Discovering your identity has been stolen is one of the most distressing experiences a person can face. The combination of financial loss, violation of privacy, and the sheer administrative burden of recovery can feel overwhelming.
This guide gives you a clear, step-by-step action plan for the first 72 hours — and beyond.
Immediate steps (first 24 hours)
*Step 1: Contact IDCARE* Call IDCARE immediately on 0800 432 273 (or contact them at idcare.org/new-zealand). IDCARE is a free, specialist identity and cyber support service. They will assign you a case manager who will guide you through the recovery process. This is your most important first call.
*Step 2: Report to NZ Police* Report the identity theft to NZ Police by calling 105 or filing online at police.govt.nz. You'll need a police report number for many of the next steps. Note: Police may not be able to investigate every case, but the report creates an official record that can help with creditor disputes.
*Step 3: Contact your bank(s)* Call your bank's fraud line immediately. Ask them to: - Review your account for suspicious activity - Place a fraud alert on your account - Issue new cards if your card details were compromised - Freeze any new account opening or credit applications in your name if possible
*Step 4: Place a fraud alert with credit bureaus* Contact the three credit bureaus to place a fraud alert — this requires lenders to take extra steps before approving credit in your name: - Centrix: 0800 236 874 - Equifax NZ: 0800 964 564 - Illion: 0800 445 566
Request a copy of your credit report from each bureau at the same time.
Within the next 48-72 hours
*Step 5: Check and update your digital security* Change passwords immediately on any account that may have been compromised — starting with your email, then banking, then everything else. Use a unique, strong password for each account. Enable two-factor authentication (use an authenticator app, not SMS where possible). Check haveibeenpwned.com to see which of your accounts appeared in known data breaches.
*Step 6: Notify relevant government agencies* If specific government identity documents were used: - Passport misused: Contact the Department of Internal Affairs (dia.govt.nz) - Driver licence misused: Contact NZTA (nzta.govt.nz) - IRD number misused: Contact Inland Revenue (ird.govt.nz) - MSD benefits claimed fraudulently: Contact Work and Income (workandincome.govt.nz)
*Step 7: Document everything* Keep a detailed log of every contact you make, every person you speak to, and every action you take. This will be invaluable when disputing fraudulent accounts or dealing with creditors.
Disputing fraudulent accounts or debts
If identity thieves have opened accounts or taken loans in your name: - Write to the creditor (don't just call) explaining you are a victim of identity theft and that the account is fraudulent - Enclose your police report number - Ask them to remove the fraudulent account and any negative credit listings - If they fail to act appropriately, complain to the Banking Ombudsman or Commerce Commission
Recovery takes time
Most identity theft victims spend 200+ hours over weeks or months resolving the consequences. Be patient and persistent. Work with IDCARE — they have extensive experience navigating the recovery process.
Prevention going forward
After recovery, implement these permanent protections: - Check your credit report every 6-12 months - Use a password manager with unique passwords for every account - Enable transaction alerts on all bank accounts - Be cautious about sharing personal information online or over the phone - Dispose of documents with personal information securely (shred them)