What to Do If Your Identity Is Stolen in New York

Identity theft is stressful anywhere, and in a dense, fast-moving place like New York it can feel overwhelming. You may be juggling work, commutes and a crowded schedule while trying to untangle accounts you never opened. This guide gives New York residents a clear sequence of steps for damage control, explains which parts are federal and which are local, and shows how to cut the public information that keeps people vulnerable. It follows the structure of our national guide to what identity theft is, with a focus on what New Yorkers should know.

1. What is the same everywhere, and what is local

The core of recovery is national. Credit freezes, fraud alerts, credit reports and the Federal Trade Commission’s recovery tools work the same in New York as in any state. IdentityTheft.gov is the central place to report and get a personalized plan. Local elements include filing a police report with your local department when a creditor or agency requires one, and using state-level consumer protection resources, including the state attorney general’s office, when you need help with a company that is not cooperating.

Because laws and agency contacts can change, check official state government websites for current details before you rely on a phone number or form. The steps below are written to work regardless.

2. Why New Yorkers face particular exposure

Density. Many people share buildings, mailrooms and delivery points.
Mail and packages. Shared lobbies and doormen handle large volumes of mail.
Public records. Court, property and business records are extensive.
Constant card use. Frequent tap-to-pay and transit use create many data points.
Tourism and commuting. Public Wi-Fi and crowded places are common.
High-value targets. Finance, media and legal professionals are attractive for phishing and impersonation.

Our article on how data brokers track and sell personal information in NYC discusses the data side of urban life.

Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.

3. The first 24 hours

Contact the affected institution

Call the fraud department number on your card or statement, not a number from an email. Ask them to freeze or close the account and tell you what documentation they need. Record the name, time and reference number.

Freeze your credit at all three bureaus

A freeze is free by federal law and blocks most new accounts. Learn how in our article on what a credit freeze is and from the FTC.

Report at IdentityTheft.gov

Create an identity theft report and follow the personalized plan. Our walkthrough on how to report identity theft explains each screen.

Secure your accounts

Change passwords starting with email, then banks. Turn on two-factor authentication, preferably with an authenticator app.

Protect your phone number

Ask your carrier to add a PIN or port-out lock to prevent a SIM swap.

4. The first week

File a police report if needed

Visit your local police department or use its reporting process. Bring identification, your IdentityTheft.gov report and evidence such as statements and letters. Not every creditor requires a report, but some do. Keep a copy.

Dispute in writing

Send letters to creditors and the credit bureaus identifying the fraudulent items. Include your report and ask for written confirmation. Use certified mail or a trackable method.

Review your credit reports

Look for accounts, inquiries and addresses you do not recognize. Free reports are available through federal channels explained at consumer.ftc.gov.

Start your log

Write down each call, name and date. Save every letter and email.

Report scams at ReportFraud.ftc.gov and internet-enabled crime at ic3.gov.

5. The first month

Follow up

Check that fraudulent accounts are removed. Escalate if a creditor does not respond. The Consumer Financial Protection Bureau accepts complaints about credit reporting and collections.

Handle special cases

If a tax return was filed in your name, follow the tax authority’s identity theft process. If medical records are involved, review explanations of benefits and learn your rights through the HHS Office for Civil Rights.

Check your mail

New York apartment mail systems can be vulnerable. Ask building management about mailbox security, and read our guide to checking your mail for fraudsters.

Reduce public exposure

Thieves complete stolen records with public listings. Remove people-search profiles using official pages such as Spokeo, PeopleConnect and That’s Them. Our guide to deleting your data from the internet walks through the full process. Note that California’s DROP platform is available only to California residents, so New Yorkers should rely on direct opt-outs and any state rights that apply.

6. Common New York scenarios

Shared mail and doorman buildings

Ask management who handles mail, whether packages are logged and how lost items are reported. Use package lockers or delivery windows for sensitive items.

Transit and tap-to-pay

Keep an eye on small, repeated charges. Monitor statements and set alerts for new transactions.

Rental and housing applications

Landlords and brokers collect government ID numbers, bank statements and pay stubs. Ask how documents are stored, provide only what is needed and avoid sending sensitive documents over unsecured email.

Public Wi-Fi

Avoid banking on open networks. Use cellular data for sensitive tasks.

Scams that target city residents

Fake rental listings, ticket scams, delivery text messages and impersonation of utilities are common. Verify before paying, and use official channels.

7. How long it takes

Simple card fraud can be resolved in days. More complex cases involving multiple accounts, tax issues or medical records can take months. Keep calm, stay organized and follow up. Our article on how stolen information derails life explains why persistence matters, and responding to personal data theft gives a timeline for any exposure.

8. Preventing a repeat

Keep credit frozen.
Use a password manager and two-factor authentication.
Opt out of prescreened offers at 1-888-5-OPT-OUT.
Shred sensitive paper.
Monitor statements monthly and reports at least yearly.
Limit what you post publicly.
Remove address and phone listings.

For more, read effective identity theft prevention tips and the comprehensive guide to advanced prevention.

9. The numbers

The FBI’s Internet Crime Complaint Center received 31,675 identity theft complaints in 2025, with about $185.8 million in reported losses, and 1,008,597 complaints overall with $20.877 billion in reported losses (ic3.gov). The FTC received about 3 million fraud reports in 2025, with roughly $15.9 billion in reported losses (ftc.gov). These are reported figures, so actual totals are higher.

10. Timeline: a New York recovery schedule

When	Action
Day 1	Contact institutions, freeze credit, secure accounts
Day 2	File at IdentityTheft.gov
Week 1	Police report if needed, written disputes
Month 1	Follow up, review reports
Month 3	Confirm corrections
Ongoing	Monitor, remove listings

11. Getting help in New York

If a company will not cooperate, you can file a complaint with your state attorney general’s consumer protection office, and the Consumer Financial Protection Bureau accepts complaints about credit reports and debt collection at consumerfinance.gov. Community legal aid organizations and bar association programs may offer free advice for victims who need help with disputes or court issues. Search official state and city government websites for current contacts. Keep your documentation organized, because every office will ask for the same basics: your report, your identification and a timeline of what happened.

12. Protecting family members

Identity theft often involves a household. Help older relatives freeze credit and set up account alerts, and check whether children have credit files. A parent or spouse with a compromised account can lead scammers to you, so share what you have learned and agree on a verification rule for unexpected requests.

13. Three scenarios and what to do

Scenario 1: A card is used in another country. Call the issuer, dispute the charges and replace the card.

Scenario 2: A collector calls about an unfamiliar debt. Request written validation, dispute in writing and file at IdentityTheft.gov.

Scenario 3: Your building’s mail is missing. Notify management and the sender, and consider a post office box.

14. Myths and facts

Myth	Fact
New York has a special identity theft agency that handles everything	Core recovery runs through federal tools, with local support
A police report fixes it	It helps documentation but you still dispute
Fraud only happens on the internet	Mail and paper matter in cities
A freeze lasts forever	You can lift and replace it
Once fixed, it is over	Data can be reused

15. Common mistakes

Waiting for a police report before freezing credit.
Not keeping a paper trail.
Using public Wi-Fi for banking.
Ignoring small recurring charges.
Leaving home address listings online.
Skipping a follow-up check.

16. Questions to ask yourself

Is my credit frozen? How secure is my building’s mail system? Could a stranger find my address and phone online? Who do I call first if a card is compromised? Fix the weakest answer.

17. How Wiperts fits

After you stop the immediate damage, shrink the exposure that made you a target. Wiperts scans more than 100 data brokers and people-search sites, submits removal requests, removes personal results from Google and Bing, blurs your home on maps and monitors for returning profiles. Start with the free diagnosis.

100% Free Diagnosis: Check Your Exposure

Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:

First Name
Last Name
Select State
Email Address
Website

Scan Databases Now — no payment is needed to see your exposure report.

18. Key takeaways

Core recovery steps are national: freeze, report, dispute, document.
Local steps include police reports and state consumer resources.
Secure shared mail and avoid public Wi-Fi for banking.
Remove public listings to prevent repeat targeting.

Pick the Wiperts plan that fits your household

Plan	Covers	One-time deep scrub	Then
Individual	1 person	$89	$14/month
Couples (most popular)	2 people	$149	$24/month
Family	Up to 4 people	$199	$39/month

Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal

19. Frequently Asked Questions

What is the first thing to do if my identity is stolen in New York?

Contact the affected bank or company, freeze your credit at all three bureaus and file a report at identitytheft.gov to get a personalized recovery plan.

Do I need to file a police report?

A police report can help when creditors or agencies ask for proof. You can file with your local police department, and keep a copy for your records.

Does New York have special protections?

State law provides consumer protections and enforcement through the state attorney general’s office, but the core recovery steps are federal and the same nationwide.

How do I dispute a fraudulent account?

Send a written dispute to the creditor and the credit bureaus with copies of your report and identification, and keep proof of mailing.

Will a credit freeze hurt my score?

No. A freeze does not affect your score. You can lift it temporarily when you apply for credit.

How can I prevent a repeat?

Keep credit frozen, use unique passwords and two-factor authentication, monitor statements and remove public listings of your address and phone number.

Sources

Ready to erase your footprint?

Stop letting data brokers profit from your personal life. Start your removal today.

Start Removing