Identity theft happens when someone steals your personal information and uses it to commit a crime (for example, stealing money from your bank accounts, getting loans and benefits in your name). The financial and emotional consequences can be devastating for victims. Once your identity has been stolen it can be difficult to recover and you may have problems for years to come.
What type of information do cybercriminals steal?
A cybercriminal may look to steal a range of personal information including:
- Date of birth
- Driver’s licence number
- Mother’s maiden name
- Place of birth
- Credit card details
- Tax file number
- Medicare card details
- Passport information
- Personal Identification Number (PIN)
- Online account username and login details
How do you know if your identity has been stolen?
Look out for these common warning signs:
- Your bank statements show purchases or withdrawals you have not made.
- You stop receiving mail you may be expecting (e.g. electricity bills) or receive no mail.
- You receive bills or receipts for things you haven’t purchased or statements for loans or credit cards you haven’t applied for.
- A government agency may inform you that you are receiving a government benefit that you never applied for.
- You have been refused credit because of a poor credit history due to debts you have not incurred.
- You may be contacted by debt collectors.
How to protect yourself and your family
Cybercriminals can learn a lot about you from your social media accounts.
- Limit what you share online. Reconsider sharing information on social media like your birthday, photos of a new house that include your address, or photos that identify your children’s school, or details of schools you attended. These details are often used for security questions on financial and other important accounts.
- Set your social media privacy settings to ‘private’. Ensure you’re only sharing your photos and posts with people you know and trust.
- Don’t accept ‘friend’ requests from strangers.
- Cybercriminals try to trick you into giving away your personal information. Cybercriminals often impersonate well-known organisations to ask you to confirm your personal details via messages or websites. Because of this, many companies now state that they will not ask you to update or confirm your details, like passwords, PINs, credit card information or account details via links in messages.
- If there really is a need to update your details, you should do this by logging into the organisation’s official website by typing the address manually into your internet browser and not using any links from messages.
- Think twice before entering your personal details into a website you’re not familiar with. See our advice about shopping online safely and browsing the web safely for questions to ask to help determine if a website is genuine.
Cybercriminals crack weak passwords – there’s even software that guesses billions of passwords per second!
- Use strong, unique passwords for each online account. The personal information you put in your social networking profile could even be used by cybercriminals to guess your passwords.
Cybercriminals use bugs in software to gain access to devices.
- Keep your devices updated with the latest software, including antivirus software. Installing software updates will give you the latest security. You can even set updates to install automatically.
Other tips and protecting your online identity:
- Don’t use Wi-Fi hotspots when you are doing something personal or sensitive on the internet as the Wi-Fi may not be secure. Learn more about using public Wi-Fi networks safely.
- Regularly check your account statements — including credit cards, bank statements, telephone and internet bills — for possible fraudulent activity.
- Check your credit report at least once a year — this can help you catch any unauthorised activity.
- Always lock your mailbox and shred any sensitive documentation you no longer need.
- Be wary of phone calls that ask for your personal information
- Be wary of people trying to view your PIN while you are using ATMs and making other purchases.
What to do if you think your identity has been stolen
If you suspect any fraudulent use of your identity, there are some steps you should take:
- Immediately report it to your bank, local police, social media account’s website or other online account that you may be concerned has been hacked into (these sites usually have a ‘Help’ section where you can report fraudulent activity to and seek help).
- Lodge a report with the Australian Cyber Security Centre's ReportCyber.
- Change the passwords on your accounts and close any unauthorised accounts.
- Request a credit report from a reputable credit reference bureau. A credit reporting body must give you access to your consumer credit report for free once every 12 months.
Learn more and get help
IDCare is Australia and New Zealand’s national identity support service. IDCare offers personalised support to individuals who are concerned about their personal information.
Find out more about IDCare by visiting www.idcare.org