Overview of identity theft

How do people steal your identity? With enough personal information, a scammer can pretend to be you and commit many crimes. They can make false applications for loans and credit cards, withdraw money from your bank account, or obtain services in your name.  They can also sell your information to others on the Internet.

Identity theft may take a long time to detect. Scammers ensure that bills and statements for new accounts are not sent to your address. You may notice what is happening once the scammer has already inflicted substantial damage on your assets, credit, and reputation. Consumers should also be aware of synthetic identity theft, where a scammer combines real and fake information to create a brand-new, fictitious identity. Fraudsters often use stolen Social Security or Social Insurance numbers, paired with fake names, dates of birth, and addresses, to commit this type of crime. Learn more about synthetic identity theft.

In the U.S., visit identitytheft.gov for information on how to stop and recover from identity theft.

In Canada, the Anti-Fraud Centre has information on identity theft.

Strengthen your passwords.

• Use strong passwords or passphrases. Avoid using your birth date, child’s name or birth date, mother’s maiden name, the last four digits of your Social Security number or Social Insurance number, or really obvious ones like “123456” or “password.”
• Change your passwords frequently
• Use different passwords for each online account or website

Enable multi-factor authentication (MFA).

• Add an extra layer of protection to your accounts by requiring a second form of verification, like a text message code or authenticator app.

Be cautious with emails and links.

• Avoid clicking on suspicious links or downloading attachments from unknown senders.
• Watch for phishing attempts, such as fake emails claiming to be from banks, retailers, or government agencies.

Limit personal information online.

• Be careful about the types of information you share online, especially if it is information that could be used to get past security questions on your accounts (things like your first car, first pet’s name, city where you were born).

Protect personally identifiable information.

• Shred outdated documents with personal information. While you should keep your tax returns forever, you should shred supporting documents for your tax returns after seven years. After one year, shred bank statements, pay stubs, and medical bills (unless you have an unresolved insurance dispute). Shred utility bills a month after they had been paid.