If you receive an unexpected email or text message that seems to be from a governmental organization asking you to reply to the message or open a link:

  1. Do not respond to the message or click on any links. It may be a phishing scam.
  2. Call the Canadian Anti-Fraud Call Centre at 1-888-495-8501 to report the fraudulent email or text message.

Overview

Identity theft is when someone obtains and uses your personal information for criminal activities, often to benefit financially.

Identity thieves may use your stolen information to:

  • steal money from your financial accounts
  • open new bank accounts
  • apply for loans, credit cards and benefits
  • rent apartments or cars
  • change your contact information on government IDs

Digital identity theft

Digital identity theft is when someone uses your personal information to create fake profiles and/or accounts on social media or websites. They might do so to:

  • steal your money or data
  • trick people into clicking harmful links
  • get others to share their online passwords and/or credentials

What to do if you suspect your digital identity has been stolen

You should report a possible case of digital identity theft to the social media provider or website owner using their help centre. Most social media providers or websites have internal mechanisms to address complaints concerning impersonation.

Take screenshots of the online activity and file a report with your local police if you feel threatened or at risk of imminent harm.

How identity is stolen

Some common methods that identity thieves use to steal information include the following:

  • Phishing: pretending to be a legitimate sender and sending emails or other messages to steal personal data
  • Physical theft: stealing mail, courier packages or by looking for financial documents in the trash
  • Skimming: tampering with ATMs or credit/debit card machines in shops or gas stations to steal banking information
  • Packet sniffing: using software tools to capture unencrypted data sent over public Wi-Fi networks

You should change your passwords regularly and strengthen your web security features. This way identity thieves cannot access your online accounts, including:

  • email
  • social media
  • online shopping
  • banking/credit card
  • government

How to spot identity theft

Many people find out they’ve been the victim of identity theft when they’ve unexpectedly been denied a loan, job or rental application after a credit check. It is very important to check your credit report at least once a year for errors or possible fraudulent activities.

Signs of identity theft include:

  • bills and statements don't arrive when they are supposed to — they may have been stolen from your mailbox or someone may have changed the mailing address of your accounts
  • you receive calls from collection agencies or creditors for an account you don't own
  • you receive invoices or notifications from your bank, credit card or an online business about a new account in your name, or about additional charges that you don’t recognize
  • financial account statements show withdrawals or transfers you didn't make
  • a creditor calls to say you've been approved or denied credit that you haven't applied for

If your identity is stolen

If you believe you are a victim of identity theft, you should immediately:

Remember to keep records of your recent financial transactions and any efforts you make to notify institutions of the identity theft.

How to protect your identity

Identity thieves generally try to access:

  • credit cards
  • bank cards and PINs
  • passports
  • driver’s licences
  • social insurance numbers

Follow these guidelines to help protect yourself from identity theft under different scenarios.

Home

At home, make sure you:

  • empty your mailbox daily
  • ask friends or neighbours you trust to pick up your mail or opt for Canada Post’s "hold mail" service if you’re going away on vacation
  • store ID cards and documents (such as birth certificates, social insurance numbers and passports) in a secure place such as a locked fireproof safe
  • shred any documents and items with personal information once you no longer need them (for example, expired ID cards, credit card offers and financial statements)
  • regularly check for and immediately report any strange activity you see on your online or hard copy bills and financial statements right away (fraudsters often steal in small amounts from many cards to evade detection)
  • check your credit report at least once a year for errors or unusual activities
    • you now have free monthly access to your credit report via Equifax and TransUnion, while a credit monitoring service can also alert you when there are changes to your credit report
  • avoid giving out personal information over the telephone unless you've placed the call yourself or know the business

Shopping

When shopping, you should:

  • carry as few cards and documents as possible, and always check to see the credit card you get back from the cashier is your own
  • never tell anyone your banking or credit card PIN
  • make sure no one is watching when you use a banking machine or ATM and cover the keypad when you enter your pin
  • avoid giving out too much personal information (you’re not required to provide stores with your full mailing address, email address or date of birth)

Online or mobile devices

When using an online or mobile device:

  • change your passwords often and make them secure and hard to guess
  • avoid posting personal information online, such as your complete date of birth and mailing address
  • understand the privacy settings on all social media sites you use before posting any updates (you should review the privacy settings regularly as they often change)
  • completely wipe your computer, phone or tablet’s hard drive, or have the hard drive or device destroyed, before selling or disposing of it
  • consider setting up email alerts that notify you each time your name is used somewhere online
  • avoid online shopping and banking on unsecure public Wi-Fi
  • make sure you’re using a secure website before giving your credit card number or other financial information to a business (look for a lock symbol usually located next to the address bar or make sure the URL begins with "https”)
  • after completing a financial transaction online, sign out of the website and clear your browser’s cookies and cache
  • make sure your computer’s anti-virus and other security features are up to date
  • avoid downloading apps or software on your device unless they’re from official app stores or libraries
  • know that government organizations, financial institutions and police will never email or text to ask for your passwords or PINs
  • never click on a link from an unknown source, especially when it promises rewards, prizes or any exclusive benefit