Learn about identity theft

What is identity theft 

Anyone can be a victim of identity theft. Cybercriminals steal identities to make money, scam others and hide who they really are. The potential impacts can be devastating.

If stolen, your personal information can be used to impersonate you. Cybercriminals can create fake identity documents to access your accounts, get payments, make purchases or travel overseas. This can:

• affect your credit score and ability get a loan
• make it hard for you to prove who you are and get new identity documents
• harm your reputation and financial wellbeing.

How identity theft can happen

Identity theft can occur if someone: 

• steals your online or physical identity documents
• finds your personal details on social media or public websites
• gets your information through a data breach.

Information of value to cybercriminals may include your:

• identity documents, such as driver licence or passport
• financial details, such as your bank account details or tax file number
• personal details, such as your date of birth or address. 

For more details on the types of information and data you should keep secure, visit the IDMatch website.

Warning signs of identity theft

Someone may have stolen your identity if: 

• you notice unusual activity on your bank statements or credit history report
• your identity documents are missing, such as your passport or driver licence
• you stop getting mail at your address
• you’re contacted by debt collectors about purchases or loans you didn’t make 
• you’re contacted by government agencies about benefits you didn’t apply for
• you’re told that your details were leaked in a data breach.

What you can do to prevent identity theft

Your identity is important. You should do everything you can to protect it. Follow our tips to help reduce the risk of someone stealing your identity. 

Turn on multi-factor authentication

Multi-factor authentication (MFA) is when you need 2 or more different ways to verify you are the account owner before you can log in. Learn more about MFA.

Use passkeys or strong, unique passwords

Use passkeys whenever they are available. Where passkeys are not available, use strong, unique passwords.

Refer to our personal cyber security handbook for advice about passwords.

Learn how to spot and avoid scams

Scams are a common way cybercriminals try to steal your personal information. They often pretend to be an organisation you trust. They may contact you using email, SMS, calls or social media. 

If you think it’s a scam, do not respond, block the sender and report to Scamwatch. If you’re unsure, contact the organisation directly using the contact details from its official website. Learn more about scams.

Think before you share online

Don’t share personal information on public websites. Before sharing photos online, consider what they may reveal about you. Avoid posting images that show your location, such as check-ins, street signs or photo metadata that shows where the photo was taken. School or work uniforms can also identify you. Learn more about staying secure online.

Educate others 

Teach your friends and family about good cyber security. Learn more about protecting yourself and your family online.

Create an Australian Government Digital ID

The Australian Government’s Digital ID System allows Australians to securely verify their ID online to access digital services.

Using a Digital ID means fewer organisations will need to keep your personal information. This will reduce the risk of your data being stolen. Visit the Digital ID website to learn more about Digital ID.

The Australian Government’s Digital ID app is myID. This is a secure way to prove who you are online. Visit the myID website to learn how to set up myID.

You can also use an accredited Digital ID provider. Accreditation means the provider meets strict government requirements and standards. Visit the Digital ID website to search the accredited entities register.

Digital ID Act 2024

The Digital ID Act strengthens privacy and consumer protections for people who choose to create and use a Digital ID with an accredited provider. The Act established a Digital ID Regulator and a privacy regulator to ensure that providers adhere to privacy and security requirements to keep your data safe. Visit the Digital ID website to learn more about the Digital ID Act.

Further information

Visit the IDCARE website to discover more ways to reduce the risk of identity theft. IDCARE also provides identity and cyber support services in Australia and New Zealand.