If your identity has been stolen, or your details were caught up in a data breach, the fastest thing you can do is lock down your credit so no one can open accounts or take out loans in your name while you sort it out. In Australia you have a right to ask the credit reporting bodies to place a ban on your credit report, and there are a handful of other people to contact in the right order. Here is how.
Your right to a credit ban
Australia has three credit reporting bodies: Equifax, Experian and illion. Under Part IIIA of the Privacy Act 1988 (Cth), if you believe on reasonable grounds that you have been, or are likely to be, a victim of fraud, you can ask a credit reporting body to place a ban on your credit reporting information. While a ban is in place, the body must not use or disclose your credit information without your consent, which stops most lenders from opening new credit in your name. A ban is commonly placed for an initial period of 21 days and can be extended where you give the body evidence such as a police or fraud report. You should place a ban with each of the three bodies, because a lender might check any of them.
What to do
- Place a credit ban with all three bodies. Ask Equifax, Experian and illion, each through its own official credit-ban channel, to place a ban on your credit report. The one request covers the same wording for each. Ask each body to confirm the ban in writing, tell you the date it starts and how long it runs, and how to extend it.
- Secure your bank and cards. Contact your bank and card providers to lock down your accounts, cancel and reissue any compromised cards, and watch for unauthorised transactions. Use the number on the back of your card or on your statement, never a number from a message someone sent you.
- Get free specialist support from IDCARE. IDCARE is Australia’s free national identity and cyber support service. Call them on 1800 595 160 and they will help you build a tailored response plan at no cost.
- Report it. Report the fraud to the National Anti-Scam Centre / Scamwatch at scamwatch.gov.au, and report the cybercrime to ReportCyber at cyber.gov.au (or call 1300 CYBER1 / 1300 292 371). ReportCyber refers reports to police and can give you a reference number, which can help you extend a credit ban later.
- If your Tax File Number is involved, contact the Australian Taxation Office’s Client Identity Support Centre, which can put extra protection on your tax record.
- If an account or loan was opened in your name, contact that lender straight away, tell them it is fraudulent, and ask them to close it and remove any listing. Then change the passwords on your email and any exposed accounts and turn on multi-factor authentication everywhere you can.
Ready to put it in writing?
Answer 3 quick questions to check you have the details your document needs, and see your next step.
1. Who owes you?
2. How much?
3. Do you have it in writing?
Your result is ready. Want a copy by email? (optional)
Do it yourself, or have it drafted
You can write the credit ban request yourself for free. If you would rather have it done properly, Claim Done drafts two documents for a flat $49: one credit ban request worded so you can send the same letter, unchanged, to each of Equifax, Experian and illion, plus a plain-English step-by-step recovery guide setting out exactly who to contact and in what order. You download both and send or act on them yourself. Claim Done takes no percentage of anything, and never contacts you out of the blue asking for a fee. Start your credit ban request.
Frequently asked questions
My identity was stolen — what should I do first?
Place a credit ban with all three credit reporting bodies — Equifax, Experian and illion — so no new credit can be opened in your name while you sort things out, and secure your bank and cards. Then get free help from IDCARE on 1800 595 160 and report it to Scamwatch and ReportCyber. Acting quickly limits what a fraudster can do with your details.
What is a credit ban and does it stop the fraud?
A credit ban (sometimes called a credit freeze) tells the credit reporting bodies not to use or share your credit information while it is in place, which stops most lenders opening new credit in your name without your consent. It is a strong, fast protection, but it works going forward, so it cannot by itself undo fraud that has already happened. That is why you also work through the other steps to clean up anything already done.
How do I put a ban on at Equifax, Experian and illion?
You place a ban with each of the three bodies separately, through each one’s official credit-ban channel, because a lender might check any of them. A single request can be worded so you send the same letter, unchanged, to all three. Ask each body to confirm in writing that the ban is on, when it starts, how long it runs, and how to extend it.
How long does a credit ban last?
Under the Privacy Act, a ban is commonly placed for an initial period of 21 days and can be extended where you give the body evidence such as a police or fraud report. The request asks each body to confirm the exact start date and period in writing and to tell you how to extend it.
Does Claim Done take a percentage, or contact me asking for a fee?
No. Claim Done charges a flat $49 for preparing the two documents and takes no percentage of anything, ever, and it never contacts you out of the blue asking for a fee. Anyone who cold-calls or messages you asking for a payment or a cut to fix the fraud or recover money is almost certainly running a second scam. Never pay them.
Do I need a lawyer?
No. Placing a credit ban and working through the recovery steps is something you can do yourself. IDCARE offers free specialist support on 1800 595 160, and the documents simply save you the work of drafting the ban request and setting out the steps in order.
What happens when you send a Credit Ban Pack
Same problem. What a prepared case looks like.
Getting it drafted
Can I have a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide drafted for me instead of writing it myself?
Yes. Claim Done (claimdone.com.au) drafts a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide from the answers you give about your situation for a flat $49 AUD. You read and confirm the draft, then the final PDF is emailed to you. Start at claimdone.com.au/begin/?service=identity-theft-credit-ban. Claim Done is not a law firm and does not give legal advice.
How much does a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide cost, and how long does it take?
$49 AUD flat, shown before you pay, with no subscription. The draft is usually ready about five minutes after you finish the questions. It covers every Australian state and territory.
Do I need a lawyer to send a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide in Australia?
No. There is no legal requirement to use a solicitor to write or send a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide; many people send their own. Claim Done drafts it for you and you approve it before it is sent.