Money & Identity · intermediate · 12 min
Identity Theft & Account Takeover
What to do when your details are in a data breach, your accounts start moving without you, and how to lock down your identity.
- Spot the signs of identity theft and account takeover
- Lock down accounts with passwords, 2FA, and credit checks
- Know when to call IDCARE and what to report where
When your identity goes to work without you
Identity theft is using your stolen details — name, DOB, driver's licence, passport — to open accounts, take loans, file tax returns, or run scams in your name. Account takeover is the faster cousin: someone gets into your email, bank, or social accounts using credentials leaked in breaches.
The early-warning signs
- Password reset emails you never requested
- Strange logins on accounts (check your security settings)
- New bills, cards, or loans arriving for accounts you didn't open
- A suddenly worse credit score
Lock it down
- Change passwords on anything important — and don't reuse them. A password manager makes this bearable.
- Turn on two-factor authentication (2FA) everywhere that offers it, especially email and banking.
- Check your credit report — it's free annually from the three bureaus (Equifax, Experian, illion).
- Breached? Check haveibeenpwned.com for your email addresses, and act on any breach that includes your passwords.
Get help
IDCARE (1800 595 160) is Australia's free national identity and cyber support service — they'll build you a response plan. Report identity crime to ReportCyber at cyber.gov.au/report, and report fraud on your accounts to your bank and the police if requested.
The rule that saves you
Use a different password for email than anything else. Email is the master key — whoever controls it can reset everything else.