Identity Theft UK: How to Spot and Stop It Before Your Details Are Used
Your identity is valuable to criminals. Here's how to spot if yours has been stolen and what to do immediately.
What is this scam?
Identity theft occurs when a criminal obtains your personal information and uses it to open accounts, make purchases, or secure loans without your knowledge or consent. In the UK, this typically involves theft of your National Insurance number, driving licence details, passport information, or bank account credentials. Criminals may use your identity to: apply for credit cards or bank accounts in your name, take out loans or mortgages, set up utilities or mobile contracts, commit fraud with your existing accounts, or even commit crimes that are then linked to you.
Unlike other scams where you knowingly hand over money, identity theft often happens silently. You might not discover it for months or even years—sometimes only when you apply for credit and are rejected, or when you notice unusual bills or accounts you don't recognise.
Warning signs to look for
- You receive bills or statements for accounts you don't recognise, such as credit cards, mobile phone contracts, or utilities.
- Your credit report shows hard searches or accounts opened by lenders you've never contacted.
- You're refused credit when you have a good payment history, or you're asked about debts you don't owe.
- You receive letters about missed payments or debts from creditors for companies you've never dealt with.
- Your post goes missing regularly, or you stop receiving expected statements and bills.
- You notice suspicious activity on your existing bank or credit card accounts, including small test transactions.
- A company contacts you about an account or service you never signed up for.
- Your HMRC or DWP records show income or claims you didn't make.
How this scam works step by step
Identity theft typically begins with criminals obtaining your personal data through several routes: data breaches from retailers or online services, phishing emails or texts directing you to fake websites, purchasing stolen data on the dark web, or physically stealing your documents like post or a wallet. Once they have enough information—usually your name, address, date of birth, and ideally your National Insurance number—they use it to impersonate you. The criminal might apply for a credit card online using your details, open a mobile phone contract in your name, or take out a loan claiming to be you.
Because they've chosen an address they control or intercepted your mail, the confirmations and cards go to them, not you. They then use the accounts to make purchases or withdraw cash. Meanwhile, you remain unaware until months later when the debt collector contacts you about unpaid bills, or when you check your credit report and find unexpected accounts. By this point, the damage is significant, affecting your credit score and requiring substantial effort to prove you're the genuine account holder.
How to verify if it is genuine
If you suspect identity theft, don't rely on a single sign—instead, take these verification steps immediately. First, check your credit report for free using services like Clearscore, Experian, or Equifax (all accessible from the Money Helper website). Look for accounts, searches, or payments you didn't authorise. Second, contact your bank directly (use the number on your card, not any number from a letter) and ask them to review your accounts for suspicious activity or fraudulent applications in your name.
Third, request your statutory credit report from Experian, Equifax, or TransUnion—these show every search made and every account linked to your details. Fourth, check your National Insurance record online at gov.uk to see if anyone has claimed benefits in your name. Fifth, contact Action Fraud immediately if you confirm fraudulent accounts exist. If you've received unexpected bills, contact the creditor directly using their official contact details to ask for proof of the application and when the account was opened. Never trust contact details from the suspicious letter itself.
What to do if you have already interacted
Act immediately—speed is critical with identity theft. First, place a fraud alert with your bank by calling them on the number on the back of your card (not from any letter). Tell them you suspect you're a victim of identity theft and ask them to freeze your accounts and monitor for suspicious activity. Second, register for a credit monitoring service or check your credit report today using Clearscore or Experian to identify any fraudulent accounts.
Third, contact each creditor where you've found fraudulent accounts in writing (keep copies), explain you're a victim of identity theft, and provide evidence such as a crime reference number from Action Fraud. Fourth, request a statutory fraud victim's report from Action Fraud (report online at actionfraud.police.uk)—this supports your claims to creditors. Fifth, obtain a copy of your full credit file from each credit reference agency and formally dispute any fraudulent entries in writing. Sixth, if your National Insurance number has been compromised, contact HMRC immediately.
Seventh, consider registering with the CIFAS fraud prevention service, which alerts lenders to your identity theft and makes it harder for criminals to open accounts in your name.
Reporting this scam in the UK
Report identity theft to Action Fraud, the UK's national fraud reporting centre. You can report online at actionfraud.police.uk, or call 0300 123 2040. When you report, you'll receive a crime reference number—keep this safely as you'll need it when dealing with creditors and credit agencies. Also report to the NCSC if the theft involved phishing or a data breach by emailing report@phishing.gov.uk. If you believe a specific retailer or service was breached, report the breach to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact Citizens Advice on 0808 223 1133 for free support navigating the recovery process and understanding your rights. Inform your local police force by reporting online at your police's local website, though be aware that identity theft is typically handled by Action Fraud rather than local police. Register with CIFAS, a not-for-profit fraud prevention service, which places a protective registration on your credit file. Finally, inform the three main credit reference agencies (Equifax, Experian, TransUnion) in writing of the identity theft, and request they place a notice of correction on your file explaining you're a victim.
Frequently asked questions
How do I know if my identity has actually been stolen?
You may not know immediately. Check your credit report for free at Clearscore or Experian—look for accounts, hard searches, or payment records you don't recognise. Contact your bank to review your accounts for suspicious applications or transactions. If you're refused credit unexpectedly, or you receive bills for accounts you didn't open, these are strong signs. Request your statutory credit file from each of the three credit reference agencies (Equifax, Experian, TransUnion) for a complete picture.
What should I do if money has already been taken from my accounts?
Contact your bank immediately on the number on the back of your card—explain you're a victim of identity theft and ask them to freeze your accounts. Report the specific fraudulent transactions and ask for a chargeback or refund. Most UK banks offer protection under the Payment Services Regulations if you report fraud promptly. Report the theft to Action Fraud (0300 123 2040 or actionfraud.police.uk) to get a crime reference number, which strengthens your case with your bank. Keep detailed records of all fraudulent transactions and correspondence with your bank.
Can I get my stolen identity back, and will my credit score recover?
Yes, but it takes time and effort—typically 6 months to 2 years depending on the damage. Once you've disputed fraudulent accounts with creditors and they've been removed from your credit file, your score will gradually improve. Register with CIFAS, which alerts lenders to your identity theft for up to 6 years and significantly reduces the likelihood of criminals opening accounts in your name. Your credit file can be restored, but you'll need to provide evidence (crime reference number, statutory report) to creditors. During recovery, you may struggle to get credit approval, but this improves as fraudulent accounts are closed.
How do I report identity theft in the UK?
Report to Action Fraud online at actionfraud.police.uk or call 0300 123 2040—you'll receive a crime reference number to use with creditors. Also report to CIFAS (cifas.org.uk) to register protective marking. Contact each creditor where fraudulent accounts exist in writing, providing your crime reference. Report phishing or data breaches to the NCSC at report@phishing.gov.uk. Inform your three credit reference agencies (Equifax, Experian, TransUnion) in writing, and consider contacting Citizens Advice (0808 223 1133) for free support navigating the recovery process.