Advanced Identity Theft Prevention: Beyond the Basics

Most identity theft advice stops at the same four items: strong passwords, two-factor authentication, a credit freeze and caution with phishing. They are right and they are not enough. Identity thieves are not limited to opening credit cards. They file false tax returns, take over phone numbers, bill insurers using stolen medical identities, redirect mail, apply for benefits and open accounts in a child’s name that no one checks for years. This guide covers the next layer: advanced measures that close those gaps. It assumes you have the basics in place; if not, start with effective identity theft prevention tips and what is identity theft. It is organized by threat, so you can pick the measures that match your situation.

1. The scale and shape of the problem

The FBI’s Internet Crime Complaint Center received 31,675 identity theft complaints in 2025 with reported losses of $185.8 million, plus 67,456 personal data breach complaints with reported losses of about $1.31 billion (FBI IC3). The FTC received about 3 million fraud reports in 2025 with reported losses of $15.9 billion (FTC). These are only reported cases. The common thread is that attackers need a few personal details to start, and public data supplies many of them. See online personal information and identity theft.

2. Threat 1: New credit accounts

Step 1: Freeze all three nationwide credit bureaus

A freeze is free under federal law, takes about half an hour and can be lifted temporarily when you apply for credit. Keep the PINs or login details in a password manager. See what is a credit freeze.

Step 2: Freeze specialty consumer reports

Beyond the three main bureaus, other consumer reporting agencies maintain reports used for banking, insurance, employment, tenant and telecom decisions. Many allow freezes or opt-outs, usually through their own websites. Look for freezes for check and bank account screening reports, telecom and utility reports and tenant screening reports. The Federal Trade Commission’s guidance at consumer.ftc.gov explains your rights over consumer reports.

Step 3: Opt out of prescreened offers

Call 1-888-5-OPT-OUT to reduce prescreened credit and insurance offers, which can be stolen from the mail.

3. Threat 2: Tax identity theft

Step 4: Get an IRS Identity Protection PIN

The IRS offers a six-digit Identity Protection PIN that must be used to file your federal return, which prevents someone else from filing with your Social Security number. Check the IRS’s official identity protection pages for eligibility and enrollment. File early each year, and keep your PIN secure.

Step 5: Watch for IRS mail and notices

Unexpected notices about returns you did not file are a sign of misuse. Respond through official channels and report at identitytheft.gov.

4. Threat 3: Account takeover and SIM swapping

Step 6: Move to stronger authentication

Use passkeys where offered, or authenticator apps and hardware security keys, instead of text message codes. Passkeys resist phishing because there is no password or code to be tricked out of you.

Step 7: Protect your mobile account

Add a PIN or port-out protection with your carrier, and consider a number lock feature if available. Keep your main number private. See what can someone do with your home address and phone number.

Step 8: Use a password manager and unique passwords

Reuse is how breaches turn into takeovers.

Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.

5. Threat 4: Mail, address and document theft

Step 9: Secure your mail

Use a locking mailbox or P.O. box, collect mail promptly, and sign up for the Postal Service’s free informed delivery, which previews incoming mail so you can notice missing items. Watch for unexpected change-of-address confirmations. See check your mail for fraudsters.

Step 10: Shred and store documents

Shred documents with account numbers and offers. Store birth certificates, Social Security cards and passports in a safe place, and do not carry them unless needed.

6. Threat 5: Medical and benefits identity theft

Step 11: Review medical statements

Check explanation-of-benefits statements for services you did not receive. Ask providers and insurers for an accounting if something looks wrong. Keep insurance cards secure. See what happens to your health data online.

Create your own online Social Security account with strong authentication, so that no one else can register with your number. Check other benefits accounts similarly. The Department of Health and Human Services explains health information protections at hhs.gov/hipaa.

7. Threat 6: Child and family identity theft

Step 13: Freeze your children’s credit

Parents and guardians can place a security freeze for a child under 16, and similar protections exist for protected persons. Each bureau has a process that may require documents. Children’s Social Security numbers are attractive because misuse can go unnoticed for years.

Step 14: Protect elders

Help older relatives with the same steps, plus call filtering and bank alerts. See how to keep your family’s digital privacy safe.

8. Threat 7: Public data used to impersonate you

Step 15: Remove the fuel

Identity thieves rely on information about you that is easy to find. Remove your address, phone, relatives and age from people-search sites. Official pages include Spokeo, the PeopleConnect suppression center and That’s Them. See how to opt out of the most popular people search sites and reduce the risk of identity theft by removing personal information from the web. California residents can use DROP at privacy.ca.gov/drop.

Step 16: Replace weak security questions

Where services use knowledge-based questions, use random answers stored in your password manager. Public data makes real answers guessable.

9. Monitoring that actually helps

Pull your credit reports on a schedule, staggering the three bureaus through the year.
Set transaction alerts on every bank and card account.
Use your bank’s account-level alerts for new payees and address changes.
Watch for notices about new accounts, collections and inquiries.
Search your name and Social Security number’s presence on breach lists via reputable breach-checking tools.

Monitoring detects, and freezes and strong authentication prevent. See data breach: beyond credit monitoring.

10. If identity theft happens

Report at identitytheft.gov and follow the personalized plan.
Place fraud alerts or extended alerts as advised.
Contact the affected institutions and dispute fraudulent items.
Keep a log with dates, names and reference numbers.
File police and tax reports where required.

See how to report identity theft and questioning identity fraud.

11. Layered defense summary

Threat	Main measures
New credit	Freezes at all bureaus and specialty reports
Tax fraud	IRS Identity Protection PIN, early filing
Takeover	Passkeys, authenticator apps, carrier PIN, password manager
Mail theft	Locked mailbox, informed delivery, shredding
Medical fraud	Review statements, secure cards and portals
Child fraud	Freeze child credit, secure records
Public data	Broker removal, strong security questions

12. A quick monthly routine that keeps the layers working

Advanced protection fails most often through neglect, not through a clever attacker. Locks get lifted for a loan application and never reapplied, recovery email addresses go stale, and a forgotten account keeps an old password alive for years. A short monthly routine prevents this drift. Check that each credit bureau freeze is still active, scan your bank and card statements for small unfamiliar charges, and confirm that the phone number and email attached to your most important accounts are ones you still control.

Once a quarter, go a little deeper. Review which devices are signed in to your email and cloud accounts and remove any you no longer use. Look at your passkey and authenticator list and retire entries for services you have closed. Pull your free credit reports and read the inquiries section, because an unexpected hard inquiry is often the first visible sign that someone has tried to open credit in your name. If something looks wrong, the federal government’s recovery site at IdentityTheft.gov walks you through a personalized plan and generates the letters and reports you need.

Treat the routine as a habit, not a project. Ten minutes on the first weekend of each month is enough, and it catches problems while they are still small and cheap to fix.

13. Three scenarios and what to do

Scenario 1: You were in a major breach. Freeze all reports, get the IRS PIN, move to stronger authentication and remove broker listings.

Scenario 2: You have young children. Freeze their credit, keep their Social Security numbers private and avoid oversharing online.

Scenario 3: You are caring for an older parent. Add call filtering, bank alerts, a mail lock, a family code word and broker removals.

14. Myths and facts

Myth	Fact
A freeze stops all identity theft	It blocks new credit, not tax, medical or takeover fraud
Only adults need protection	Children are prime targets
Monitoring is the same as prevention	Monitoring detects after the fact
Passwords are enough	Phishing beats passwords; passkeys help
My data is not online	Public records and brokers hold it

15. Common mistakes

Freezing only one bureau.
Using text-message codes for banking and email.
Forgetting the IRS PIN until a return is rejected.
Ignoring medical statements.
Leaving a child’s credit unfrozen.
Sending sensitive documents by ordinary email.

16. Questions to ask yourself

Which of my accounts could be taken over if my phone number were swapped? Who else could file a tax return in my name? What documents sit in my mailbox or email that I should lock down? Which family members are least protected? A short list of answers becomes your plan.

17. How Wiperts fits

Many advanced measures are one-time setup. Public data removal is the one that needs continuous work. Wiperts scans more than 100 data brokers and people-search sites for your name, address and phone numbers, submits removal requests, removes your personal results from Google and Bing, blurs your home on maps and monitors continuously so profiles that return are removed again.

See what is public about you with the free diagnosis.

100% Free Diagnosis: Check Your Exposure

Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:

First Name
Last Name
Select State
Email Address
Website

Scan Databases Now — no payment is needed to see your exposure report.

18. Key takeaways

A credit freeze is the foundation, not the whole structure.
Add an IRS Identity Protection PIN, specialty freezes, stronger authentication and carrier protections.
Protect mail, medical records and children’s identities.
Remove public data that fuels impersonation, and monitor over time.

Pick the Wiperts plan that fits your household

Plan	Covers	One-time deep scrub	Then
Individual	1 person	$89	$14/month
Couples (most popular)	2 people	$149	$24/month
Family	Up to 4 people	$199	$39/month

Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal

19. Frequently Asked Questions

What is advanced identity theft prevention?

Measures beyond basics like strong passwords and a credit freeze, such as an IRS Identity Protection PIN, specialty report freezes, stronger authentication, carrier and mail protections, medical and child identity monitoring and removing public data.

Is a credit freeze enough?

No. It blocks new credit accounts but not tax fraud, account takeover, medical identity theft, benefits fraud or misuse of existing accounts.

What is an IRS Identity Protection PIN?

A six-digit number that prevents someone else from filing a tax return with your Social Security number. Eligible taxpayers can enroll through the IRS.

Can I freeze my child’s credit?

Yes. Federal law lets parents or guardians place a security freeze on the credit file of a child under 16.

What are passkeys?

A sign-in method that uses cryptographic keys stored on your device instead of passwords, making phishing much harder.

How do I know if my identity is being misused?

Check credit reports, bank and card statements, tax records, medical statements, and watch for unexpected mail or calls. Report at identitytheft.gov.

Sources

Ready to erase your footprint?

Stop letting data brokers profit from your personal life. Start your removal today.

Start Removing