If your personal information falls into the wrong hands, it can be used to steal your identity.
If you think your identity has been stolen, report it to your financial institution (such as your bank, stockbroker or superannuation fund) and change your passwords. You can also contact IDCARE for specialised support.
If identity documents with your Centrelink Customer Reference Number, Medicare or myGov details have been compromised, contact Services Australia Scams and Identity Theft help desk on 1800 941 126, Monday to Friday, 8am to 5pm AEST.
Reports of stolen shares due to identity theft are on the rise. ASIC is warning investors to be on high alert as fraudsters impersonating individuals are transferring or selling their shares without them knowing.
Read the investor alert.
Signs of identity theft
If your identity has been stolen, you may not realise for some time. These are some signs to look out for:
- Unusual bills or charges that you don't recognise appear on your bank statement.
- Mail that you're expecting doesn't arrive.
- You receive unexpected mail – for example, receiving a bank card for an account you did not create, or a letter from a share registry about a transfer of shares you did not request.
- You get calls or texts about products and services you've never used.
- Strange emails appear in your inbox.
- A sudden increase in suspicious phone calls, texts or messages through social platforms.
Act fast if your identity is stolen
What to do if you think your identity has been stolen.
Contact your financial institution
Contact your financial institution (such as your bank, stockbroker or super fund) so they can block the account. This will stop a scammer from accessing your money or investments. You may also need to cancel any credit or debit cards linked to your accounts.
Contact IDCARE
IDCARE is Australia and New Zealand's national identity and cyber support service. They can help you make a plan (for free) to limit the damage of identity theft. Call 1800 595 160 or visit the IDCARE website.
Change your passwords
If someone has stolen your identity, they may know your passwords. Change your passwords straight away. Think about all of your online accounts, including social media and other bank accounts.
If someone has accessed your shares
- Contact your broker – If someone has requested your shares be transferred, contact your broker so they can try to stop the transfer from your trading account.
- Call the share registry – If you have shares held with a share registry (your account has a unique Securityholder Reference Number), contact the share registry directly so they can warn brokers that you may be a victim of share sale fraud.
Report the fraud
If you think your personal information has been used, you can report it to the police via ReportCyber.
Report unauthorised access to online accounts
If you think someone has hacked into your online accounts (for example, social media, digital wallets, online shopping website), report it to those organisations.
Alert family and friends
If someone has taken over your social media accounts or your email address, alert your family and friends. Tell them to block the account.
Report it to Scamwatch
Scamwatch, run by the National Anti-Scam Centre (NASC), collects data about scams in Australia. Your report helps Scamwatch raise awareness about how to recognise, avoid and report scams. NASC also shares intelligence and works with government, law enforcement and the private sector to disrupt and prevent scams.
Protect yourself from identify fraud
Simple steps you can take to avoid identity theft.
Use strong passwords
Make sure your passwords are long and contain a mix of numbers, symbols, capital letters and lowercase letters. Strong passwords make it harder for people to hack into your accounts.
The Australian Cyber Security Centre (ACSC) has some useful tips on creating a strong password or passphrase.
Turn on multi-factor authentication
Where available, turn on multi-factor authentication. It can add an extra layer of security to protect your identity online.
Shred your documents
Letters from your bank, super fund and employer can all contain personal details scammers can use to steal your identity. Shred these kinds of letters before you throw them out.
Use public computers with caution
If you use a public computer, for example, at a library, make sure you clear your internet history and log out of your accounts.
Be careful on social media
Be aware of what you post on social media, particularly if your profile is public. Scammers can find out where you live, work and visit through your posts.
Use security software on your computer
Use virus protection software to help stop hackers from accessing your information. This software can help protect you if you click on a suspicious link or visit a fake website.
Use a Trading PIN or Password
If offered by your broker for online trading, use a secure Trading PIN or Trading Password for each share trade you make.
Monitor your bank transactions
Check your bank statements and online accounts regularly for unusual transactions. If you spot something unusual, check it with your bank and find out if you need to act.
Request a copy of your credit report
Check your credit report for any unusual or incorrect debts, loans or credit applications. If you suspect fraud, you can request a temporary ban. Find out how to get a free copy of your credit report.
Review your share portfolio regularly
If you have shares, check your portfolio regularly. Contact the share registry directly or use your broker’s secure application or trading portal.
Do not click hyperlinks, use secure websites and applications
Do not click links in text messages and be wary of clicking links in emails. Visit your financial institution’s website or secure application directly, not through links in text messages. Always check email addresses match the business email provided on the company’s official website.
Secure your mail
Put a lock on your street mailbox so that people can't steal your mail.