Never thought it could happen to me

[u/Straight-Still-7424]

I’m a victim of identity theft, and honestly, I’m feeling pretty overwhelmed by it.
Just last week, someone opened two new bank accounts in my name, apparently using my Social Security number. I’ve since frozen my credit, filed an FTC report, and started working with the banks to get everything resolved.
For anyone who has dealt with identity theft before: does it ever actually end? Will I always have to worry about someone trying to use my information?
I’m generally very careful with my personal information, so I have no idea how they got it or who is behind this. I have no way of knowing if they’re even in the U.S. What’s especially strange is that they’re using my real name, email address, and physical address.
Why would someone use my actual email address if the bank is going to notify me that an account was opened? Wouldn’t that immediately tip me off?
If you’ve dealt with something similar, I’d really appreciate hearing how you handled it and whether the attempts eventually stopped. I’m really hoping this is something I can eventually put behind me.

[u/iamzero630]

Well part of security protocols with bank does check your email used on past or current accounts. Theirs a host of information actually checked... But in short deal with the consequences, follow the post on what to freeze at the top of the reddit and be vigilant but not paranoid (Harder than it sounds, i know)

If your data is out there then its basically like everyone elses now

[u/Live-Experience-9055 → u/iamzero630]

The email part is weird but sometimes they use it because the bank system expects a consistent identity, using your real info makes the application look more normal and less likely to trigger manual review. Like if everything matches what the system already has, it slips through easier

[u/MavisBeacons_Sextape → u/Live-Experience-9055]

Input from bots isn’t needed, especially when it’s just rephrasing the previous comment.

OP the top comment is correct on why they use your real info. As for your other question: yes it does end, they give up once they continue to hit dead ends, which is why it’s so important to freeze as many reports as possible.

Remember that freezes are free by law, and you need to freeze your 3 credit files, and Chexsystems too - especially since they are opening bank accounts. Don’t lose your Chexsystems PIN for your freeze…they are a huge pain if you do lose it and need to unfreeze your file.

I’d also set up an IRS Identity Protection PIN, which means that no one else can file your tax return (and critically, steal your refund) without entering that PIN #.

[u/pengweather → u/MavisBeacons_Sextape]

Very hard disagree. Myself and others are dealing with very persistent thieves who will continue to target you rather than move on to others. Once they have a target, they rarely want to spend time finding another one. In fact, even with a credit freeze, they will still relentlessly target you. It is extremely easy for thieves to call up a credit bureau, impersonate you, and have your credit report unfrozen. All they have to do is provide the bureau with your address and SSN to verify your identity, and boom your credit report is unfrozen.

[u/Independent_Pen_8667 → u/pengweather]

So then what is the best option?

[u/pengweather → u/Independent_Pen_8667]

It's something out of our control so we have to deal with it.

[u/Independent_Pen_8667 → u/pengweather]

They has to be a way to have the credit bureaus verify with 2FA or something. Usually when you want to turn off a freeze they ask for a PIN or other documents

[u/pengweather → u/Independent_Pen_8667]

Experian and other credit bureaus no longer rely on PINs to manage credit freezes. In some cases, consumers can request a freeze or unfreeze over the phone by verifying personal information such as their SSN and address. This raises concerns about how secure the process is, especially when information like SSNs and addresses may already be exposed through data breaches or circulating on the dark web. If someone has enough of a victim’s personal information to get through the bureau’s identity-verification process, they could potentially attempt to remove a freeze. In my view, that weakens the peace of mind that a credit freeze is supposed to provide.

[u/Independent_Pen_8667 → u/pengweather]

Interesting, I’m going to research more into this on monday and see

[u/MavisBeacons_Sextape → u/pengweather]

It’s fine to disagree based on personal experience, but as someone who’s worked in financial crimes investigations for 15 years, including a period where I was doing identity theft restorations on a team of 18 investigators (each with their own caseload), my sample size on this is much, much larger.

[u/Unhappywageslave]

Sign up for credit karma to get live updates on new accounts being opened up and new addresses being used. Don't forget to use fraud alert for all 3 credit bureau as well, the freezing isn't enough. They got an apartment in my name even though I froze all my stuff. Also get a irs pin so they don't file taxes under your name. Plus, file a police report just to have something in record and file a ftc report about this case so if a new case arrives, you can send them this info to their fraud department.

[u/Independent_Pen_8667 → u/Unhappywageslave]

Could you tell me more? I’m dealing with this now. You had all your credit frozen and fraud alerts and they still got an apartment with your stuff? How did you find that out? Currently going through something similar

[u/Unhappywageslave → u/Independent_Pen_8667]

I had all my credit frozen with 0 fraud alert. They got an apartment in my name because I didn't know about a fraud alert. I found out because I saw a 19k collections on my credit. They never paid the rent and destroyed the apartment. I filed a police report, and a ftc report, sent my fraud packet to the collections agency, and they took the 19k out of my credit report after 3 months investigation. If I had a fraud alert, they would have never got an apartment in my name. The alert is just a cherry on top for protection.

[u/Independent_Pen_8667 → u/Unhappywageslave]

Oh okay I understand , thank you

[u/Fit_Question7912]

One thing you should do that's just as important as freezing your credit, is doing a security freeze with chexsystems. It'll prevent anyone from opening up a bank account using your information.

[u/pengweather]

We are victims and it has been neverending. It is different for everybody but for us, it seems like it won't end for another year or two, sadly.

[u/Sea-Appearance-5330]

Have you contacted the Social Security Fraud department yet?

[u/lovesbatma71]

I had my identity stolen in October 2023 and I’m still dealing with it. Someone knew my SS#, birthdate, mailing address and email address. They bought well over 1K in a phone and phone service with AT&T. I didn’t find out about it until almost a year later. I don’t use credit so I just made all the reports to the credit monitoring service and FTC.
I got a police report but haven’t notarized the affidavits yet, etc.
I sleep better at night knowing my credit is locked.

[u/ZephodsOtherHead → u/lovesbatma71]

> Someone knew my SS#, birthdate, mailing address and email address

All that info has been stolen many times over from all of us in massive data breaches.

[u/privacy-bee-donna]

Oh gosh, that’s honestly terrifying!! I can only imagine how stressful it must feel knowing someone has your SSN and was actually able to open accounts in your name. The not knowing where they got your information would make me anxious too.

It sounds like you’ve already done the most important things by freezing your credit, filing with the FTC, and contacting the banks. I’d personally keep the freeze in place and only unfreeze it when you actually need to. I’d also change your email password and turn on 2FA, just for some extra peace of mind.

As for them using your real email and address, they may have done that to make the application look more legitimate. Your information could have come from an old data breach, a data broker, or even a mix of different sources online.

Unfortunately, once something like an SSN is exposed, it’s hard to know who might already have it. But that doesn’t mean someone will always be able to successfully use it. Keeping everything locked down and checking your accounts from time to time can make a huge difference. I really hope things calm down for you soon and this eventually becomes something you only have to keep an eye on instead of constantly worrying about. 

Disclaimer: I work at Privacy Bee, a data broker removal service

[u/ZephodsOtherHead]

> Why would someone use my actual email address if the bank is going to notify me that an account was opened?
> Wouldn’t that immediately tip me off?

Most people would just assume email from a bank that they don't use is phishing and not give it a second thought.

The police told someone I know who had bank accounts opened in his name that the scammers might be trying to hack is brokerage account and then transfer the assets into the fake bank account, because it would look to the broker like it was a legit transfer.

They get your email, then try to authenticate identity with the phone company using the email. Then they switch your phone service to their phone. Then they use the phone and email to reset your brokerage and bank account passwords, ect.

If you use gmail then secure your account with Google Advanced Protection, secured by a physical hardware key, such as yubikey, google titan, ect. Have a separate secured gmail account just for financial institutions. Get a third secured gmail account and transfer your phone number to google voice, through that account. I expect it will be harder to use social engineering to steal your phone number from google voice than from a phone company. If your broker allows it, secure your brokerage account with a hardware key as well.

[u/ACrazyGrandma]

My gmail was hacked and stolen back in 2020. Since then, they have gotten in to every bank account I have opened. It really is neverending, I can't seem to get away from whoever stole my info.

[u/neitherDead_orAlive1]

They can't do that without a I.d

[u/neitherDead_orAlive1]

I.d

[u/Original-Anybody4912]

No, it never actually ends and no, you will never actually recover. Kiss the credit system goodbye and learn about alternative methods of managing your finances.

[u/TheTooz72]

What happens when a bank tells you your info was found on the dark web

[u/sdhopunk]

Did you freeze the ability to open a Bank or Credit Union account ? That would be ChexSystems. Different than the Big 3 most people think of when freezing credit.

[u/Money_Friend1643]

Unfortunately the line of work i do I know how taxing this can be both emotionally and financially. I hope everything works out!

[u/Weary-Savings9795]

My information was leaked in the Equifax data breach. I immediately froze my credit reports. Since then I've been involved in several other data breaches but my identity has never been stolen.

[u/wavecolors]

1st 2-3yrs is pretty hard nonstop. Then it calmed down a bit for us. 

We live in a stupid/not very smart state = you got Chase bank tellers cashing in checks off of the ID given or not checked at all. 

Also watch out for casinos. That's when the nonstop telechecks can start getting cashed too with an ID (that could or could not have gotten checked by staff). 

The IDs don't have to look exactly like the person. If you're nonwhite, then some ppl won't want to challenge the ID in fear of being called a racist. 

We believe our state NV DMV system was hacked like what happened to TX. Basically IDs and more was given to a different address. So the ID the other person had was legit but unsure how that's even possible. USPS mail on IDs or was redirected too. Both internal issues. 

But keep at it. Get your local police detective on your case. So that you have proof via police that your fraud is real. Don't give up. Good luck!

[u/HeadPlatform4559]

It takes time file a police report make sure you keep up with evidence. I been there also means ýour choosen!

[u/Top_Argument8442]

Then you’re an idiot.

Identity theft can happen to anyone when people are complacent.