If something feels off, trust that instinct. Unexpected emails, strange transactions, letters about accounts you never opened.
This is usually how identity theft shows up. It’s unsettling, but you’re not powerless.
Acting early makes a real difference, and you don’t need to fix everything at once.
This guide walks you through what to do, in the right order, with a focus on practical steps for the UK.
Take it one section at a time. You’re already doing the right thing by being here.
Step 1: Secure your accounts right now
Start with the accounts that give someone else the most reach into your life.
Change passwords for:
- Your main email account
- Online banking and savings accounts
- Payment services like PayPal or digital wallets
- Shopping accounts that store card details
Use strong, unique passwords and turn on two-factor authentication where available.
If your email is compromised, everything else becomes easier to access, so treat that as the priority.
Also check recent activity. Look for logins from unfamiliar locations or devices. Many services let you sign out of all sessions, which is worth doing.
Step 2: Contact your bank and payment providers
Once your accounts are secured, speak to your bank as soon as you can. Even if no money has gone missing yet, unusual activity is enough to justify a call.
Tell them:
- You believe your identity may have been compromised
- Whether you’ve noticed suspicious transactions
- Which accounts might be affected
Banks can freeze cards, block payments, issue replacements and flag your account for extra monitoring.
In many cases, this stops further damage before it starts. If money has already been taken, ask about refunds and next steps straight away.
Step 3: Report identity theft
Reporting helps protect you and creates a record if problems surface later.
In the UK, start with Report Fraud. This is the national reporting centre for fraud and cybercrime. You can report online and it’s usually quicker than calling.
You should also consider CIFAS Protective Registration. This places a warning on your credit file so lenders carry out extra checks before approving credit in your name.
It doesn’t stop you using credit yourself, but it does slow down fraudsters.
Police involvement isn’t always necessary. Most identity theft cases are handled through banks, lenders and fraud agencies rather than criminal investigations.
Step 4: Check your credit file for damage
This step is about visibility, not blame.
Check your credit reports with the UK credit reference agencies and look for:
- Accounts you don’t recognise
- Searches you didn’t authorise
- Address changes you didn’t request
Even small unfamiliar entries matter. They often signal attempted fraud rather than successful fraud, which is useful information.
If you spot anything wrong, report it to the lender and the credit agency immediately.
Step 5: Protect yourself from repeat fraud
Identity theft often comes in waves. Once your details circulate, they can be reused.
To reduce the risk:
- Keep fraud alerts or protective markers active
- Monitor bank and credit activity regularly
- Be cautious with emails or calls that reference recent fraud, as scammers often follow up pretending to help
You don’t need to obsess. A quick weekly check for a few months is usually enough.
What if money has already been taken?
This is one of the biggest sources of anxiety, so let’s be clear.
In many cases, fraudulent transactions are refunded, especially if you report them promptly and haven’t acted negligently.
Timeframes vary, but banks often issue provisional refunds while they investigate.
Avoid spending refunded money until the case is closed, just in case adjustments are needed later.
Keep records of conversations, reference numbers, and dates. This saves stress if you need to chase progress.
How long does identity theft take to resolve?
There’s no single answer, but most cases follow a pattern.
Simple cases, such as card fraud caught early, may resolve in days or weeks.
More complex cases involving loans or credit accounts can take several months.
The key thing to remember is that resolution usually happens in stages. Silence doesn’t mean nothing is happening.
Patience helps, but follow-ups matter. If you’re unsure where things stand, ask.
How to reduce the risk going forward
Once the immediate issue is under control, focus on habits that actually help.
Simple steps include:
- Using a password manager
- Shredding documents with personal details
- Limiting how widely you share your date of birth and address online
- Reviewing privacy settings on key accounts
You don’t need to lock your life down. Small changes reduce exposure without adding daily friction.
Final reassurance and next steps
Identity theft feels personal, but it’s rarely targeted. It’s usually opportunistic and automated.
Acting quickly puts you ahead of the problem, and most people come out of it with little or no long-term impact.
If you’re working through this now, pause and take stock. You’ve already started regaining control. One step at a time is enough.
Quick checklist: What to do right now
- Contact the company where fraud occurred
- Inform your bank and block accounts/cards
- Change all passwords and enable MFA
- Alert Experian, Equifax, and TransUnion
- Register with Cifas
- Report to Action Fraud and get a crime reference number
Victim of identity theft FAQs
Should I contact the police directly if I’m a victim of identity theft?
In most cases, you report through Action Fraud, which works with the police. Only contact your local police if the fraud involves stolen physical documents (passport, licence) or if you’ve been directly targeted by thieves.
How long does it take to clear fraudulent debts from my credit file?
It can take weeks to months depending on the complexity. Lenders need time to investigate and confirm fraud. Keeping detailed records and a crime reference number speeds up the process.
Can I be held liable for debts taken out in my name?
No. Once fraud is proven, you won’t be liable. Lenders may require evidence (crime reference, proof of identity). While frustrating, the system is designed to ensure victims aren’t left paying for fraudulent activity.
How do I stop debt collectors chasing me for fraudulent debts?
Send them written proof (crime reference number, lender confirmation). Under UK law, debt collectors must stop action while fraud is investigated. If they persist, you can complain to the Financial Ombudsman.
Should I pay for identity theft insurance?
Maybe. Some premium bank accounts include it. It can cover recovery costs, legal fees, and provide expert support. For most people, using Cifas, checking credit reports, and securing accounts offers strong protection without extra cost.
