Someone Opened a Credit Card in My Name — Here's What to Do

Finding a credit card on your credit report that you never opened is one of the clearest signs of identity theft. Someone got enough of your personal information — your name, Social Security number, date of birth — to apply for credit in your name.

Here's exactly what to do, in the right order.

---

Step 1: Pull Your Credit Reports from All Three Bureaus

Go to AnnualCreditReport.com — the only federally authorized site for free credit reports — and pull reports from Equifax, Experian, and TransUnion.

Don't stop at the bureau that surfaced the account. A fraudster who opened one card may have applied for others. Each bureau operates independently — an account that appears on TransUnion may not yet show on Experian, and vice versa. You need all three in front of you before you know the full picture.

Look for:

• Accounts you didn't open
• Hard inquiries from lenders you've never contacted
• Addresses or employers you don't recognize
• Balances on cards you've never used

---

Step 2: File a Report at IdentityTheft.gov

Go to IdentityTheft.gov — the FTC's official identity theft reporting site — and file a report.

This generates an Identity Theft Report, which is a legal document. It does two things you need:

1. It gives you the right to dispute fraudulent accounts directly with the card issuer (not just the bureau)
2. It pre-fills dispute letters and forms specific to your situation

Keep the Identity Theft Report PDF. You'll attach it to every dispute you file.

---

Step 3: Place a Fraud Alert — Then Freeze Your Credit

Fraud alert: Call one bureau and place a fraud alert. That bureau is required to notify the other two. A fraud alert tells lenders to take extra steps to verify your identity before approving credit. It lasts one year; as a confirmed identity theft victim, you can get an extended 7-year alert.

Credit freeze: Do this immediately after. A freeze is stronger — it prevents new credit from being opened in your name entirely, until you lift it. It's free at all three bureaus. You have to set it at each one separately:

• Equifax: equifax.com/personal/credit-report-services/credit-freeze
• Experian: experian.com/freeze/center.html
• TransUnion: transunion.com/credit-freeze

A fraud alert and a credit freeze aren't the same thing. Do both. The alert puts lenders on notice; the freeze is the actual lock.

---

---

Step 4: Dispute the Account with the Credit Bureau

File a dispute with every bureau that shows the fraudulent account. You can do this online through each bureau's dispute portal, by certified mail (so you have proof of delivery), or by phone.

Include:

• Your full name, address, Social Security number, and date of birth
• The account name, account number, and the reason it's fraudulent
• A copy of your FTC Identity Theft Report
• A copy of your government-issued ID and a utility bill or bank statement showing your current address

Under the Fair Credit Reporting Act (FCRA), the bureau has 30 days to investigate and respond — 45 days if you submit additional documentation after the initial filing. If they can't verify the account belongs to you, they must remove it.

---

Step 5: Contact the Card Issuer Directly

Don't rely on the bureau dispute alone. Call the credit card company's fraud department — the number is on their website, not on any card you received — and report the account as fraudulent. Under the Fair Credit Billing Act (FCBA), the card issuer must also investigate.

Ask them to:

• Close the account immediately
• Flag it as fraudulent in their own records
• Send you written confirmation that you're not liable for the balance

Get a case number from every call. Follow up in writing.

---

Step 6: Watch for Everything Else

One fraudulent account rarely means only one fraudulent account. The same personal information that let someone open this card is still out there. Watch for:

• More hard inquiries — a sign someone is shopping for additional credit in your name
• IRS letters about income you didn't report (employment identity theft using your SSN)
• Medical bills for services you didn't receive
• Government benefit denials for programs you never applied to

Check your other credit reports again in 30-60 days, even after the freeze is in place.

---

What Ongoing Monitoring Would Have Changed

If 3-bureau credit monitoring had been running before this happened, you'd have received an alert the moment the hard inquiry appeared — before the account was approved, before any charges were made.

That's the core difference between reacting to identity theft and catching it early. Monitoring doesn't prevent a data breach, but it dramatically shrinks the window between "someone applied for credit in your name" and "you find out about it."

Aura monitors all three bureaus in real time, alerts you to new accounts and hard inquiries as they happen, and — relevant to your current situation — has a fraud remediation team that can help you work through the dispute process instead of navigating it alone. The $1M identity theft insurance also covers eligible expenses tied to recovery.

For full details on what's included, see our Aura review or pricing breakdown.

---

---

If Your Dispute Gets Denied

Bureaus sometimes deny disputes on the first round. If that happens:

1. Request the method of verification — the bureau is required to tell you how they verified the account. This often reveals weak verification (e.g., the card issuer just confirmed the account exists, without actually verifying it was you who opened it).
2. File a CFPB complaint at consumerfinance.gov/complaint — this creates a formal regulatory record and typically prompts a faster and more thorough re-investigation.
3. Resubmit with stronger documentation — add a police report if you have one, a detailed timeline, and any correspondence from the card issuer confirming the account is fraudulent.
4. Consult a consumer law attorney — attorneys who specialize in FCRA cases often work on contingency, meaning no upfront cost to you.

Persistence matters here. The process isn't always fast, but the legal framework is on your side.

---

Bottom Line

If someone opened a credit card in your name:

1. Pull all 3 credit reports at AnnualCreditReport.com
2. File an Identity Theft Report at IdentityTheft.gov
3. Place a fraud alert (one bureau notifies all three) and freeze your credit at all three bureaus
4. Dispute the account with every bureau that shows it — attach your FTC report
5. Contact the card issuer directly and get written confirmation you're not liable
6. Monitor closely for the next 30-60 days for additional accounts or inquiries

You're not liable for this account. The law protects you. But getting it removed takes time and documentation — start with IdentityTheft.gov today and work through the steps above.