The Identity Theft Numbers That Should Worry Every American in 2026

Identity theft isn’t a rare, unlucky event anymore — it’s a background risk of everyday life. The latest data makes that hard to ignore.

Over 6.4 million identity theft and fraud reports were filed with the Federal Trade Commission in 2024 alone. Put another way: someone in the United States becomes a victim of identity theft roughly every 4.9 seconds, according to figures compiled by Security.org.

Where the Losses Are Coming From

Financial fraud makes up the largest share of cases — more than 40% of all reports. Within that category, credit card fraud alone accounted for over 450,000 reports, while bank transfer and payment fraud drove more than $2 billion in losses. Two smaller but fast-growing categories stand out: employment identity theft, where someone uses a stolen identity to get a job or file for benefits, grew 20% year-over-year to 37,556 reports, and medical identity theft added another 10,116 cases.

The typical victim isn’t losing life savings — the median reported loss is around $497 — but nearly 125,000 people reported losses exceeding $10,000, and losses at that scale usually take far longer to recover from.

The Part Nobody Talks About: The Cleanup

The financial hit is only part of the cost. Security.org’s data puts the average recovery time at 22 months, with victims spending roughly 100 hours over the course of a year resolving fraudulent accounts, disputing charges, and clearing their credit and criminal records of a thief’s actions.

One emerging tactic worth knowing about: digital skimming, where scammers inject malicious code into otherwise legitimate websites to quietly capture payment information at checkout — meaning a compromised card doesn’t always trace back to an obviously sketchy site.

What to Do If It Happens to You

The FTC operates two separate reporting tools depending on what happened:

• IdentityTheft.gov — the federal government’s dedicated resource for identity theft specifically, with a personalized recovery plan, pre-filled letters, and step-by-step checklists.
• ReportFraud.ftc.gov — for reporting scams and fraud more broadly, even if your identity itself wasn’t stolen.

Filing quickly matters. An FTC report is often required by banks, credit bureaus, and employers before they’ll help reverse fraudulent charges or correct records, so it’s worth treating as the first step, not an afterthought.

The Simple Habits That Actually Help

Freezing your credit with all three bureaus costs nothing and blocks new accounts from being opened in your name. Checking your bank and card statements weekly — rather than waiting for a monthly bill — catches fraud faster than most banks’ own alert systems. And treating any unexpected password-reset email or login alert as suspicious by default, rather than dismissing it, closes off one of the most common entry points scammers use.

Sources: FTC — Report Identity Theft; Security.org — Identity Theft Statistics in 2026