Identity theft is when someone uses your personal information to steal money or gain other benefits. Anyone can be a victim of identity theft.
It could occur if someone:
- steals your online or physical identity documents
- finds your details on social media and public websites
- obtains your information through a data breach.
Impacts of identity theft
The potential impacts of having your identity stolen can be devastating.
Cybercriminals can use your information to impersonate you. They could create fraudulent identity documents to get payment or travel benefits. This could:
- make it difficult for you to prove who you are and get new identity documents
- affect your credit score and ability to apply for loans
- harm your reputation and financial well-being.
Did you know?
1 in 4 Australians were a victim of identity theft at some point in their life. It costs individuals and businesses around $3.1 billion each year.
Keep your information and data secure
Your identity is important so you should take every precaution to protect it.
Cybercriminals target a range of information that may be of value to them. This could include your:
- identity documents, such as driver licence and passport
- financial information, such as bank account details and tax file number
- personal information, such as date of birth and address.
For more details on the types of information and data you should keep secure, visit IDMatch.
The information you give out exists across many different systems and websites. As a result, your risk of identity theft increases. Follow these tips to help reduce the risk of someone stealing your identity.
Multi-factor authentication (MFA) is one of the best ways to protect your accounts. MFA is when you need 2 or more steps to verify your identity before you can log in. For example, using your login details as well as an authentication code. This makes it hard for cybercriminals to gain access to your accounts if they know your login details.
Where MFA is not possible, use a passphrase. Learn more about MFA.
Use a strong and unique password such as a passphrase for each of your accounts. A passphrase has 4 or more random words like ‘crystal onion clay pretzel’. Passphrases are easy to remember but hard for someone to guess.
Consider using a password manager to create and store unique passwords and passphrases. Learn more about passphrases.
Scams are a common way cybercriminals will try to steal your personal information. They often pretend to be an organisation or person you trust using email, SMS, calls or social media. You should take precautions to protect yourself such as:
- learn about the common types of scams
- ignore unsolicited requests for personal information
- avoid opening links or attachments even if it appears to be from someone you know.
If you think it is a scam, block the sender and report it to Scamwatch. If you're unsure, go straight to a source you can trust such as the official website or person. Find out how to recognise and report scams.
Be careful what you share online. If you need to provide sensitive data such as your credit card details, make sure the website is legitimate and secure. Don’t expose your personal information on public websites.
Learn more about shopping and banking securely online.
Consider what your photos reveal about you. Avoid having location details such as check-ins, street signs and metadata (image properties that include where you took the photo).
This also includes anything that can reveal these details, such as a school or work uniform. Learn more about how to secure your social media.
Teach your friends and family about good cybersecurity. Learn more about protecting your family.
For more ways to reduce the risk of identity theft, visit IDCARE’s guide on understanding identity theft. IDCARE also provides identity and cyber support services for Australia and New Zealand.
Act quickly
There are some common warning signs that your identity may have been stolen. It is crucial to act as soon as you suspect anything. Refer to our guide on how to report and recover from identity theft.
Australian Government Digital ID System
The Australian Government Digital ID System provides a way for Australians to safely and securely verify their ID online to access online services. Using a Digital ID helps you stay in control of your personal data by reducing how much information you share with services. Visit the government's Digital ID website to learn more about Digital ID.
The Australian Government’s Digital ID app is myID which you can use to access many government online services through the Australian Government Digital ID System.
You can also choose to use an accredited Digital ID provider. Accreditation shows that a provider meets government standards for privacy protection, security, usability, accessibility, risk management, fraud control and more. Visit the accreditation register to find an accredited Digital ID provider.
Digital ID Act 2024
The Digital ID Act strengthens privacy and consumer protections for people who choose to create and use a Digital ID with an accredited provider. The Act established a Digital ID Regulator and a privacy regulator to ensure that providers adhere to privacy and security requirements to keep your data safe. Visit the Digital ID website to learn more about the Digital ID Act.
More information
Report and recover from identity theft
Know where to make a report and get help if someone has stolen your personal or business identity.
Data breaches
Sometimes personal information is released to unauthorised people by accident or as the result of a security breach. For example, an email with personal information can be sent to the wrong person, or a computer system can be hacked and personal information stolen. These are known as data breaches or data spills.
So you think you've been hacked
Use our interactive tool to find out what to do learn what steps to take if you think you’re the a victim of a cybercrime.