How to Find Out Who Stole Your Identity

Assuming you have already stopped the bleeding, the very first move in identifying a thief is not chasing a name. It is figuring out which of two very different cases you are in, because that single determination decides how hard attribution will be and which trail you work. The clues are already in front of you. The identifiers on the fraudulent applications, where the accounts were opened, the addresses goods shipped to, the phones and emails used, all lean one way or the other, and reading that lean is the closest thing identity theft has to a fork in the road.

In known-person theft, the culprit is someone with access to your mail, your home, or your documents: an ex-partner, a relative, a roommate, a caregiver, or a coworker. This bucket is far more common than people expect, and it is the most attributable, because the thief is not hiding behind an ocean of stolen data. They reused their own real life. The shipping address is often a place you can drive to. The phone or email traces back to a person already in your orbit. The accounts were opened in towns you recognize. When the identifiers cluster around your own life, the case usually resolves to a specific name, and fast.

In stranger or ring theft, your data was bought in bulk from a breach or the dark web and used by someone you have never met, sometimes overseas, sometimes as one thread in a synthetic identity stitched together from many victims, sometimes run through a domestic money mule. Here the identifiers scatter: drop addresses you have no connection to, burner phones, freight-forwarders, accounts opened in distant states within days of each other. These cases are harder to pin to one person, but they are not hopeless, because even a mule or a cash-out point is a real, locatable human who gives investigators a thread to pull. Knowing which bucket you are in is exactly the instinct behind people who run a background check on themselves first, to see precisely what of theirs is already exposed and how a stranger could have used it.

The recovery basics, the freeze, the FTC report at IdentityTheft.gov, and the disputes, are covered in full on the companion guide and are not repeated here. Once those are underway, you have a folder full of identifiers, and identifiers can be read. Each of the four tells below leans the case toward a known person or a stranger and tells you which trail to work first.

This is the lane People Locator Skip Tracing works, and it is where the identifiers from your 609(e) records request stop being abstract. A shipping or billing address resolves to who actually lives there, who has received mail there, and which other records, property, voter, court, business filings, tie a real name to that door. A phone number or email can be researched back through public and historical sources to the names and accounts associated with it. A name or alias the thief used, even a partial one, becomes a thread through property records, court filings, and the many footprints adults leave behind. And a payment account, while its holder details sit behind a subpoena, often surfaces a name once police pull it, which we can then locate. Each identifier is run against the next until they converge on one person. Our standing guide to lawful people-search research and the way we run a social-media investigation show how thin a starting point can be and still resolve to a real, locatable individual.

The output is a documented, named, and located person, delivered to you so you can hand it to the police report, the FTC, or a civil attorney, the parties who can actually act on it. We help you identify and document who is behind it. We do not confront, accuse, or decide guilt, the accusation always belongs with police and the courts, and because we are not a consumer reporting agency, what we produce is general public-records research, not a consumer report, and it must not be used for employment, tenant, or credit decisions.

The instinct when a name surfaces, especially a familiar one, is to confront. Do not. A confrontation tips the thief off, lets them move or destroy evidence, and can turn you from victim into defendant if it escalates. The disciplined move is to protect the case so police and prosecutors can act on it. Keep every identifier, record, and finding in one dated folder, exactly as it came in, because chain-of-custody and a clean timeline are what make a suspect prosecutable rather than merely suspected. Put any accusation in writing through the police report, never to the person directly. If you believe someone with access to your home or mail is responsible, change your locks, move mail to a secured box, and note dates, because shutting off their access without alerting them both stops the bleeding and preserves the picture.

Watch the timing, too. Records age out, breach notices get deleted, and a shipping address goes stale once a lease turns over, so the identifiers are most attributable while the trail is fresh, which is the case for documenting early even if you are not ready to pursue. And once the immediate matter is handled, understand how your information circulated in the first place: knowing how to limit your exposure to data brokers and skip tracing shrinks the surface the next thief, known or stranger, would have to work from.

Identity theft runs on the same identifiers as so many other matters, which is why the addresses, phones, and accounts in your records resolve through the same lawful research that drives our work on locating people and tracing a starting point like finding a current address or understanding what a background check actually surfaces. Send us what you have, even if it feels like nothing: a shipping address from a fraudulent order, a phone number on an application, an email, a name the thief used, or the account a payment ran through. We work strictly for lawful, permissible purposes, we never promise an outcome we cannot control, and we tell you plainly what the records can and cannot show. For a legitimate matter, an initial locate typically comes back within 24 hours.