Identity theft

The first few hours decide most of it. What you do before reporting matters more than the procedure that follows.

Illustration: Identity theft

An offence that does not exist everywhere

Many countries have no standalone offence of identity theft: what is prosecuted is the fraud committed afterwards — deception, forgery, unauthorised access to a computer. Others have created a specific offence that bites before any financial loss appears, as soon as the identity information is obtained or used. The difference changes how you write the report: in the first case you must describe the fraudulent act, in the second the use of your identity is enough.

The order of steps, which matters more than the law

Three priorities, in this order. First the email account: it resets everything else, and until it is secured nothing else is safe. Then the payment instruments: block them immediately and confirm in writing, because in almost every system reimbursement depends on how fast you reported. Finally the credit and identity files: asking what is recorded in your name is the only way to discover accounts opened by someone else.

The phone is the main way in

A growing share of fraud runs through the phone number: a hijacked line, a duplicated SIM, intercepted one-time codes. The warning sign is simple and widely ignored: an unexplained loss of network while the handset still works. If that happens, call the operator from another phone immediately. Where money moves by mobile, the window to stop a transfer is measured in minutes.

Repair takes longer than the fraud

The long part is not the fraud, it is putting things right: removing incorrect entries, cancelling contracts, proving that an application was not yours. Two rules help. Everything in writing, with proof of posting, never by phone alone. And a single chronological file holding every letter, reference and acknowledgement: it is that file, not the police report, that everyone will ask you for.

The single most protective step

Where it is available, place a freeze or block on new credit in your name with the credit bureaus or a fraud prevention service. It stops more fraudulent applications than anything else and is usually free. Note the expiry date: these blocks are often temporary and lapse without warning.

The law country by country

The legal framework, the procedure, the time limits and the costs differ from one country to another. Each country below has a detailed page: governing texts, key facts, the actual procedure, costs, where to go and the traps to avoid.

Select a country to open its detailed page.

European framework

European Union

The Union has not harmonised identity theft as such, but it requires the punishment of illegal access to an account, which is almost always the starting point.

Britain and Ireland

United Kingdom

Identity theft is not itself a crime — the fraud committed with your identity is. Protective registration is the practical defence.

Ireland

Prosecuted as deception and fraud offences; the Central Credit Register lets you see loans taken out in your name.

North America

United States

The most developed recovery system in the world: a federal recovery plan, free credit freezes, and a statutory right to block fraudulent entries.

Canada

Identity theft has been a distinct criminal offence since 2010, and the Canadian Anti-Fraud Centre coordinates reporting.

Australia and New Zealand

Australia

IDCARE provides free case management, and a Commonwealth Victims' Certificate gives you a court document proving you were a victim.

New Zealand

Crimes Act offences on forgery and obtaining by deception, with CERT NZ and IDCARE NZ coordinating support.

South Asia

India

Sections 66C and 66D of the IT Act, a national reporting portal, and a 1930 helpline with a golden hour for freezing transfers.

Pakistan

PECA criminalises the unauthorised use of identity information, and the FIA Cybercrime Wing investigates.

South-East and East Asia

Singapore

Cheating by personation under the Penal Code, with Singpass misuse treated very seriously.

Malaysia

Penal Code cheating and personation offences, with a national scam response centre reachable on 997.

Philippines

Computer-related identity theft is a specific offence under the Cybercrime Prevention Act.

Hong Kong

Fraud and Theft Ordinance offences, with the Anti-Deception Coordination Centre reachable on 18222.

Africa

South Africa

The Cybercrimes Act covers the theft of incorporeal property, and SAFPS protective registration is free.

Nigeria

The Cybercrimes Act punishes identity theft and impersonation, with BVN and NIN misuse the central practical risk.

Kenya

Specific offences for identity theft and impersonation, with mobile money and SIM swap the dominant risk.

Ghana

The Cybersecurity Act and the criminal code cover impersonation; the Ghana Card and mobile money are the pressure points.

Uganda

Computer Misuse Act offences and penal code impersonation, with mobile money fraud the dominant pattern.

Zambia

Cyber crimes legislation and penal code fraud offences, with mobile money reversals depending entirely on speed.

The Caribbean

Jamaica

The Cybercrimes Act and Larceny Act cover fraud by impersonation; the TRN and NIDS are the sensitive identifiers.

Trinidad and Tobago

Fraud and forgery offences carry the case; TTCSIRT and the police Fraud Squad are the reporting routes.

This topic is also covered for French-speaking countries · German-speaking countries.

Further reading

Links to official or reference sources. They open in a new tab.

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map

A question, a correction, a suggestion? Write to us.