call one of 3 credit bureaus to put fraud alert on your file for 90 days. renew that alert when it's due.