Identity theft happens when someone uses your personal information to pretend to be you.
What to do if your identity is stolen
If you think someone stole your identity, tell your financial institutions (including your bank, stockbroker and super fund). They can help protect your accounts. You should also change your passwords. Contact IDCARE for specialised support.
If someone has accessed identity documents with your Centrelink Customer Reference Number, Medicare or myGov details, contact the Services Australia Scams and Identity Theft help desk on 1800 941 126, Monday to Friday, 8am to 5pm AEST.
Reports of stolen shares due to identity theft are on the rise, with shares being transferred or sold without the owner knowing. If someone has accessed your shares:
- Contact your broker – If someone asks to transfer your shares, contact your broker. They can try to stop the transfer from your trading account.
- Call the share registry – If you hold shares with a share registry (your account has a Securityholder Reference Number [SRN]), contact the share registry directly. They can warn brokers that you may be a victim of share sale fraud.
Signs of identity theft
You may not notice identity theft straight away. Look out for these signs:
report Unusual bills or charges showing up on your bank statement.
report Important mail goes missing.
report You get unexpected mail, like a new bank card or share transfer letter.
report You get calls or texts about products or services you don’t use.
report You get unusual emails in your inbox.
report You suddenly start getting more suspicious calls, texts, or messages on social media
Act fast if your identity is stolen
Here’s what you can do if you think someone has stolen your identity.
check_box Contact your financial institution. Get in touch with your bank, stockbroker and super fund. Ask them to block your account. This can stop a bad actor accessing your money or investments. You may also need to cancel any credit or debit crds attached to your account. A bad actor is a person, group or entity that intentionally acts dishonestly, maliciously or illegally to cause harm – including stealing money.
check_box Contact IDCARE. IDCARE is Australia and New Zealand's national identity and cyber support service. They can help you make a plan (for free) to limit the damage of identity theft. Call 1800 595 160 or visit the IDCARE website.
check_box Change your passwords. A bad actor may know your passwords. Change your passwords straight away. Check all your online accounts, including banking, shopping, email, and social media.
check_box Report the fraud. If someone used your personal information, you can report it to the police via ReportCyber. If someone hacked your online accounts (for example, social media, digital wallets or online shopping sites), report it to those organisations.
check_box Check your email accounts. Check if your email accounts have been compromised. Then change those passwords.
check_box Alert family and friends. If someone has control of your social media account or your email, tell your family and friends. Ask them to block the account.
check_box Report it to Scamwatch. Scamwatch, run by the National Anti-Scam Centre (NASC), collects data about scams from across Australia. Your report helps Scamwatch warn others. NASC also shares intelligence and works with government, law enforcement, and the private sector to disrupt and prevent scams.
Act fast if you suspect a scam
Protect yourself from identity fraud
Follow this checklist to help protect yourself from identity theft.
check_box Use strong passwords. Use long passwords that include a mix of numbers, symbols, and upper- and lower-case letters. They make it harder for scammers to get into your accounts. The Australian Cyber Security Centre (ACSC) has some useful tips on creating a strong password or passphrase.
check_box Turn on multi-factor authentication. Multi-factor authentication (MFA) adds a second check when you log in. For example, you enter a code from a text message or an app. MFA is easy to set up and helps protect your accounts. Find out more about MFA and how to turn it on.
check_box Shred your documents. Letters from your bank, super fund and employer can include your personal details. Shred these letters before you throw them out.
check_box Use public computers with caution. If you use a public computer at a library or in another setting, clear your browser history and log out of your accounts when you finish.
check_box Be careful on social media. Think about what you share on social media, especially in public profiles. Bad actors can learn where you live, work and visit.
check_box Use security software on your computer. Security software can help protect your devices. It can block some malware and warn you about unsafe websites.
check_box Use a Trading PIN or Password. If your broker offers a Trading PIN or Trading Password, turn it on and use it for every trade.
check_box Monitor your bank transactions. Check your bank statements and online accounts often. If you see a charge you don’t recognise, contact your bank.
check_box Request a copy of your credit report. Check your credit report for debts, loans, or credit applications you don’t recognise. If you suspect fraud, you can request a temporary ban. Find out how to get a free copy of your credit report.
check_box Review your share portfolio regularly. If you own shares, check your portfolio often. Use your broker’s secure app or trading portal. You can also contact the share registry.
check_box Don't click hyperlinks, use secure websites and applications. Don’t click links in text messages. Be careful with links in emails. Go to your financial institution’s website or app yourself. Don’t use links in messages. Check that email addresses match the details on the organisation’s official website.
check_box Secure your mail. Lock your mailbox so that people can't steal your mail.
Join thousands of Australians and get tools, tips and calculators to help with your money - straight to your inbox each month.
Sign up