Technology
Identity theft rarely announces itself: 6 signs you missed
NEWYou can now listen to Fox News articles!
By the time a debt collector calls or a lender rejects your loan, an identity thief may have been using your information for months. The warning signs often arrive much earlier.
They may show up as a small card charge, a strange IRS letter, a missing bill or an Explanation of Benefits for care you never received. Each one can look like routine mail or another account notice.
That is exactly what identity thieves count on. Here are 6 quiet signs of identity theft to check before the damage spreads.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
WHY THAT $4 CHARGE ON YOUR STATEMENT COULD BE FRAUD
Small card charges, missing mail and unexpected IRS letters can be early warning signs of identity theft. (Kurt “CyberGuy” Knutsson)
1) Small card charges can be an early sign of identity theft
A charge of $4 or less on your card statement may look harmless. However, it can be a thief testing whether the card still works before making a bigger purchase.
The Federal Trade Commission logged 503,450 credit card fraud reports in the first three quarters of 2025. That made credit card fraud the most common identity theft category it tracks.
Small test charges can be easy to miss. So can the purchase that comes next. The median fraudulent transaction in 2025 was $100, the same as in 2024. A charge that size can blend into a busy statement.
Federal law caps cardholder liability at $50 if you file the dispute in writing within 60 days of the statement date. Many card issuers waive even that, but you still need to act quickly.
2) Missing mail may point to identity theft
Missing mail can be more than an annoyance. It may mean someone filed a change-of-address request in your name and is collecting your rerouted mail.
The first warning sign is simple: the mail you normally receive stops showing up. That could include bank statements, tax forms, bills or medical notices.
Another red flag is a USPS Move Validation Letter for a change you did not request. USPS sends this letter to the old address within 10 business days of a change-of-address request.
You may also see a sudden wave of pre-approved credit offers from lenders you do not use. That can happen after a thief opens, or tries to open, an account in your name.
USPS has tightened identity checks for change-of-address requests, but criminals still target mailboxes, checks and personal documents. The FBI and Postal Inspection Service continue to warn that stolen mail fuels check fraud and identity theft.
3) Unexpected IRS letters can signal identity theft
An unexpected tax form can be a major warning sign. A 1099-K or W-2 from a company you never worked for may mean someone used your Social Security number to earn income.
That can create a tax problem for you. The IRS may treat the income as yours unless the form gets corrected. Employment-related identity theft reports to the FTC climbed 61% through the first three quarters of 2025 compared with the same period in 2021.
The IRS may also contact you before you spot the problem. Notice CP01E means someone used your Social Security number for employment. Letter 5071C asks you to verify your identity because the IRS flagged a tax return as suspicious.
Another red flag is an e-file rejection that says a return has already been filed in your name. That can mean a thief filed first and tried to steal your refund.
4) Credit report changes are major identity theft warning signs
A new account on your credit report that you didn’t open is a sign that someone is borrowing money in your name. A hard inquiry from a lender you never applied with means a thief tried. The lender pulled your credit; the inquiry stays on your report for two years, even if the application was denied.
An address on your file you don’t recognize is where a thief is having your credit mail sent. An email confirming a password change you didn’t make means a thief has access to your account.
A credit freeze blocks new account applications but does not catch inquiries, address changes or account takeovers already in motion. Credit monitoring can watch all three bureaus and send an alert within minutes of new activity on a file, weeks before the debt collector does.
WHY A CREDIT FREEZE ISN’T THE END OF IDENTITY THEFT
Missing bills or unfamiliar USPS notices may signal that someone redirected mail or is using personal information. (Daniel de la Hoz/Getty Images)
5) Medical bills for care you never received may reveal fraud
An Explanation of Benefits for a procedure or prescription you never received is a serious warning sign. It may mean someone used your insurance information to get care. Any bill that follows will have your name on it.
Watch for smaller clues too. Your deductible may drop even though you did not use your plan. You may also get appointment reminders for visits you never booked or refill notices for medicine you do not take.
Those alerts can point to the same problem. A provider’s file may list you as the patient, even though someone else received the care.
Medical identity theft can be harder to fix than credit fraud. Insurers may not remove false diagnoses or treatment records right away. Those records can affect future coverage, bills and even the care you receive.
6) Unrequested login prompts can mean your account is exposed
A multifactor authentication prompt you did not request is a major warning sign. It can mean someone has your password and is trying to get into your account.
Do not approve the prompt. Deny it, then change the password from a different device. Treat the old password as exposed, especially if you used it on more than one account.
A breach notification from a company you use is another reason to act quickly. Your data may already be in someone else’s hands. Freeze your credit, watch for strange account activity and be careful with any emails that claim to offer help.
Identity monitoring can scan the dark web and data broker sites for SSNs, addresses, driver’s license numbers and other identifiers. Alerts can show what was found and where, so you know which account to lock down first.
What to do if you spot signs of identity theft
If one of these warning signs has already arrived, do not ignore it. Start with the account, document or notice that raised the red flag.
1) Contact the company directly
Call the bank, insurer, lender or agency directly using a verified phone number. Do not use a link or phone number from a suspicious email, text or letter.
2) Report the identity theft
File a report at IdentityTheft.gov. Then freeze your credit at all three bureaus and set up an IRS Identity Protection PIN at irs.gov/ippin.
3) Consider extra identity theft support
Identity theft support can connect you with a U.S.-based fraud resolution specialist who works directly with bureaus, creditors and collection agencies on your behalf. Some plans also include up to $1 million in identity theft insurance per adult for eligible recovery costs.
No service catches every form of identity theft. A freeze blocks new accounts, and continuous monitoring can catch what it doesn’t.
One of the best parts of identity theft protection is its all-in-one approach to safeguarding your personal and financial life. Some plans include identity theft insurance of up to $1 million per adult to cover eligible losses and legal fees, plus 24/7 U.S.-based fraud resolution support with dedicated case managers ready to help restore your identity fast.
WARNING SIGNS YOUR MAIL HAS BEEN FRAUDULENTLY REDIRECTED
Identity thieves often test stolen credit cards with small charges before making larger purchases. (Kurt CyberGuy Knutsson)
How to check if your personal information was exposed
If you are unsure whether criminals have already exposed your information, take action now. Start with a free identity breach scan to see whether your data appears in known leaks. Early detection gives you more control and helps you respond before fraud spreads.
Check if your personal information is already being used for identity theft, fraud or appearing on the dark web. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.
4) Save every record
Keep copies of any letters, account notices, bills, screenshots or emails tied to the fraud. Those records can help when you dispute charges, correct tax forms or clean up medical records.
5) Add a fraud alert
You can also place a fraud alert on your credit file. A fraud alert tells lenders to take extra steps before opening new credit in your name.
6) Lock down exposed accounts
If your Social Security number may be involved, move quickly. Change passwords for any affected accounts, and use a password manager to create strong, unique passwords for each one. Then turn on two-factor authentication (2FA) wherever available.
Kurt’s key takeaways
Identity theft rarely starts with a dramatic warning. It often begins with something easy to miss, like a tiny card charge, a missing bill, an odd IRS letter or a medical notice that does not look right. The sooner you catch those clues, the faster you can freeze your credit, lock down accounts and stop the damage from spreading. No single tool catches every scam, but staying alert and using strong monitoring can give you a much better shot at spotting trouble early.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Have you ever spotted a small warning sign that made you realize someone was trying to steal your identity? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
A glass screen protector is one of a few essential accessories that I strongly recommend to every Switch 2 owner. In fact, it should be a priority to stick one onto the console’s screen as soon as possible to avoid accidental scratches.
To test the candidates below, I installed and removed Switch 2 screen protectors on my console at an alarming rate, more than any sane person should, and here are the most important takeaways:
Of the options below, it’s easiest to recommend amFilm’s three-pack of glossy screen protectors. Not only is the pack affordable ($9.99 from Amazon), but the tray also allows for perfect alignment of the glass protector for easy, bubble-free installation. I’ve used this company’s screen protectors on various gadgets for years, and I particularly like its glossy option over the matte finish, since it lets the Switch 2’s screen fully shine through.
Update, June 2nd: Adjusted prices as needed.
If you’re planning to travel this summer, both a Bluetooth tracker and a personal safety device can come in handy, especially if you’ll be exploring on your own. The Pebblebee Halo combines those two gadgets into one, and it’s currently on sale for $49.99 ($10 off) at Amazon, which is the best price we’ve seen. Amazon is also throwing in a fourth Halo for free when you buy three as a part of a limited time promotion.
Whether you’re touring a new city or heading back to your hotel after a night out, the Halo can help in a variety of situations. Like the Pebblebee Clip 5 — our favorite AirTag and Tile alternative — the rechargeable, water-resistant tracker does a good job of accurately helping you keep tabs of bags, wallets, keys, and other valuables. It offers up to 500 feet of Bluetooth range and taps into both Apple’s Find My network and Google’s Find Hub, so you can locate items even further away.
What really sets it apart is that it’s also a personal safety device. With a quick pull, you can trigger off a piercingly loud 130dB siren, bright strobe lights, and automatic location sharing with one trusted contact. If you’d like to send your real-time location to multiple contacts at once, you’ll need Pebblebee’s Alert Live subscription (which costs $24.99 a year), but the good news is the service is included free for the first year, making the Halo an even better value at this price.
NEWYou can now listen to Fox News articles!
If you have ever waited for a login code that never showed up, you already know the pain. You type in your password. Microsoft asks for a code. Then you stare at your phone like it owes you money. Now Microsoft wants to move even further away from that routine.
The company says it will phase out SMS codes as a sign-in and account recovery method for personal Microsoft accounts. Instead, Microsoft wants more people to use passkeys and verified email. This affects anyone who uses a personal Microsoft account. That can include Outlook, OneDrive, Windows, Xbox or Microsoft 365 users.
That may sound like another tech company forcing you to change your habits. In this case, though, there is a real security reason behind it. Text-message codes helped make account logins safer for years. They were never built, however, to protect your digital life. Crooks have learned how to abuse them, steal them and trick people into handing them over.
SIM SWAP SCAM DRAINED FLORIDA WOMAN’S BANK ACCOUNT IN MINUTES
Microsoft is phasing out SMS codes for personal account sign-ins and recovery, pushing users toward passkeys and verified email for stronger security. (Photo Illustration by Serene Lee/SOPA Images/LightRocket via Getty Images)
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.
Why Microsoft is moving away from SMS codes
Microsoft says SMS authentication has become a major source of fraud. Text messages can be intercepted, stolen through SIM-swap scams or captured through phishing attacks. That creates a real problem because your Microsoft account can unlock a lot. It may connect to Outlook, OneDrive, Xbox, Windows, Microsoft 365 and saved payment details.
Once a criminal gets into that account, the damage can spread fast. They may read your email, reset other passwords or look for private files stored in the cloud. SMS codes once felt like a strong extra layer. Today, they can give people a false sense of security.
A scammer may call your phone carrier and try to move your number to another SIM card. They may also send a fake Microsoft login page that asks for your code. If you type it in, the scammer can use it right away. That is why Microsoft wants users to move toward passkeys. Microsoft has not listed a universal cutoff date for every personal account. However, it says users who still rely on SMS will be guided to add a verified email and set up a passkey.
HOW SIM SWAPPING LED TO A $1.8M CYBER FRAUD CASE
What a Microsoft passkey does
A passkey lets you sign in without typing a traditional password. Instead, you use something already tied to your device. That may be your face, fingerprint, device PIN or a physical security key.
Here is the key difference. A passkey uses cryptography behind the scenes. One part stays with Microsoft. The private part stays on your device or inside your password manager. A scammer cannot simply trick you into reading a passkey over the phone.
That makes passkeys much harder to steal than SMS codes. They can also feel easier once you set them up. You may be able to sign in with your fingerprint or face instead of waiting for a text that may never arrive.
MICROSOFT CROSSES PRIVACY LINE FEW EXPECTED
Why Microsoft passkeys may feel confusing at first
Security upgrades can be annoying. SMS codes are familiar. Most people know how they work. Even when they are clunky, they feel simple. Passkeys can feel confusing at first. You may wonder where the passkey lives. You may also wonder what happens if you lose your phone or whether you need one for every device.
That confusion is real. It can get worse if you set up a new Windows PC, use a shared computer or switch devices often. The good news is that Microsoft says verified email will remain part of the account recovery process. So you should make sure your backup email address is current before you run into a lockout.
How to set up or add a passkey to your Microsoft account
Before you start, use a device you trust. Also, make sure your browser and operating system are updated.
- Go to Microsoft’s account security page at account.microsoft.com/security and sign in.
- Under Account Security, select Manage how I sign in.
- Under Ways to prove who you are, look for Use a passkey.
- If you already see a passkey listed, such as Apple iCloud Keychain, your account already has one set up.
- To add another passkey or sign-in method, select Add another way to sign in to your account.
- Choose Use a passkey or Face, fingerprint, PIN or security key, depending on the wording you see.
- Follow the prompts on your device.
- Choose where you want to save the passkey, such as Apple iCloud Keychain, a password manager, your phone, your computer or a physical security key.
- Finish the setup process and confirm the passkey works.
Note: Microsoft’s support pages may say Advanced Security Options, or Add a new way to sign in or verify. However, in the current Microsoft account dashboard, many users may see Manage how I sign in and then Add another way to sign in to your account instead.
AMERICA’S MOST-USED PASSWORD IN 2025 REVEALED
The tech giant says text-message authentication is increasingly vulnerable to phishing attacks, SIM-swap scams and account takeovers. (Joe Raedle/Getty Images)
Microsoft account security steps to take now
Do not rush through this change. A few minutes of cleanup can save you a big headache later.
1) Add a backup email you still use
Your recovery email should be an account you can access today. If it points to an old work email or a forgotten inbox, update it.
2) Remove old phone numbers
Check whether your Microsoft account still lists an old number. If it does, remove it or replace it with your current number.
3) Turn on Microsoft Authenticator
Microsoft Authenticator can give you another secure way to verify your identity. It can also help if you have trouble with SMS or email.
4) Save recovery codes safely
If Microsoft offers backup codes, store them somewhere secure. Do not keep them in a plain note called “Microsoft password.”
5) Use a strong password manager
Even if you move to passkeys, a password manager still helps. It can store strong passwords, flag reused logins and help you avoid fake sign-in pages. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.
IF SOMEONE GETS INTO YOUR EMAIL, THEY OWN EVERY ACCOUNT YOU HAVE. THESE 3 MOVES LOCK THEM OUT FOR GOOD
Passkeys allow Microsoft users to sign in with a fingerprint, face scan, device PIN or security key instead of waiting for a text code. (Jaap Arriens/NurPhoto via Getty Images)
Kurt’s key takeaways
Microsoft’s move away from SMS codes may feel inconvenient at first. However, the old text-code system has too many weak spots. A passkey will not make you invincible. No security tool can promise that. Still, it can make account theft much harder for scammers who rely on fake login pages, stolen codes and SIM-swap tricks. If your Microsoft account holds years of email, family photos or work files, this change deserves your attention. Set up a passkey, verify your backup email and remove old recovery options.
Would you trust a text message to protect your most important account, or has that comfort become the risk? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Wyoming3 minutes agoHoping to draw Colorado interest, construction begins at $80M betting facility in Laramie County
-
Crypto10 minutes agoMissouri attorney general sues CoinFlip over cryptocurrency ATM scams – Missouri – The Black Chronicle
-
Finance13 minutes agoWhat are nonconforming mortgages and what are the risks?
-
Fitness18 minutes agoWhat If Moderate Exercise Isn’t Enough For Women In Midlife?
-
Movie Reviews28 minutes ago‘Masters of the Universe’: What Critics Are Saying About the He-Man Movie Starring Nicholas Galitzine and Jared Leto
-
World40 minutes ago
Movie Review: ‘Masters of the Universe’ does not have the power
-
News43 minutes agoMap: 3.7-Magnitude Earthquake Shakes the San Francisco Bay Area
-
Health1 hour agoWhy Weight Loss Efforts Can Sometimes Lead to Constipation and Digestive Changes
