The risks
- Being tricked into divulging personal data in response to an email, text, letter or phone call.
- Theft of or access to paper documents (for example, bank statements, utility bills, tax returns, passport/driving licence).
- Sharing private information with family, friends or people who take you into their confidence.
- ‘Shoulder surfing’ – people looking over your shoulder at your computer or cellphone/tablet, or at the ATM.
The symptoms
- Not receiving bills or other correspondence – suggesting that a criminal has given a different address in place of your own.
- Receiving credit cards which you did not apply for.
- Denial of credit for no apparent reason.
- Receiving calls from debt collectors or companies about things you have not bought.
- Unrecognisable entries on your credit history.
- You have recently lost or had stolen important documents such as your passport or driving licence.
- When buying or selling, you get complaints about non-delivery of or non-payment for goods you are not aware of.
- You see entries on your bank, credit or store card statement for goods you did not order.
- You cannot log into a site using your normal password (because a criminal has logged in as you and changed it).
Prevention
- Do not share account information with friends, family or other people.
- Ensure you always have effective and updated antivirus/antispyware software running.
- If possible, arrange for paperless bills and statements.
- File sensitive documents securely, and shred those you no longer need – preferably with a cross-cut shredder.
- Never divulge private information data in response to an email, text, letter or phone call unless you are certain that the request is from a bona fide source.
- Always beware of people looking over your shoulder when you are entering private information on a computer, cellphone/tablet or ATM.
What to do if your identity has been stolen
- Act promptly in order to minimise the impact of the theft.
- Contact any affected websites and advise them about the problem.
- If you can, log in and change your password immediately using a strong password.
- If you are unable to log in, contact the website’s technical support department immediately for further advice.
- Ask your bank, building society or credit card company for advice (for example, on freezing accounts and getting new cards, passwords and PINs). Most will refund the full amount lost providing you were not negligent in some way.
- Change your password on other websites in case they have also been compromised.
- If website access requires a secret question, change it if you can to avoid repeat incidents.
- Check your other personal information, such as addresses, to make sure it is still correct.
- Check for other transactions, items for sale or items purchased in your name which you have not originated, and cancel them.
- Report all lost or stolen documents (passports, driving licences, credit cards, chequebooks, etc) as soon as possible to the relevant issuing authorities.
- Do not continue to use a compromised PIN.
- Check with credit reference agencies for any unusual entries, and for advice.
- Check to see if mail redirection has been fraudulently set up on your address.