9 warning signs of identity theft you should never ignore

Identity‑theft alerts grow as new scams and data breaches surface

An increasing number of consumers are being warned about the early warning signs of identity theft, experts say, as companies, governments and financial institutions push back against a wave of fraud that has cost the U.S. almost $21 billion in 2024.

The latest advisory, released by cybersecurity consultant Kurt “CyberGuy” Knutsson, lists nine warning signs that people should “never ignore.” These range from a strange letter in the mail to a sudden loss of phone service and include the following:

1. Unexpected letters or notices from a bank, retailer, employer, health‑care provider, insurer, school, or other organization about a data exposure.
2. Unusual credit‑report activity such as a hard inquiry that the consumer did not request, a new account, unfamiliar address or a collections item.
3. Unexpected bills or debt‑collector calls for payments the consumer did not make.
4. Unapproved or test transactions on checking, savings, credit‑card or investment accounts, including small “test” charges that may signal a hacker’s first probe.
5. Unsolicited password‑reset emails, multi‑factor authentication codes or sign‑in alerts that are not triggered by the consumer’s own activity.
6. Unfamiliar mailing addresses or email addresses on credit‑report or other accounts, or notifications that identity has been “verified” elsewhere.
7. Calls, texts or emails that contain correct personal details (name, address, family members) that the consumer did not share.
8. Unexpected changes to account recovery information, authorized users, linked devices or apps.
9. Sudden loss of phone service without a clear explanation, which can signal a SIM‑swap attack.

Knutsson cautions that “identity theft can start quietly,” and urges people to verify any suspicious activity promptly and treat a phone that unexpectedly loses service as a warning sign.

A real‑life example: Patricia Escriva

The advisory cites a 2023 case in which Florida resident Patricia Escriva’s phone lost service before scammers performed a SIM‑swap and drained her bank account of thousands of dollars within minutes. The incident was highlighted in a podcast episode of The CyberGuy Report, titled “How hackers drain your bank account in minutes.” Escriva’s story illustrates how a seemingly innocuous glitch can lead to a full‑blown account takeover.

Experts say the key to stopping the attack is to secure the mobile number immediately. “Once your number is secure, review important accounts for password resets or login attempts,” Knutsson advises. Consumers are urged to ask their wireless carrier about an account PIN and other protections against unauthorized changes.

A massive healthcare data breach

In addition to individual scams, a new data breach has exposed the personal information of 3.75 million patients. The breach involved a health‑care provider’s database and raised concerns that the leaked records could be used for identity theft or fraud. While the advisory does not name the provider, it recommends that anyone who may have been impacted check their credit reports and monitor for unauthorized activity.

New bank‑scam laws on the horizon

The U.S. Senate recently advanced legislation aimed at making it harder for fraudsters to process suspicious payments. The proposed bills would require banks to implement additional checks for large or irregular transfers and could provide a faster route for consumers to dispute unauthorized charges. According to the advisory, “Identity theft often gives you warning signs before serious damage is done. A strange charge, an account you do not recognize or even a password‑reset alert you never requested can be your cue to take a closer look.”

How consumers can protect themselves

Knutsson offers a six‑step checklist that blends good habits with available tools:

1. Review all three credit‑report bureaus (Equifax, Experian, TransUnion) for discrepancies.
2. Place a credit freeze or fraud alert if identity theft is suspected.
3. Use strong, unique passwords and a password manager; enable multi‑factor authentication wherever possible.
4. Turn on account alerts for purchases, transfers and password changes.
5. Keep all breach notices, screenshots and correspondence in a safe place.
6. Report confirmed theft to the Federal Trade Commission at IdentityTheft.gov, which can help consumers create an identity‑theft recovery plan.

In addition to these measures, the advisory suggests that consumers consider identity‑monitoring services. These can watch for new credit‑report entries, bank account takeovers, phone‑number changes, dark‑web exposure and even unusual activity on social‑media profiles.

Free resources

The free CyberGuy LIVE class, titled Protect Your Money From Today’s Biggest Threats, has ended but the replay and a financial‑protection checklist are still available at CyberGuyLive.com. The class covered five “simple ways” to defend against AI scams, fraud, identity theft and financial hacks.

Bottom line

Identity theft is often “quiet” at first, according to experts. “Don’t panic. Instead, verify what happened and pay attention to anything else that looks out of place,” Knutsson says. By keeping an eye on their accounts, securing phone numbers, and using a combination of credit freezes and good digital hygiene, consumers can spot warning signs early and prevent the worst outcomes.