If your identity has been stolen or your details were exposed in a data breach, the fastest
protection is a credit ban at all three Australian credit reporting bodies — Equifax, Experian and illion — so no one
can open accounts or take out credit in your name while you sort it out. Then secure your bank and cards, get free
specialist help, and report it. A ban is a strong, fast protection, but it works going forward, so it cannot by itself
undo fraud that has already happened.
What to do
- Place a credit ban with all three credit reporting bodies. Australia has three — Equifax,
Experian and illion — and a lender might check any of them, so place a ban with each one. Under Part IIIA of the
Privacy Act 1988 (Cth), an individual who believes on reasonable grounds they have been, or are likely to be, a
victim of fraud can ask a credit reporting body to place a ban, during which the body must not use or disclose the
individual’s credit information without their consent. A ban is commonly placed for an initial period of 21 days and
can be extended where you provide evidence such as a police or fraud report. Lodge the request through each body’s
official credit-ban channel. - Contact your bank and card providers to secure your accounts, cancel and reissue compromised
cards, and watch for unauthorised transactions. Use the number on the back of your card or on your statement, never a
number from a message a scammer sent you. - Get free specialist support from IDCARE, Australia’s free national identity and cyber support
service, on 1800 595 160. They can build a tailored response plan with you at no cost. - Report it. Report the fraud to the National Anti-Scam Centre at scamwatch.gov.au, and report the
cybercrime to ReportCyber at cyber.gov.au or 1300 CYBER1 (1300 292 371). ReportCyber refers reports to police and can
give you a reference number. - If your Tax File Number is involved, contact the Australian Taxation Office’s Client Identity
Support Centre, which can put extra protection on your tax record. - If a specific account or loan was opened in your name, contact that lender straight away, tell
them it is fraudulent, and ask them to close it and remove any listing. Then secure your email and passwords, and
turn on multi-factor authentication everywhere you can. If you are in immediate danger, call 000.
Warning — money-recovery and ‘fix it’ scams. After identity theft or a data breach you may be
contacted by someone claiming they can fix it, remove the fraud, or recover money for you — sometimes pretending to be
from the police, a government agency, a credit reporting body, a law firm or a ‘recovery’ service. This is almost
always a second scam that targets people who have already been hit. Never pay an upfront fee, hand over more money or
identity details, give remote access, or share codes, passwords or logins with anyone who contacts you out of the blue.
Legitimate agencies will not cold-call you asking for payment to fix it.
Do it yourself, or have it drafted
You can write to each credit reporting body and work through these steps yourself for free. If you would rather have
it done properly and fast, Claim Done drafts two documents for a flat $49: one credit ban request you
can send, unchanged, to each of Equifax, Experian and illion, and a plain-English step-by-step recovery guide. A ban
cannot by itself undo fraud already done, and we take no percentage of anything — only the flat fee.
Start your credit ban pack.
Ready to put it in writing?
Answer 3 quick questions to check you have the details your document needs, and see your next step.
1. Who is this about?
2. How much is at stake?
3. Do you have it in writing?
Your result is ready. Want a copy by email? (optional)
Frequently asked questions
What is a credit ban and does it stop fraud?
A credit ban (sometimes called a credit freeze) tells the credit reporting bodies not to use or share your credit
information while it is in place, which stops most lenders opening new credit in your name without your consent. It is a
strong, fast protection — but it works going forward, so it cannot by itself undo fraud that has already happened.
How do I ban my credit at Equifax, Experian and illion?
Australia has three credit reporting bodies — Equifax, Experian and illion — and you should place a ban with each
one, because a lender might check any of them. A single ban request can be worded so you send the same letter,
unchanged, to all three through each body’s official credit-ban channel.
How long does a credit ban last?
Under the Privacy Act, a ban is commonly placed for an initial period of 21 days, and can be extended where you give
the body evidence such as a police or fraud report. Ask each body to confirm the exact start date and period in
writing and to tell you how to extend it.
Is IDCARE free?
Yes. IDCARE is Australia’s free national identity and cyber support service. You can call them on 1800 595 160 and
they will help you build a tailored response plan at no cost.
What if my Tax File Number or a specific account was used?
If your Tax File Number may have been exposed or misused, contact the Australian Taxation Office’s Client Identity
Support Centre, which can put extra protection on your tax record. If a credit account or loan was opened in your name,
contact that lender, tell them it is fraudulent, and ask them to close it and remove any listing — the credit ban helps
stop further accounts while you do.
Do you take a percentage of anything?
No. Claim Done charges a flat $49 for preparing the documents and takes no percentage of anything — ever. Anyone who
contacts you out of the blue asking for a fee or a cut to fix the fraud or recover money is almost certainly running a
second scam. Never pay them.
What happens when you put it in writing — properly
Same problem. What a prepared case looks like.
Getting it drafted
Can I have a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide drafted for me instead of writing it myself?
Yes. Claim Done (claimdone.com.au) drafts a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide from the answers you give about your situation for a flat $49 AUD. You read and confirm the draft, then the final PDF is emailed to you. Start at claimdone.com.au/begin/?service=identity-theft-credit-ban. Claim Done is not a law firm and does not give legal advice.
How much does a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide cost, and how long does it take?
$49 AUD flat, shown before you pay, with no subscription. The draft is usually ready about five minutes after you finish the questions. It covers every Australian state and territory.
Do I need a lawyer to send a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide in Australia?
No. There is no legal requirement to use a solicitor to write or send a Identity Theft? Credit Ban Request + Step-by-Step Recovery Guide; many people send their own. Claim Done drafts it for you and you approve it before it is sent.