10 Proven Steps to Protect Yourself From Identity Theft (Australia)
1️⃣ Lock Your Credit File (Credit Ban)
This is one of the strongest protections available in Australia and it’s free.
You can place a credit ban with:
Equifax
Experian
illion
This prevents new credit being taken out in your name, even if your details are stolen.
➡️ If someone can’t get credit, most identity fraud stops immediately.
2️⃣ Use Unique Passwords for Email First (Not Everything at Once)
Your email account is the master key.
If someone controls your email, they can:
Reset bank passwords
Reset social media
Access invoices, ID scans, contracts
Priority order:
Email
Banking
Government portals (myGov, ATO, Medicare)
Everything else
Use a password manager, not memory.
3️⃣ Turn On Multi-Factor Authentication (MFA) Everywhere It’s Offered
Especially for:
Email
Banking apps
myGov
Social media
SMS MFA is better than nothing
Authenticator app is best
If a service doesn’t offer MFA, treat it as higher risk.
4️⃣ Secure Your myGov Account (This Is Australia-Specific)
myGov is a major identity theft target in Australia.
Do this immediately:
Use a strong, unique password
Enable MFA
Link only essential services
Check linked services regularly
ATO and Centrelink fraud often begins here.
5️⃣ Never Store ID Documents in Your Email or Phone Gallery
This includes:
Driver’s licence
Passport
Medicare card
Birth certificate
If you must store them:
Use encrypted cloud storage
Or an encrypted password manager vault
Delete them after use
Email accounts are commonly breached.
6️⃣ Be Extremely Careful With “Verification” Requests
In Australia, banks, government, and utilities will not ask for full ID details by email or SMS.
Red flags:
Urgency
Threats (“account suspended”)
Requests for full licence numbers
Links asking you to “confirm identity”
When in doubt: ➡️ Stop ➡️ Independently contact the organisation
7️⃣ Monitor Bank Accounts and Set Transaction Alerts
Enable:
Instant transaction alerts
Login alerts
New payee alerts
Australian banks are good at fraud protection, if you spot it early.
Delays reduce your protection.
8️⃣ Limit How Much You Share on Social Media
Individually harmless details become dangerous when combined:
Full birthdates
Address photos
Pet names (password reset answers)
“Throwback” posts with old schools or workplaces
Identity theft is often social engineering, not hacking.
9️⃣ Check Your Credit Report at Least Once a Year
In Australia, you’re entitled to free credit reports.
Look for:
Accounts you don’t recognise
Credit checks you didn’t request
Address changes
Early detection = easy resolution.
🔟 Have an “If This Happens” Plan
If you suspect identity theft:
Contact your bank immediately
Place a credit ban
Change passwords (email first)
Report to IDCARE (Australia’s national identity support service)
Report to police if required
People panic because they don’t know the steps, having a plan reduces damage.