Global information guide

How to Check if Your Identity Has Been Stolen: Warning Signs and Steps

Identity misuse can show up in small, easily missed ways. This guide outlines common signs to watch for, how to investigate suspicious activity, and practical steps to respond and reduce future risk.

Local context: Credit reporting, consumer rights, record-retention periods, score displays, lending decisions, products, taxes, and consumer protections vary by country and provider. This content is general information, not legal, financial, tax, debt, credit, insurance, investment, or personalised advice. Check the process and terms that apply where you live.

Common warning signs to watch for

Identity misuse can appear through ordinary transactions and communications. Look for unfamiliar accounts or loans in your name, unexpected requests for payment, unexplained charges on bank and card statements, or mail about financial products you did not request. You may also notice unusual login activity, changes to account contact details you did not make, or calls from debt collectors about debts you do not recognise. Small ‘test’ purchases or unfamiliar recurring charges can also indicate someone is probing an account.

Some clues are less direct but still useful. An unexpected denial when applying for credit, a sudden change in a consumer credit file, or receiving correspondence intended for someone else at your address can hint at identity misuse. Keep an eye on electronic notifications from accounts you hold and any unusual system alerts. Collecting these signs promptly makes it easier to verify whether the activity is fraudulent and to take next steps.

How to investigate suspicious activity

Start by gathering recent records: bank and card statements, bills, tax notices, and any relevant emails or letters. Create a timeline of when you first noticed each anomaly and which accounts or services are affected. Where consumer credit files or credit reports are available where you live, review them for unfamiliar accounts, inquiries, or public records entries. If an account shows transactions you did not authorise, request detailed statements and transaction histories directly from the provider.

Contact the financial institutions, service providers, or platforms involved and explain you suspect unauthorised activity. Ask how to report the incident and whether they offer a dedicated fraud or dispute process. Change passwords for affected accounts and enable additional authentication protections where possible. Keep a record of every conversation, the names of people you speak with, and any reference numbers or confirmation emails you receive; documentation can support later disputes or investigations.

Responding now and reducing future risk

Take immediate containment steps for accounts that show unauthorised activity: follow your provider’s fraud reporting and dispute procedures, consider temporarily suspending or closing compromised accounts, and follow any instructions they give for reversing or disputing charges. Scan devices for malware, update security software, and change passwords on devices and services that may be affected. If you interact with debt collectors about items you did not incur, request written proof and follow dispute channels rather than providing personal details over the phone.

For longer-term risk reduction, adopt routines that limit exposure of personal data. Use unique, strong passwords and consider a password manager; enable multi-factor authentication where available; and be cautious sharing personal information online or over unsecured networks. Secure physical documents by shredding sensitive papers and protecting your mail. If you are considering commercial monitoring or recovery services, review their features, limitations, and costs so you can decide what fits your needs.

A practical next step

Consider reviewing recent account statements and setting up account notifications or stronger authentication measures where available; document any suspicious items for follow-up.