Identity fraud, or ‘ID theft’, involves the use of a person’s or business stolen details to commit crime.

How it happens

Fraudsters may try to obtain your personal or banking details by using online sources e.g. social media, a combination of scam emails/texts/calls and even try to get their hands on your rubbish. If fraudsters manage to steal your identity, they could:

  • Open bank accounts.
  • Obtain credit cards, loans and state benefits.
  • Order goods
  • Take over your existing accounts.
  • Take out mobile phone contracts.
  • Obtain genuine documents such as passports and driving licences in your name.

How to protect yourself

Follow the advice below to help protect yourself and your business against identity fraud:

  • Shred letters or receipts which contain your business name and address or personal information.
  • Check your statements carefully and report anything suspicious to the bank or financial service provider concerned.
  • Have a password strategy by using sequences of words, numbers and symbol or use a password manager. Avoid using personal names or information. Never use the same passwords for different accounts or recycle passwords on the same account.
  • Use Multi Factor Authentication (MFA).
  • Use voice passwords/recognition where available for telephone banking.
  • If you start getting post for someone you don’t know, contact the organisation the post came from.
  • Keep your computer security programs, such as antivirus and firewall, up to date.
  • If you have lost or had important documents stolen such as a passport, consider registering for the CIFAS Protective Registration Service by visiting: https://cifas.org.uk.
  • Set up alerts with a credit reference agency to notify you of any key changes on your credit file that could indicate potential fraudulent activity.
  • Never reply to unsolicited text messages, even to get them stopped. Simply forward to 7726 (a number all mobile phone providers use for fraud reporting) and then delete them.
  • If you receive an unsolicited email or phone call from what appears to be your bank or building society asking for your security details, never reveal your password, login details or account numbers. Be aware that a bank will never ask for your PIN or for a whole security number or password.

How to report it

If you believe you have been a victim of this type of fraud, please report it to us or your bank.

You should also report it to Action Fraud on 0300 123 2040 or via the Action Fraud website. If you are in Scotland, please report to Police Scotland directly by calling 101.

Further resources

Take 5 – Stop, Challenge and Protect

NCSC – National Cyber Security Centre advice and guidance on a range of cyber topics