Identity theft - Everything you need to know

Action Fraud is the UK’s national fraud and internet crime reporting centre. Action Fraud will provide you with a crime reference number and advice.

If you notice unusual transactions, notify your bank immediately and ask them to place any further activity on hold. Even if there is no unusual activity, it is still sensible to contact your bank or building society as soon as you become aware that you may be (or are at risk of) a victim of identity fraud whilst you try to establish what has happened. They may advise issuing a new bank card or freezing transactions over a certain value.

Your email is likely to be where you keep most of your personal and financial information. If a cyber-criminal or fraudster has access to your email account, they could use that information or access other online accounts using the “forgot my password” function. One of the first steps that you should take is to secure your email accounts and change any passwords. It is also recommended to use a two-step verification to an email account. Also think about what information you hold within the email account – payslips or bank account details. Consider regularly reviewing what the account holds and getting rid of sensitive information.

It is also advisable to change passwords associated with apps or online banking. Remember: use strong passwords.

From this you may be able to identify any new searches or accounts that you did not authorise. If you spot any unusual activity, contact the lender or the credit reference agency. Inform them that you dispute the entry, and the lender should take steps to prevent any further unauthorised activity (and minimise the financial loss). The credit reference agency may advise adding a password and regularly reviewing your credit report, to ensure that fraudulent transactions are removed.

Consider which service providers or agencies you might need to contact to notify them of the fraud and alert them of any unusual activity. You may need to contact, for instance, the DVLA if you believe that your driving licence is stolen.

Create a list of all fraudulent activity, and the steps that you have taken to understand what has happened and to remedy the situation.

Store any documents holding your personal information securely and limit the sharing of this information.

Consider purchasing a shredding machine to dispose of any confidential paperwork containing your personal data, or a secure mailbox where post might otherwise be left in a communal residential area. Consider downloading a reputable antivirus product to laptops and mobile devices. Make sure your antivirus software is regularly updated.

Be wary of unsolicited letters, emails, text messages or phone calls claiming to be from your bank or financial institution asking you to confirm your personal details, passwords or security information. This is called “vishing” or “phishing” where the fraudster will try to get information from you. If in doubt, speak with your provider directly and do not respond to the communication you are concerned about or click on any links embedded within a text message or email. Always start a fresh search on the internet or go into the service provider’s physical store.

We live in a digital word, where increasingly people post personal information on to public platforms. You might not realise it, but this can help any fraudster gather information about you for the purpose of setting up a line of credit in your name. Consider your privacy settings as to who might have access to all social media accounts you have, or what you might post.

If you move house, think about putting in place a mail redirect whilst you update your contact details with service providers. Lenders often use the electoral roll to check who is living at a particular address. You can also opt out of the electoral register to prevent unsolicited marketing or junk mail. 

Regularly check bank statements or chase up financial statements that you had expected to receive. Spotting unusual activity early can help stop the identity thief in their tracks, and minimise the harm. If you think that your personal details or bank account are being misused, you must immediately report it to your bank. If you have been the victim of identity fraud, consider obtaining your credit report to check any unusual activity.

Your bank may have the option to sign up to enhanced security that requires you to authenticate any online purchases. Even if you do not shop online, this can help protect your card or details if lost or stolen. Ensure that any passwords are secured.

Also think about securing your home WiFi and being careful when accessing public WiFi.

Make sure that you are on a trusted and secure website. Usually a secure platform will start with “https” and a padlock icon. If in doubt, don’t proceed with the transaction.

If you are a property owner, particularly of a rented out or empty property or mortgage free, consider registering with the Land Registry to receive alerts if someone applies to change the property register or placing a restriction against the property so that no activity is allowed unless confirmed by you.