How to Report Identity Theft in Illinois: Agencies and Fraud Alerts

To report identity theft in Illinois, secure your accounts, file an FTC Identity Theft Report at IdentityTheft.gov, file a police report with your local Illinois department (which is required by state law to take it), call the Illinois Attorney General’s Identity Theft Hotline, and place fraud alerts or a security freeze with the three credit bureaus. Move fast. Federal law ties how much of the loss you have to eat to how quickly you report, and the reports you generate in these first steps become the paperwork you’ll use to clear fraudulent accounts for months afterward.

Lock Down Your Accounts First

Before you file anything, call every bank and credit card company where you hold an account. Report the fraudulent activity, ask the representative to flag the account, and request replacement cards with new numbers. If an account was opened in your name without your permission, ask the institution to close it and confirm the closure in writing. Change passwords on every online account tied to your finances, and turn on multi-factor authentication wherever it is available.

Start a folder right now for everything related to the theft. Write down dates of fraudulent charges, account numbers, dollar amounts, and the name of every person you speak with. Save screenshots of unauthorized transactions. You will use this file at every step that follows, and recreating it later is far harder than capturing it as you go.

File an FTC Identity Theft Report

Go to IdentityTheft.gov, the federal government’s central portal for identity theft victims, and create an account.¹ The site walks you through a series of questions about how the theft happened, which accounts were affected, and what information was compromised. When you finish, it generates two things you will need repeatedly: an FTC Identity Theft Report and a personalized recovery plan with pre-filled letters you can send to creditors and debt collectors. If you prefer not to use the website, call 1-877-438-4338.

Print or save the FTC Identity Theft Report. Financial institutions, creditors, and credit bureaus all accept it as official documentation that you reported the crime. The recovery plan updates over time, so revisit it as you complete each step.

File a Police Report in Illinois

Illinois law gives you the right to initiate a law enforcement investigation by contacting the police department where you live. The statute requires the agency to take your report, give you a copy, and begin investigating or refer the case to the jurisdiction where the crime occurred.² This is not optional for the department. If you request the report, they must produce it.

Bring your FTC Identity Theft Report, a government-issued photo ID, proof of your address, and any evidence of fraudulent activity such as account statements or collection letters. Some Illinois departments allow online reporting for non-emergency crimes, but filing in person tends to produce a more detailed report. Ask for the report number and a physical or digital copy before you leave. You will need it for credit bureau disputes, creditor negotiations, and potentially for an expedited judicial determination of innocence if the thief committed crimes under your name.²

Call the Illinois Attorney General’s Identity Theft Hotline

The Illinois Attorney General’s office runs a dedicated Identity Theft Hotline at 1-866-999-5630, staffed by advocates trained specifically to help victims through the recovery process.³ You can also download and submit an Identity Theft Complaint Form from the Attorney General’s website. The office cannot act as your private attorney, but the advocates will walk you through your rights, help you decide which creditors to contact next, and assist with disputes that are not resolving on their own.

Filing with the Attorney General also puts your case on the state’s radar. When the office sees patterns of complaints involving the same company or scam, it can trigger enforcement actions. The office publishes an Identity Theft Resource Guide for Illinois consumers with detailed instructions for each stage of recovery, available in English, Spanish, and Polish.³

Place Fraud Alerts and a Security Freeze With the Credit Bureaus

Federal law gives you two separate tools to lock down your credit file: fraud alerts and security freezes. They work differently, and most identity theft victims should use both.

Fraud Alerts

A fraud alert tells creditors to verify your identity before approving new credit in your name. You only need to contact one of the three nationwide credit bureaus (Equifax, Experian, or TransUnion), and that bureau is legally required to notify the other two.⁴ An initial fraud alert lasts one year. If you have already filed an FTC Identity Theft Report or police report, you can request an extended fraud alert that lasts seven years.

Security Freezes

A security freeze goes further. It blocks access to your credit report entirely, so no one can open new accounts using your information. Unlike a fraud alert, you must contact each bureau separately to place a freeze. The freeze is free, and the bureau must activate it within one business day of a phone or online request.⁴ The freeze stays in place until you ask for it to be removed, and removal happens within one hour of a phone or online request. When you need to apply for legitimate credit, you can temporarily lift the freeze for a specific creditor or time period.

Report Quickly to Limit Your Liability

How much of the fraudulent charges you personally owe depends on the type of account and how fast you report. The rules for credit cards and debit cards are very different, and speed matters most on the debit side.

Credit Cards

Federal law caps your liability for unauthorized credit card charges at $50, regardless of how much the thief spent. Once you notify the card issuer that the card was lost, stolen, or used without your permission, you owe nothing for charges made after that notification.⁵ Most major card issuers waive even the $50 through their own zero-liability policies.

Debit Cards and Bank Accounts

Debit card fraud is riskier because the money leaves your account immediately, and your liability grows the longer you wait. Federal law sets three tiers:

Report within 2 business days of learning about the theft, and your liability is capped at $50.
Report after 2 business days but within 60 days of receiving your bank statement, and your liability can reach $500.
Report more than 60 days after the statement date, and you face unlimited liability for transfers that occur after that 60-day window.

That unlimited tier is not theoretical. If a thief drains your checking account and you do not notice for two months, the bank has no obligation to reimburse the later losses.⁶ Reviewing bank statements promptly is a legal deadline with real financial consequences.⁷

Dispute Fraudulent Accounts and Keep Monitoring

With your FTC Identity Theft Report and police report in hand, contact each creditor or company where fraud occurred. Send a written dispute letter along with copies of both reports. Under federal law, a creditor that receives your identity theft report must stop collecting the fraudulent debt and stop reporting it to credit bureaus while it investigates.

File separate disputes with each credit bureau for any fraudulent accounts or inquiries showing on your credit reports. You can submit disputes online through each bureau’s website or by mail. Include your FTC Identity Theft Report, police report, and a clear explanation of which items are fraudulent.

You can pull free weekly credit reports from all three bureaus at AnnualCreditReport.com to monitor for new fraudulent activity.⁸ Check every report for accounts you did not open, addresses you have never lived at, and inquiries from companies you did not contact. Identity thieves sometimes wait months before using stolen information, so keep monitoring for at least a year.

Special Situations That Go to Different Agencies

The general steps above cover most credit and account fraud. A few kinds of identity theft route to separate agencies, and your Illinois police report and FTC report will not resolve them on their own.

Tax Identity Theft

If someone filed a tax return using your Social Security number, or the IRS notifies you of income from an employer you never worked for, file IRS Form 14039 (Identity Theft Affidavit). You can submit it online at irs.gov, by fax, or by mail. If you cannot e-file because a duplicate return was already submitted under your Social Security number, attach Form 14039 to a paper return and mail it to your normal IRS filing address.⁹ Important exception: if you receive IRS Letter 5071C, 4883C, or 5747C, do not file Form 14039. Those letters mean the IRS already flagged the suspicious return and will give you specific instructions to follow instead.

After resolving the immediate problem, apply for an IRS Identity Protection PIN, a six-digit number assigned to your account each year that must be included on any federal return filed under your Social Security number. Anyone with a Social Security number or ITIN can apply through their IRS online account.¹⁰

Medical Identity Theft

If a thief used your insurance to receive care, your medical files may now contain another person’s conditions, allergies, or blood type. Report the theft to your health insurer and ask them to review recent claims for services you did not receive. Under HIPAA, you have the right to request copies of your medical records and to ask providers to correct inaccurate information; providers have 30 days to respond to a records request. If a provider refuses to produce your records within that window, you can file a complaint with the U.S. Department of Health and Human Services’ Office for Civil Rights.

Mail Theft

If someone stole your mail, redirected it with a fraudulent change-of-address, or used the postal system to commit fraud, report it to the U.S. Postal Inspection Service at uspis.gov or 1-877-876-2455.¹¹ Mail theft is a federal crime, and Postal Inspectors investigate independently of local police. Contact your local post office to check whether a change-of-address request was filed in your name, and sign up for USPS Informed Delivery so you can spot missing mail early.

Data Breach Notifications

If your identity theft followed a company data breach, the Illinois Personal Information Protection Act requires that company to notify you at no charge once it discovers the breach.¹² Treat that letter as your earliest warning. Place a fraud alert or freeze immediately, even if you have not yet seen fraudulent charges.

If the Thief Was Arrested Under Your Name

If the person who stole your identity was arrested or convicted under your name, Illinois law allows you to petition a court for an expedited judicial determination of factual innocence. If the court finds in your favor, it can order the records sealed, deleted, or labeled to show the data was impersonated and does not belong to you.² A criminal record attached to your name, even fraudulently, can show up on background checks for jobs and housing, so this step matters if a wrongful arrest or charge is in the mix.

1
Federal Trade Commission. Report Identity Theft
2
Illinois General Assembly. Illinois Code 720 ILCS 5 – Subdivision 15: Identity Theft
3
Illinois Attorney General. Identity Theft
4
Office of the Law Revision Counsel. United States Code Title 15 Section 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
5
Office of the Law Revision Counsel. United States Code Title 15 Section 1643 – Liability of Holder of Credit Card
6
CFPB. Official Interpretation to Regulation E Section 1005.6 – Liability of Consumer for Unauthorized Transfers
7
Office of the Law Revision Counsel. United States Code Title 15 Section 1693g – Consumer Liability
8
Annual Credit Report. Getting Your Credit Reports
9
Internal Revenue Service. When to File an Identity Theft Affidavit
10
Internal Revenue Service. Get an Identity Protection PIN
11
United States Postal Inspection Service. Report
12
Justia Law. Illinois Code 815 ILCS 530 – Personal Information Protection Act