New-Account Fraud vs Account Takeover — Two Thefts, Two Checklists

The same word, two jobs

Ads say identity theft as if it were one animal. It is at least two. New-account fraud is a lender or utility opening a file because someone presented your Social Security number, date of birth, and a plausible address. Account takeover is a login you already created: email, bank, Amazon, a phone carrier port. The first lives at credit bureaus and new-account desks. The second lives at passwords, session cookies, SIM swaps, and customer-service social engineering. A product that is excellent at one can be almost silent on the other.

People mash them because both feel like 'someone used my name.' The checklists diverge on day one. If you freeze the bureaus after a takeover, you added friction to future loans and did not kick the stranger out of Gmail. If you only change passwords after a new card appears, the next card can still be applied for.

From the record

Ask which door opened. Then pick the tool that closes that door. A dashboard is a hallway camera. It is not both locks.

GUIDEORA rule for identity checklists

If the fear is a card you never asked for

• Place a security freeze at Equifax, Experian, and TransUnion. It is free. It stays until you lift it.
• Pull official files at AnnualCreditReport.com. Look for accounts you do not recognize.
• An in-app lock at one bureau is a speed bump on that bureau. It is not a three-bureau freeze.
• If an account already opened, IdentityTheft.gov is the spine. Banks and the FTC plan beat a shopping tab.

If the fear is someone in an account you already have

• Change that password. Change every account that shared it.
• Use an authenticator or a passkey where the site offers it. SMS is better than nothing and worse than an app code.
• Call the bank or carrier if money or a phone number moved. Port-out PINs matter on mobile.
• A dark-web ping that lists that email is a hint the password may already be public — treat it as a takeover warning, not as new-credit proof.

What inquiry alerts catch — and what they do not

A hard inquiry on a credit file is a lender looking because someone applied. A monitoring ping can tell you that happened this week instead of on a yearly PDF. That is the new-account camera. It will not tell you a stranger is already inside your email. Dump scanning is closer to the takeover camera, and still only sees dumps the vendor indexed.

A bundle that tries to watch both hallways

Aura currently packages three-bureau credit alerts (the new-account camera) with dark-web and identifier watching (closer to takeover clues), Experian Credit Lock, title monitoring, and U.S.-based fraud specialists they describe as white-glove remediation. Family and Kids SKUs add child-related tools; Individual is one adult. Listed prices at writing are about $12 / $22 / $32 per month billed annually for Individual, Couple, and Family, with a 14-day trial and 60-day money-back on annual plans as advertised. Insurance-style coverage is printed as large dollar caps per SKU — eligible losses, exclusions, and paperwork apply. Extras (VPN, antivirus, password manager) only count if you will open them. Checkout always wins.

Do not buy a mash-up and skip the door

Name the theft. Freeze for new accounts. Rotate logins for takeover. If you want a household ops center that watches both hallways, Aura is the example this site uses. Confirm the live plan, seats, and claim rules. GUIDEORA will not tell you that one subscription replaced both checklists.