Most people discover identity theft in one of three ways: an alert from a monitoring service, a denial when applying for credit they should easily qualify for, or a collections notice for a debt they never incurred. However it surfaces, the first few hours matter more for a successful insurance claim than most people realize. What you do before you call your insurer directly affects how much you recover and how quickly.
Identity theft insurance claims are document-intensive by design. The insurer needs to verify that a theft occurred, that the expenses you’re claiming arose from that theft, and that those expenses fall within the policy’s covered categories. That documentation trail starts the moment you discover the problem, not when you finally get around to filing a claim. Getting organized immediately — even when you’re stressed and overwhelmed — is the most important thing you can do for your claim outcome.
Step One: Document the Theft Through Official Channels
Before you touch the insurance company, you need official records of the theft. These records serve two purposes: they document your situation with the government agencies that have authority to act on identity theft, and they give your insurer the third-party verification they need to process a claim without just taking your word for what happened.
Start at IdentityTheft.gov, which is the Federal Trade Commission’s dedicated identity theft reporting portal. This is not optional — it’s the most important single step in the early process. You’ll answer questions about what happened, and the site generates a personalized recovery plan along with an official FTC Identity Theft Report. That report is a legally recognized document that you can use with creditors to dispute fraudulent accounts. It also functions as a substitute for a police report in many situations where police are reluctant to take identity theft reports. Save the PDF. Print a copy. You’ll need it repeatedly.
File a police report, even if local police seem indifferent or tell you there’s nothing they can do. Go to your local police department in person and ask to file a report for identity theft. Bring the FTC Identity Theft Report with you as documentation. Some departments will take the report readily. Others will minimize it or try to redirect you. Be persistent. An official police report with a case number is valuable for your insurance claim and for working with creditors. If your local department won’t take the report, request the refusal in writing, and keep that documentation too.
Place fraud alerts at all three credit bureaus — Equifax, Experian, and TransUnion. An initial fraud alert lasts one year and requires creditors to take extra steps to verify identity before opening new accounts in your name. You only need to contact one bureau to place the initial alert; they’re required to notify the others. If the theft is serious, consider placing a credit freeze at all three bureaus rather than just a fraud alert. A freeze is stronger protection and doesn’t prevent existing accounts from working. Placing the fraud alert or freeze creates a timestamped record of when you responded to the theft, which supports the timeline in your insurance claim.
Request your free credit reports immediately through AnnualCreditReport.com and review every account, every inquiry, every address on file. Document everything that doesn’t belong. Screen-capture or print the reports showing the fraudulent items. This becomes your baseline evidence for what the thief opened, when, and in what amounts.
Step Two: Contact Your Insurer to Open a Claim
Once you have the FTC report number, the police report case number, and initial documentation of what accounts are affected, call your insurer to open a claim. Do this promptly — most policies have a reporting window, and waiting weeks to notify the insurer can jeopardize your claim regardless of how well-documented everything else is.
Know where to find your policy before you call. If you have identity theft coverage as a rider on your homeowners or renters policy, call the same number as you would for any other claim. If you have a standalone identity theft insurance policy, use that policy’s claims number. If coverage came bundled with a monitoring service, that service’s customer support line typically handles claim initiation. The claims number should be on your policy declarations page or in your policy documents — look for it before you’re in a crisis, and note it somewhere accessible.
When you call to open the claim, have your policy number ready, along with a brief factual description of what happened and when you discovered it. The intake representative will tell you what documentation they need to proceed. Get that list in writing — either ask them to email it to you or write it down verbatim during the call. Ask specifically what format they require for documenting lost wages, since that calculation varies by policy and some insurers want it in a specific format.
Ask during the first call whether your policy includes restoration services — a case manager or specialist who handles communications with creditors, credit bureaus, and government agencies on your behalf. Many mid-tier and premium identity theft insurance products include this as a major feature. If yours does, the claims representative will connect you with that service or explain how to activate it. Using professional restoration services, when available, typically speeds up the recovery timeline significantly and can reduce your out-of-pocket expenses because the specialists know the exact process and can resolve disputes more efficiently than most individuals working alone.
What Expenses Are Reimbursable and How to Document Them
The expenses covered by an identity theft insurance policy are specific and your documentation has to match. Generic claims that you “spent a lot of time dealing with this” will not result in payment. Each dollar claimed needs a corresponding document.
Legal fees are typically the largest covered expense category and the most straightforward to document. If you hire an attorney to dispute fraudulent debts, negotiate with creditors, or defend against any criminal matter that arose from the theft, keep every invoice and every payment receipt. Make sure the attorney’s invoices describe the services provided in enough detail that the insurer can confirm the work was related to the identity theft recovery. A single invoice that says “legal services – $4,500” is less useful than one that itemizes specific tasks and dates.
Lost wages require the most careful documentation. Most policies reimburse wages lost due to time taken off work to deal with the recovery — making calls during business hours, appearing in person at government agencies, attending court hearings. The documentation typically requires a letter from your employer confirming your daily or hourly wage rate, documentation of the specific dates and number of hours you were away from work, and a description of what you were doing during those hours. Keep a running log from the first day. Date, hours, what you did, whom you contacted, what outcome resulted. This log is both your wage claim document and your evidence trail for the overall claim.
Document every phone call related to the theft. Time, number called, who you spoke with, what was discussed, what was resolved or unresolved, follow-up required. This sounds excessive when you’re in the middle of it, but this log protects you if the insurer questions your claimed hours and it helps you track outstanding disputes so nothing falls through the cracks during what can be a months-long recovery process.
Notary fees, certified mail, and overnight shipping costs are usually covered and are easy to document. Keep every receipt. These are small individually but can add up to a few hundred dollars and every covered dollar counts. Document costs for government document replacement — if the thief had access to your passport or driver’s license information and you need to replace those documents, the fees are typically covered. Keep the original renewal or replacement receipts and note explicitly that the replacement was required due to the theft.
Travel expenses for required in-person appearances are covered by some policies but not all. Check your policy terms specifically on this. If it’s covered, document it the same way you would for a business expense report: date, purpose, destination, mileage or transit receipts, parking.
Child care or elder care costs incurred because you needed to handle recovery tasks during hours when you’d normally be providing care — these are covered in some policies and excluded in others. Again, check your specific policy. If covered, document with receipts from the care provider and a note explaining why the care was required (specifically what recovery task required your time).
How Restoration Services Work if Your Policy Includes Them
Restoration services are one of the most underused benefits in identity theft insurance policies. A restoration specialist — sometimes called a case manager or recovery advocate — is a professional who manages the bureaucratic heavy lifting of the recovery on your behalf. They know the exact letters to send, the exact processes at each credit bureau, the legal provisions that require creditors to respond, and the timelines involved. For most people, having a specialist handle this is significantly more efficient than working through it alone.
When you activate restoration services, you’ll typically be assigned a single case manager who works with you throughout the recovery. You provide the documentation you’ve gathered — the FTC report, police report, copies of fraudulent accounts — and they use limited power of attorney to communicate with creditors, credit bureaus, and government agencies on your behalf. You still need to be available to authorize specific actions and respond to requests, but the daily burden of the recovery shifts substantially to the specialist.
Restoration services don’t change the reimbursable expense calculation for your claim — they’re a service benefit, not a payment. But they often reduce the overall recovery cost because an experienced specialist resolves disputes faster and more completely than an individual navigating the process for the first time. Fewer unresolved disputes mean fewer ongoing costs and fewer follow-up claims.
If your policy includes restoration services, use them. The most common mistake people make with this benefit is trying to handle everything themselves first and then calling the restoration service months later when they’re frustrated and the situation has gotten complicated. Activate the restoration service at the beginning, even if you’re not sure you need it, and let them guide the process.
Common Claim Mistakes That Lead to Denials or Underpayment
The most common reason identity theft insurance claims get partially denied is poor expense documentation. People submit a claim for $8,000 in losses and the insurer pays $2,400 because the other $5,600 wasn’t supported by receipts or the expense log. The coverage was there — the documentation wasn’t. Keep everything from day one. If you’re a week into the process and haven’t been keeping records, start immediately and reconstruct what you can from bank statements, call logs on your phone, and calendar entries.
The second most common mistake is waiting too long to notify the insurer. Policies have reporting requirements, and failing to report promptly gives the insurer grounds to question the validity of expenses incurred before notification. Notify your insurer as soon as you’ve gathered the basic official documentation — FTC report and police report. Don’t wait until the recovery is complete.
Claiming expenses that aren’t covered under the policy terms is a third source of underpayment. Read your policy before you submit. If your policy doesn’t cover lost wages, claiming them only delays your claim processing. If there’s a deductible, understand how it applies to the total claim. If there are per-category sublimits — say, $2,500 maximum for legal fees even though your total policy limit is $25,000 — factor those into your claim expectations early rather than being surprised at settlement.
Failing to exhaust other available remedies is an issue with some insurers. Many identity theft policies are secondary coverage — meaning the insurer expects you to first pursue recovery through other channels (your bank’s fraud department, the Fair Credit Billing Act dispute process, the creditor’s own fraud resolution process) before the insurance pays. If you skipped those steps and came directly to insurance, the insurer may ask why and may require you to attempt those remedies before they pay. The FTC’s recovery plan through IdentityTheft.gov walks you through those channels, which is another reason completing that process first is the right sequence.
Finally, don’t close out the claim prematurely. Identity theft recovery can take 6 to 18 months. New fraudulent accounts may surface. Disputes with creditors that seemed resolved may reopen. Legal fees can continue to accumulate. Understand your policy’s claim timeline — some allow you to keep a claim open for a defined period and submit supplemental expenses as they arise. Others require you to close and finalize the claim at a set point. Know your window and don’t walk away from legitimate expenses because you rushed to close.
Realistic Timeline and What Insurance Covers Along the Way
A modest identity theft case — one or two fraudulent accounts with a cooperative creditor — might resolve in 60 to 90 days. A complex case involving multiple accounts, multiple creditors, a tax fraud component, or any criminal matter can take a year or more. Insurance is not going to accelerate that timeline, but it can make the financial load of the process manageable.
In the first 30 days, expenses typically include the government document costs, certified mail and notary costs, and the initial attorney consultation if the situation warrants legal help. These are usually moderate in total.
In months 2 through 6, the bulk of the lost wage costs tend to accumulate if the case requires ongoing attention. Legal fees climb if creditors are uncooperative or if a dispute requires more formal intervention. This is often the heaviest expense period.
Beyond 6 months, cases involving credit bureau dispute escalations, collection agencies that reopen resolved accounts, or any government agency involvement (IRS tax fraud resolution, for example, is notoriously slow) continue to generate expenses. Keep documenting. Keep the claim open if your policy allows it.
The insurance doesn’t cover the emotional cost, the time spent explaining yourself to creditors for the fourth time, or the credit score impact that may affect your borrowing costs for years. What it covers is real money — legal bills, wages, fees, costs — and making sure you get every dollar the policy allows is worth the discipline of thorough documentation from day one.