Identity Theft and Protecting Your Information

Why It Matters

Identity theft is one of the most common financial crimes in the modern world. Millions of Americans are affected every year, and the average victim spends dozens of hours and hundreds of dollars restoring their financial lives after a breach. For a small minority of victims, the consequences last years or decades — damaged credit scores, denied loans, tax complications, ongoing fraud attempts. It is a slow-motion disaster that unfolds in your financial paperwork rather than in one dramatic moment.

This lesson matters because your own identity is already at risk, even before you have any significant financial history. Kids and teens are actually attractive targets for identity thieves because they have clean credit histories and parents who are unlikely to check. A child’s Social Security number can be used for years before anyone discovers the fraud, by which point the damage is substantial. Knowing how to protect your information now — and how to check whether it has already been compromised — is a real and immediate concern, not a future one.

Learning this also teaches a habit of quiet vigilance that extends beyond identity theft. The same habits that protect your financial identity — strong passwords, careful document handling, reviewing statements, two-factor authentication — also protect your privacy, your accounts, and your reputation. They are ordinary adult skills that are almost never formally taught, and most people learn them only after being burned.

And this lesson gives you a specific plan for what to do if you ever are a victim. Knowing the steps in advance matters, because when identity theft happens, time matters. The faster you respond, the less damage you absorb. Students who have the plan in advance can act quickly; students who do not have to figure it out under pressure while their accounts are being drained.

A Story

The Credit Card That Wasn’t Hers

Seventeen-year-old Zara applied for her first credit card the summer after her senior year of high school. It was a starter card with a low limit, meant to help her build credit before college. She filled out the application online, put in her Social Security number and other personal information, and waited for the approval.

The response came back in about two hours. Application denied. Reason: ‘Existing account with same applicant, insufficient credit history for additional account.’

Zara was confused. This was supposed to be her first credit card. How could she have an existing account?

She called her mother. Together they pulled a free credit report from annualcreditreport.com — the official government-mandated free report site. When the report loaded, Zara’s stomach dropped.

There were five accounts listed under her Social Security number. A credit card from a retailer she had never shopped at. A store credit line at an electronics chain. A cell phone account with a carrier she did not use. A small personal loan from a lender she had never heard of. And a medical bill in collections from a hospital two states away.

None of these were hers.

Her mother called a fraud specialist that afternoon. The specialist explained what had happened: someone had stolen Zara’s Social Security number, probably years ago, and had been using it to open accounts in her name. The thief had likely been a family acquaintance or someone who had access to household documents at some point in the past. The fraud had been ongoing for at least two years before Zara noticed.

The recovery took months. They had to file a police report. Contact each of the five fraudulent creditors to dispute the accounts. Freeze Zara’s credit at all three bureaus. File a complaint with the FTC. Contact the Social Security Administration. Work with a lawyer at a legal aid clinic because some of the disputes required specific language. In total, Zara and her mother spent about 80 hours over six months cleaning up the mess, and about $800 in fees, postage, and time off from school.

By the end, most of the fraudulent accounts were removed from Zara’s credit report. Her credit score, which had been artificially damaged by the fake accounts, recovered. She eventually got her starter credit card. But she had to freeze her credit permanently and set up ongoing monitoring, because the Social Security number had been compromised and there was no way to take back the damage.

The lesson Zara drew was practical. She told her younger brother the following year, when HE turned 14: ‘Check your credit report every year, starting now. It is free. The younger you catch fraud, the easier it is to fix. If there are accounts on your report that are not yours, you have a problem, and you need to act fast. I wish someone had told me to check when I was younger. I might have caught this years earlier, and I would have saved myself a lot of trouble.’

Her brother checked his credit report that weekend. It was clean. Most teenagers have clean credit reports. But the few who do not are in for the same painful surprise Zara had — and the surprise is much smaller the earlier you catch it.

Vocabulary

Identity theft

When someone steals your personal information and uses it to impersonate you financially — opening credit cards, taking out loans, filing tax returns, or draining accounts in your name.

Credit freeze

A free service from the three major credit bureaus that prevents new accounts from being opened in your name. Recommended for almost everyone, and essential after a breach. Can be lifted temporarily when you want to apply for new credit.

Two-factor authentication (2FA)

A security layer where logging in requires both a password and a second verification (a code texted to your phone, an authenticator app, a physical key). Prevents most common account takeovers.

Phishing

Fraudulent messages — emails, texts, calls — that try to trick you into revealing passwords, account numbers, or other sensitive information. One of the most common ways identity thieves gather information.

Credit report

A document listing all the credit accounts in your name, your payment history, and your credit score. US residents are entitled to one free report per year from each of the three major bureaus.

Guided Teaching

Let’s walk through the specific habits that prevent identity theft. None of these are exciting. All of them work.

Habit one: use strong, unique passwords for every important account. Strong means long (12+ characters) and not based on common words or personal information. Unique means different for every account — no reusing passwords. A password manager (like 1Password, Bitwarden, or your browser’s built-in manager) makes this manageable. Without a password manager, most people reuse passwords, and reused passwords are one of the biggest sources of identity theft.

Ask: if a website you have an account with gets hacked and your password leaks, how many of your OTHER accounts would a thief be able to access if you used the same password everywhere?

All of them. That is the exact scenario password managers prevent. One breach should affect one account, not all of them.

Habit two: turn on two-factor authentication (2FA) for every important account. This means that even if someone has your password, they cannot log in without also having your phone or your authenticator app. 2FA prevents most common account takeovers. Enable it on your email, your bank, your credit card accounts, your social media, and anything else that matters.

Habit three: freeze your credit at the three major bureaus. This is a free service and prevents new accounts from being opened in your name. You can temporarily lift the freeze when you want to apply for credit, and re-freeze afterward. Frozen credit is the single best protection against the kind of identity theft Zara experienced. It should be the default for almost everyone, not just for victims.

Habit four: check your credit report annually. You are entitled to one free report per year from each of the three major bureaus at annualcreditreport.com. Staggering them — one bureau every four months — gives you continuous monitoring for free. The point is to catch fraudulent accounts early.

Habit five: be paranoid about phishing. Never click links in emails that ask for passwords or account information. Never give out your Social Security number over the phone unless you initiated the call to a number you verified independently. Never respond to texts claiming to be from your bank or the IRS. Real institutions almost never contact you in ways that require you to immediately reveal sensitive information. If you are unsure, call the institution directly at a number you look up.

Habit six: shred or destroy sensitive documents before throwing them away. Old bank statements, pre-approved credit card offers, medical records, tax forms. Any document with your Social Security number, account numbers, or other personal information should be destroyed, not just thrown in the trash. Dumpster-diving is a real way identity thieves gather information.

Habit seven: be careful what you share online. Your date of birth, address, phone number, mother’s maiden name, school names, pet names — these are the exact pieces of information identity thieves use to impersonate you and answer security questions. Even if your profile is public, do not share sensitive personal details casually on social media.

Habit eight: monitor your bank and credit card accounts weekly. Check for charges you do not recognize. The faster you catch a fraudulent charge, the easier it is to dispute. Most cards will reverse fraud for you, but only if you report it quickly.

Now the plan for if you become a victim. One: file a report at identitytheft.gov — the FTC’s official recovery site. They will generate a personalized recovery plan. Two: place fraud alerts with all three credit bureaus (Equifax, Experian, TransUnion). Three: freeze your credit. Four: file a police report. Five: contact each affected institution and dispute the fraudulent charges or accounts. Six: document everything — keep copies of every letter, email, and phone call. Seven: follow up persistently, because some institutions will let disputes drag if you do not push.

The most important single thing you can do in advance is to freeze your credit. It is free, it takes about 15 minutes per bureau, and it prevents almost all of the worst identity theft outcomes. Most people never freeze their credit because they have never been told to. Freezing yours now — and teaching family members to do the same — is one of the most effective preventive actions available.

For Discussion

1. 1.What is identity theft, and how is it different from a scam that tricks you into giving money?
2. 2.In Zara’s story, what specifically had been happening to her identity, and how was it caught?
3. 3.What are the eight boring habits that prevent most identity theft?
4. 4.What is a credit freeze, and why is it the single best preventive action?
5. 5.What is two-factor authentication, and why does it defeat stolen passwords?
6. 6.Why are kids and teens actually attractive targets for identity theft?
7. 7.What should you do immediately if you discover you are a victim?

Practice

The Identity Security Audit

1. 1.List every important online account you have — email, social media, banking (if any), gaming, school, anything with personal information.
2. 2.For each one, note: is the password strong and unique? Is 2FA enabled? Have you ever checked whether the account has been breached (haveibeenpwned.com is free)?
3. 3.If you are old enough to have a credit report, check it at annualcreditreport.com. If not, ask a parent to check yours — under-18 reports are usually not expected to exist, so any account showing up is probably fraud.
4. 4.Make a short list of what you will improve this week: one password, one 2FA enablement, one new habit.
5. 5.Share with a parent. Consider freezing your credit if you are old enough — it is free and takes about 15 minutes.

Memory Questions

1. 1.What is identity theft?
2. 2.What is a credit freeze, and why is it recommended for most people?
3. 3.What is two-factor authentication, and why does it work?
4. 4.What are three habits that prevent most identity theft?
5. 5.What should you do first if you discover you are a victim?
6. 6.Why are kids often attractive targets for identity theft?