What is identity theft?
Definition
Identity theft is when someone uses your personal or financial information, such as your name, Social Security number or card details, without your permission, usually to get money, credit or services.
- Category
- Identity
- Also called
- identity fraud, ID theft
- Last updated
The FTC defines identity theft as someone using your personal or financial information without your permission. The thief doesn't need to become you. They need enough details to pass for you for one transaction: a name, date of birth and Social Security number can be enough to open a credit card in your name.
How thieves get your details
Some methods are direct: phishing emails, fake texts, calls from someone posing as your bank, stolen mail, or a data breach at a company that held your details. Others are quieter. Your address, phone number, age and relatives can sit on people-search sites for anyone to read, and those details help a thief answer security questions or sound convincing on the phone.
Warning signs
The FTC points to charges for things you didn't buy, withdrawals you didn't make and accounts on your credit report that you don't recognize. Bills or collection letters for something you never opened are another sign.
Identity theft vs. a breach
A data breach is when a company's data leaks. Identity theft is what a criminal does with leaked or collected details. A breach can lead to identity theft, but most breaches don't hit every person affected.
How to protect yourself
- 1
Check your accounts and credit reports
Look for charges and accounts you don't recognize. In the US you can get free credit reports from AnnualCreditReport.com.
- 2
Place a fraud alert
The FTC recommends a fraud alert if you think your details are at risk. It makes lenders verify your identity before opening new credit.
- 3
Ask why before you share your Social Security number
The FTC advises asking why an organization needs it and how it will be protected.
- 4
Turn on two-factor authentication
Use it on every account that offers it, starting with email and banking.
- 5
Remove your details from people-search sites
Serus finds where your address and phone number are listed and removes them, which leaves less for a thief to work with. Our data broker guides show the manual route.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
What should I do if my identity is stolen?
In the US, go to IdentityTheft.gov, the FTC's site. It builds a recovery plan and walks you through contacting the affected companies, placing a fraud alert, checking your credit reports and filing a report.
What's the difference between identity theft and fraud?
Identity theft is the stealing and use of someone's identifying details. Fraud is the broader crime of deceiving someone for gain. Identity theft is one way to commit fraud.
Can identity theft happen without a data breach?
Yes. Phishing, stolen mail, scam calls and details gathered from public listings can all give a thief enough to use.
Sources
Something wrong or out of date? Tell us and we'll re-check it.