Most identity theft prevention guides list 5-6 generic tips. This checklist includes everything — from the basics everyone should do to the advanced steps most people have never heard of. Each item is ranked by impact and includes the time required.
Equifax, Experian, TransUnion, and Innovis. A credit freeze prevents anyone from opening new accounts in your name. This is the single most effective identity theft prevention step available to consumers. It is free.
Time: 30 minutes | Cost: Free | Links: equifax.com, experian.com, transunion.com, innovis.com
Password reuse is the number one way accounts get compromised. When one service is breached, criminals try those credentials on every other service. Use a password manager to generate and store unique passwords. Bitwarden is free and open source.
Time: 1 hour to set up | Cost: Free (Bitwarden)
Your email account is the skeleton key to your digital life — password resets for every other account go through email. Secure it with two-factor authentication using an authenticator app (not SMS, which is vulnerable to SIM swapping). Then enable 2FA on all banking and financial accounts.
Time: 15 minutes per account | Cost: Free
Spokeo, WhitePages, BeenVerified, TruePeopleSearch, and hundreds of other people-search sites publish your name, address, phone number, and relatives for anyone to find. This information is used by identity thieves to pass verification questions, by stalkers to find targets, and by scammers to craft convincing phishing attacks. Remove yourself from the top 30 sites or use a data removal service.
Time: 3 hours (manual) or $9.95/month (automated) | Cost: Free or subscription
Pre-approved credit card offers arriving in your mailbox can be intercepted by mail thieves and used to open accounts in your name. Opt out at OptOutPrescreen.com for 5 years (online) or permanently (by mail).
Time: 5 minutes | Cost: Free
USPS Informed Delivery sends you daily images of incoming mail and alerts you if someone files a change of address for your property. This catches mail theft and unauthorized address changes before damage is done.
Time: 5 minutes | Cost: Free | Link: informeddelivery.usps.com
Your phone broadcasts a unique identifier that data brokers use to track your location and sell it to advertisers, insurance companies, and government agencies. Deleting this ID breaks the tracking chain. iPhone: Settings, Privacy, Tracking. Android: Settings, Privacy, Ads.
Time: 2 minutes | Cost: Free
Your car manufacturer is likely collecting and selling your driving data. GM was fined $12.75 million for selling driving behavior to insurance companies. Submit a privacy request through your manufacturer's website and disable connected service data sharing in your car's settings.
Time: 15 minutes | Cost: Free
Review your credit reports from all three major bureaus at AnnualCreditReport.com. Look for accounts you did not open, inquiries you did not authorize, and addresses where you have never lived. Dispute any errors immediately.
Time: 30 minutes | Cost: Free (weekly from AnnualCreditReport.com)
Beyond the 3 major credit bureaus, 37 consumer reporting agencies maintain files on you. Request disclosures from LexisNexis, ChexSystems, and others to see what data they hold and dispute errors that could affect your insurance rates, employment, or rental applications.
Time: 1-2 hours | Cost: Free (under FCRA)
Under the Gramm-Leach-Bliley Act, your bank shares your financial data with affiliates and third parties unless you opt out. Contact each financial institution and request an opt-out of non-essential data sharing.
Time: 10 minutes per institution | Cost: Free
Register your phone number at DoNotCall.gov to reduce telemarketing calls. This reduces your exposure to phone-based social engineering attacks and scam calls.
Time: 2 minutes | Cost: Free
Review every app on your phone that has access to location, microphone, camera, or contacts. Revoke permissions from apps that do not need them. Delete apps you no longer use. The fewer apps with access to your data, the smaller your attack surface.
Time: 15 minutes | Cost: Free
Submit deletion requests to Venntel (privacy@venntel.com), Fog Data Science (fogdatascience.com/opt-out), Babel Street, and Clearview AI. These companies sell your location data and facial recognition data to law enforcement without warrants.
Time: 20 minutes | Cost: Free
Check your county property records monthly for unauthorized deed changes. Title fraud — where a criminal forges a deed to steal ownership of your property — is a growing threat. Many counties offer free property alert services. Sign up if your county provides one.
Time: 5 minutes/month | Cost: Free
Most identity protection services focus on detection — monitoring your credit, scanning breach databases, and alerting you after your data has been compromised. This is useful but reactive. By the time you receive an alert, the damage is done and you are in cleanup mode.
Prevention focuses on reducing the amount of personal information available to criminals before they can use it. Freezing credit prevents new accounts from being opened. Removing data from brokers eliminates the raw material identity thieves need. Deleting your advertising ID stops location tracking. Opting out of car data sharing prevents your driving behavior from being sold.
The most effective approach combines both: prevent what you can and monitor for what gets through. But if you have to choose between paying for monitoring or investing in prevention, prevention delivers more protection per dollar.
Vigilant Privacy handles steps 4, 5, 7, 8, 10, 11, 12, 14, and 15 automatically — removing your data from 2,415 brokers, opting out of prescreened offers, requesting CRA disclosures, and targeting surveillance brokers. The credit freeze and password steps are one-time actions you do yourself. $9.95/month.
Start Your Free 7-Day TrialNo credit card required. Cancel anytime. We never sell your data.