Term Library / Concept card

What is identity theft? Plain-English meaning

Identity theft is when someone uses your personal information without your permission to commit fraud or other crimes.

Back to Term LibraryBrowse Articles

Path: /term/identity-theft

Definition

Identity theft is when someone uses your personal information without your permission to commit fraud or other crimes.

Also seen as: ID theft, identity fraud

Term library detailsSources attached
Library
Part of the Term Library
Format
Concept card
Last updated
September 8, 2026
Topic
Technology & Internet
Sources and further reading
4
Related articles
5

Plain-English explanation

Identity theft happens when a criminal obtains enough of your personal data—like your name, Social Security number, credit card details, or passwords—to pretend to be you. They might open new accounts, make purchases, file tax returns, or access your existing accounts. The theft can occur online, through data breaches, phishing, or even physical theft of documents. Once your identity is stolen, it can damage your credit, drain your bank accounts, and cause legal problems. Recovering often involves reporting the crime, reviewing your accounts for unauthorized activity, and securing your personal information.

Why it matters

You should understand identity theft because it can affect your finances, credit, and ability to get loans or jobs. Knowing how it happens and how to respond can help you act quickly to limit the damage. It also encourages you to use strong authentication and be cautious about sharing personal information online.

Concrete example

Imagine you receive a bill for a credit card you never opened. Someone used your name, address, and Social Security number to apply for the card. You then have to contact the credit card company, the credit bureaus, and the Federal Trade Commission to report the fraud, dispute the charges, and place a fraud alert on your credit file.

Often confused with

Identity theft is often confused with a data breach. A data breach is when a company's database is accessed without authorization, potentially exposing customer data. Identity theft is the actual misuse of that data to impersonate someone. Not every data breach leads to identity theft, and identity theft can occur without a data breach, such as through phishing or physical theft.

Short definition: Identity theft is when someone uses your personal information without your permission to commit fraud or other crimes.

Plain-English explanation

Identity theft happens when a criminal obtains enough of your personal data—like your name, Social Security number, credit card details, or passwords—to pretend to be you. They might open new accounts, make purchases, file tax returns, or access your existing accounts. The theft can occur online, through data breaches, phishing, or even physical theft of documents. Once your identity is stolen, it can damage your credit, drain your bank accounts, and cause legal problems. Recovering often involves reporting the crime, reviewing your accounts for unauthorized activity, and securing your personal information.

Why it matters

You should understand identity theft because it can affect your finances, credit, and ability to get loans or jobs. Knowing how it happens and how to respond can help you act quickly to limit the damage. It also encourages you to use strong authentication and be cautious about sharing personal information online.

Concrete example

Imagine you receive a bill for a credit card you never opened. Someone used your name, address, and Social Security number to apply for the card. You then have to contact the credit card company, the credit bureaus, and the Federal Trade Commission to report the fraud, dispute the charges, and place a fraud alert on your credit file.

Common confusion

Identity theft is often confused with a data breach. A data breach is when a company's database is accessed without authorization, potentially exposing customer data. Identity theft is the actual misuse of that data to impersonate someone. Not every data breach leads to identity theft, and identity theft can occur without a data breach, such as through phishing or physical theft.

Related terms

phishing, data breach, multi-factor authentication, credit freeze, fraud alert

How people actually use it

Individuals protect against identity theft by monitoring financial accounts, using strong passwords, and being cautious with personal data. Victims typically report the theft to authorities and credit bureaus to mitigate harm and restore their identity.

Related terms explained

phishing

Phishing is a fraudulent attempt to obtain sensitive information, such as usernames or credit card details, by disguising as a trustworthy entity in electronic communication. It is a common method used to initiate identity theft.

Example: An email that appears to be from a bank asks a user to click a link and enter their account password.

credit report

A credit report is a detailed record of an individual's credit history, including loans, payment history, and inquiries. Lenders use it to assess creditworthiness, and identity theft can appear as unauthorized accounts or inquiries.

Example: A victim of identity theft might find a new credit card account on their credit report that they never opened.

fraud alert

A fraud alert is a notice placed on a credit report to warn lenders that the individual may be a victim of identity theft. It requires businesses to verify identity before extending credit.

Example: After reporting identity theft, a person places a fraud alert on their credit file to prevent new accounts.

social security number

A social security number (SSN) is a unique identifier issued by a government to track earnings and benefits. It is a prime target for identity thieves because it is used for credit and tax purposes.

Example: An identity thief uses a stolen SSN to file a fraudulent tax return and claim a refund.

Practical tips

Regularly review your bank and credit card statements for unauthorized transactions, and report any discrepancies to your financial institution immediately. Use strong, unique passwords for each online account and enable two-factor authentication where available. Shred documents containing personal information, such as bank statements or pre-approved credit offers, before discarding them. Monitor your credit reports from major credit bureaus at least once a year to check for unfamiliar accounts or inquiries. Be cautious with unsolicited phone calls, emails, or texts asking for personal information; verify the request through official channels. Freeze your credit with major credit bureaus if you suspect your information has been compromised, which prevents new accounts from being opened in your name.

Common questions

Array

Key takeaways

Identity theft involves unauthorized use of your personal data for financial gain. Early detection through regular monitoring reduces potential damage. Strong passwords and two-factor authentication are essential preventive measures. Freezing your credit is a powerful tool to block fraudulent new accounts. Reporting theft promptly to authorities and financial institutions limits liability.

Step by step

1. Collect all evidence of suspicious activity, such as unfamiliar charges or letters from unknown creditors. 2. Contact your bank and credit card issuers to report the issue and request account freezes or closures. 3. Place a fraud alert on your credit files by contacting one of the three major credit bureaus (Equifax, Experian, TransUnion). 4. File a detailed report with the FTC at IdentityTheft.gov, which provides a recovery plan. 5. Review your credit reports from all bureaus for the next few months to ensure no new fraudulent accounts appear.

Sources and further reading

  1. IdentityTheft.govU.S. Federal Trade CommissionIdentity theft happens when someone uses your personal information without permission; recovery steps include reporting the theft, reviewing accounts, and securing personal data.
  2. SP 800-63B, Digital Identity Guidelines: Authentication and Lifecycle ManagementNational Institute of Standards and TechnologyNIST defines authenticator assurance and authentication lifecycle requirements.
  3. What is an SSL certificate?Cloudflare Learning CenterSSL certificates verify website identity and enable encrypted HTTPS connections.
  4. NIST Digital Identity GuidelinesNISTA digital identity is the online representation of a person; strong authentication and careful sharing of personal information help protect it.