What is identity fraud?

Identity fraud is when someone uses your personal details to commit fraud, perhaps opening an account or obtaining products in your name. Identity theft is obtaining those details; identity fraud is using them fraudulently. It can happen without taking over an account that you already hold. 1

By Secordit. Last checked: 7 November 2026.

Go to the steps · All glossary terms

How it works

  1. A criminal obtains enough personal information to impersonate you. 1
  2. They use it to apply for an account, product or service. 1
  3. Letters, payment demands or unexplained account checks may expose the fraud. 1

Real UK example

Which? reported Steve Goddard’s case in October 2025. He found that savings accounts had been opened in his name after unexpected letters arrived.

One provider told him an account had been used for money muling. The report also explains why checking only existing credit accounts can miss warning signs. 2

Warning signs

  • Letters about an account or product you did not request. 1
  • Unexpected demands for payments you do not recognise. 134
  • Credit-file searches by firms you have not dealt with. 1
  • Missing post alongside other unexplained account activity. 1

What to do now

  1. Contact the organisation named in an unexpected letter through genuine contact details. 1
  2. Tell your bank if financial details may have been misused. 134
  3. Check your credit reports for unfamiliar accounts and searches. Keep a record of disputed applications. 1

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 345
  • Report fraud or hacking in England, Wales or Northern Ireland to Report Fraud. In Scotland, call Police Scotland on 101. 46
  • If someone is in danger, call 999. 6

How to protect yourself

  • Protect your email and use different passwords across accounts. 1789
  • Limit the personal details visible on public profiles. 1
  • Read unexpected account letters and check them rather than ignoring them. 1

Frequently asked questions

What is the difference between identity theft and identity fraud?

Theft means obtaining your details. Fraud means using those details to commit a crime, such as opening an account in your name. 1

Can identity fraud involve savings accounts?

Yes. Which? reported savings accounts opened using someone else’s identity. Do not assume only loans and credit cards are affected. 2

Should I check credit-file searches as well as accounts?

Yes. Which? recommends checking both hard and soft searches for unfamiliar activity, as well as listed accounts. 2

Matching kit

After a Scam: What to Do First · £7 · Digital download.

A printable UK checklist for the money, account and reporting steps. It is general information, not a recovery service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. Report Fraud, Identity fraud and identity theft - Report Fraud. Accessed 7 November 2026 (Europe/London).
  2. Which?, Rise in criminals opening mobile and savings accounts in victims’ name - Which?. Accessed 7 November 2026 (Europe/London).
  3. UK Finance, Authorised Push Payment Fraud Reimbursement | UK Finance. Accessed 7 November 2026 (Europe/London).
  4. Report Fraud, Report Fraud alert: Police forces being impersonated in scam calls using ‘spoofed’ phone numbers - Report Fraud. Accessed 7 November 2026 (Europe/London).
  5. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 7 November 2026 (Europe/London).
  6. Police Scotland, How to report a crime - Police Scotland. Accessed 7 November 2026 (Europe/London).
  7. NCSC, Recovering a hacked account | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  8. NCSC, Top tips for staying secure online | Turn on 2-step verification (2SV) | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  9. ICO, 23andMe fined £2.31 million for failing to protect UK users’ genetic data | ICO. Accessed 7 November 2026 (Europe/London).