What Is Identity Theft?

Identity theft is a form of crime where someone steals or otherwise obtains your personal information and uses it to impersonate you, often leading to financial loss, reputational damage, and long‑lasting complications with credit or legal records. In England and Wales, identity theft itself describes the act of acquiring another person's identifying details, while the subsequent use of those details to commit fraud or other offences is treated as identity fraud under criminal law. This guide explains how identity theft occurs, the legal context, the risks involved, and the steps individuals can take to respond and protect themselves. It is written for members of the public, solicitors and students seeking a clear, reliable explanation of this issue.

What Is Identity Theft?

Identity theft happens when someone steals your personal information - such as your name, date of birth, addresses, bank or financial data, passport details or other unique identifiers - without your knowledge or consent. Once criminals have this information, they can potentially use it to impersonate you to access services, commit fraud, or open accounts in your name.

Personal information can be obtained in many ways. Fraudsters may:

• Steal documents such as bank statements, passports or driving licences from your home or post.
• Intercept mail or obtain data from discarded statements or receipts.
• Compromise accounts through phishing emails or hacked online login credentials.
• Harvest information shared publicly on social media.

Importantly, identity theft alone is not always a specific criminal offence in statute. Rather, the consequences usually manifest when the stolen identity details are used to commit other crimes such as fraud.

How Is Identity Theft Linked to Crime?

Once personal information is obtained, it commonly leads to identity fraud, which is the criminal use of those stolen details. For example, a fraudster may:

• Open bank accounts or credit cards in your name without your consent.
• Apply for loans or state benefits using your identity.
• Take over existing accounts or financial services you already use.
• Order goods or obtain official documents such as passports or driving licences in your name.

In such cases, the theft of identity details becomes a key element of fraud or other criminal activity, which is prosecuted under offences such as fraud by false representation under the Fraud Act 2006. That Act makes it an offence to dishonestly make a false representation - for example, lying about your identity to obtain credit - with the intention of gain or causing loss.

Signs You May Be a Victim

Identity theft may go unnoticed for weeks or months. Some common indications include:

• Unfamiliar transactions on your bank or credit card statements.
• Mail, bills or notifications about accounts you did not open.
• Unexpected refusals for credit, loans or mobile phone contracts.
• Letters from debt collectors about debts you did not incur.
• Noticeable drops in your credit report.

These signs suggest that someone may have been using your personal details without authorisation. Acting promptly can reduce financial losses and simplify resolution.

Legal Context and Criminal Liability

In England and Wales there is no specific statutory offence labelled “identity theft” defined in detail, but related criminal liability arises through:

• Fraud under the Fraud Act 2006: The most common offence linked to identity theft. Making a false representation - such as impersonating another person to obtain financial services - is a criminal offence.
• Fraud by false representation: This covers deceitful use of someone's identity to obtain money, goods or services dishonestly.
• Other offences: Depending on the nature of misuse, identity theft can underpin more serious offences such as money laundering, forgery, or data breaches.

Because identity theft can involve criminal misuse of personal data, it also intersects with data protection principles and obligations on organisations to safeguard personal information, although civil remedies such as data protection claims will operate in parallel to criminal proceedings.

How Identity Theft Cases Are Investigated

If you suspect identity theft, reporting to the police or Action Fraud (the UK's national reporting centre for fraud and cybercrime) is a key first step. Action Fraud will issue a crime reference number that may be needed by financial institutions or insurers.

Police and specialist units may investigate further if there is sufficient evidence of criminal activity. Because identity theft often involves sophisticated methods or online elements, investigators may work with banks, credit reference agencies and cyber units to trace the misuse of identity details.

Practical Steps if You Are Affected

Prompt action can reduce harm and help protect you from further consequences:

1. Contact Financial Institutions: Report any suspicious transactions to your bank or credit card provider immediately.
2. Report Lost or Stolen Documents: Notify the issuers of passports, driving licences or other identity documents.
3. Check Your Credit Report: Obtain copies of your credit file to identify unexplained applications or searches.
4. Register with Protectors: Services such as CIFAS Protective Registration can flag your identity details within fraud prevention systems, prompting extra verification checks when new applications are made.
5. Change Passwords and Security Details: Reset online passwords and PINs on accounts that may have been compromised.
6. Keep Records: Maintain documentation of all reports, correspondence and actions taken to resolve issues.

While taking these steps does not guarantee immediate restoration of your identity or credit profile, it can significantly reduce further misuse and support investigations.

Practical Impact and Risks

Identity theft has both financial and personal consequences. It can lead to:

• Direct financial loss if accounts are accessed or money is taken.
• Damage to your credit score, affecting future applications for loans, mortgages or insurance.
• Stress and time spent resolving disputes with banks, credit agencies or debt collectors.
• Potential legal implications if fraudsters commit offences in your name, creating records that must be disentangled through legal and financial channels.

While the law does not label identity theft as a unique statutory offence, the collateral criminal activity - primarily identity fraud - carries significant penalties and can lead to prosecution under the Fraud Act 2006 and other relevant legislation.

Key Takeaways

Identity theft occurs when someone steals your personal information to impersonate you. Although not always a standalone criminal offence, it often leads to identity fraud, which is prosecutable under the Fraud Act 2006 and other criminal law provisions. Victims may experience financial loss, credit complications and legal entanglements. Prompt action - including reporting to police and fraud centres, contacting banks, checking credit reports and using protective services - can help limit damage and support resolution. Understanding the legal context and practical steps can empower individuals to protect themselves and respond effectively if their identity is misused.

James William Steven Parker

James is the founder of UKLegalGuides.com and a former agent at the Ministry of Justice (UK). With a background in processing legal claims, he launched this platform to make the laws of England and Wales accessible to everyone.