This page is Archived

We've not updated this article for quite a while, but wanted to leave it on the site as it still may contain useful info for you. Please only act on any tips below if you've fully researched them first.

ID fraud protection

Cut the costs of ID theft cover

Scams to grab personal details are big business for tricksters and have stoked ID fraud fear up to fever pitch. But is there really anything to be afraid of? And what can you do to protect yourself?

There are several tips and tricks you can use to minimise the chances that fraudsters will get your details. Our Q&A below explains it all.

What is ID fraud?

It's when a criminal steals your identity and uses it to apply for credit and services, leaving you to foot the bill.

It can be as simple as going through your rubbish bags, finding your old letters and bank statements and then applying for financial products using your details.

Some criminals sweep personal details from social media accounts such as Facebook, LinkedIn or Twitter, to build up an even stronger profile of your identity, so be careful what you publish.

But actually, you're rarely liable for cash which is fraudulently spent, providing you can prove it wasn't you and that you haven't been negligent.

Why is it a problem?

It's a nightmare to sort out and can leave you out of pocket. ID theft can also lead to unpleasant encounters with debt collectors, court actions and problems getting credit or a mortgage. It's usually stressful as well as time-consuming.

So, while it's important to be concerned, taking the same sensible precautions as normal is what counts. Crucially, banks cover the cost of ID fraud as long as your negligence didn't let the fraudsters get the PIN.

Banks say that if your PIN is easily guessable, for example 0000, 1234, or your date of birth, they won't pay out on any fraudulent transactions made on your card. If it's easy, change it!

How do I protect myself?

There are a number of preventative measures:

  • Keep your PIN safe

    PINs and passwords for debit and credit cards are the easiest way to access accounts. Always keep yours safe. Try not to use codes derived from kids' or relatives' birthdays, as fraudsters could determine your PIN from that information.

  • Get a shredder

    Everybody should have a cross cut shredder (these usually cost around £20) for destroying important documents. This means no one can root through your bins to find personal data, and use it in financial scams (read more about phishing later in the guide).

    This should include all documents from financial institutions as a bare minimum; any others with your name and address on should be considered for shredding.

  • Lock down your phone

    As we use our smartphones more and more for our banking and shopping, please please please make sure your phone or tablet has a pin to lock it. You should also see what permissions your apps may have, such as the ability to change passwords on email accounts.

  • Protect yourself online

    Kitting out your computer with up-to-date antivirus software is a must. Read our Free antivirus software guide.

    When using social media accounts like Facebook, don't display information fraudsters could use to impersonate you, such as your date of birth or mother's maiden name. You should avoid using the same passwords when you create accounts, as access to one could mean access to all. Plus if personal and identifiable information isn't integral to the service, there's no harm in using a false one.

    If you are entering card details online, make sure the web address starts with https (the 's' stands for secure). Your browser should also identify the site as secure in the address bar.

  • Always check bank statements

    Regular checking of your bank statements is always good practice. If you spot something that looks a tad dodgy, contact your bank or building society immediately. Also, if your bank or credit card statements fail to arrive, contact the company right away.

  • Regularly check your credit reference files

    If someone is making false applications for credit in your name, it will appear on your credit reference files. You should check these at least once a year (or immediately if you suspect fraud). See our Credit scores guide.

The prime worry is that criminals will take your identity and use it along with other information to build a new profile, apply for new products in your name, which will go on to your records and ruin your credit history. Yet as long as you take sensible precautions, the risks are limited.

How does ID fraud work?

Secure. Identity protection. My credit.

There are two ways that fraudsters normally operate:

Phishing – getting you to give up your details

First, they try to get your PIN or password by what is known as 'phishing'. This means they set up websites, or directly contact you by email, phone or post, claiming (and looking/sounding) like they are genuinely from your bank, and they ask you to enter/tell them your PIN.

If it works, they'll have all they need to access your money, and theft is easy.

So there's a very important golden rule. No matter whether it's a traditional letter, email or a phone call:

NEVER EVER EVER EVER give anyone your PIN or password. Don't do it, don't think about it. Always assume it's a fake.

Sadly, the banks are culpable here. They do sometimes call and request some personal details or passcodes, and this doesn't help matters. Yet we have to protect ourselves and not rely on the banks. Having said that, no bank should ever ask for your PIN.

Even if you think the contact is genuine, while it's a hassle, just don't give them an answer. Instead, use what you already have stored as their correct phone number, website or postal address, and contact them back. Then you can be sure you're dealing with the correct people.

fraudsters using your identity to apply for products

ID fraud – using your identity to get credit

Second, fraudsters may apply for products using your identity. To spot this, regularly check your credit reference files, which contain all data passed on by banks about how you do your banking.

If someone is stealing your identity, this is where you'll spot any products listed that you never applied for.

You should check your credit file at least once a year. Read our Credit scores guide to find out how. With cashback sites and free trials, you can even get paid to check.

Unfortunately, many people don't take this precaution, leaving themselves hostages to fortune. Always, always check your credit file at least once a year. Otherwise fraud can continue for years without you knowing.

The same applies if you receive goods or services you haven't bought, or are notified you've been accepted for financial products or phone contracts that you didn't apply for. All these are warning signs someone's been using your identity.

If you think you've been a victim of fraud, report it to ActionFraud (0300 123 2040), the UK's national fraud reporting centre. It may also be able to offer help and advice on what to do.

MSE weekly email

FREE weekly MoneySaving email

For all the latest deals, guides and loopholes simply sign up today – it's spam-free!

Do I need ID fraud insurance?

No no no no NO!

An entire industry has built up selling us the fear of ID fraud, and then trying to sell us insurance against it. In some ways these companies are almost, although not quite, as bad as the fraudsters themselves. Many don't mention that ID theft insurance only covers the cost of salvaging the mess, not the money lost through the fraud.

Most non-high net worth individuals don't need to pay for these expensive insurance policies. While ID fraud is a hassle, you're covered by the banks unless you're culpable.

ID fraud insurance should be differentiated from payment protection insurance, which is commonly sold with credit cards. The idea is that it'll make some payments for you, usually for a year, if you are unable to (for example, if you lose your job).

So it's always worth checking you aren't getting more than you bargained for when you fill in the application. Then check your statement each month to check you aren't inadvertently paying for extras if you didn't ask for them.

If you think you've been mis-sold identity theft insurance then you could be due compensation. Last year, a company called CPP, plus banks that mis-sold identity theft and card protection insurance, had a redress scheme for its customers.

Can I get more protection for free?

ID fraud protection should come automatically with all credit cards, but some give a little more.

Aqua credit card customers get automatic protection provided by Noddle, worth £80 a year. This includes the Noddle credit report, alerts and the improve service, which gives you tips if your credit score is below average.

Bear in mind Aqua cards have quite a high APR in comparison to others, but the major perks are the free monthly credit reports for life (typically from £5 a month) and the alert system which instantly notifies you if someone tries to open an account in your name.

For more information, see our Credit cards for bad credit guide.

  • Full details: Aqua credit cards

    Aqua's credit cards are quite pricey compared to the rest, but here's what you'll get as extra perks:

    • Online access to your monthly credit report

      Aqua appointed Noddle as their credit checker so you'll get access to their online credit report. These reports typically cost from £5 to £15 a month.

    • Subscription to Noddle Alerts & Noddle Improve

      You'll be signed up to weekly emails on Noddle Alerts which highlights any significant changes to your credit report, so if someone signs up for an account in your name, you'll be in the know. The Improve function is basically a credit score with added tips on how you can improve it if it comes up a little low.

    • Extended coverage

      Even if you close your aqua card, your Noddle Improve and Noddle Alerts will continue to run for free up until their yearly anniversary, while your aqua credit checker account will switch to a typical Noddle account, so you'll be protected for longer.

Most credit card providers will monitor your account for suspicious activity and will contact you if there are transactions that don't fit in with your usual spending patterns to check they are legitimate. However, this is not a failsafe so it's important to check your statements, and report cards missing as soon as you realise.

Bank accounts with assistance

Packaged bank accounts usually come bundled with travel, breakdown and mobile insurance in return for a monthly fee. ID theft assistance can sometimes be included, though the level of cover varies.

The service they offer often provides little more than what a bank should do if fraudulent payments have been made from your account or someone has used your identity. They're not worth getting if that's all you want them for, and often offer little more than an advice line.

Some do come with more than that though, so if you're planning to use the other benefits too, see our Packaged bank accounts guide for more.

Too late! I think my ID has been stolen

Need instant help? If you think you've fallen victim, Experian's CreditExpert monitoring includes access to an ID fraud protection helpline. This costs £14.99 a month, but it offers a free 30-day trial. So if you need it, simply sign up to the service, use the ID fraud helpline and then cancel the service before the 30 days is up. See our Credit scores guide to find out how.

If you've noticed unusual account activity and genuinely suspect someone is using your identity to apply for new products, then contact the fraud prevention service CIFAS, and ask it to put a 'protective registration' on your credit reference file. This costs £25 and alerts all lenders who see it to carry out further checks before approving credit applications.

However, don't use this lightly. Getting Protective Registration on your files will slow up any credit searches, as your name will be flagged up, but this won't stop you from taking out products, it will stop the fraudsters. 

Spotted out of date info/broken links? Email: