The financial and emotional consequences can be devastating for victims. Once your identity has been stolen it can be difficult to recover and you may have problems for years to come.

What type of information do cybercriminals steal? #

A cybercriminal may look to steal a range of personal information including:

• Name.
• Date of birth.
• Driver’s licence number.
• Address.
• Mother’s maiden name.
• Place of birth.
• Credit card details.
• Tax file number.
• Medicare card details.
• Passport information.
• Personal Identification Number (PIN).
• Online account username and login details.

How do you know if your identity has been stolen? #

Look out for these common warning signs:

• Your bank statements show purchases or withdrawals you have not made.
• You stop receiving mail you may be expecting (e.g. electricity bills) or receive no mail.
• You receive bills or receipts for things you haven’t purchased or statements for loans or credit cards you haven’t applied for.
• A government agency may inform you that you are receiving a government benefit that you never applied for.
• You have been refused credit because of a poor credit history due to debts you have not incurred.
• You may be contacted by debt collectors.

How to protect yourself and your family #

Cybercriminals can learn a lot about you from your social media accounts. Here are some tips to protect yourself and your family:

• Limit what you share online. Reconsider sharing information on social media like your birthday, photos of a new house that include your address, or photos that identify your children’s school, or details of schools you attended. These details are often used for security questions on financial and other important accounts.
• Set your social media privacy settings to ‘private’. Ensure you’re only sharing your photos and posts with people you know and trust.
• Don’t accept ‘friend’ requests from strangers.
• Cybercriminals try to trick you into giving away your personal information. They often impersonate well-known organisations to ask you to confirm your personal details via messages or websites. Because of this, many companies now state they will not ask you to update or confirm your details, like passwords, PINs, credit card information or account details via links in messages.
• If there really is a need to update your details, you should do so by typing the organisation’s official website address manually into your internet browser and not use links from messages.
• Think twice before entering your personal details into a website you’re not familiar with. See our advice about shopping online safely and browsing the web safely for questions to ask to help determine if a website is genuine.

Cybercriminals crack weak passwords – there’s even software that guesses billions of passwords per second!

• Use strong, unique passwords (passphrases) for each online account. 

Cybercriminals use bugs in software to gain access to devices.

• Keep your devices updated with the latest software, including antivirus software. Installing software updates will give you the latest security. You can even set updates to install automatically.

Other tips for protecting your online identity:

• Don’t use Wi-Fi hotspots when you are doing something personal or sensitive on the internet as the Wi-Fi may not be secure. Learn more about using public Wi-Fi networks safely.
• Regularly check your account statements including credit cards, bank statements, telephone and internet bills for possible fraudulent activity.
• Check your credit report at least once a year to help you catch any unauthorised activity.
• Always lock your mailbox and shred any sensitive documentation you no longer need.
• Be wary of phone calls that ask for your personal information.
• Be wary of people trying to view your PIN while you are using ATMs and making other purchases.

What to do if you think your identity has been stolen

If you suspect any fraudulent use of your identity, there are some steps you should take:

• Immediately report it to your bank, local police, social media account’s website or other online account that you may be concerned has been hacked into (these sites usually have a ‘Help’ section where you can report fraudulent activity to and seek help).
• Change the passwords on your accounts and close any unauthorised accounts.