I think I'm a victim of identity theft — what do I do?
Identity theft can wreck credit files, lead to fraudulent loans, and take months to unwind. Act fast: report to Action Fraud, freeze your credit file, contact your bank, and document everything.
Quick Answer
Report to Action Fraud (0300 123 2040 or actionfraud.police.uk) immediately. Contact your bank to freeze accounts. Apply for a Cifas Protective Registration (£25, 2-year free credit file marker) and review your credit files (Experian, Equifax, TransUnion). Notify any organisation a fraudster has opened accounts with. Document everything in writing.
Full Explanation
Identity theft — where a fraudster uses your personal data to open credit accounts, claim benefits, take out loans, or commit other fraud in your name — can have serious financial and credit consequences. The faster you act, the easier it is to unwind.
First step: stop the bleeding. Contact your bank immediately to freeze accounts, change online-banking passwords, and report fraudulent transactions. Most banks have 24-hour fraud lines.
Second step: report to Action Fraud (the UK national fraud-reporting centre, run by the City of London Police). You get a crime reference number which is essential when dealing with credit-reference agencies and lenders. Action Fraud is the police channel — individual local forces don't typically investigate.
Third step: protect your credit file. The three main credit-reference agencies are Experian, Equifax, and TransUnion. Apply for a Cifas Protective Registration (£25, lasts 2 years), which marks your name as needing extra ID checks before any new credit. Review each credit file for unauthorised entries — you can challenge fraudulent entries by writing with your Action Fraud reference.
Fourth step: contact each organisation a fraudster has used your details with. Banks, lenders, telecoms providers, utilities, HMRC, and DWP all have established identity-theft procedures. You'll likely need to provide ID, the Action Fraud reference, and a written statement.
Lastly: keep meticulous records. Date, time, person spoken to, reference numbers. Identity theft cases often span months and multiple organisations — your documentation is your evidence trail.
For ongoing protection: enable two-factor authentication, use unique passwords, watch for phishing, shred documents with personal data, monitor your credit file annually.
Legal Basis
- §Fraud Act 2006
- §Computer Misuse Act 1990
- §Data Protection Act 2018
- §Consumer Credit Act 1974
What To Do
Contact your bank immediately
Call the 24-hour fraud line on the back of your card. Freeze accounts, change online-banking passwords, dispute fraudulent transactions. Banks have established procedures and must refund unauthorised transactions under the Payment Services Regulations 2017 (subject to gross-negligence exceptions).
Report to Action Fraud
Online at actionfraud.police.uk or call 0300 123 2040 (24/7). Get a crime reference number. This is essential evidence when dealing with credit-reference agencies and lenders.
Apply for Cifas Protective Registration
£25 fee, valid 2 years (renewable). Cifas membership marks your name on a national database — lenders must do additional ID checks before opening any account. Apply at cifas.org.uk.
Check your credit files
Get a statutory copy from each of Experian, Equifax, and TransUnion (free for statutory report). Look for new credit applications, accounts, or address changes you didn't make. Challenge each fraudulent entry in writing with your Action Fraud reference.
Contact every organisation involved
Banks, lenders, mobile providers, energy, HMRC, DWP. Each has an identity-theft procedure. Provide ID, Action Fraud reference, and a written statement of facts. Keep copies of every letter.
Keep a single record
One file with: every call (date/time/person/outcome), every letter sent and received, every reference number. This will save weeks of confusion 2-3 months later.
Important Deadlines
Important Warnings
Act within 24 hours of suspecting fraud — speed is critical for recovery.
Don't pay anyone claiming to 'unlock' your accounts for a fee — it's a secondary scam.
Even when accounts are restored, your credit file may take 3-6 months to fully recover.
Some fraudulent accounts are taken out in person — visit your local bank branch with ID if online routes fail.