Identity Theft and Misuse
Stolen personal information is used to open accounts, take over services, redirect money, or impersonate the victim.
How this scam operates
Identity information may be obtained through phishing, a data breach, stolen documents, account takeover, or manipulation. Misuse can appear as an unfamiliar account, credit inquiry, benefit claim, tax filing, address change, or transaction.
Details can vary, but the goal is usually to create enough trust, fear, or urgency that you act before verifying the story. Caller ID, profile names, logos, and polished websites can all be copied.
What the scammer wants
Identity documents, government identifiers, financial details, account access, and enough information to impersonate another person.
Common tactics
Phishing, impersonation, breached data, fraudulent account recovery, mail theft, and repeated attempts across different services.
Warning signs to look for
Unexpected contact
The conversation begins through an unsolicited call, message, email, or pop-up.
Request for a verification code
Someone asks you to read back or forward a one-time login or payment code.
Look-alike contact details
The sender address, domain, profile, or phone number resembles but does not match an official one.
What to do next
Take protective action even if you are not yet certain this is a scam.
-
recovery
Start official account recovery
Use the platform’s official recovery process from a trusted device.
-
Immediate response
Preserve evidence and secure access
Save messages, receipts, account names, URLs, and transaction details. If credentials were exposed, change them from a trusted device and review active sessions.
How to protect yourself
Share sensitive identifiers only when necessary and after verifying the recipient. Secure email and financial accounts, review alerts and statements, and use available credit or identity monitoring controls.
If you were affected
Contact each affected institution through an official channel, secure the email and phone accounts used for recovery, document unfamiliar activity, and use the official identity-theft reporting service for your location.
Open the recovery checklistRelated practical guides
What to Do If You Sent Money to a Scammer
Immediate steps for contacting a payment provider, protecting accounts, and preserving evidence.
7 minute read
Read this guideProtect Your Accounts Before a Scam
Practical account settings and habits that reduce the impact of credential theft.
6 minute read
Read this guideOfficial help and reporting
Choose the service for your location. External links open the organization’s official website.
ReportFraud.ftc.gov
Federal Trade Commission
Official United States service for reporting fraud, scams, and bad business practices.
Action Fraud
City of London Police
The United Kingdom’s national reporting centre for fraud and cybercrime.
Phone: 0300 123 2040
Canadian Anti-Fraud Centre
Royal Canadian Mounted Police, Ontario Provincial Police, and Competition Bureau Canada
Canada’s central service for information about fraud and for reporting fraud and cybercrime.
Phone: 1-888-495-8501
Scamwatch
National Anti-Scam Centre
Australian government information and reporting guidance about scams.
Related scam types
Social Media and Account Takeovers
Attackers steal passwords or verification codes, then impersonate account owners to target their contacts.
Read related guidePhishing, Text, and Email Scams
Deceptive emails and text messages imitate familiar organizations to trigger unsafe links, replies, downloads, payments, or disclosure of information.
Read related guide