How can you tell if your identity has been stolen?

Quick answer: Check your credit report for signs of identity theft, like applications you didn’t make. Review your bank or card statements for unfamiliar activity and watch for suspicious post or emails. You can also check whether you’ve been affected by a data breach and consider credit monitoring.

Wondering how to tell if your identity has been stolen? Not sure how you’d know if you were hacked? Don’t worry, there are ways to check if your data’s been leaked or someone’s pretending to be you.

This guide explains the signs of identity theft, phone hacking, email hacking and credit fraud. We’ve also covered how to protect yourself in a data breach and stop fraudsters in their tracks.

Has someone used your financial accounts or taken out credit in your name? We have a different guide to help you if you’ve been a victim of fraud.

How to check if your identity has been stolen

Identity theft is when someone steals your personal information. Identity fraud is when someone uses your personal information to commit crime, such as taking out credit in your name or stealing your money. The clearest sign that your identity has been stolen is if your information is being used to commit identity fraud.

There are a number of warning signs of identity fraud. Some ways you can spot it early:

• Check your credit report for suspicious activity, like applications you didn’t make or an address that isn’t yours.
• Watch for unexpected post and emails, like confirmation of an account you didn’t set up, credit cards you didn’t apply for or receipts for things you didn’t buy.
• Check your credit score for unexplained dips, which could be caused by someone taking out credit in your name.
• Look at your bank and card statements for spending or transfers you don’t recognise.

How would I know if my identity has been stolen?

You would know if your identity has been stolen if you see signs that someone has been pretending to be you to get credit or access financial products in your name. Possible signs of this include:

• Bank transfers or card transactions you didn’t make.
• Receipts or invoices for things you didn’t buy.
• Mail from lenders about accounts or applications you don’t recognise.
• You’re refused credit even though you have a good credit score.
• You’re contacted by debt collectors about accounts that aren’t yours.
• You apply for benefits but are told you’re already claiming.
• Information on your credit report that isn’t yours. Contact us if you think there’s an error on your Experian Credit Report.

Check your free Experian Credit Report for signs of fraud. Don’t worry, viewing your report won’t affect your credit score.

How to check if someone is using your credit

Check your credit report with all three credit reference agencies to see if someone’s using credit in your name. Look for signs of fraud, like applications, accounts or addresses you don’t recognise.

Also, look through your bank and credit card statements for suspicious activity, like transfers, cash withdrawals or purchases you didn’t make.

How to get alerts if someone applies for credit in your name

Consider registering for alert services from credit reference agencies. With Experian Identity Plus or CreditExpert, you get alerts about changes on your credit report that could be signs of fraud.

You can also lock your credit report with Experian CreditLock. This helps block fraudsters from taking out credit in your name, and alerts you instantly if we see someone’s tried to.

Learn more about how Identity Plus and CreditExpert protect you, and find out which option suits you best.

How do you know if you’ve been hacked?

Some common signs your accounts have been hacked are:

• You can’t access your account with your usual login details.
• There are logins from unfamiliar devices or locations you haven’t been to.
• You’re getting messages you weren’t expecting, like password resets.
• There has been activity in your accounts that wasn’t you, like messages you didn’t send or transfers you didn’t make.

Look for signs you’ve been affected by a data breach or phishing attack, as these are common ways for hackers to access your accounts. You can find advice on what to do if you’ve shared personal information with a fraudster.

How can you check if your phone has been hacked?

You can use antivirus products to scan your phone for malware. Malware can be used to steal your data or control your device. Also, look for signs your phone’s been hacked, like:

• Unexpected overheating, lack of space or the battery draining faster.
• A light showing the camera’s on even when you’re not using it.
• High data usage or phone charges you weren’t expecting.
• Outgoing calls or texts you don’t remember.
• Missing calls or texts, even though your signal and SIM seem fine.
• Apps or pop-ups that aren’t familiar.

If malware has affected your phone, the National Cyber Security Centre advises doing a factory reset. Then only restore data that was backed up before the infection. It’s possible the hacker accessed your email, social media and financial accounts, so take steps to protect yourself from fraud. Immediately change all important passwords from a secure device.

If someone hacked your phone to stalk you — like checking where you go and who you talk to — you can get advice on dealing with cyberstalking from The Cyber Helpline.

If someone calls to say your phone’s hacked and they can help, it’s likely a vishing scam, even if they say they’re from a company you trust. Hang up and report it to Report Fraud .

How do you know if your email has been hacked?

Some signs your email has been hacked are:

• You’re locked out of your email account.
• There are changes to your settings, like auto-forwarding, that you didn’t make.
• There are logins or attempted logins from unfamiliar devices or locations.
• You’re getting password reset emails you didn’t ask for.
• There are emails you don’t recognise in your ‘sent’ or ‘trash’ folders.

If you got a “you’ve been hacked” email, it may be a phishing scam. Don’t respond, click links or open attachments. If it says it’s a security alert from a company you trust, speak to the company directly using contact details you trust, not those given in the email.

It’s important to know what to do if your email is hacked as someone may be trying to steal your identity, which can have a serious impact on your finances and credit.

Credit Score Expert

Our expert says

If your email or phone is hacked, fraudsters may get the information they need to steal your identity and take out credit in your name. Knowing the signs of hacking and identity theft can help you act quickly to protect your finances and credit history. John Webb, Experian UK

How to check if your data has been breached

When a company that holds information about you has a data breach, they should tell you how you’re affected and what to do next. If you hear about a breach through a website, email, text or call, it’s important to confirm it’s genuine and not a phishing scam.

Don’t use the links or contact details given — speak to the company directly using contact details you trust. The NCSC has more guidance on what to do in a data breach .

There are tools for checking if your personal data was breached, like Have I Been Pwned and some antivirus or password manager services.

If you’d like alerts about possible threats to your data, try Identity Plus or CreditExpert with Experian. They both protect your personal and financial details by checking they’re not exposed online. See which option is right for you, and try either one free for 30 days.*

New customers only. Identity Plus is £10.99 a month and CreditExpert is £14.99 a month after your 30-day trial ends.

How to check if your email has been leaked

Companies should tell you if your email address has been leaked in a data breach. Getting phishing messages or lots of spam are some signs your email address has been leaked.

You can also check if your email address is exposed using tools like Have I Been Pwned .

How do you know if your password has been leaked?

It’s important to find out if your password has been leaked and change it before fraudsters can access your account. Companies should tell you if your password with them was leaked in a data breach.

You can also get web monitoring alerts with Experian Identity Plus or CreditExpert. If we find your password has been exposed online, we’ll alert you immediately.

If you think you’ve been a victim of fraud

There are steps you can take to recover if you’ve been a victim of identity fraud, like:

• Contact your bank as soon as you can, so it can protect your account.
• Change the passwords on your accounts if you think they were compromised.
• Tell the police through Report Fraud for a crime reference number and advice.
• Check your credit report with Experian, Equifax and TransUnion and ask for help sorting out fraudulent records.
• Consider ’freezing’ your credit to help block further applications in your name.
• Reach out to Stop! Think Fraud or Victim Support for more advice.

Ways to keep yourself safe from fraud

Fraud is a major problem in the UK, making up about 41% of all reported crime. Here are some ways to help protect yourself:

• Learn how to spot the different types of fraud.
• Avoid clicking links in unexpected emails or texts — go directly to the official website instead.
• Stay safer online with strong, unique passwords and two-factor authentication.
• Consider locking your credit report to limit applications in your name.
• Act quickly to protect your information in a data breach.
• Check your report often for the warning signs of identity theft.
• Get enhanced fraud support, web monitoring, fraud alerts and increased protection with Identity Plus.

New customers only. Identity Plus is £10.99 a month after your trial ends.

Frequently asked questions

How do you check if your passwords have been compromised?

Companies should tell you if your password was leaked in a data breach. If you’re worried your password was stolen through phishing or malware, you can check if your data is public using Have I Been Pwned .

You’ll get automatic alerts if your personal or financial data is exposed online if you use Identity Plus or CreditExpert with Experian.

How do you find out if your credit has been compromised?

Check your credit report with all three of the UK’s credit reference agencies — Experian, Equifax and TransUnion. Look for the warning signs of fraud, like credit applications, addresses and accounts that aren’t familiar.

Other signs include an unexpected drop in your score or being turned down by lenders even though you have good credit. If you have Identity Plus or CreditExpert with Experian, you’ll get alerts about certain changes to your report that may be signs of fraud.

How do you know if someone is using your identity?

If someone’s using your identity, you may see signs of identity theft like:

• Unexpected mail or emails, like from companies you’ve never dealt with.
• Unfamiliar transactions on your bank or credit card statements.
• Addresses and accounts that aren’t yours but appear on your credit report.
• A big drop in your credit score even though you haven’t done anything to hurt it.

Can someone open a UK bank account in your name without you knowing?

It’s possible — this is called identity fraud. There are ways to protect yourself, like staying safe online and knowing how to spot the different types of fraud. Checking your credit report often can help you spot fraud and deal with it sooner. Current accounts will usually appear on your report, for example.

If you have Identity Plus or CreditExpert with Experian, we’ll send you alerts about certain changes on your report that could be signs of fraud.