In addition to getting the bank "hold" set up, and checking your credit reports regularly, the other things you should do are 1) file a police report, and 2) notify the credit bureaus that you need a fraud-lock on your accounts. That way if the scum try to do an end-run and get another account set up elsewhere with your info, it will be flagged and denied. The police report won't be acted on, per se, but will be proof that your identity was compromised and that you've done due diligence to notify them. Creditors would then not have a leg to stand on if they were to try to collect $ from you. Some police departments let you make a report like this on-line and it's pretty easy. Just a good thing to have in case this goes from bad to ugly to uglier before it gets totally resolved.