What Should You Do If a Verification Message Suggests Someone Is Opening a Loan Account in Your Name?

If you receive a verification text, email, or phone call about a loan you didn’t request, treat it like a smoke alarm. It could be a harmless error—or a sign someone is trying to open credit in your name. Here’s how to quickly confirm what’s real, stop the attempt, and protect your identity and credit.

First, Don’t Click or Reply

Scammers often send real-looking verification messages to trick you into sharing a one-time passcode or personal data. Until you verify what’s happening:

• Do not click links or open attachments.
• Do not call numbers in the message or reply to it.
• Do not share any codes with anyone who contacts you.

Instead, find the company’s official website or phone number yourself and proceed from there.

Step 1: Verify Directly With the Lender, Using a Trusted Path

If the message names a specific lender (for example, “Your verification code for Acme Loans is 123456”):

1. Go to the lender’s official website by typing the URL into your browser, or use the number printed on a statement or listed on their verified corporate page.
2. Call and say you received a verification message for an application you didn’t make. Ask if an application exists under your name or SSN.
3. If an application exists, request immediate cancellation and that they mark it as suspected fraud.
4. Ask them to put a note on your profile to require extra verification for future applications.

If the message doesn’t name a lender or seems generic, skip to the protection steps below and monitor your credit for any new hard inquiries or accounts.

Step 2: Place a Free Fraud Alert (Takes Minutes)

A fraud alert tells lenders to take extra steps to verify your identity before opening new credit. It’s free, lasts one year, and you only need to contact one bureau—Equifax, Experian, or TransUnion—which must notify the other two.

1. Visit Equifax, Experian, or TransUnion and add a one-year fraud alert.
2. Keep confirmation for your records.

If you’ve already confirmed someone used your information, you can request an extended fraud alert (seven years) after filing an identity theft report.

Step 3: Consider a Credit Freeze for Stronger Prevention

A credit freeze blocks new lenders from pulling your credit report, which usually stops new accounts from being opened. It’s free and you can lift it temporarily when you need to apply for credit.

• Place a freeze separately at all three bureaus: Equifax, Experian, and TransUnion.
• Store your PINs and login credentials securely so you can thaw when needed.

A freeze is stronger than a fraud alert, but you can use both together for layered protection.

Step 4: Check Your Credit Reports and Recent Inquiries

Look for unfamiliar applications, hard inquiries, or accounts:

• Pull free reports from each bureau at AnnualCreditReport.com.
• Review the “hard inquiries” section for new applications you don’t recognize.
• Scan for new loans, cards, or collection accounts you didn’t open.

Dispute any fraudulent items with each credit bureau and the lender. Keep copies of all dispute letters and confirmations.

Step 5: If There’s Evidence of Identity Theft, Create an Official Record

If your information was misused (or an application was submitted in your name), add documentation:

• File a report at IdentityTheft.gov to create a recovery plan and an FTC Identity Theft Report.
• Optionally file a police report if a lender or creditor requests it, or if you know the impostor.
• Send your FTC report to lenders and bureaus when disputing fraudulent accounts or requesting an extended fraud alert.

How to Handle Verification Codes and Imposter Calls

One-time passcodes (OTPs) protect your accounts—never share them. Common tricks include:

• “Read me the code I just sent you.” Real companies won’t ask for this. Hang up and call the official number.
• “We need to confirm your identity—what’s your SSN?” Don’t share. Call the lender using a known-good number.
• Phishing links in texts or emails. Go directly to the lender’s site instead of clicking.

What If You Already Gave a Code?

Act immediately:

1. Call the lender at their official number and report possible account takeover or fraudulent application. Ask them to cancel, lock, or reset any pending application and add a fraud notation.
2. Change passwords for your email and financial accounts. Turn on multi-factor authentication using an authenticator app rather than SMS if possible.
3. Place a fraud alert and consider a credit freeze with all three bureaus.
4. Monitor your credit and bank/credit card accounts for unauthorized activity.

Disputing a Fraudulent Loan or Inquiry

If a fraudulent application or account reached your credit file:

1. Contact the lender’s fraud department and state the account is unauthorized.
2. Send copies of your FTC Identity Theft Report and any police report.
3. Ask the lender to close the account, reverse charges, and remove any negative marks.
4. File disputes with each credit bureau reporting the item. Include documentation and request removal of the fraudulent account and inquiry.
5. Follow up until the item is deleted and you have written confirmation.

Protect the Accounts That Criminals Target First

Criminals often pivot from loan attempts to taking over your existing accounts. Shore up the basics:

• Email: Change your password to a strong, unique one; enable multi-factor authentication; review recovery options.
• Mobile carrier: Add a port-out/SIM-swap PIN and account note requiring in-store ID for changes.
• Banking and card accounts: Turn on transaction alerts; use unique passwords; verify contact details.
• Password manager: Use one to create and store unique passwords across all services.

Red Flags That Point to a Real Application vs. a Scam Message

• Real application indicators: You see a new hard inquiry on your credit report; the lender confirms an application; you receive multiple notices (email, letter, or call) referencing the same application ID.
• Likely scam indicators: Generic sender address or short code; misspellings; links to odd domains; urgent pressure to share codes; caller refuses to let you call back on a published number.

Should You Freeze, Monitor, or Both?

A freeze helps prevent new-account fraud, while monitoring helps you notice changes quickly. Each serves a different purpose and they work well together. Many people freeze their credit and also use alerts and monitoring to see new inquiries, accounts, or suspicious activity quickly. Related reading:

• Can Credit Monitoring Catch Fraud Before It Damages Your Credit?
• Why Can Fraud Happen Without Appearing on Your Credit Report?

Keep Organized: Your Mini Incident Log

When dealing with potential identity misuse, keep a simple log. This helps if you need to escalate or prove timelines:

• When you received the verification message and what it said.
• Every call you made (date, time, who you spoke with, reference numbers).
• Copies of disputes, letters, and confirmation emails.
• Dates you placed/removed freezes and alerts.

If This Happened Because of a Data Breach

If you know or suspect a recent breach exposed your information:

• Change passwords and security questions for any affected accounts.
• Enable multi-factor authentication on email, financial, and cloud accounts.
• Use unique passwords everywhere—avoid reusing the same password.
• Keep the credit freeze and watch for tax, employment, or benefits fraud during tax season.

When to Escalate

Escalate if you see any of the following:

• A confirmed application or account you didn’t open.
• Collections notices or bills for accounts you don’t recognize.
• Multiple verification messages from different lenders.

At that point, file the FTC Identity Theft Report, consider a police report, notify impacted lenders, and use an extended fraud alert.

FAQ

Is a fraud alert enough on its own?

It helps slow down new-account fraud by requiring extra verification, but it doesn’t block access to your credit file. A freeze is stronger because it prevents most new lenders from viewing your report in the first place.

Will a credit freeze affect my current credit cards or loans?

No. Your existing accounts continue working. A freeze mainly affects new credit applications until you temporarily lift it.

What if the verification message used my correct name and address?

That’s common—basic details are widely available through data brokers and past breaches. Treat it seriously, verify with the lender directly, and take the protective steps above.

How fast should I act?

Immediately. Place a fraud alert or freeze the same day you receive the message, then verify with the lender and check your credit reports.

Next Optional Step: Evaluate Credit and Identity Monitoring

After you’ve locked down your credit with alerts and freezes, many people add ongoing monitoring to catch new inquiries, account changes, and other identity risks quickly. If you want to compare an all-in-one option designed for credit, identity, and privacy oversight, you can review SmartCredit here: SmartCredit for privacy, credit monitoring, and identity protection.

Conclusion

A surprise loan verification message is a high-priority warning. Don’t click or reply. Instead, verify with the lender using a trusted phone number, place a fraud alert, consider a credit freeze, and review your credit reports for new inquiries or accounts. If there’s any sign of misuse, create an official identity theft record and dispute fraudulent items right away. With layered protections—freeze plus monitoring, strong authentication, and secure passwords—you can shut down attempts quickly and reduce the risk of lasting damage to your credit and identity.