Keep your identity safe
Identity information and why you should keep yours safe
Source: eSafety Commissioner
Your identity information is any piece of personal information or data that can help to confirm who you are or how to find you. It may be information on its own or in context with other information.
It can include everyday things that are specific to you, like your:
- full name
- date of birth
- phone number
- home address
- email address
- usernames to websites (including myGov), passwords or passphrases
- tax file number
- Medicare number
- Centrelink Customer Reference Number (CRN)
- bank account details
- location check-ins
- parents’ names
- photos
- biometrics like your fingerprint or facial image.
Your credentials (also called evidence of identity documents) could include:
- driver licence
- passport
- birth certificate
- proof of age card
- ImmiCard
- Australian visa or citizenship certificate
- Medicare card
- student ID
- marriage certificate.
Your identity information and credentials make up your legal identity.
Everyone uses these pieces of information regularly to access products and services. For example, you might supply your birth certificate, driver licence or Medicare card to open a bank account, or give your name, phone number and email address to a business to sign up for a newsletter or buy things online.
Unfortunately, this information can be stolen or misused.
Identity crime explained
Source: Office of the Australian Information Commissioner
Identity crime, also called identity theft or fraud, involves someone using another person’s identity information without their consent – often to obtain a benefit. For example, identity fraud can result in someone using your identity to:
- steal money from your bank account
- take out loans or credit cards in your name
- sign up to phone plans and other contracts
- access your superannuation
- use your online accounts to redirect money and commit other crimes
- access your social media accounts and impersonate you to scam your family and friends
- create new identity credentials using your details.
Your identity can be stolen if someone accesses your identity information, including from any document that contains information about you. Even if someone only gets a small amount of your identity information, they may be able to steal your identity if they can find out more about you from public sources. This includes social media accounts, which may include your date of birth, photos and information about your family.
There are many types of fraud and many ways scammers can reach you, such as through social media, email, SMS and phone calls. If you are asked to update information or receive a refund or prize, don’t give out your identity information until you are sure it is legitimate.
Identity fraud often begins with ‘phishing’. This is a way scammers deceive you into giving them your identity information. They may gain your trust by pretending to be from a bank, the government, a trusted business, or even a friend or family member. For example, scammers impersonating your bank may send you a message asking you to click on a link to verify your account or a particular transaction. Clicking this link will direct you to a fake website that will steal any identity information you enter including passwords and log on credentials.
Anyone can be a victim of a scam. Scams are becoming increasingly sophisticated and harder to spot. Scams constantly change, as scammers take advantage of new technology, new or familiar brands, products and services, and local events or crises.
This is why it is important to keep your identity information as private and secure as possible. If you must share your identity information, make sure it is only used with your permission and that you have verified and trust the organisation or person you give it to.
The NSW Government has created this short Identity Management video on what identity theft is. It includes some useful steps to protect yourself online.
Ways to protect yourself from identity crime
Some of the ways you can protect your identity are to:
- secure and monitor your devices and accounts for unusual activity
- make sure your devices have the latest security updates
- enable multi-factor authentication for all your accounts
- ensure you have up-to-date antivirus software installed on any device you use to access your emails
- be wary of emails or social media messages from strangers and do not open attachments or click on links
- be alert for scams referencing recent data breaches.
For more on how to protect yourself, you can visit the following websites:
Signs your identity has been stolen
Source: Australian Federal Police
Check for these signs that you might be a victim of identity crime:
- Items appear on your credit card statements that you don’t recognise.
- Someone steals or obtains a government benefit, payment or refund in your name.
- You receive bills or invoices for goods or services you haven't asked for.
- Mail expected from your bank doesn’t arrive or you receive no post at all.
- You are refused a credit card or a loan, despite having a good credit history.
- A mobile phone contract is set up in your name without your knowledge.
- You receive letters from solicitors or debt collectors for debts that aren't yours.
What to do if you believe you are a victim of identity crime
Source: Office of the Australian Information Commissioner
If you have been a victim of identity crime or suspect your identity has been stolen, it is important to act quickly to minimise any financial loss or other damage.
- Contact your financial institution and tell them what happened.
- Report the matter to your local police and ask for a police report or reference number so you have evidence that you reported the issue. You can present this to an organisation, such as a government agency, a financial institution or a credit agency, to help support your claim that you have been the victim of identity crime. This may help you to fix your business or personal affairs with the organisation. You can also report the matter by visiting the Cyber website.
- Apply for a Commonwealth Victims’ Certificate. This can also be used to support your claim that you have been the victim of Commonwealth identity crime.
- Change your account passwords and close any unauthorised accounts.
- If you know that one or more of your identity documents has been compromised, contact the issuing organisation and let them know.
- If you’ve clicked on a suspicious link or given your identity information to a scammer impersonating myGov or Services Australia (including Centrelink, Medicare or Child Support), contact Services Australia’s Scams and Identity Theft Helpdesk. The helpdesk will support you with advice about how to protect yourself and your identity information.
- You may wish to contact IDCARE – a not-for-profit organisation that offers specialist services including counselling and support for victims to recover their identity. IDCARE can help you make a plan (for free) to limit the damage from identity theft. You can call them on 1800 595 160 or visit the IDCARE website to find out more.
- You can also visit the Cybercrime getting help page for advice on what to do and where to start.
Privacy and your personal information
The Privacy Act 1988 sets out rules to control how your personal information is handled. This includes rules about:
- collecting personal information
- using and disclosing personal information
- accessing your own personal information
- correcting your personal information
- making a privacy complaint if you think an organisation has mishandled your personal information.
You can find more information about the Privacy Act at the Office of the Australian Information Commissioner website.