What should I do if my identity is stolen?

Act immediately: report to NZ Police (105), contact IDCARE (0800 432 273), notify your bank, alert the three credit bureaus (Centrix, Equifax, Illion) to place a fraud alert, and report to the relevant government agencies if your IRD number or passport has been misused.

How do I check if my identity has been stolen?

Review your bank statements regularly, check your credit report for accounts you didn't open, monitor for unexpected bills or debt collection notices, and watch for government communications about tax returns or benefits you didn't claim.

What is a credit fraud alert?

A fraud alert notifies lenders to take extra verification steps before approving credit in your name. You can request this from the three credit bureaus — Centrix, Equifax NZ, and Illion. This makes it harder for identity thieves to open new accounts.

Personal Protection Guide

Identity Theft

When criminals steal your personal information to open accounts, take out loans, or commit fraud in your name.

1 in 5

Adults who encountered identity fraud

200+ hours

Average recovery time

30,000+

IDCARE cases handled in NZ/AU (2024)

$3,352 avg

Cost of identity theft per victim

What is Identity Theft?

Identity theft occurs when someone unlawfully obtains and uses your personal information — name, date of birth, IRD number, driver licence, passport — to commit fraud. Identity theft can result in fraudulent bank accounts, loans, or credit cards being opened in your name, causing lasting financial and reputational damage.

There is no standalone identity theft insurance product available here, but several layers of protection exist: bank zero-liability guarantees, credit bureau monitoring, and the free IDCARE support service. Prevention is the primary defence — secure document disposal, strong unique passwords, and monitoring your credit report are essential.

Written by FraudInsurance Editorial Team·Updated May 2026

What Identity Theft Involves

Fraudulent credit cards or loans opened in your name
Unauthorised use of your IRD number or government identity
Identity used to create false business registrations
SIM swap fraud to access your banking
Passport or driver licence cloning

How to Protect Yourself

1Shred all documents containing personal information before disposal
2Use unique, strong passwords and enable two-factor authentication on all accounts
3Monitor your credit report regularly via Centrix, Equifax, or Illion
4Set up account alerts with your bank for unusual transactions
5Be cautious with personal information shared online or over the phone
6Report suspected identity theft to Police (105) and IDCARE (0800 432 273)

What is Identity Theft?

Identity theft is the unauthorised use of another person's personal identifying information — name, date of birth, IRD number, passport number, driver licence, or combinations thereof — to commit fraud or other crimes. The stolen identity is typically used to open bank accounts, obtain credit cards or loans, make fraudulent tax refund claims, or establish businesses in the victim's name. The mechanics of identity theft vary. In its simplest form, a criminal obtains physical documents — from mail theft, a discarded statement, or a stolen wallet — and uses that information directly. In more sophisticated forms, identity information is compiled from multiple data breach sources, social media profiles, and phishing attacks to build a comprehensive profile of the victim. What fraudsters do with stolen identity information: The most common uses are financial — opening credit cards or personal loans in the victim's name, taking out buy-now-pay-later accounts, or making tax refund claims with IRD. Beyond direct financial fraud, stolen identity can be used to create fraudulent business registrations, obtain employment, evade criminal records, or facilitate other crimes. The harm to victims extends well beyond the immediate financial loss. The administrative burden of resolving identity theft — closing fraudulent accounts, disputing credit listings, liaising with government agencies, and managing ongoing credit monitoring — consumes an average of 200+ hours over months or years. The emotional impact of having one's identity used by criminals is significant, and the financial consequences (damage to credit score, difficulty obtaining credit, unexpected debt collection) can persist for years after the initial theft is resolved.

Identity Theft in New Zealand: The Statistics

Identity theft and identity fraud are significantly more prevalent than many people realise. While comprehensive local statistics are not published centrally, a combination of IDCARE data, credit bureau reporting, and the Netsafe/GASA annual scam reports provides a picture of the scale. Approximately 1 in 5 New Zealand adults has experienced some form of identity fraud or misuse of their personal information. IDCARE — the specialist identity and cyber support service operating across New Zealand and Australia — handled over 30,000 identity-related cases in the 2024 reporting year. Many of these cases involve New Zealanders. The average financial cost of identity theft to victims was approximately $3,352 in 2025, though individual cases vary enormously — from a few hundred dollars in fraudulent charges quickly resolved, to tens of thousands of dollars in loans or tax fraud that takes years to unwind. The average recovery time of 200+ hours understates the burden for victims with complex cases involving multiple fraudulent accounts or government identity misuse. IRD number misuse is a growing concern. Criminals use stolen IRD numbers to file fraudulent tax returns and claim refunds, or to register fraudulent businesses. Victims typically discover this when their genuine tax return is rejected because one has already been filed, or when IRD contacts them about a business registration they know nothing about. Credit fraud — fraudulent credit applications using stolen identity — is tracked by the three credit bureaus. Centrix, Equifax NZ, and Illion each maintain fraud alert systems and receive regular reports of identity theft affecting credit files. Placing a fraud alert with all three bureaus is one of the most effective immediate responses to suspected identity theft.

Warning Signs That Your Identity Has Been Stolen

Identity theft often goes undetected for months before the victim becomes aware. Knowing the warning signs allows you to act quickly and limit the damage. Unexpected credit applications or credit inquiries: If you receive notification of a credit application you didn't make, or if your credit report shows credit inquiries from lenders you have no relationship with, this is a strong indicator that someone is applying for credit in your name. Unfamiliar accounts on your credit report: Check your credit report regularly — free annual reports are available from Centrix, Equifax NZ, and Illion. Accounts you don't recognise are a clear warning sign. Unexpected bills or debt collection notices: Receiving bills for accounts you didn't open, or calls from debt collectors about debts you don't owe, are common ways identity theft victims first discover the fraud. Tax refund complications: If IRD tells you a tax return has already been filed for the year, or if your refund is unexpectedly delayed, this could indicate that a fraudster has filed a return using your IRD number. Unusual mail or lack of expected mail: Unexpected financial statements for accounts you don't have, or unexpected absence of your regular bank statements (indicating a change of address by a fraudster), are warning signs. Notifications from government agencies: Contact from government departments about benefits, registrations, or accounts you didn't create is a serious warning sign requiring immediate investigation. Bank or credit card alerts: Unexpected alerts from your bank about transactions, new payees, or account changes you didn't initiate require immediate investigation and contact with your bank's fraud team.

What to Do If Your Identity Is Stolen

Acting promptly and in the right order when identity theft is discovered significantly affects your ability to limit losses and recover. Follow these steps: Step 1 — Contact IDCARE First (0800 432 273): IDCARE is a free, specialist identity and cyber support service for New Zealanders and Australians. They will assign you a dedicated case manager who will guide you through the entire recovery process, help you prioritise steps, and liaise with agencies on your behalf. This is the single most valuable call you can make. Step 2 — Freeze Credit with All Three Bureaus: Contact Centrix (0800 236 874), Equifax NZ (0800 964 564), and Illion (0800 445 566) to place a fraud alert or credit freeze. A fraud alert requires lenders to verify your identity before approving credit. A full credit freeze (available from some bureaus) prevents any new credit being approved at all — more restrictive but more protective. Step 3 — Report to NZ Police (105): File a police report — you will need the report number for subsequent steps. Online reporting is available at police.govt.nz. NZ Police may not be able to actively investigate every identity theft case, but the official record is essential for disputing fraudulent accounts and liaising with government agencies. Step 4 — Notify Your Bank and Financial Institutions: Call your bank's fraud line and explain what has happened. Ask them to review all your accounts for suspicious activity, place additional security on your accounts, and flag your file for enhanced verification requirements. Step 5 — Contact IRD if Your IRD Number Was Used: If you suspect your IRD number has been misused, contact Inland Revenue (0800 775 247) to report the fraud and request a review of your tax records. IRD has processes for dealing with identity theft relating to tax fraud. Step 6 — Report to Relevant Government Agencies: If specific identity documents were compromised — passport (contact Department of Internal Affairs), driver licence (contact NZTA) — contact the relevant agency to flag the misuse and potentially cancel and replace the document.

Is There Identity Theft Insurance in New Zealand?

This is a question many people ask, and the honest answer is nuanced: there is no mainstream standalone identity theft insurance product available in New Zealand in the way that exists in the United States. What banks cover: Your bank's zero-liability guarantee covers unauthorised transactions — where a criminal accesses your account without your knowledge and makes fraudulent transactions. If your identity is used to make purchases on your existing cards, or if a fraudster gains access to your existing accounts, your bank should reimburse these losses. Contact your bank immediately. What banks do not cover: Banks do not cover the administrative and recovery costs of identity theft — the time spent closing fraudulent accounts, the cost of legal advice, credit monitoring services, or any financial losses from fraudulent accounts or loans opened in your name at other institutions. What IDCARE provides: IDCARE is a free government-funded support service — not insurance — but extremely valuable. They provide case management support, guidance through the recovery process, and advocacy with credit bureaus, government agencies, and financial institutions. Their support has tangible financial value in the time and cost of recovery they save victims. What cyber insurance policies sometimes include: Some business cyber insurance policies include an "identity restoration" benefit that covers costs associated with resolving identity theft for key employees or principals. This is not widely available for personal (individual) buyers in NZ. The coverage gap and what's developing: The gap between what banks cover and the full cost of identity theft recovery is real and significant. FraudInsurance.co.nz monitors the market for identity theft protection products and will update this guide as new products become available. In the meantime, the combination of bank zero-liability protection, credit bureau fraud alerts, and IDCARE support provides the best available protection.

Prevention: How to Protect Your Identity

Identity theft prevention is largely a matter of managing how and where your personal information is accessible. The following measures significantly reduce your risk. Secure Document Disposal: Shred all documents containing personal information before disposal — bank statements, insurance documents, utility bills, anything with your name, address, or account information. Criminals actively search through recycling and rubbish for personal information. A cross-cut shredder is inexpensive and highly effective. Credit Monitoring: Sign up for credit monitoring through Centrix, Equifax NZ, or Illion. These services alert you to new credit inquiries or account openings in your name, allowing you to respond quickly. Free credit reports are available from each bureau once per year — check all three annually. Strong Unique Passwords and Multi-Factor Authentication: Use a different strong password for every account. A password manager (LastPass, 1Password, Bitwarden) makes this practical. Enable multi-factor authentication — ideally using an authenticator app rather than SMS — on all important accounts, especially banking and email. Phishing Awareness: The single largest source of identity theft is phishing — criminals tricking people into providing their information directly. Never click links in unexpected emails or texts. Banks, IRD, and government agencies do not ask for passwords, PINs, or full account numbers via email or text. When in doubt, go directly to the organisation's official website. Protect Your IRD Number: Your IRD number is highly sensitive. It enables tax fraud and is a key component of identity theft. Share it only with your employer and Inland Revenue. Never provide it in response to an unsolicited contact. Passport and Driver Licence Security: Keep physical identity documents secure. If your passport is lost or stolen, report it to the Department of Internal Affairs and request cancellation. Consider whether you actually need to carry your physical driver licence or passport on a daily basis — a phone-stored copy (where acceptable) reduces the risk of physical document theft.

Key Resources and Contacts for Identity Theft Victims

If you are a victim of identity theft, or suspect you may be, these are the key contacts and resources you need. IDCARE — 0800 432 273 (idcare.org): New Zealand's specialist identity and cyber support service. Free, confidential, and staffed by experienced case managers. This is your first call. NZ Police — 105 (police.govt.nz): Report identity theft to NZ Police to obtain an official crime report number. Online reporting available for non-urgent reports. Credit Bureaus — Place fraud alerts or credit freezes: - Centrix: 0800 236 874 (centrix.co.nz) - Equifax NZ: 0800 964 564 (equifax.co.nz) - Illion: 0800 445 566 (illion.co.nz) Netsafe — 0508 638 723 (netsafe.org.nz): Free online safety advice and support, including for identity-related cyber incidents. Inland Revenue — 0800 775 247 (ird.govt.nz): Report misuse of your IRD number and request a review of your tax records. Department of Internal Affairs — 0800 225 050 (dia.govt.nz): Report stolen or misused passports; apply for emergency cancellation. NZTA — 0800 822 422 (nzta.govt.nz): Report misused or stolen driver licences. Banking Ombudsman — 0800 805 950 (bankomb.org.nz): If your bank does not resolve your identity theft-related complaint satisfactorily, the Banking Ombudsman can intervene. Privacy Commissioner — 0800 803 909 (privacy.org.nz): If your personal information was compromised through a data breach at an organisation, you can report this to the Privacy Commissioner. Keep records of all contacts, case numbers, and correspondence — you will need these for the recovery process and for any insurance or legal proceedings.

Frequently Asked Questions

There is no standalone identity theft insurance product available here. However, your bank's zero-liability guarantee covers fraudulent transactions, and some cyber insurance policies include identity restoration cover. The free IDCARE service provides expert support for recovery.