Identity theft

Identity theft is when someone uses your personal information without your permission to impersonate you or act in your name. 

This can include opening bank accounts, applying for loans or credit, buying things or services using your identity. 

You might find out when you: 

• discover an account, loan, or credit application you did not make
• receive bills, debt collection notices, or statements for purchases you do not recognise
• are contacted by an organisation you have never dealt with
• notice changes to your personal details or accounts that you did not make
• are told your information has been involved in a data breach. 

Identity theft can affect your finances, credit history, privacy, and sense of security. Sometimes it takes time to show up. 

If you think someone has used your identity, it is important to act as soon as possible. Support and advice are available, and there are steps you can take to help protect yourself. 

If you shared personal details such as your name, date of birth, IRD number, bank account details, passport, or driver licence, there is a risk that information could be used in your name. 

You may have already checked your accounts for unauthorised transactions. Identity theft can also involve someone using your information to create new accounts, apply for credit, or change contact details without your knowledge. 
 
Signs of identity theft can include: 

• accounts or services you did not open
• credit applications or credit checks you did not authorise
• changes to your contact details that you did not make
• letters, emails, or messages about accounts you do not recognise
• bills, debt collection notices, or purchases that are not yours. 

Identity theft is not always discovered straight away. In some cases, misuse of personal information may not show up for weeks, months, or even longer. 

If you are concerned that someone may be using your personal information, there are steps you can take to help protect yourself and reduce the risk of further harm: 

• place a suppression on your credit file with a NZ credit reporting agency. This can make it more difficult for someone to open accounts or apply for credit in your name
• if your IRD number was shared contact IRD directly. They may be able to place a note on your account and discuss options for protecting your information
• if your driver licence details have been exposed contact NZ Transport Agency for advice
• if your passport or other identity documents were exposed the Department of Internal Affairs handles these enquiries and can advise on next steps
• if you are concerned about broader identity misuse contact your bank and NZ Police
• contact any institution where a fraudulent account has been opened and ask them to investigate, flag, suspend or close the account
• change passwords and security settings for any accounts that may have been affected
• check your credit report for unfamiliar accounts, enquiries or applications you do not recognise
• alert your bank to the possibility of identity misuse, even if no banking fraud has happened yet
• continue monitoring your accounts and personal information over time. Identity theft can happen gradually and new activity may appear weeks or months later. 

What to realistically expect 

Clearing up identity theft takes time. Individual institutions investigate each account separately, which can mean multiple processes running at once. Persistence and documentation are important.
 
The harm can emerge over months, making continued monitoring essential. This is not a one-off fix - it is an ongoing process. 

Discovering that someone may have access to your personal information can feel stressful, frustrating, or overwhelming. 
 
Identity theft is not your fault. Acting early, keeping records, and seeking support can help you regain control and address any issues that arise. 

IDCARE

IDCARE is an Australia and New Zealand's national identity and cyber support service. They offer free help with identity theft and compromised credentials.

• Website: IDCARE(external link)

Centrix

Centrix is a credit reporting agency. You can request a credit suppression or check whether accounts have been opened in your name.

• Website: Centrix(external link)

Equifax

Equifax is a credit reporting agency. You can request a credit suppression or check whether accounts have been opened in your name.

• Website: Equifax(external link)

Experian

Experian is a credit reporting agency. You can request a credit suppression or check whether accounts have been opened in your name.

• Website: Experian(external link)

Privacy Commissioner

You can contact the Privacy Commissioner if your personal information has been misused or disclosed without your consent.

• Website: Privacy Commissioner(external link)

Department of Internal Affairs

You can contact the Department of Internal Affairs about passports and identity documents.

• Website: Department of Internal Affairs(external link)

NZ Transport Agency (NZTA)

The NZ Transport Agency (NZTA) may help you with driver licences. 

• Website: NZ Transport Agency(external link)