The Best Identity Theft Protection Services
Total identity protection is wishful thinking: no service can actually prevent your identity from being stolen. Where the best identity theft protection services add value is in the breadth of their monitoring (aka both credit and personal info) and in their ability to use power of attorney to help restore your identity. We signed up for a bunch of accounts and read a lot of fine print to see which services deliver.
The Best Identity Theft Protection Services
Robust Monitoring for the Best Price: IdentityForce
If you’re looking for comprehensive protection, Identity Force’s UltraSecure+Credit plan ($20 per month) is our favorite. It offers essential coverages that include power of attorney and credit monitoring from all three major credit bureaus, plus personal information monitoring that provides mobile and email alerts if, say, a new bank account is opened in your name, or if a payday loan is taken out. And it provides all of this information in a clean, easy-to-use dashboard. The service’s main drawback is its bare-bones mobile app — it will ping you with alerts, but you’ll have to call IdentityForce or login to its live chat to resolve anything. The company also doesn’t cover pre-existing identity theft issues. If either of these features are must-haves, our other top picks will be a better fit. But for most people, Identity Force’s UltraSecure+Credit plan offers thorough monitoring at a reasonable price.
Comprehensive Alerts: LifeLock
LifeLock’s Ultimate Plus plan is another strong option. It offers comprehensive identity monitoring similar to IdentityForce, plus a few extras. Its biggest selling point is its comparatively robust mobile capabilities. If you conduct most of your business on your phone, LifeLock is the only one of our finalists that allows you to start resolving pending issues directly through its mobile app, rather than requiring you to make a phone call or wait until you’re back at your computer. The company also provides notifications for a handful of scenarios not monitored by IdentityForce, including alerts about third-party data breaches and crimes committed in your name. We didn’t feel these features were essential, but they do provide an extra level of reassurance. Just be prepared to pay a little more: This plan runs $30 a month, versus Identity Force’s $20.
Full Recovery for Pre-Existing Theft: ID Watchdog
Already an identity theft victim? In this case, we’d suggest ID Watchdog’s Platinum Plan. At $20 per month, it offers essential alerts and notifications similar to our other top picks, including credit score and bank account monitoring. But ID Watchdog truly stands out in its identity recovery services: It’s the only company that will help you navigate the aftermath of a theft that occurred before you were an ID Watchdog member. It costs extra, but every other service requires the theft to occur during your membership before it’ll take action. The tradeoff is that ID Watchdog’s website is clunky and not intuitive to navigate — and, like IdentityForce, its mobile app has limited capabilities, requiring you to call a customer service representative to resolve pending issues.
November 14, 2017
Our original runner-up, Credit Sesame, paused service on its premium Platinum Protection plan, the only one that met our criteria. We’ll stay on the lookout for its comeback, but until then, we’re not recommending any of Credit Sesame’s identity theft protection service plans.
September 14, 2017
On September 8, 2017, Equifax, one of the Big Three credit reporting agencies, announced it had experienced a data breach spanning mid-May through July. The breach is estimated to have exposed the personal information, including Social Security and credit card numbers, of 143 million American consumers — basically, anyone with a credit report.
If you’re looking to monitor your identity in the wake of such a massive hack, we recommend IdentityForce’s UltraSecure+Credit plan. Like all our top picks, this plan offers robust monitoring of both your credit and your personal details. In the event of identity theft, IdentityForce will also assume limited power of attorney, so its “recovery specialists” can actually do the work of restoring your identity on your behalf. IdentityForce’s plan stands out from our other top picks because it packages everything into a sleek, intuitive web portal that’s easier to operate than IDWatchDog’s comparable package, and $10 per month cheaper than LifeLock’s.
June 9, 2017
Cyber security giant, Symantec, finalized its acquisition of LifeLock in February 2017. Our review has been updated to reflect LifeLock’s new pricing structure and digital tools. The re-booted app and browser portal are sleek and intuitive — truly best-in-class — but those upgrades come with a price jump from $27 to $30 per month.
If you’ve recently had your identity stolen, identity theft protections services can help you clean up the mess. That’s the good news. If you want to proactively protect your identity, let’s level set.
Identity theft protection services don’t actually protect anything. They’re a combination of monitoring and recovery, not an invisible shield around your Social Security number. So while they can’t decrease your chances of becoming a victim, they’ll alert you when something goes awry and help you clean up the mess. But the best don’t stop there: Instead of sending you a checklist and a hotline number, a few services assume power of attorney to act on your behalf, saving you the many hours and major hassle of calling federal agencies, filing affidavits, and in rare cases, hiring lawyers.
How We Found the Best Identity Theft Protection Services
We started by putting together a list of the 18 companies that claim to help consumers maintain ownership of their personally identifying info (we didn’t include ones that only serve businesses). Our initial look at their offerings confirmed that this is an industry littered with unspecific language. Is “credit monitoring” single- or tri-bureau? Does “restoration” mean filing documents and hiring experts, or merely giving advice? We had to dig for details.
We cut any company that doesn’t monitor changes to your credit reports at all three credit bureaus.
Your credit reports are what lenders use to decide whether or not to offer you a loan, so they’re crucial to your financial reputation. They’re also the way many people first learn they’ve been scammed: A bogus account, debt collection, or legal judgment shows up on one of them. The three major credit-reporting agencies — Experian, Equifax, and TransUnion — all compile reports, but use different methods for data collection and have different results. That’s why it’s important to check all three: What shows up on one might not show up on the others.
While everyone has the right to one free report a year from each of the bureaus, early fraud detection requires much more frequent checking. Many companies offer continuous, “real time” monitoring of all three credit bureaus, so we made that our first benchmark for contenders.
EverSafe, IDFreeze, IDShield (LegalShield), Intelius, ProtectMyID (Experian), Zander ID Protection
We also eliminated companies that don’t monitor the use of your personally identifying information online.
Credit monitoring can help you discover red flags sooner than you would otherwise, but certain types of fraud simply won’t appear on your credit reports. If someone has access to things like your Social Security number, driver’s license number, bank details, and/or medical insurance ID, they can steal from your existing accounts “as you” without anyone reporting it to the bureaus. You won’t find out until the next time you check your balances.
And, even though most credit issuers notify the bureaus when a new account is opened in your name, there are important exceptions. A payday loan, for example, requires no credit check and will only appear on your credit reports after it goes to collection — at which point it will have sky-high interest and take substantial paperwork to get removed.
Risks like these stem from your personally identifying information (PII) being out there, and while there’s no way to close Pandora’s box once it’s leaked, there are limited ways to track its exposure. This is where so-called “identity monitoring” comes in. By scanning online databases for your personal info (including consumer records at retailers, utilities, and banks, as well as public records like court documents), identity theft protection services can alert you when you’re potentially at risk. Just like credit monitoring, this won’t actually prevent fraud, but it can prompt you to add security to your accounts (such as changing passwords or enabling two-step verification), and hopefully reduce your response time if a theft occurs.
Know your network. LifeLock’s ID Network (acquired when the company purchased ID Analytics, Inc. in 2012) is the only actual name we learned, but we don’t know which banks, wireless carriers, online lenders, and other entities are included — only that it supposedly scans “a trillion data points a day.”
However, identity monitoring is only as good as the network it employs, and we found it practically impossible to get specific info on any contender about their network’s reach. So in the absence of this, we simply required companies to monitor each of the following categories (which are themselves less than specific): court records, payday loan sites, and “black market” sites where thieves buy and sell identifying details. Our thinking was that even if these scans aren’t comprehensive, they’re better than nothing. We also required scans of the National Change of Address Database, since filing an address change is something thieves often do to keep their victims in the dark, preventing them from getting bills and notices on fraudulent accounts.
Control Your ID (RelyData), Equifax Premier Plan, Identity Fraud, myFICO, Privacy Guard (Affinion), TrustedID IDEssentials
Then we graded them on how they alert you to suspicious activity and potential fraud.
If credit or identity monitoring reveals something fishy, how does the company let you know? We eliminated any that don’t offer both email and text notifications, along with 24/7 availability by phone. If an alert’s significance isn’t immediately clear, we want to know we can get someone on the line quickly to explain it, and initiate recovery steps if necessary.
Most importantly, we made sure that if your identity is stolen, they’ll do as much legwork as they legally can to reclaim it.
In 2014, the Federal Trade Commission estimated the average identity theft victim spent more than 200 hours across 18 months resolving their issues with credit-reporting agencies. Lots of companies offer “recovery assistance” in the wake of a stolen-identity event, but their concrete services vary widely. (Some, like Identity Guard, offer advice over the phone, while others, such as IdentitySecure, give you online tools.)
To be worth paying for, a service should actually do the work of contacting creditors, employers, and law enforcement agencies on your behalf, involving you only when necessary. This requires a temporary power of attorney authorization from you, and there are still important things it can’t cover, including dealings with the IRS or Social Security Administration (which were necessary to resolve 39 percent of identity theft cases in 2014). Without granting power of attorney though, you’ll definitely have to place every phone call, write every letter, and send every email yourself, and that can eat up hours.
“The true cost of identity theft isn’t in paying back what’s been stolen, but in clearing your name.”
Additionally, $1 million insurance policies have also become ubiquitous (15 of our 18 initial contenders offer them), but just as with restoration services, it’s important to read the fine print. Every policy we reviewed has much lower coverages for specific, common recovery expenses, such as document filings, travel, and lost-wage reimbursement if you have to take time off work. The million-dollar limit applies only to legal fees, and those are typically minor since most identity theft incidents are settled without attorneys.
Even though there are significant limits to both power of attorney and insurance, they represent the best restoration service a company can offer, so we required contenders to include both.
Identity Guard, IdentitySecure (Affinion)
Lastly, we compared the experiences of actually using our top services.
Only three companies met our battery of exceptions, but we couldn’t pick a favorite without using the services ourselves. (It our original review, we tested four, but Credit Sesame stopped its Platinum Protection plan in late 2017, which was the only one that met our criteria.) We enrolled in, paid for, and entrusted our most sensitive information to ID Watchdog, IdentityForce, and LifeLock, and compared what we got in return. Was it easy to understand and manage alerts?
Our testing could only go so far since (thankfully) we didn’t uncover any major red flags, so we couldn’t compare actual restoration services. But we did comb through each company’s fine print “explanation of benefits” and confirmed with their reps what we could expect if things went sideways.
Our Picks for the Best Identity Theft Protection Services
If you’re confident you’re not yet a victim of ID theft, IdentityForce’s UltraSecure+Credit has everything you need. The scope of the company’s monitoring and restoration match that of LifeLock, and at $20/month, it’s also $10 cheaper. It does lack a few nice-to-have features, like notifications of third-party data breaches, but has you covered on essentials like three-bureau credit monitoring, identity monitoring, and alerts for bank activity.
Upon log-in, features that most users will need regularly — including your recent alerts, your credit score, and links to other accounts in your family plan — are displayed prominently on the dashboard. We found this a nice change of pace after ID Watchdog’s clunky web portal, which hid our credit score info beneath a long list of minor monitoring features like “solicitation reduction.”
IdentityForce’s main weakness is its app, which lags behind LifeLock: You can use it to view alerts, but you’ll need to call customer service or use IdentityForce’s live chat if you actually need to resolve fraudulent activity.
We did appreciate the company’s affordable family options. Child protection is $3/month per kid, the cheapest of all our finalists. (Just note that there’s no discount for other adults.) If you’re willing to pay for a full year up-front, IdentityForce also offers a discount: its annual membership runs $200, which gives you 2 free months.
LifeLock’s mobile app is the sleekest and easiest to use of all our top picks, with a website portal that’s similarly intuitive. The company’s $30/month Ultimate Plus plan is the priciest of our top picks, but also has the most comprehensive set of tools and alerts — including the option to receive every notification via a phone call, so that a live rep can explain the alert’s significance. And between fictitious ID monitoring, bank account and investment activity alerts, and monthly credit score tracking, LifeLock keeps tabs on just about everything.
That’s not to say the company has a squeaky clean history. In 2015, LifeLock was sued by the FTC for failing to secure customers’ personal data up to advertised standards. Since then, LifeLock has been acquired by cyber security giant, Symantec. We anticipate better business practices going forward — and since its acquisition, LifeLock’s app and browser portal have become best-in-class.
The Ultimate Plus plan gets you the full power of LifeLock for $30 per month, which we recommend because it includes monthly credit score tracking across all three credit bureaus. If you want to protect your kids too, each child can be added for $6 per month.
ID Watchdog Review
It may not come in the shiniest package, but in terms of both service and price, ID Watchdog stands out. Its star attribute is something no other company offered: rehabilitation for pre-existing theft (all the other finalists require you to discover the theft during your membership).
This means you can find a bogus item on one of your credit reports, or discover a warrant out for your arrest, before enrolling in ID Watchdog, and it will still work on your behalf to remove it using power of attorney.
Termed “ID Rehab for Previously-Existing Conditions,” the service carries fees in addition to the membership cost (it’s $80 per financial record error, $180 per civil court record error, and $280 per criminal court record error), but depending on the reach of your damage, it’s possible it could wind up being a bargain. If you discover the theft during your enrollment, restoration is covered under your standard membership agreement (the same as with our other two finalists).
The Best Identity Theft Protection Services: Summed Up
Did You Know?
Even the best services can’t help you with certain types of identity theft.
Commercial services can monitor your credit reports, public records, and certain other websites, but privacy laws bar them from accessing your medical benefit statements, as well as any tax info or Social Security benefits paid in your name. It’s up to you to keep track of these things by requesting your records from the agencies themselves.
Tax-related identity theft, in which a thief claims your tax refund before you do, is also disturbingly prevalent. In 2015, it accounted for nearly 49 percent of all reported identity thefts. And because government offices also do not recognize power of attorney to resolve disputes, the most an outside company can do for you in that situation is give you the right forms to fill out.
“HIPAA Privacy Rules prevent health care providers and insurers from disclosing your personal health info to third parties, so it’s your responsibility to confirm the correctness of your medical records.”
Medical identity theft is potentially quite scary, because in addition to exhausting your insurance benefits, it can pose real threats to your health. When someone else obtains care in your name, your files may be updated to reflect their diagnosis and treatments. This means that if you show up at the hospital in a life-threatening emergency, you might be given the wrong drug or otherwise not get the care you need.
Any time you receive medical treatment, you should get an Explanation of Benefits (EOB) statement or Medicare Summary. Read these line by line and pay special attention to the services provided, the name of the healthcare provider, the date of the service, and your personal information. The slightest error — like a misspelled name or incorrect procedure date — could be a warning sign of medical identity theft. Report errors like these to your health plan; you’ll find the customer service number on the statement.
Getting a bill for a medical service that didn’t happen is another blatant sign of identity theft. Also keep an eye out for odd notices regarding your health plan’s benefit limit or debt collections that your don’t recognize. The bottom line is if anything on your medical statements or notices doesn’t make sense, investigate it.
Here’s how to correct mistakes on your medical records:
- Request copies of your medical records. Reach out to every health care provider you’ve used — not just your doctor, but any labs, hospitals, or physical therapy centers, too — and request copies of your records. Some providers might ask you to pay for them, but no provider can legally withhold your information. If a provider refuses to oblige you within 30 days of a written request, you should file a “Privacy or Security of Health Information” complaint with the U.S. Department of Health and Human Services’ Office for Civil Rights.
- Account for Disclosures. When you request copies of your medical records, also ask providers for a copy of the “accounting of disclosures” for you files, which is a list of when, where, why, and to whom your information has ever been released. Legally, you can request one copy every 12 months from all your medical providers.
- Request Corrections. If you find any errors, write a letter to the health care provider describing them and send it by certified mail (or fax) — this cannot be done online. Ask for a return receipt before shipping it off, and keep copies of everything. Also be sure to explicitly document the disputed items; circling errors on a copy of the record in question works.
No company can safeguard your personal data 100 percent.
Hackers and security teams are continually trying to outsmart each other, and the ever-growing list of data breaches is evidence that the good guys don’t always win. Even though each of our finalists employs state-of-the-industry security, the decision of whether to entrust your personal information to them is still one to weigh against the potential benefits of their post-theft recovery services.
There are free and low-cost alternatives to paying for protection.
Given that the “protection” offered by companies is really just monitoring and restitution, it’s important to know what you can do for yourself on these fronts. (In fact, this is the main reason Consumer Reports advises to skip paying for identity protection altogether.)
The Fair Credit Reporting Act entitles all Americans to one free report per year from each of the three bureaus (request them at AnnualCreditReport.com). Sites like Credit Karma and Credit Sesame (the free version) also provide no-cost, single-bureau monitoring, with alerts when something big changes.
New account fraud is on the rise. New account fraud — a scheme where identity thieves apply for new cards with your information — grew over 100 percent from 2014 to 2015 and now accounts for 20 percent of all fraud losses in the US.
If you get suspicious (or just paranoid), you can also place a free 90-day fraud alert on your credit file, which directs potential lenders to verify your identity directly with you before opening any new accounts in your name. Or if you think your identity’s already been compromised, you can go a step further and lock your credit reports via a credit freeze. This prevents creditors from even seeing your files. It costs $5–10 to place a freeze, depending on your state (and the same again to “unfreeze” if you want to apply for new credit) but it will prevent 99% of unauthorized new accounts. “A credit freeze is the most effective method out there for stopping new account fraud,” says Minniti.
If a thief does end up causing havoc with your info, IdentityTheft.gov is the federal government’s free restitution website, with step-by-step instructions on what to do for specifics types of ID theft. While it’s enough for an industrious victim to resolve most incidents, it doesn’t pay for expenses and it’s 100 percent DIY.
That $1 million insurance is worth less than you think.
Million-dollar insurance policies are practically a standard feature of identity theft protection companies these days (like we said, 15 of our initial 18 contenders include one), but it’s important to know what they do and don’t cover.
For starters, the policies that come with these services only kick in after all other coverage has been exhausted, so if you have an identity theft clause or rider in your homeowners or renters policy, you should make sure you’re not paying for additional coverage you won’t be able to use.
Know too that most of that hefty $1 million limit applies only to legal costs, which you’re unlikely to have except in a particularly complex case. Things like wage reimbursement, travel expenses, and child care have much lower limits under the policy: typically $1,000–$2,000 per week, for a maximum of four to six weeks. Stolen-fund reimbursement is also rarely used because of consumer protections in the Fair Credit Billing Act (FCBA) and the Electronic Fund Transfer Act (EFTA). You’re never on the hook for more than $50 from an unauthorized credit card use, and as long as you report a theft within 60 days, your maximum liability for check or debit card fraud is $500.
The Bottom Line
While no service can prevent you from becoming a victim of identity theft, the best will be on high alert for threats through continuous monitoring of your credit reports and your personal information online. If your identity is stolen, you want a service that can take control of restitution to the extent of their legal power of attorney — but even that has no advantage in cases involving government benefits.
Utilize free account services at your bank or credit issuer. Most banks offer free transaction-monitoring tools that will notify you whenever an account withdrawal exceeds a limit set by you. An increasing number of credit card companies also bundle credit scores and monitoring with their standard service. Both are free ways for you to stay up-to-date on important financial data.
Opt-out of prescreened offers. Unsolicited mail from credit card and insurance companies is more than just annoying; it can actually be dangerous if it falls into the wrong hands, since it contains your full name, address, and the promise of approval for credit. OptOutPrescreen.com lets you remove your info from the list that credit bureaus give to banks and insurance companies, so they’ll stop sending you preapproved offers. You can always check your credit and available offers yourself at a free credit-monitoring site anyway.
Make a habit of reviewing your medical and insurance statements. Because of health information privacy laws, identity theft protection services can’t monitor your medical statements. Read bills, collection notices, and any other medical statements to ensure the information is accurate. Something as simple as an incorrect date for a procedure could be a sign of medical identity theft.
More Identity Theft Protection Service Reviews
We’ve been looking into identity theft protection services for a few years now, and you can check out some of our other reviews. They aren’t consistent with our latest round of research (yet!) so be on the lookout for updates in the coming weeks: