What is identity theft?

Identity theft is when your personal information, such as your name, bank details or data of birth are stolen. In this situation, you should contact your bank or credit card company, and the police, as soon as possible.
Tali RamseySenior Writer

Tali writes about scams and consumer rights for Which? delving into fraud, technology and consumer rights topics to keep readers safe and empowered.

In this article

Outsmart the fraudsters

free newsletter

Sign up for our free Scam Alerts service.

Our Scam Alerts newsletter delivers scams-related content, along with other information about Which? Group products and services. We won't keep sending you the newsletter if you don't want it – unsubscribe whenever you want. Your data will be processed in accordance with our privacy notice.

What is identity theft?

Identity theft is when personal details are stolen and can happen whether that person is alive or dead.

Identity thieves can steal your personal information in a number of ways, including buying details from the dark web (a hidden and unregulated part of the internet) following a data breach or by going through your post to find bank and credit card statements, pre-approved credit offers or tax information.

What is identity fraud?

Identity (ID) fraud is the use of a stolen identity to obtain goods or services by deception.

A victim can be left feeling extremely vulnerable, especially as the first you learn of ID fraud could be when you get a bill or invoice for something you haven’t ordered, or when you have letters from debt collectors for debts that aren’t yours.

Fraudsters can use your identity details to:

  • open a bank account
  • obtain credit cards, loans and state benefits
  • order goods in your name
  • take over your existing accounts
  • take out a mobile phone contract
  • obtain genuine documents, such as passports and driving licences, in your name.

Using a stolen identity for any of the above activities is identity fraud and a criminal offence.

Caution

Cifas protective registration service

If you're worried your personal details have been stolen, you've noticed any unusual account activity, or you've dealt with an organisation that's recently lost or leaked sensitive data, you may be at risk of becoming a victim of identity fraud.

Cifas offers a protective registration service which places a flag alongside your name and personal details in its secure National Fraud Database, costing £25 for two years.

The idea is that companies and organisations who are signed up as members of the database will see you’re at risk and take extra steps to protect you, preventing fraudsters from using your details to apply for products and services.

Avoid identity theft and identity fraud

Identity theft can happen to anyone, but there are important things you can do to protect yourself against identity fraud:

  • If you receive an unsolicited email or phone call from what appears to be your bank or building society asking for your security details, never reveal your full password, login details or account numbers.
  • Make sure you check your credit file to see if any new accounts have been opened in your name that you don't recognise. Read our guide on how to do this for free.
  • Remember that a bank will never ask for your Pin, or for a whole security number or password, either over the phone or via email. You will never need to share these details with anyone.
  • Create strong passwords for use online, and don’t use the same one for every website you log in to. If you struggle to keep track of your passwords, you might benefit from using a password manager.
  • Protect your internet-connected devices with up-to-date security software, and make sure you install all official software updates and security fixes on such devices. Read our reviews on antivirus software.
  • Don’t leave things like bills lying around for others to see.
  • Don’t throw out anything containing your name, address or financial details without shredding it. 
  • If you’re expecting a bank or credit card statement and it doesn’t arrive, tell your bank or card company.
  • If you move house, ask Royal Mail to redirect your post for at least a year.
  • Don’t accept invitations from people you don’t know on social media sites. It’s also a good idea to create separate work and personal profiles.
  • Beware of entering login details on copycat websites - check to see if the link matches that of the genuine website it claims to be from.
  • Avoid downloading dodgy apps - always check reviews and make sure you only download reputable apps to your device.
  • Double-check that your social media profiles are private so that you only share information with people you know and don't share log in credentials with anyone.
  • Don’t post any pictures showing your car number plate. Fraudsters could use this to illicitly obtain your address from DVLA records.
  • Be careful when using public wi-fi networks. Never use them to access sensitive apps or sites, such as mobile banking.

Report identity fraud

If your identity has been stolen, you should contact your bank, credit card company and the local police on the non-emergency phone number, 101, as soon as possible to let them know the situation.

You can also report the fraud via Report Fraud (formerly known as Action Fraud), the police’s fraud-reporting service.

Being a victim of ID fraud can leave you feeling vulnerable. Victim Support offers a free and confidential support service for victims of crime. Call Supportline on 08 08 16 89 111 or you can use the Relay UK app for Text Relay.

Related articles