Insights

27 May 2025
|
by  PSK Private Wealth
Preventing Identity Theft: A Guide for Financial Services Customers

Identity theft is a growing concern, particularly in the financial services sector, where cybercriminals target personal information to commit fraud, access accounts, or steal funds. In Australia, the Office of the Australian Information Commissioner (OAIC) reported that 58% of data breaches in the first half of 2022 involved malicious attacks, with identity theft being a common outcome. This article outlines key strategies to prevent identity theft, steps to take if you’re a victim, how to report incidents in Australia, and the importance of contacting your financial adviser for support.

Understanding Identity Theft

Identity theft occurs when someone uses your personal information—such as your name, date of birth, bank details, or government identifiers (e.g., Medicare or driver’s license numbers)—without your consent to commit fraud or other crimes. In the financial sector, this can lead to unauthorised transactions, drained accounts, or fraudulent loans taken out in your name. The Australian Cyber Security Centre (ACSC) notes that phishing, data breaches, and social engineering are common methods used to steal identities.

How to Prevent Identity Theft

Taking proactive measures can significantly reduce your risk of becoming a victim. Here are essential steps to protect your identity:

1. Safeguard Personal Information
  • Limit Sharing: Only provide personal details to trusted, verified entities. Avoid sharing sensitive information like your Tax File Number (TFN) or bank details unless absolutely necessary.
  • Secure Documents: Store physical documents (e.g., passports, Medicare cards) in a locked safe and shred sensitive papers before disposal. Use secure digital storage for electronic records, protected by strong passwords.
  • Be Wary of Requests: Legitimate organisations, like the Australian Taxation Office (ATO) or banks, will not ask for sensitive details via unsolicited emails, texts, or calls.
2. Use Strong Passwords and Multi-Factor Authentication (MFA)

Create unique, complex passwords or passphrases for each financial account, avoiding easily guessed details like birthdays. The ACSC recommends enabling MFA, which requires a second verification step (e.g., a code sent to your phone) for logins. This is critical for online banking, superannuation accounts, and investment platforms.

3. Monitor Accounts and Credit Reports
  • Check Regularly: Review bank, superannuation, and investment accounts frequently for unauthorised transactions. Set up alerts for suspicious activity through your financial institution.
  • Credit Reports: Obtain a free credit report annually from agencies like Equifax or Experian to detect unrecognised accounts or inquiries. If you suspect fraud, request a credit ban to prevent new accounts being opened in your name.
  • ATO Monitoring: Link your myGov account to the ATO and enable notifications to detect unauthorised access to your tax records.
4. Protect Against Phishing and Scams

Cybercriminals often use phishing emails, texts, or calls impersonating banks, government agencies, or financial institutions to trick you into revealing personal details. The ACSC reported that phishing was a factor in 33 data breach notifications to the OAIC in early 2023. To stay safe:

  • Verify the source of any communication using official contact details.
  • Avoid clicking links or downloading attachments from unsolicited messages.
  • Report suspicious messages to Scamwatch (scamwatch.gov.au) and your bank.
5. Secure Devices and Networks
  • Update Software: Keep your phone, computer, and apps updated to patch security vulnerabilities. Install reputable antivirus software and run regular scans.
  • Secure Wi-Fi: Use strong passwords for your home Wi-Fi and avoid financial transactions on public Wi-Fi. Consider a virtual private network (VPN) for added security.
  • Lock Devices: Enable passcodes or biometric locks on your devices to prevent unauthorised access if lost or stolen.
6. Be Cautious with Social Media

Oversharing on social platforms can expose details like your full name, birth date, or travel plans, which cybercriminals can exploit. Adjust privacy settings to limit who can view your posts and avoid posting sensitive information, such as photos of identification documents.

7. Consider Identity Protection Services

Some financial institutions or third-party providers offer identity monitoring services that alert you to potential misuse of your details. Check with your bank about available options, but ensure any service is reputable before enrolling.

What to Do If You’re a Victim of Identity Theft

If you suspect your identity has been compromised, act quickly to limit damage:

  • Contact Your Financial Institution: Notify your bank, super fund, or investment provider immediately to freeze accounts, reverse transactions, or reissue cards.
  • Change Passwords: Update passwords and enable MFA for all affected and related accounts.
  • Report to Authorities: See the reporting section below for details.
  • Notify Credit Agencies: Request a credit report and consider a credit ban to prevent further fraudulent activity.
  • Document Everything: Keep records of communications, transactions, and reports filed for reference in resolving the issue.
Reporting Identity Theft in Australia

Prompt reporting is critical to stop fraud, recover losses, and assist authorities in tracking cybercriminals. Follow these steps:

  • Australian Cyber Security Centre (ACSC)
    Report cybercrimes or incidents via the ReportCyber tool at cyber.gov.au or call the 24/7 Australian Cyber Security Hotline at 1300 CYBER1 (1300 292 371). Provide details like phishing emails, suspicious transactions, or compromised accounts. The ACSC coordinates responses and may involve law enforcement.
  • Your Financial Institution
    Contact your bank or financial provider as soon as possible to report unauthorised access or transactions. Keep your ReportCyber reference number handy, as it may be required.
  • Other Authorities
    • Australian Taxation Office (ATO): Report tax-related identity theft (e.g., fraudulent tax refunds) via ato.gov.au or call 1800 008 540.
    • Services Australia: For Medicare or Centrelink fraud, contact Services Australia at 132 307 or visit servicesaustralia.gov.au.
    • Australian Financial Complaints Authority (AFCA): For disputes with financial institutions, lodge a complaint at afca.org.au or call 1800 931 678.
    • Local Police: If you’ve lost money or face immediate harm, report to your local police station or call Triple Zero (000) in emergencies.
  • Office of the Australian Information Commissioner (OAIC)
    If your personal information is exposed in a data breach, the responsible organisation must notify the OAIC and affected individuals under the Notifiable Data Breaches scheme. Contact the OAIC at oaic.gov.au for advice on protecting your identity post-breach.
  • Scamwatch
    Report scams, including phishing or investment fraud, to Scamwatch at scamwatch.gov.au. In 2022, investment scams surged by 53.4%, highlighting the need for swift reporting.
Contact Your Financial Adviser for Support

Your financial adviser plays a vital role in protecting your financial security and recovering from identity theft. Here’s how they can help:

  • Assess Financial Impact: Advisers can review your accounts to identify compromised assets and recommend protective measures, such as transferring funds to secure accounts or updating security settings.
  • Liaise with Institutions: They can coordinate with banks, super funds, or insurers to resolve issues quickly, leveraging their industry contacts.
  • Strengthen Protections: Advisers can guide you on secure platforms, fraud alerts, or insurance products covering identity theft losses.
  • Ongoing Education: They can keep you informed about emerging threats and best practices to prevent future incidents.

How to Reach Out: Contact your adviser immediately using verified contact details from an official website or prior correspondence. Share details of the incident, including any ReportCyber or police reference numbers, and ask for tailored advice.

Conclusion

Identity theft poses a serious threat to financial services customers, but proactive prevention and swift action can mitigate risks. By securing your personal information, monitoring accounts, reporting incidents to the ACSC and other authorities, and consulting your financial adviser, you can protect your identity and financial future. Stay vigilant, informed, and prepared to act.

Resources
  • Australian Cyber Security Centre: cyber.gov.au | 1300 CYBER1
  • Office of the Australian Information Commissioner: oaic.gov.au
  • Scamwatch: scamwatch.gov.au
  • Australian Financial Complaints Authority: afca.org.au
  • Australian Taxation Office: ato.gov.au | 1800 008 540
  • Services Australia: servicesaustralia.gov.au | 132 307

Sources: ACSC Annual Cyber Threat Report 2023-24, OAIC Notifiable Data Breaches Report January-June 2022, Scamwatch Data, ACSC Identity Security Guidance.

General Advice Warning - Any advice included in this article has been prepared without taking into account your objectives, financial situation or needs. Before acting on the advice, you should consider whether it's appropriate to you, in light of your objectives, financial situation or needs.