What should I do if I think my identity has been stolen?

It can happen to anyone. Your information could be stolen online, you could lose your wallet or a company you trust could have a data breach.

If you think someone has stolen your identity, you should act immediately:

• Check your statements for unauthorised transactions
• Cancel your credit card(s)
• Contact your bank
• Change your email address(es)
• Change passwords
• File a police report
• Place a ban on your credit report

Other steps to take include:

• Get an up to date copy of your credit report to confirm that the information on the file relates to applications for credit that you have made. Get a copy of your credit file here or if you're already a member you can order an adhoc credit report.
• Contact Equifax and put a ban on your credit report to help prevent fraudulent accounts being opened in your name. The ban period means that if a credit provider requests your credit report as part of an assessment of a credit application Equifax cannot share it unless you have provided express written consent or if it is required by law. The initial ban period is for 21 days and can be extended if you need.  
• Contact any credit providers listed on your credit report to whom you have not applied for credit so that they can investigate and take appropriate and prompt action. If you don’t recognise the company that made the enquiry contact them to request an investigation.
• Contact the police and report the crime.

Inform the relevant government agency if personal information is stolen. This includes your driver’s licence, passport, citizenship papers, Medicare card, birth, marriage and change-of-name certificates, tax file number, superannuation or pension.