What Is Identity Theft, and How Does It Happen?

Identity theft is when someone uses your personal or financial information without your permission. They can use your name, Social Security number, credit card number, bank account information, medical insurance number, or other identifying details to get money, credit, services, medical care, tax refunds, employment, or other benefits. That is the basic identity theft definition most people are aware of.
In even simpler terms, identity theft means someone is using your identity as if it belongs to them. But no matter how simple the answer to the “What is the meaning of identity theft?” question might seem, the reality of going through it is not simple at all.
Identity theft can be obvious, like spotting unauthorized charges on a card. But it can also be quietly operating for months or years, like a fake account opened with your Social Security number or a synthetic identity built from pieces of your information. Identity theft and fraud protection tools may help reduce risk, but they don’t always stop fraud once your information has already been exposed.
That is why understanding the main types, how this kind of fraud happens, and what kind of damage it can cause is important. The more knowledgeable you are, the better equipped you will be to safeguard yourself against identity theft.
Types of Identity Theft
There is no single neat classification that covers every identity theft case. While some resources point out 4 types of identity theft, others mention 7 types of identity theft. In practice, the categories overlap because one stolen identity can be used in several ways at once and affect more than one aspect of the victim’s life.
Financial Identity Theft
The most common type of identity theft is the financial one. This includes credit card fraud, new accounts opened in your name, bank misuse, loans, and other unauthorized financial activity.
Financial identity theft happens when someone uses your personal information to get money, credit, goods, or services. It may involve:
- unauthorized credit card charges;
- new credit cards opened in your name;
- loans you never applied for;
- bank accounts you did not authorize;
- phone or utility accounts tied to your information;
- buy-now-pay-later accounts opened without your permission.
This is usually the type people first discover identity theft because it shows up on a credit report, bank statement, debt collection letter, or denied loan application. For a deeper explanation, see our article about financial identity theft.
Synthetic Identity Theft
Synthetic identity theft involves a fake or partly fake identity created from a mix of real and invented information. A fraudster may use a real Social Security number with a different name, date of birth, address, or phone number.
This type of fraud can be especially difficult to catch. The fake identity may not look exactly like the victim, but the damage can still be tied to the victim’s Social Security number or credit file. Children and people who don’t check their credit often are more vulnerable because the fraud may go unnoticed for a long time.
For more details about this, see our article on synthetic identity theft.
Criminal Identity Theft
Criminal identity theft happens when someone uses another person’s identifying information during contact with law enforcement, a court, or another government authority. This can happen during an arrest, citation, traffic stop, booking, or investigation.
The victim may not even be aware that they're affected until a background check turns up a record, a warrant appears, a license is affected, or an employer asks about a criminal matter that does not belong to them. This kind of impersonation fraud can be frightening because it does not only affect money. It can affect someone’s reputation, job prospects, housing, and peace of mind.
Medical Identity Theft
Medical identity theft happens when someone uses your personal information, health insurance account number, Medicare number, or other medical details to get care, prescriptions, medical equipment, or insurance payments.
This form of personal information theft can create financial problems, but the more serious risk is that incorrect information may enter your medical records. A victim may receive bills for care they never had, insurance statements they do not recognize, or collection notices from medical providers they never visited.
Tax Identity Theft
Tax identity theft happens when someone uses your Social Security number or personal information to steal a tax refund or get employment. Many people discover it only when they try to file their return and learn that a return has already been filed under their information.
This type of unauthorized use of your information can delay refunds, create IRS notices, and force victims to prove that the income or tax return was not theirs. It is one of those problems that can feel especially unfair because the victim is suddenly responsible for untangling a mess they did not create.
Child Identity Theft
Child identity theft happens when someone uses a child’s sensitive personal information to get services or benefits, or to commit fraud. The stolen information may include the child’s Social Security number, name, address, or date of birth.
Children are easy targets because they usually don’t have active credit histories. No one may notice the problem until years later, when the child applies for student loans, an apartment, a phone plan, a credit card, or a first job.
Social Security Identity Theft
Social Security identity theft is the misuse of someone’s Social Security number to work, file taxes, open accounts, obtain benefits, get medical care, or build another identity.
This misuse is especially serious because a Social Security number is tied to many parts of a person’s life: credit, taxes, employment, benefits, medical systems, and identity verification. A stolen card number can usually be replaced. A Social Security number is much harder to separate from your life.
Insurance Identity Theft
Insurance identity theft happens when someone uses another person’s identity or policy information to file claims, obtain benefits, get medical services, stage losses, or collect payments.
It can involve health insurance, auto insurance, life insurance, disability insurance, or property insurance. Victims may see denied claims, higher premiums, strange notices from insurers, or records connected to incidents that never happened.
Military Identity Theft
Military identity theft can affect active-duty service members, veterans, spouses, and dependents. Fraudsters may target military IDs, benefits, pay records, government accounts, housing information, or personal information exposed during deployment or frequent moves.
The fraud can involve credit, benefits, medical records, employment records, or government-related accounts. It can be especially damaging when the victim is deployed, relocating, or unable to respond quickly to notices.
For more details, check out our article about military identity theft.
How Does Identity Theft Happen?
So, how does identity theft work? Usually, it starts with access. Someone gets enough information about you to pass as you or breach your security measures. They may open an account, take over an account, or convince another person or company that they have the right to act in your name.
But how does identity theft occur in everyday life? It can begin through phishing emails, fake text messages, scam calls, data breaches, stolen mail, lost wallets, document theft, card skimming, public Wi-Fi, weak passwords, reused passwords, social media oversharing, or personal information sold on the dark web.
Once a scammer has access to your information, they use it where it has value. They may log into an existing account, open a new credit account, change your mailing address, file a tax return, get medical care, apply for benefits, or sell your data to someone else.
A victim may not see the damage immediately. The first clue may be a credit score drop, a debt collector, a denied loan, an IRS notice, a strange medical bill, a login alert, or an account they never opened.
If something feels off, see our guide on how to spot signs of identity theft.
Identity Theft vs. Identity Fraud
Identity theft and identity fraud are closely related, and people often use the terms interchangeably. The difference is mostly about where the focus is.
Identity theft usually refers to the misuse of personal information. Identity fraud usually refers to situations when someone uses that information to deceive another person, business, lender, agency, or institution.
| Question | Identity Theft | Identity Fraud |
| What is the focus? | The acquisition of personal information (e.g., SSN, name, account numbers). In short: the information is stolen or compromised. | The use of stolen information to deceive individuals, businesses, or institutions. In short: the information is used to commit a crime. |
| Simple Example | A hacker steals your Social Security number or credit card details through a phishing scam. | An identity thief uses your stolen information to open a new loan, charge an account, or file a fraudulent tax return. |
| Main Harm | You lose control over your sensitive personal or financial information. | You suffer tangible consequences, such as financial loss, legal issues, or damage to your reputation/credit. |
| Practical Reality | The initial, underlying cause; the "theft" is the prerequisite for the fraud to occur. | The outcome or the act of deception that directly impacts your finances, credit, or legal status. |
For victims, the wording matters less than the response. If someone used your information without permission, document what happened and start the recovery process.
Identity Theft vs. Credit Card Fraud
Credit card fraud can be one component of the broader issue of identity theft.
For instance, if someone uses your existing credit card number to make unauthorized purchases, that is a clear example of credit card fraud. But if someone uses your personal information to open new accounts, create a synthetic identity, file taxes, get medical care, or damage your credit report, credit card fraud is just one crime among a whole host of crimes committed under the umbrella of identity theft.
| Feature | Credit Card Fraud | Identity Theft |
| Scope | Limited to a single card or account. | Broad; affects credit, taxes, medical, employment, and legal records. |
| Common Example | Unauthorized purchases on an existing card. | Opening new accounts, loans, or creating false tax/medical records. |
| Primary Legal Focus | Billing-error rules and cardholder liability limits. | FCRA disputes, credit bureau reporting, and identity-theft protections. |
| Consumer Impact | Often contained to one account if caught early. | Persistent; can damage credit, housing, employment, and personal records long-term. |
Liability note: If your credit card is stolen or used fraudulently, your maximum responsibility is usually $50, and often nothing at all if you report it promptly. If you miss reporting deadlines, you may be on the hook for more.
Real Examples of Identity Theft
Identity theft might not appear in a dramatic, flashy way. The problem often begins quietly with a single alert, an unexpected letter, or an account that should not exist. Here are some typical scenarios:
- A consumer gets a collection letter for a credit card they never opened. The account has their name and Social Security number, but the phone number, email, purchases, and address history do not match.
- A parent checks for a child’s credit file and finds accounts tied to the child’s Social Security number. The child is too young to have applied for credit, but someone has used their information to build a synthetic identity.
- A person files a tax return and learns that another return was already filed using their Social Security number. The refund is gone, and now the real taxpayer has to prove what happened.
- A job applicant fails a background check because a criminal record appears under their name. Later, they learn someone used their identity during an arrest or citation.
- A relative opens a phone account, utility account, credit card, or loan using a family member’s information. Family identity theft can be especially painful because the victim may feel guilty reporting it, even while the account damages their credit.
How Identity Theft Impacts a Person’s Life
In order to understand how identity theft can impact a person’s life, take a look at the obvious damage: money, credit, accounts, and time. A victim may have to call banks, dispute credit report errors, answer debt collectors, replace documents, file reports, and explain the same story over and over again.
But that’s not all. The consequences continually escalate, creating a snowball effect where the damage becomes harder to contain. A lower credit score can affect loans, housing, insurance, and even employment screening. Medical identity theft can create records the victim doesn’t recognize. Criminal identity theft can create background-check problems. Tax identity theft can delay refunds and trigger notices.
Then there is the emotional cost. Identity theft makes people feel exposed, embarrassed, angry, and exhausted. Many victims feel like they’re being treated as suspicious when they are the ones who were harmed.
For a step-by-step recovery plan, see our guide on what to do if your identity is stolen.
What To Do if Identity Theft Hits Your Credit Report
When identity theft causes false information to appear on a credit report, the Fair Credit Reporting Act (FCRA) becomes important. Under the FCRA, after receiving the required documents, a consumer reporting agency must typically block information alleged to have been caused by identity theft.
So, if ID theft already hit your credit report, don’t assume it will clear up on its own. Get organized. Save letters, screenshots, account notices, police reports, FTC reports, dispute letters, certified mail receipts, and responses from companies or credit bureaus.
IdentityTheft.gov can help victims report the fraud and create a personal recovery plan. The FTC also explains that an Identity Theft Report can help victims prove to businesses that someone stole their identity and make it easier to fix problems caused by the theft.
If a credit bureau, lender, debt collector, or furnisher continues reporting identity theft information after proper disputes, keep in mind that you have rights under the FCRA. Depending on the facts, FCRA claims may allow consumers to recover actual damages, costs, and reasonable attorney’s fees. Willful violations may also support additional remedies.
If the unauthorized use of your information has already damaged your credit report and the companies involved aren’t fixing it, contact an identity theft lawyer for a free consultation. In successful FCRA claims, consumers are able to recover attorney’s fees and costs from the defendant. This fee-shifting structure makes legal help more accessible to victims.
Frequently Asked Questions
The most common type of identity theft is usually financial identity theft. This includes credit card fraud, bank account misuse, new accounts opened in your name, unauthorized loans, phone accounts, utility accounts, and other financial activity you did not approve.
A simple definition of identity theft is someone using your personal or financial information without your permission. The information may include your name, Social Security number, credit card number, bank account information, medical insurance number, driver’s license number, or login details.
Aggravated identity theft is a term from criminal law that refers to an enhancement on criminal charges when someone commits identity theft in relation to committing certain felonies. It can add a two-year sentence in many cases, or five years in certain terrorism-related cases.
Identity theft can be a felony, but it depends on the law involved and the facts of the case. Some cases are handled under state law. Others may involve federal statutes. The conduct, documents, harm, and related crimes can all matter.
Identity theft usually means someone accessed or used personal information without permission. Identity fraud usually means they used that information to deceive someone or get money, credit, services, benefits, or another advantage. In everyday language, people often use both terms for the same problem.


Daniel Cohen is the Founder of Consumer Attorneys. Daniel manages the firm’s branding, marketing, client intake and business development efforts. Since 2017, he is a member of the National Association of Consumer Advocates and the National Consumer Law Center. Mr. Cohen is a nationally-recognized practitioner of consumer protection law. He has a we...
Related Articles




R
ONGS™

