Online identity theft is not only about losing the password to an account. It happens whenever someone uses your personal data, such as your name, ID document, tax code or photos, to pass themselves off as you: opening an account, applying for a loan, activating a subscription, registering a domain, signing a contract or publishing content in your name. The consequences hit your wallet but also your reputation: debts you never took on, reviews written by "you", profiles speaking on your behalf.
Signs that something is wrong
Identity theft is often discovered by chance, through indirect signs:
- you receive payment reminders or notices for services you never signed up for;
- parcels, cards or contracts you did not request arrive at your home;
- the bank refuses you a loan because of negative records you cannot explain;
- acquaintances ask you about messages, posts or reviews you did not write;
- you find accounts, sites or professional profiles online with your details that you did not create.
None of these signs is proof, but each deserves immediate checking.
The first hours: what to do
1. Work out what was used
Try to reconstruct which data is in third-party hands. Have you lost an ID document? Have you recently sent a copy to someone, perhaps for a rental listing or a supposed job offer? Did you reply to a message asking for confirmations? Knowing where the problem started helps you understand how far it can go.
2. Block what you can block
- If cards or accounts are involved, contact the bank immediately and ask for them to be blocked.
- If you have lost your ID, report the loss or theft and apply for a new one.
- Change the passwords of your main accounts, starting with your email, because almost all the others can be recovered from there.
3. Contact whoever opened the service in your name
Write to the company, bank or provider where the contract was opened. Explain that you never signed it, ask for it to be closed and for any charges to be suspended, and request a copy of the documents used for activation: you may find out which of your documents was used and with which contact address.
4. File a police complaint
A complaint to the police matters for two reasons. It starts an investigation and, above all, it gives you an official document to show anyone who holds you responsible for debts or activities carried out in your name. In Italy, creating a false identity to deceive others may amount to the offence of impersonation.
Bring everything you have: notices received, contracts, screenshots of fake profiles, page addresses.
Checking your credit record
If you fear someone has applied for credit in your name, you can ask the credit reference agencies operating in your country for access to the data concerning you. You will see which credit applications are associated with your tax code. If you find unknown ones, dispute each with the organisation that recorded it, attaching the police complaint.
The reputational side
Identity theft often leaves public traces: a social profile, a website, a listing, reviews or comments written in your name. For each one:
- document it with a screenshot and the address;
- flag it to the platform as impersonation, attaching the police complaint if possible;
- if the content appears in search results for your name, consider a delisting request.
If someone has registered a domain with your name to impersonate you, you can write to the registration or hosting provider to flag the unlawful use.
Keeping a timeline
Identity theft is rarely resolved in a day. Weeks or months can pass between disputes, replies and closures. Keep a single document with:
| Date | Action | Recipient | Outcome |
|---|---|---|---|
| Card blocked | Bank | ||
| Complaint | Police | ||
| Contract dispute | Provider |
This table saves you from repeating steps, helps you chase those who do not reply and will be invaluable if you need to consult a lawyer.
Preventing relapses
After identity theft, whoever has your data may try again. A few habits reduce the risk:
- do not send copies of your ID unless necessary and, if you must, add a note stating its purpose and the date;
- turn on two-step verification for your main accounts;
- check your bank statements and credit record periodically;
- search your name on search engines from time to time.
In short
- Reminders, parcels or contracts you never requested are signs to check immediately.
- Block cards and documents and secure your email first.
- Dispute every service opened in your name and ask for copies of the documents used.
- The police complaint is the key document for defending yourself against debts and activities that are not yours.
- Keep an orderly timeline and check over time that there are no relapses.