44em;margin-left:auto;margin-right:auto\">Explore LogMeOnce resources on password management, multi-factor authentication, and identity security to help protect your digital accounts.<\/div>\n<p><a href=\"https:\/\/logmeonce.com\/resources\" style=\"align-items:center;gap:9px;border-radius:10px;font-weight:700;font-size:15px;text-decoration:none;padding:13px 22px 13px 26px;background:#F47F24;color:#ffffff\">Explore security resources<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#TLDR\" >TL;DR<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#The_alerts_you_are_most_likely_to_see\" >The alerts you are most likely to see<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Financial_alerts_charges_accounts_and_credit_inquiries\" >Financial alerts: charges, accounts and credit inquiries<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Small_charges_you_dont_recognize\" >Small charges you don\u2019t recognize<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Accounts_and_inquiries_on_your_credit_report\" >Accounts and inquiries on your credit report<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Denied_credit_or_surprise_collection_calls\" >Denied credit or surprise collection calls<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Tax_and_medical_alerts\" >Tax and medical alerts<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#IRS_notices\" >IRS notices<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Medical_claims_and_insurance_statements\" >Medical claims and insurance statements<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Digital_alerts_logins_resets_and_MFA_prompts\" >Digital alerts: logins, resets and MFA prompts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Alerts_for_businesses\" >Alerts for businesses<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Our_perspective\" >Our perspective<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Fraud_alert_credit_freeze_or_monitoring_which_one_do_you_need\" >Fraud alert, credit freeze or monitoring: which one do you need?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#What_to_do_the_day_you_get_an_alert\" >What to do the day you get an alert<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Preventing_the_next_alert\" >Preventing the next alert<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#How_LogMeOnce_fits_in\" >How LogMeOnce fits in<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#FAQ\" >FAQ<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Can_someone_steal_my_identity_with_just_my_name_and_address\" >Can someone steal my identity with just my name and address?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#What_are_the_most_common_types_of_identity_theft\" >What are the most common types of identity theft?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#How_do_I_check_whether_someone_is_using_my_identity\" >How do I check whether someone is using my identity?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Does_a_fraud_alert_or_a_credit_freeze_work_better\" >Does a fraud alert or a credit freeze work better?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Sources\" >Sources<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/logmeonce.com\/resources\/common-identity-theft-alerts\/#Recommended\" >Recommended<\/a><\/li><\/ul><\/nav><\/div>\n<h2 id=\"tldr\"><span class=\"ez-toc-section\" id=\"TLDR\"><\/span>TL;DR<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>Treat small, odd charges as a warning. <a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/how-can-i-spot-identity-theft-en-1359\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Thieves often test an account with small amounts<\/a> before going bigger.<\/li>\n<li>Unknown accounts on your credit report, debt collector calls for debts you don\u2019t recognize and IRS notices are the alerts that most often signal a full identity theft case.<\/li>\n<li>A free credit freeze prevents new accounts from being opened. A free fraud alert makes lenders verify who is applying. Credit monitoring only tells you afterward.<\/li>\n<li>You don\u2019t need a Social Security number for a thief to hurt you. Stolen logins and reused passwords are enough for account takeover.<\/li>\n<li>If an alert is real, report it at IdentityTheft.gov and lock down your passwords and multi-factor authentication the same day.<\/li>\n<\/ul>\n<h2 id=\"the-alerts-you-are-most-likely-to-see\"><span class=\"ez-toc-section\" id=\"The_alerts_you_are_most_likely_to_see\"><\/span>The alerts you are most likely to see<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Identity theft rarely announces itself with a single dramatic message. It shows up as a small inconsistency. The list below groups the common ones by where you will see them.<\/p>\n<table>\n<thead>\n<tr>\n<th>Where you see it<\/th>\n<th>The alert<\/th>\n<th>What it often means<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Bank or card statement<\/td>\n<td>Withdrawals or charges you don\u2019t recognize, including tiny ones<\/td>\n<td>Your card or account details are being tested or used<\/td>\n<\/tr>\n<tr>\n<td>Credit report<\/td>\n<td>Accounts or hard inquiries you didn\u2019t open<\/td>\n<td>Someone applied for credit using your information<\/td>\n<\/tr>\n<tr>\n<td>Mailbox<\/td>\n<td>Bills that stop arriving, or bills for things you didn\u2019t buy<\/td>\n<td>A thief changed your address or opened accounts<\/td>\n<\/tr>\n<tr>\n<td>Phone<\/td>\n<td>Debt collectors calling about accounts that aren\u2019t yours<\/td>\n<td>A fraudulent account went unpaid<\/td>\n<\/tr>\n<tr>\n<td>Health insurer<\/td>\n<td>Claims for services you didn\u2019t receive<\/td>\n<td>Your insurance details are being used by someone else<\/td>\n<\/tr>\n<tr>\n<td>IRS<\/td>\n<td>A notice about more than one return, or wages from an employer you don\u2019t know<\/td>\n<td>Tax-related or employment-related identity theft<\/td>\n<\/tr>\n<tr>\n<td>Email or app<\/td>\n<td>Login alerts, password reset emails, or MFA codes you didn\u2019t request<\/td>\n<td>Someone has your password and is trying to get in<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The <a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/how-can-i-spot-identity-theft-en-1359\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Consumer Financial Protection Bureau<\/a> lists unexplained bank withdrawals, missing mail, rejected medical claims and IRS notices about multiple tax returns among the typical indicators. <a href=\"https:\/\/www.usa.gov\/identity-theft\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">USAGov<\/a> adds bills for items you didn\u2019t buy and debt collection calls for accounts you never opened.<\/p>\n<h2 id=\"financial-alerts-charges-accounts-and-credit-inquiries\"><span class=\"ez-toc-section\" id=\"Financial_alerts_charges_accounts_and_credit_inquiries\"><\/span>Financial alerts: charges, accounts and credit inquiries<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3 id=\"small-charges-you-dont-recognize\"><span class=\"ez-toc-section\" id=\"Small_charges_you_dont_recognize\"><\/span>Small charges you don\u2019t recognize<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A $1.99 charge is easy to ignore, and that is exactly why it is useful to a thief. The CFPB\u2019s guidance is that <a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/how-can-i-spot-identity-theft-en-1359\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">even small, odd withdrawals deserve a look<\/a> because they can be test transactions. Call the number on the back of your card, not one from a text message, and ask for the card to be replaced.<\/p>\n<h3 id=\"accounts-and-inquiries-on-your-credit-report\"><span class=\"ez-toc-section\" id=\"Accounts_and_inquiries_on_your_credit_report\"><\/span>Accounts and inquiries on your credit report<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>An unfamiliar account or a hard inquiry from a lender you never contacted is the clearest sign that someone applied for credit as you. This is the alert that calls for a fraud alert or freeze immediately. The FTC\u2019s <a href=\"https:\/\/www.identitytheft.gov\/Steps\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">recovery steps<\/a> put the fraud alert at step two, right after you contact the companies where fraud happened.<\/p>\n<h3 id=\"denied-credit-or-surprise-collection-calls\"><span class=\"ez-toc-section\" id=\"Denied_credit_or_surprise_collection_calls\"><\/span>Denied credit or surprise collection calls<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Being turned down for a loan you expected to get, or hearing from a collector about a debt you can\u2019t place, usually means a thief\u2019s account already sits on your file. Request your credit reports and look for entries you don\u2019t recognize. You can pull them through <a href=\"https:\/\/www.annualcreditreport.com\/protectYourIdentity.action\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">AnnualCreditReport.com<\/a>, the federally authorized source.<\/p>\n<h2 id=\"tax-and-medical-alerts\"><span class=\"ez-toc-section\" id=\"Tax_and_medical_alerts\"><\/span>Tax and medical alerts<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3 id=\"irs-notices\"><span class=\"ez-toc-section\" id=\"IRS_notices\"><\/span>IRS notices<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Two IRS signals matter most. If your e-filed return is rejected because your Social Security number was already used, that points to tax-related identity theft. If you receive a CP01E notice, the IRS is flagging possible employment-related identity theft. In these cases the IRS may assign an Identity Protection PIN, a six-digit number you must use with your SSN to file. Details are on the IRS page about the <a href=\"https:\/\/www.irs.gov\/individuals\/understanding-your-cp01-notice\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">CP01 notice<\/a>.<\/p>\n<p>You don\u2019t have to wait for a notice. The IRS says anyone with an SSN or ITIN who can verify their identity <a href=\"https:\/\/www.irs.gov\/identity-theft-fraud-scams\/get-an-identity-protection-pin\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">is eligible to enroll in the IP PIN program<\/a>, and the fastest route is through your online IRS account. Don\u2019t respond to texts or emails that claim to be from the IRS and ask for a PIN or SSN.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/media.babylovegrowth.ai\/blog-images\/organization-6456\/1792166621751_IRS-notices-overview-diagram.jpeg\" alt=\"IRS notices \u2014 overview diagram\" title=\"\"><\/p>\n<h3 id=\"medical-claims-and-insurance-statements\"><span class=\"ez-toc-section\" id=\"Medical_claims_and_insurance_statements\"><\/span>Medical claims and insurance statements<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>An explanation of benefits that lists care you never received is a medical identity theft alert. Read those statements instead of tossing them. Call your insurer\u2019s fraud line and ask for a copy of your claims history so you can see what was billed.<\/p>\n<h2 id=\"digital-alerts-logins-resets-and-mfa-prompts\"><span class=\"ez-toc-section\" id=\"Digital_alerts_logins_resets_and_MFA_prompts\"><\/span>Digital alerts: logins, resets and MFA prompts<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>This is the category most guides skip, and it is where a lot of modern identity theft starts. A common myth is that thieves need your Social Security number. In practice, security professionals point out that <a href=\"https:\/\/www.enisa.europa.eu\/sites\/default\/files\/publications\/ETL2020%20-%20Identity%20Theft%20A4.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">a name, address and email combined with credentials stolen in breaches<\/a> can be enough for account takeover. That also answers a question many people ask: yes, someone can do real damage without your SSN.<\/p>\n<p>Watch for:<\/p>\n<ul>\n<li><strong>Password reset emails you didn\u2019t request.<\/strong> Someone is probing an account tied to your email.<\/li>\n<li><strong>MFA codes or approval prompts you didn\u2019t trigger.<\/strong> Your password is probably already known. Never approve a prompt you didn\u2019t start.<\/li>\n<li><strong>Login alerts from new devices or places.<\/strong> Check the device list and sign out of all sessions.<\/li>\n<li><strong>Breach notifications.<\/strong> If a company tells you your data was exposed, change that password and any other account where you used it.<\/li>\n<\/ul>\n<p>The reason breach notices matter is credential stuffing. Attackers run stolen username and password pairs against other sites, counting on reuse. The UK\u2019s NCSC explains that these automated attacks can succeed <a href=\"https:\/\/www.ncsc.gov.uk\/sites\/default\/files\/documents\/Credential%20stuffing%20advisory.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">without ever tripping the target company\u2019s main defenses<\/a>, and that multi-factor authentication stops the login even when the password is valid. Unique passwords plus MFA on every account that supports it is the simplest fix.<\/p>\n<p>Our guide on <a href=\"https:\/\/logmeonce.com\/blog\/password-management\/sos-what-to-do-after-a-data-breach\/\" target=\"_blank\" rel=\"noopener\">what to do after a data breach<\/a> covers the order of operations in more detail.<\/p>\n<h2 id=\"alerts-for-businesses\"><span class=\"ez-toc-section\" id=\"Alerts_for_businesses\"><\/span>Alerts for businesses<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Identity theft isn\u2019t only personal. Companies see it as fraudulent payment requests, strange logins and exposed secrets.<\/p>\n<ul>\n<li><strong>Urgent payment requests from an executive.<\/strong> In business email compromise, a fraudster poses as a senior figure and pressures an employee who can make payments. Europol lists <a href=\"https:\/\/www.europol.europa.eu\/cms\/sites\/default\/files\/documents\/ie.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">unsolicited contact, pressure and a sense of urgency<\/a> among the warning signs. Confirm any change in payment details through a second channel you already trust.<\/li>\n<li><strong>Remote or network logins you can\u2019t explain.<\/strong> CISA advises monitoring logon events, and notes that <a href=\"https:\/\/www.cisa.gov\/eviction-strategies-tool\/info-countermeasures\/CM0063\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Logon Type 3 (network shares) and Type 10 (remote sessions such as RDP)<\/a> are key indicators of credential-based attacks.<\/li>\n<li><strong>Credentials in scripts and templates.<\/strong> Hardcoded usernames, passwords and API keys give attackers lasting access if a file is exposed. CISA\u2019s <a href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/04\/16\/cisa-releases-guidance-credential-risks-associated-potential-legacy-oracle-cloud-compromise\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">guidance on credential risks<\/a> points to centralized secret management as the standard fix.<\/li>\n<\/ul>\n<h2 id=\"our-perspective\"><span class=\"ez-toc-section\" id=\"Our_perspective\"><\/span>Our perspective<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>We build password and identity tools, so we see the same pattern over and over: the alert people ignore is the one that arrives before the loss. A reset email, an odd MFA prompt, a breach notice. These are cheap to act on and expensive to ignore.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/media.babylovegrowth.ai\/blog-images\/organization-6456\/1792166601368_Our-perspective-overview-diagram.jpeg\" alt=\"Our perspective \u2014 overview diagram\" title=\"\"><\/p>\n<p>We also think the industry oversells monitoring. Monitoring is useful, but it is a smoke detector, not a lock. The locks are free or close to it: a credit freeze, unique passwords, and multi-factor authentication on everything that matters. We design LogMeOnce around that order. Start with strong, unique credentials and passwordless or multi-factor sign-in, then add dark web monitoring so you hear quickly if something leaks anyway.<\/p>\n<p>For businesses, the same logic holds at scale. Shared passwords in spreadsheets and secrets in scripts are the quiet reasons small incidents become large ones. Put credentials in a vault, require MFA, and review who has access.<\/p>\n<blockquote>\n<p><em>\u2014 Mike<\/em><\/p>\n<\/blockquote>\n<h2 id=\"fraud-alert-credit-freeze-or-monitoring-which-one-do-you-need\"><span class=\"ez-toc-section\" id=\"Fraud_alert_credit_freeze_or_monitoring_which_one_do_you_need\"><\/span>Fraud alert, credit freeze or monitoring: which one do you need?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>These three get confused constantly. Here is how they differ.<\/p>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>Fraud alert<\/th>\n<th>Credit freeze<\/th>\n<th>Credit monitoring<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>What it does<\/td>\n<td>Tells lenders to verify your identity before extending credit<\/td>\n<td>Blocks most access to your credit file so new accounts can\u2019t be opened<\/td>\n<td>Notifies you after something changes<\/td>\n<\/tr>\n<tr>\n<td>Cost<\/td>\n<td>Free<\/td>\n<td>Free<\/td>\n<td>Often paid<\/td>\n<\/tr>\n<tr>\n<td>Lasts<\/td>\n<td>1 year (initial), 7 years (extended), 1 year (active duty)<\/td>\n<td>Until you lift it<\/td>\n<td>While subscribed<\/td>\n<\/tr>\n<tr>\n<td>Preventive?<\/td>\n<td>Partly<\/td>\n<td>Yes<\/td>\n<td>No, it alerts after the event<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The FTC confirms there are <a href=\"https:\/\/consumer.ftc.gov\/articles\/credit-freezes-and-fraud-alerts\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">three kinds of free fraud alerts<\/a>: initial (one year), extended (seven years, for confirmed identity theft victims) and active duty (one year, for service members). Placing one with a single bureau is enough: <a href=\"https:\/\/www.identitytheft.gov\/Steps\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">that company must tell the other two<\/a>.<\/p>\n<p>A freeze is the stronger move. The FTC says you can also <a href=\"https:\/\/consumer.ftc.gov\/consumer-alerts\/2025\/09\/get-credit-freeze-stop-identity-thieves\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">add an initial fraud alert on top of a freeze<\/a> if you are, or suspect you are, affected. Consumer protection guidance from the CFPB makes the key distinction: <a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/what-is-a-credit-monitoring-service-en-1365\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">paid monitoring mostly alerts you after a suspicious event<\/a>, while a freeze helps stop the account from being opened at all.<\/p>\n<p>That doesn\u2019t make monitoring useless. Credit bureau monitoring doesn\u2019t cover everything, and it doesn\u2019t see your email address or passwords circulating on criminal forums. That is the gap dark web monitoring fills, and it is why we treat it as a complement to a freeze, not a replacement.<\/p>\n<h2 id=\"what-to-do-the-day-you-get-an-alert\"><span class=\"ez-toc-section\" id=\"What_to_do_the_day_you_get_an_alert\"><\/span>What to do the day you get an alert<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li><strong>Confirm it.<\/strong> Check the statement, report or notice directly through the bank, bureau or agency\u2019s official site or the phone number on your card. Don\u2019t use links in the message that alarmed you.<\/li>\n<li><strong>Contact the company involved.<\/strong> Report the fraudulent charge or account and ask them to close or freeze it.<\/li>\n<li><strong>Place a fraud alert and get your credit reports.<\/strong> This is <a href=\"https:\/\/www.identitytheft.gov\/Steps\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">step two in the FTC\u2019s recovery plan<\/a>.<\/li>\n<li><strong>Freeze your credit<\/strong> at each of the three bureaus if you aren\u2019t planning to apply for credit soon. Lifting it later is free.<\/li>\n<li><strong>Report at IdentityTheft.gov.<\/strong> The site builds a personalized recovery plan, and you can <a href=\"https:\/\/www.identitytheft.gov\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">start there<\/a>.<\/li>\n<li><strong>Change passwords and turn on MFA.<\/strong> Begin with email, since it controls resets for everything else. Then banking, tax and insurance logins.<\/li>\n<li><strong>Handle tax and medical issues separately.<\/strong> Follow the instructions on any IRS notice, and ask about an IP PIN. Contact your health insurer about questionable claims.<\/li>\n<li><strong>Keep a log.<\/strong> Record dates, names, reference numbers and copies of reports.<\/li>\n<\/ol>\n<p>If you have a case that involves a lot of money, a lawsuit or a debt that was already sent to collections, consider speaking with a consumer protection attorney or a nonprofit credit counselor. We aren\u2019t a law firm, and the steps above are general guidance.<\/p>\n<h2 id=\"preventing-the-next-alert\"><span class=\"ez-toc-section\" id=\"Preventing_the_next_alert\"><\/span>Preventing the next alert<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Most prevention is boring and effective:<\/p>\n<ul>\n<li>Use a different password for every account, generated and stored in a password manager. See why in our piece on <a href=\"https:\/\/logmeonce.com\/blog\/password-management\/the-importance-of-keeping-your-passwords-protected\/\" target=\"_blank\" rel=\"noopener\">keeping your passwords protected<\/a>.<\/li>\n<li>Turn on MFA everywhere, favoring app-based or passwordless methods over SMS when you can.<\/li>\n<li>Freeze your credit and enroll in the IRS IP PIN program before you need them.<\/li>\n<li>Learn how a <a href=\"https:\/\/logmeonce.com\/blog\/consumer\/4-ways-to-use-account-freeze-to-improve-online-safety\/\" target=\"_blank\" rel=\"noopener\">temporary account freeze<\/a> can limit exposure while you investigate.<\/li>\n<li>Read our overview on <a href=\"https:\/\/logmeonce.com\/blog\/identity-management\/how-to-prevent-identity-theft-online\/\" target=\"_blank\" rel=\"noopener\">how to prevent identity theft online<\/a> for habits that cover email, social media and public Wi-Fi.<\/li>\n<li>Scan for exposed credentials with a <a href=\"https:\/\/logmeonce.com\/dark-web-scan-tool\/\" target=\"_blank\" rel=\"noopener\">dark web scan<\/a> so you know which passwords to change.<\/li>\n<\/ul>\n<h2 id=\"how-logmeonce-fits-in\"><span class=\"ez-toc-section\" id=\"How_LogMeOnce_fits_in\"><\/span>How LogMeOnce fits in<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>If you want the digital side covered in one place, our <a href=\"https:\/\/logmeonce.com\/identity-theft-protection\" target=\"_blank\" rel=\"noopener\">identity theft protection<\/a> service pairs <a href=\"https:\/\/logmeonce.com\/identity-theft-protection-dark-web-scan-and-monitoring\" target=\"_blank\" rel=\"noopener\">dark web monitoring<\/a> with our password manager. Published plans on our <a href=\"https:\/\/logmeonce.com\/pricing-and-comparison\/\" target=\"_blank\" rel=\"noopener\">pricing and comparison page<\/a> include a Premium plan at $0.00 per month, Dark Web Monitoring at $1.67 per month, Family Dark Web Monitoring at $3.34 per month and a Personal plan at $4.00 per month. For households and individuals who mainly need a vault, <a href=\"https:\/\/logmeonce.com\/password-manager\/\" target=\"_blank\" rel=\"noopener\">Professional is $2.50 per month, Ultimate $3.25 per month and Family $4.99 per month<\/a>.<\/p>\n<p>Teams can look at the <a href=\"https:\/\/logmeonce.com\/business-pricing-and-comparison\/\" target=\"_blank\" rel=\"noopener\">business plans<\/a>: Teams is $4.00 per month per user and Business is $7.99 per month per user. Enterprise pricing is not published, so you would ask us for details.<\/p>\n<h2 id=\"faq\"><span class=\"ez-toc-section\" id=\"FAQ\"><\/span>FAQ<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3 id=\"can-someone-steal-my-identity-with-just-my-name-and-address\"><span class=\"ez-toc-section\" id=\"Can_someone_steal_my_identity_with_just_my_name_and_address\"><\/span>Can someone steal my identity with just my name and address?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>They can start. A name and address alone rarely open a bank account, but combined with an email and passwords from a data breach, they can be enough for account takeover or to build a convincing phishing attempt. Freeze your credit and use unique passwords so partial information is hard to exploit.<\/p>\n<h3 id=\"what-are-the-most-common-types-of-identity-theft\"><span class=\"ez-toc-section\" id=\"What_are_the_most_common_types_of_identity_theft\"><\/span>What are the most common types of identity theft?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The ones people report most often are financial or credit fraud, tax-related fraud, medical identity theft, account takeover and, for businesses, business email compromise. Each shows up through the different alerts listed above, so it helps to know which one you are seeing.<\/p>\n<h3 id=\"how-do-i-check-whether-someone-is-using-my-identity\"><span class=\"ez-toc-section\" id=\"How_do_I_check_whether_someone_is_using_my_identity\"><\/span>How do I check whether someone is using my identity?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Review your bank and card statements, pull your credit reports from AnnualCreditReport.com, read your insurance explanations of benefits and check your IRS online account. Also look for password reset emails and unexpected MFA prompts. If anything doesn\u2019t match, report it at IdentityTheft.gov.<\/p>\n<h3 id=\"does-a-fraud-alert-or-a-credit-freeze-work-better\"><span class=\"ez-toc-section\" id=\"Does_a_fraud_alert_or_a_credit_freeze_work_better\"><\/span>Does a fraud alert or a credit freeze work better?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A freeze is the stronger preventive tool because it blocks most access to your credit file. A fraud alert makes lenders verify your identity and lasts one year for an initial alert. Both are free, and you can use them together.<\/p>\n<h2 id=\"sources\"><span class=\"ez-toc-section\" id=\"Sources\"><\/span>Sources<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><a href=\"https:\/\/consumer.ftc.gov\/articles\/credit-freezes-and-fraud-alerts\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">FTC: Credit Freezes and Fraud Alerts<\/a><\/li>\n<li><a href=\"https:\/\/consumer.ftc.gov\/consumer-alerts\/2025\/09\/get-credit-freeze-stop-identity-thieves\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">FTC: Get a credit freeze to stop identity thieves<\/a><\/li>\n<li><a href=\"https:\/\/www.identitytheft.gov\/Steps\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">IdentityTheft.gov: Recovery Steps<\/a><\/li>\n<li><a href=\"https:\/\/www.identitytheft.gov\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">IdentityTheft.gov<\/a><\/li>\n<li><a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/how-can-i-spot-identity-theft-en-1359\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">CFPB: How can I spot identity theft?<\/a><\/li>\n<li><a href=\"https:\/\/www.consumerfinance.gov\/ask-cfpb\/what-is-a-credit-monitoring-service-en-1365\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">CFPB: What is a credit monitoring service?<\/a><\/li>\n<li><a href=\"https:\/\/www.usa.gov\/identity-theft\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">USAGov: Identity theft<\/a><\/li>\n<li><a href=\"https:\/\/www.annualcreditreport.com\/protectYourIdentity.action\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">AnnualCreditReport.com: Protect your identity<\/a><\/li>\n<li><a href=\"https:\/\/www.irs.gov\/individuals\/understanding-your-cp01-notice\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">IRS: Understanding your CP01 notice<\/a><\/li>\n<li><a href=\"https:\/\/www.irs.gov\/identity-theft-fraud-scams\/get-an-identity-protection-pin\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">IRS: Get an identity protection PIN<\/a><\/li>\n<li><a href=\"https:\/\/www.enisa.europa.eu\/sites\/default\/files\/publications\/ETL2020%20-%20Identity%20Theft%20A4.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">ENISA: Identity Theft (ETL2020)<\/a><\/li>\n<li><a href=\"https:\/\/www.ncsc.gov.uk\/sites\/default\/files\/documents\/Credential%20stuffing%20advisory.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">NCSC: Credential stuffing advisory<\/a><\/li>\n<li><a href=\"https:\/\/www.europol.europa.eu\/cms\/sites\/default\/files\/documents\/ie.pdf\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Europol: CEO\/BEC fraud<\/a><\/li>\n<li><a href=\"https:\/\/www.cisa.gov\/eviction-strategies-tool\/info-countermeasures\/CM0063\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">CISA: Logon event monitoring<\/a><\/li>\n<li><a href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/04\/16\/cisa-releases-guidance-credential-risks-associated-potential-legacy-oracle-cloud-compromise\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">CISA: Guidance on credential risks<\/a><\/li>\n<\/ul>\n<h2 id=\"recommended\"><span class=\"ez-toc-section\" id=\"Recommended\"><\/span>Recommended<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><a href=\"https:\/\/logmeonce.com\/identity-theft-protection-dark-web-scan-and-monitoring\" target=\"_blank\" rel=\"noopener\">Identity Theft Protection &amp; Dark Web Scan<\/a><\/li>\n<li><a href=\"https:\/\/logmeonce.com\/blog\/identity-management\/how-to-prevent-identity-theft-online\" target=\"_blank\" rel=\"noopener\">How to Prevent Identity Theft Online<\/a><\/li>\n<li><a href=\"https:\/\/logmeonce.com\/identity-theft-protection\" target=\"_blank\" rel=\"noopener\">Identity Theft Protection<\/a><\/li>\n<li><a href=\"https:\/\/logmeonce.com\/dark-web-scan-tool\" target=\"_blank\" rel=\"noopener\">Best Identity Theft Protection Software | Cloud Identity Manager<\/a><\/li>\n<\/ul>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Learn the most common identity theft alerts, from bank charges to IRS notices, and the exact steps to take: fraud alert, credit freeze, IP PIN and more.<\/p>\n","protected":false},"author":0,"featured_media":248422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-248420","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-logmeonce"],"acf":[],"_links":{"self":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/248420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/comments?post=248420"}],"version-history":[{"count":1,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/248420\/revisions"}],"predecessor-version":[{"id":248421,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/248420\/revisions\/248421"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media\/248422"}],"wp:attachment":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media?parent=248420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/categories?post=248420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/tags?post=248420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}