Identity Theft in the UK: Warning Signs and Reporting to Action Fraud

Last spring, a letter arrived at our office addressed to a colleague who had never held an account with the sender. It claimed she owed £1,400 to a catalogue company she had never heard of, and it included a reference number, a payment deadline and a stern warning about debt collectors. A quick credit check revealed two searches she had never authorised, plus a mobile contract opened in her name at an address in a city she had never visited. That letter was the first clue that someone had been using her identity for months. Identity theft rarely announces itself with sirens — it creeps in through post, inboxes and credit files, and it can sit unnoticed for a long time. This guide walks through what identity theft looks like in the UK, the warning signs worth acting on, and exactly how to report it to Action Fraud.

What Identity Theft Looks Like in the UK

Identity theft is when someone uses your personal details — name, date of birth, address, National Insurance number, bank details — without permission. Identity fraud is the next stage: using that stolen information to open accounts, take out credit or claim benefits in your name. It is a serious and growing problem. Cifas, the UK’s fraud prevention service, and UK Finance both publish annual figures showing thousands of confirmed cases each year, with impersonation fraud consistently among the most common categories reported.

The damage is not just financial. Having your identity misused can affect your credit score, trigger debt collection letters and take months to untangle. Understanding how criminals operate is the first step to spotting it early.

Common types: credit card fraud, loan fraud, benefit fraud

Criminals use stolen identities in several ways. The most frequent include:

• Credit card fraud — opening a new card or taking over an existing account, then running up spending before the victim notices.
• Loan and finance fraud — applying for personal loans, car finance or buy-now-pay-later credit using someone else’s details.
• Benefit fraud — claiming Universal Credit, tax credits or other DWP payments in another person’s name.
• Account takeover — hijacking an existing bank, mobile or utility account by convincing the provider they are the real customer.

How criminals obtain your data: data breaches, phishing, mail interception

Your information can leak in several ways. Large-scale data breaches at companies you have used are a common source — details surface on criminal marketplaces years later. Phishing emails and texts trick you into entering login details or personal information on fake websites. Mail interception, particularly in shared or communal buildings, lets criminals capture bank statements and official letters. Even old-fashioned methods like bin raiding still work when documents are not shredded.

Warning Signs You Should Never Ignore

Identity theft often reveals itself through small inconsistencies. A letter from Vodafone or EE about a contract you never took out, an HMRC notice about a tax rebate you never claimed, or a credit report entry from Barclays or Lloyds that you do not recognise — these are all red flags. Our advice is simple: if something looks wrong, treat it as wrong until you have confirmed otherwise.

Financial warning signs: unexplained transactions, debt collection letters

Watch for transactions on your bank statements you cannot account for, however small. Debt collection letters for accounts you never opened are a classic sign that credit has been taken out in your name. A sudden drop in your credit score, or being refused credit unexpectedly, can also point to fraudulent activity on your file.

Official warning signs: HMRC, DVLA, or DWP correspondence

Letters from HMRC about tax rebates, from the DVLA about vehicle tax or fines, or from the DWP about benefits you have not claimed should always be verified directly. Remember this key fact: HMRC never contacts taxpayers about rebates via email or text without prior application. If you receive an unexpected message like this, treat it as a phishing attempt and contact the organisation using a number you have looked up yourself.

Digital warning signs: password reset emails, new device logins

Password reset emails you did not request, alerts about logins from unfamiliar devices or locations, and two-factor authentication codes arriving out of the blue all suggest someone is trying to access your accounts. Do not ignore them — change your password immediately and check your account activity.

How to Report Identity Theft to Action Fraud

Action Fraud is the UK’s national reporting centre for fraud and cybercrime, and it is the correct place to report identity theft in England, Wales and Northern Ireland. (In Scotland, reports go to Police Scotland on 101.) You can report online at actionfraud.police.uk or by phone on 0300 123 2040. Here is how to do it properly.

Step 1: Gather evidence and document everything

Before you report, collect everything relevant: suspicious letters, emails, bank statements showing fraudulent transactions, credit report entries, and any reference numbers. Note dates, times and amounts. Keep a written timeline — it makes the reporting process faster and helps your bank and credit agencies act.

Step 2: Report to Action Fraud online or by phone

File your report through the Action Fraud website or by calling 0300 123 2040. You will receive a crime reference number. Keep this safe — your bank, insurer and credit agencies will ask for it. If the fraud is ongoing or you feel at risk, contact your local police on 101 as well.

Step 3: Notify your bank, credit agencies, and relevant organisations

Tell your bank immediately so they can block cards and reverse transactions. Contact the credit reference agencies — Experian, Equifax and TransUnion — to flag the fraud on your file. Consider Cifas Protective Registration, which costs £25 for two years and alerts organisations to verify your identity before opening accounts in your name. Also inform the specific organisations involved, such as HMRC, DWP or your mobile provider.

Immediate Steps to Limit the Damage

Speed matters. The faster you act, the less damage a fraudster can do. These are the steps we would take in the first 24 hours.

Contact your bank and cancel compromised cards

Call your bank’s fraud line as soon as you suspect anything. They can freeze accounts, cancel cards and issue replacements. Under UK rules, you are generally not liable for unauthorised transactions made after you report them, so do not delay.

Place a fraud alert or freeze your credit

Ask Experian, Equifax and TransUnion to place a notice of correction or a freeze on your credit file. This makes lenders carry out extra checks before approving new credit. Cifas Protective Registration works alongside this by adding an extra layer of verification.

Update passwords and enable two-factor authentication

Change passwords on your email, banking and shopping accounts — starting with your email, since it is usually the key to resetting everything else. Turn on two-factor authentication wherever it is offered. If you reuse passwords across sites, change them all.

Protecting Your Identity Going Forward

Once the immediate crisis is handled, focus on prevention. These habits dramatically reduce your risk.

Monitor your credit report regularly

Check your credit report every few months. Checkmyfile offers a free 30-day trial to view your credit report from multiple agencies in one place, and ClearScore provides free ongoing access to your Equifax data. Look for searches, accounts or addresses you do not recognise.

Secure your personal data online and offline

Use a password manager to create unique passwords for every account. Shred documents containing personal or financial details before binning them. Be cautious about what you share on social media — your date of birth and mother’s maiden name are common security questions.

Recognise and avoid phishing attempts

Treat every unexpected email, text or call asking for personal details as suspicious. Check sender addresses carefully, hover over links before clicking, and never enter login details on a page you reached through a link. When in doubt, contact the organisation directly using a number from their official website.

Frequently Asked Questions

Does it cost anything to report identity theft to Action Fraud?

No. Reporting to Action Fraud is completely free, whether you use the online form or call 0300 123 2040. The only optional cost mentioned in this guide is Cifas Protective Registration at £25 for two years.

How long does it take to resolve identity theft?

It varies. Simple cases where a card was used fraudulently can be resolved in days once your bank is notified. More complex cases involving loans, benefits or multiple accounts can take weeks or months, which is why reporting quickly and keeping a documented timeline matters.

Will identity theft affect my credit score permanently?

Not permanently, provided you act. Once fraudulent accounts are removed from your file following your report, your score should recover. Keeping a notice of correction or Cifas registration in place for a period helps prevent repeat attempts.

What should I do if I receive an HMRC rebate email?

Do not click any links or reply. HMRC never contacts taxpayers about rebates via email or text without prior application. Forward the message to HMRC’s phishing reporting address and delete it, then check your tax account through the official GOV.UK service.

Can I report identity theft if I live in Scotland?

Yes, but the route differs. In Scotland, fraud should be reported to Police Scotland on 101 rather than Action Fraud, which covers England, Wales and Northern Ireland. Your bank and credit agency steps remain the same.

Identity theft feels invasive, but it is recoverable. Reporting to Action Fraud quickly, notifying your bank and credit agencies, and staying alert to warning signs are the steps that limit damage and get your records cleaned up. Share this guide with family members — especially older relatives who may be targeted by post and phone scams — and check your credit report regularly so problems surface early rather than months down the line.