Fraud victim? What to do if someone used your identity
Have you discovered purchases you never made or received debt collection letters for orders that are not yours? If so, you may be a fraud victim. When someone misuses your personal information to buy goods or services, it is often a case of identity theft. Acting quickly can help limit the damage, protect your accounts and resolve the situation more efficiently.
This guide explains what to do if you're a fraud victim, how to recognise identity theft, how to report fraud and what steps to take if debt collection proceedings have already started.
What should I do if I'm a fraud victim?
If you believe someone has used your identity to make purchases, act immediately. Contact the company or debt collection agency involved, report the incident to the police where appropriate, secure your accounts and keep records of all communication. Taking these steps early can help prevent further misuse of your personal information.
Immediate fraud reporting steps
- Contact the company or debt collection agency as soon as possible.
- Report the suspected identity theft to the relevant authorities in your country.
- Secure your accounts by changing passwords and enabling two-factor authentication.
- Inform your bank and relevant credit organisations if your financial information may have been compromised.
- Keep copies of all correspondence and documents related to the case.
The most important questions at a glance
- How do you recognise identity theft?
- What should you do if someone used your identity to make purchases?
- What should you do if debt collection proceedings have already started?
- How do you report fraud or identity theft?
- How can you protect your personal information from online fraud?
- How can you handle sensitive data consciously?
- Which protective measures can you take online and offline?
How do you recognise identity theft?
Identity theft occurs when someone uses your personal information without your permission—for example, to open accounts, place online orders or take out financial products in your name. Learn more about how identity theft works in our Financial Academy.
If you suspect identity theft, act quickly. Reporting the misuse as early as possible can increase the chances of limiting the damage and preventing further fraudulent activity.
The following indicators point to identity theft:
- Unauthorised payments or withdrawals from your bank account.
- Payment demands or invoices for purchases you never made.
- Debt collection letters relating to unknown orders.
- Login credentials suddenly no longer work because your account details have been changed.
- Notifications about new accounts or services you did not request.
Important
If you are a victim of identity theft and have received mail from us as a result, please contact us directly! This allows us to investigate the case and help prevent further inconvenience.
The quickest way is to use our online contact form and select ‘a debtor as a result of identity theft’ so your case will be forwarded to the appropriate specialist team.
What should I do if someone used my identity to make purchases?
If someone used your identity to buy goods or services, don't ignore the situation. The sooner you report fraud and contact the organisations involved, the easier it is to investigate the case and reduce further damage.
Follow these fraud reporting steps as soon as possible.
1. Contact the company or debt collection agency immediately
If you have received a debt collection letter from Riverty or another debt collection agency for an order you did not place, contact the sender as soon as possible. Ignoring the letter may delay the investigation and make resolving the case more difficult.
By informing the company or collection agency promptly, you can help clarify that the purchase was fraudulent and support efforts to identify the person responsible.
If legal debt collection proceedings have already begun, pay close attention to any deadlines. For example, if you have received a payment order, you may be able to file an objection within the applicable deadline. As legal procedures vary by country, check the instructions included with the notice or seek legal advice if you are unsure.
If you're concerned about the impact of debt collection on your credit record, learn more about when debt collection can lead to a SCHUFA entry.
2. Report fraud to the police and keep evidence
If you are a fraud victim, report the suspected identity theft to the police or the relevant authority in your country as soon as possible.
If Riverty is handling the case, we can provide a pre-filled report form containing the relevant case information that can be submitted together with your report.
If the person responsible is unknown, you can usually report the incident against persons unknown, allowing the authorities to investigate further.
Keep copies of all documents related to the case, including:
- your police report or case reference number;
- correspondence with the company or debt collection agency;
- invoices, payment demands and debt collection letters;
- screenshots or emails related to the fraudulent purchase.
These documents may be needed when communicating with creditors, banks or other organisations.
If the case becomes complex or involves significant financial loss, consider seeking independent legal advice.
3. Secure your personal information and online accounts
Lock your user accounts and change your passwords.
If your access data has been misused, block all your accounts as quickly as possible by phone or online. You can find the hotline numbers on the respective homepage - many are staffed around the clock for these emergencies.
Create new passwords for all logins. Use longer, "strong" passwords with numbers and special characters. Combinations that are not found in dictionaries are best. For example, think of a sentence and only use the first letter of each word. Use different passwords and use two-factor authentication or a password manager for double security.
Think about where the criminals could have obtained your personal data. Do not click on links whose senders you do not recognise or which seem strange to you.
4. Inform your bank, credit organisations and people you trust
If someone used your identity, the impact may extend beyond a single fraudulent purchase.
Inform your bank immediately if your financial information may have been compromised. They can monitor your accounts, advise on additional security measures and help protect you against further misuse.
You should also notify relevant credit organisations, such as SCHUFA in Germany. In some cases, they can place fraud alerts on your file to help prevent additional fraudulent applications being made in your name.
Finally, let trusted friends and family know what happened. If criminals gained access to your email or social media accounts, they may try to impersonate you and contact your acquaintances.
Important
Keep all documents related to the identity theft—including letters, emails, account statements and copies of reports—in a safe place. Maintaining a complete record can make it much easier to demonstrate that the purchases were fraudulent if questions arise later.
How can you protect your personal data from online fraud?
While no one can completely eliminate the risk of online fraud or identity theft, there are practical steps you can take to reduce the likelihood of your personal information being misused.
The key difference is this:
- Immediate actions help limit the damage after identity theft has occurred.
- Preventive measures help reduce the risk of becoming a fraud victim in the future.
Be mindful when sharing personal information
The less personal information you share unnecessarily, the lower the risk of it being misused.
Follow these best practices:
- Only provide personal information that is genuinely required.
- Before sharing your data, check whether the company is trustworthy by reviewing its contact details, privacy policy and customer reviews.
- Make sure the information requested is appropriate for the service you are using.
- If a field is optional—for example, your date of birth when shopping online—consider leaving it blank.
Learn more about how personal data can be misused in our Financial Academy:
Watch out for phishing and suspicious messages
Many cases of identity theft begin with phishing emails, fake websites or fraudulent phone calls.
Be cautious if someone asks you to share sensitive information such as:
- passwords;
- one-time verification codes;
- banking details;
- copies of identity documents;
- your address or date of birth.
Legitimate organisations will rarely ask you to provide confidential information through unsolicited emails, text messages or phone calls.
Protective measures online and offline
Good security habits can make it much harder for criminals to misuse your personal information. The following measures can help protect both your online accounts and your physical documents.
|
ONLINE measures |
OFFLINE measures |
|
Use strong, unique passwords. Create a different password for every important account and avoid using personal information such as birthdays or family names. Password managers can help you generate and store secure passwords. |
Review your finances regularly. Check your bank and credit card statements frequently so you can identify unauthorised transactions as early as possible. |
|
Enable two-factor authentication (2FA). Wherever available, add an extra layer of protection by requiring a second verification step when signing in. |
Destroy documents securely. Shred documents containing personal information before disposing of them, including bank statements, insurance documents and expired identity cards. |
|
Keep your devices updated. Install operating system, browser and security updates promptly to reduce known security vulnerabilities. |
Store important documents safely. Keep passports, contracts, financial records and other sensitive documents in a secure place, such as a locked drawer or safe. |
|
Avoid unsecured public Wi-Fi for sensitive activities. Do not access online banking or enter confidential information over unsecured networks. |
Review the information held about you. You have the right to request information about the personal data organisations hold about you. This is known as self-disclosure. If information is incorrect or outdated, you can request that it be corrected or deleted. |
|
Review app permissions. Before installing an app, check which personal information it can access and whether those permissions are necessary. |
|
Key takeaways
If you become a fraud victim, acting quickly is the best way to reduce the impact.
Remember to:
- contact the company or debt collection agency immediately;
- report identity theft to the relevant authorities;
- secure your accounts and change compromised passwords;
- inform your bank and relevant credit organisations;
- keep copies of all documents and correspondence;
- continue monitoring your accounts for any further suspicious activity.
The earlier you respond, the easier it may be to stop further misuse of your personal information and resolve the situation.
Frequently asked questions
If you think someone has used your personal information without your permission, act immediately. Contact the company or debt collection agency involved, report the suspected identity theft to the relevant authorities where appropriate, secure your online accounts and keep copies of all relevant documents.
If someone made purchases in your name, contact the retailer or debt collection agency as soon as possible. Explain that you did not place the order, report the suspected identity theft and keep records of all communication. Acting quickly can help prevent further misuse of your personal information.
Reporting procedures vary by country, but in many cases you should report the incident to the police or the relevant authority responsible for investigating identity theft. Keep your case reference number and copies of any reports, as you may need them when contacting companies, banks or debt collection agencies.
Yes. If you receive a debt collection letter for a purchase you did not make, contact the debt collection agency immediately. Do not ignore the letter, as responding promptly can help clarify the situation and prevent unnecessary escalation.
You can reduce your risk by using strong, unique passwords, enabling two-factor authentication, keeping your devices up to date and sharing personal information only when necessary. Regularly reviewing your bank statements and checking the personal data organisations hold about you can also help you identify problems early.