Which specific accounts need password changes and multi-factor authentication after senior identity theft?

✓ Accepted answer

Following a senior identity theft incident, you must immediately secure email, banking, credit card, brokerage, Social Security, Medicare, and tax accounts by implementing new credentials and two-factor authentication.

• Start with your primary email address. Since email is the gateway for password resets across all other services, change the password immediately and enable multi-factor authentication through a phone app rather than SMS text, which is more vulnerable to interception.
• Secure financial and tax portals. Update credentials for banking, credit card issuers, and tax preparation services like TurboTax. For any account lacking native two-factor support, use a password manager to generate complex, unique strings of at least 16 characters that combine uppercase letters, lowercase letters, numbers, and symbols.
• Protect government and healthcare accounts. Access the Social Security Administration’s My Social Security portal and Medicare.gov to review recent activity. Change the primary login password for the IRS Individual Online Account and review all linked payment or refund settings to ensure no unauthorized routing numbers are present.
• Audit brokerage and investment platforms. Verify account ownership for firms like Vanguard or Fidelity, specifically checking for recent address or mailing code changes that might redirect physical statements to a fraudster’s location.
• Implement physical security measures. Shred old account statements and secure physical records. If the breach involved a physical document compromise, contact the credit bureaus, such as Equifax or Experian, to request a 12-month credit monitoring program and review credit reports for unknown inquiries.

admin · 2026-10-16 22:26:01