What are the odds of being a victim of identity theft?
Evidence quality 4.75/5
Eight-dimension review score against the quality rubric . Each dimension scored 1–5.
- D1 Source grounding
- 5/5
- D2 Source authority
- 5/5
- D3 Arithmetic
- 4/5
- D4 Uncertainty
- 4/5
- D5 Scope
- 5/5
- D6 Prose
- 5/5
- D7 Perception honesty
- 5/5
- D8 Caveat completeness
- 5/5
● your factors — click this risk ▾ to reveal
- Your factors
≈ As likely as
Perceived
Identity theft is one of the few items on Gallup's annual crime-worry list where the perceived risk and the measured risk are both genuinely high. In Gallup's October 2024 crime poll, 69% of US adults said they worry frequently or occasionally about being the victim of identity theft, making it the single most-worried-about crime on the survey for the better part of two decades. Unlike most Likelier entries, the gap between perceived and actual here is narrow.
Rough estimate: ~1 in 2 lifetime feels about right to most respondents
Source: Gallup (2025) — Crime in U.S. Seen as Less Serious for Second Straight Year
Actual
~9% per year (US residents 16+)
US residents age 16 or older
Show derivation
BJS's National Crime Victimization Survey Identity Theft Supplement found that 9% of US residents age 16 or older (about 23.9 million people) experienced identity theft in the 12 months before the 2021 survey, and that 22% had experienced it at some point in their lifetime as of survey date. The 22% is a measured floor (cumulative to current age, averaged across all ages in the sample); the lifetime figure for a current young adult will be higher because they have more years of exposure ahead. Naively compounding the 9% annual hazard over a 59-year remaining adult life gives 1 − (1 − 0.09)^59 ≈ 99.6%, which is implausible: the same wallet, the same SSN, and the same household behaviour drive repeat events, so per-year incidents are not independent and the rate saturates well below 100%. The central 60% point estimate is a midpoint between the BJS measured lifetime floor (22%) and the upper bound implied by the annual hazard with strong saturation. The result is highly definition-dependent: see the body and caveats.
Caveats: This is not a death risk; it is a victimization risk, and the normalized "lifeti…
This is not a death risk; it is a victimization risk, and the normalized "lifetime_us_adult" figure here is the probability that a US adult experiences identity theft at least once during their adult life, not the probability of dying from it. The number is unusually fragile to definition. Counting any unauthorized credit-card charge the issuer reverses gives ~9% per year and a measured 22% lifetime floor. Counting only events with non-recovered out-of-pocket loss cuts the rate by roughly an order of magnitude. Counting only new-account fraud (someone opens a credit line in your name) cuts it by another order of magnitude — BJS puts that subcategory at less than 1% per year. The 60% lifetime central estimate sits in the middle of a wide and definition- dependent band, which is why the uncertainty interval is intentionally large rather than reflecting only sampling error. Identity theft is also one of the few items on this site where individual action measurably moves the number: credit freezes, unique passwords, and two-factor authentication are documented to reduce new-account fraud in particular. A distinct and growing sub-vector is the SIM swap (or port-out), in which a criminal hijacks a victim's mobile number to intercept SMS two-factor codes and then loots linked bank or crypto accounts — a different failure mode from broad identity theft or passive data-breach exposure. Cifas recorded a 1,055% year-over-year jump in unauthorised UK SIM-swap cases in 2024, and the FBI's IC3 logged roughly $26M in US SIM-swap losses across about 982 complaints that year; new FCC SIM-swap and port-out authentication rules reached their compliance date in July 2024. These are absolute case-count and dollar-loss figures with no US per-adult denominator, so they do not move the 60% headline, but they are why an app-based authenticator or hardware key is more robust than SMS-delivered codes for accounts a SIM swap can drain.
How the risk varies
The headline figure averages across very different situations. Here’s how the probability varies by scenario or context:
1 in 4.5 · 22%
BJS NCVS measured floor: ~1 in 5 US adults experience serious ID theft in lifetime
1 in 1.2 · 85%
including one-off unauthorized card charges pushes lifetime prevalence close to universal
1 in 1.7 · 60%
point estimate used in headline; reflects AARP and FTC Sentinel patterns
Bar length and shade rank these scenarios against each other, not against other risks. The exact odds are shown beside each.
Related risks
Other risks on similar themes — for exploring related fears.
Career obsolescence
What are the odds of needing to change careers due to technological disruption?
Pick challenger
Identity theft is the rare entry on this site where the perceived risk is roughly the right order of magnitude. Gallup has put identity-theft worry at the top of its crime-concern list almost every year since 2009, with about 69% of US adults saying they worry frequently or occasionally. The Bureau of Justice Statistics’ household survey puts the measured one-year incidence at about 9% of US residents 16 or older — roughly 24 million people per year — and the measured cumulative lifetime prevalence at the moment of the survey at about 22%. Compounding 9% per year naively across a 59-year adult life would give ~99.6%, which is implausible; with realistic saturation and repeat victimization the central estimate lands somewhere around 60% lifetime, with a band that runs from the BJS measured floor (22%) up to the mid-eighties.
The interesting feature here is definition fragility. Almost all of that ~9% per year is unauthorized charges on existing credit-card or bank accounts, the kind of incident the issuer typically reverses within a billing cycle. BJS puts new-account fraud — someone opens a credit line, files a tax return, or registers for benefits in your name — at less than 1% of people per year, an order of magnitude below the headline rate. The FTC’s Consumer Sentinel Network, which counts reports victims actually file with the federal government, logs about 1.1 million identity-theft reports per year, another order of magnitude below the BJS prompted-recall number. All three are measuring real things; they answer different questions, and the right answer to “what are my odds” depends entirely on which one you mean.
Two further notes for the careful reader. The lifetime figure is not a forecast of how many adults will die of identity theft; it is a probability of experiencing the event at least once, and the normalization slot here is being borrowed accordingly. And unlike most fears on this site, individual action genuinely moves the number: credit freezes, unique passwords, and two-factor authentication are documented to reduce new-account fraud in particular. The pooled rate is the right answer for the population, and the wrong answer for any particular reader who has — or has not — taken the standard hygienic steps.
Related tidbits
Identity theft affects millions annually and is rising. Home burglary rates have dropped 60%+ since the 1990s. People install deadbolts and alarm systems for the declining threat while reusing passwords for the growing one.
Claim ledger
Every number below is what each source reported, with the verbatim quote we relied on and how we arrived at our figure. Click any link to verify directly.
-
[1] US Bureau of Justice Statistics — Victims of Identity Theft, 2021
Victims of Identity Theft, 2021- Statistic
23.9 million US residents age 16+ (9%) experienced identity theft in the prior 12 months; 22% had experienced it in their lifetime- Excerpt
“"About 23.9 million U.S. residents age 16 or older (9% of the population) had experienced identity theft in the past 12 months. Almost 4% of people had their credit card misused, 3% had their bank account misused, and 2% experienced misuse of their email or social media account. Nearly 1% had their personal information misused for fraudulent purposes, and less than 1% had their personal information misused to open a new account. About 1 in 5 persons (22%) had experienced identity theft in their lifetime." ”
- Source data from
- 2023-10-12
- Accessed
- 2026-04-11 · archived copy
- Calculation
- BJS's NCVS Identity Theft Supplement is the gold standard for population-level US identity-theft prevalence because it asks a representative sample of households directly about victimization, rather than counting reports filed with any one agency. Native rate: 9% per year for residents 16+. Lifetime measured floor: 22%. Upper bound from naive compounding (1 − 0.91^59 ≈ 99.6%) is implausible due to repeat victimization and saturation, so I take a midpoint. The "9%" headline includes everything from a single fraudulent credit-card charge that the issuer reverses (the bulk of cases) to new-account fraud requiring extended remediation (less than 1% of people). Restricting to "actual out-of-pocket loss after recovery" would cut the number by roughly an order of magnitude.
- Independence
- BJS NCVS is collected via household interviews and is methodologically independent from the FTC's Consumer Sentinel Network, which counts reports voluntarily filed by consumers. The two undercount in opposite directions: NCVS misses incidents respondents are unaware of, Sentinel misses incidents victims never report.
-
[2] US Federal Trade Commission — Consumer Sentinel Network Data Book 2024
Consumer Sentinel Network Data Book 2024See all 3 Likelier entries citing this source →
- Statistic
1.1+ million identity theft reports filed via IdentityTheft.gov in 2024; credit card identity theft was the largest category at 449,032 reports- Excerpt
“"During 2024, Sentinel received 6.5 million consumer reports … the top three Sentinel report categories were Credit Bureaus and Information Furnishers (21% of all reports), Identity Theft (18%), and Imposter Scams (13%). … In 2024, there were more than 1.1 million reports of identity theft received through the FTC's IdentityTheft.gov website. Credit Card tops the list of identity theft types reported in 2024." ”
- Source data from
- 2025-03-10
- Accessed
- 2026-04-11 · archived copy
- Calculation
- The Sentinel figure (~1.1M reports/year) is roughly an order of magnitude smaller than the BJS-implied incidence (~24M/year), which is the expected ratio between "events serious enough to file a federal report" and "any incident a survey respondent recalls when prompted." Both numbers are real; they answer different questions. Sentinel also feeds the lower-bound of our uncertainty band when paired with the BJS measured-lifetime floor.
- Independence
- Sentinel is fed by consumer-initiated reports and partner-agency intake, while BJS NCVS is a stratified household survey. Methodologically independent collection pipelines.
-
[3] Gallup — Crime in U.S. Seen as Less Serious for Second Straight Year
Crime in U.S. Seen as Less Serious for Second Straight YearSee all 6 Likelier entries citing this source →
- Statistic
69% of US adults worry frequently or occasionally about being the victim of identity theft (October 2024 wave)- Excerpt
“"Overall, Americans worry most about being the victim of identity theft (69%) and being tricked into providing financial information to scammers (53%)." ”
- Source data from
- 2025-10-30
- Accessed
- 2026-04-11 · archived copy
- Calculation
- Used for the perceived-risk side only. Identity theft has consistently topped Gallup's crime-worry list since the question was first asked, almost always at or above two-thirds of respondents. Unlike most Likelier entries the perceived figure and the measured figure are within a factor of two of each other on a lifetime basis.
- Independence
- Gallup telephone polling, entirely separate from BJS NCVS household victimization sampling and FTC Sentinel complaint data. Used only for the perceived-risk axis — measures public worry, not incidence.
-
[4] Cifas — 1,055% surge in unauthorised SIM swaps as mobile and telecoms sector hit hard by rising fraud
1,055% surge in unauthorised SIM swaps as mobile and telecoms sector hit hard by rising fraud- Statistic
UK SIM-swap fraud cases filed to the National Fraud Database surged 1,055% in 2024, to nearly 3,000 unauthorised SIM swaps- Excerpt
“"Cifas, the UK's leading fraud prevention service, has today raised the alarm on SIM swap fraud, with cases surging by 1,055% in 2024. … Nearly 3,000 cases of unauthorised SIM swaps – where criminals hijack a victim's mobile number by porting it to a new SIM without their consent – were filed to the National Fraud Database (NFD) in 2024." ”
- Source data from
- 2025-05-07
- Accessed
- 2026-06-14
- Calculation
- Cited only to document the SIM-swap / account-takeover sub-vector, not to revise the headline. The figure is a year-over-year change in absolute UK case counts (filed to one fraud database), not a US per-adult incidence rate, so it cannot be converted to a lifetime probability and is deliberately excluded from the normalized number. It is directionally consistent with the US picture: the FBI's IC3 2024 Internet Crime Report logged roughly $26M in reported SIM-swap losses across about 982 complaints — again an aggregate dollar/complaint figure with no per-adult denominator. Used to support the caveat on intercepted-SMS-2FA account takeover.
- Independence
- Cifas National Fraud Database is a UK industry consortium feed, methodologically independent from BJS NCVS, FTC Sentinel, and Gallup. UK jurisdiction; cited for vector existence and trend, not as a US incidence estimate.