What to Do if You Already Gave a Scammer Your ID

An identity document cannot be rotated like a password. The image you sent still exists and will keep existing, so the work now is not about retrieval — it is about closing the specific doors that document opens, in the order that matters.

Work out exactly what they hold

Write down what left your hands, item by item; the response differs sharply between them.

A name, an email address and a phone number are contact details. They make a convincing approach possible, and that is the extent of it.

A date of birth, a home address and a national identifier — a Social Security number, a national insurance number, a tax number — are the components used to open things in your name. Those sit at the top of the list.

An image of a document is another category. A passport page, a driving license, a residence permit or a utility bill is what services accept as proof that you are you. A photograph of you holding one is worth more still, because that is what identity checks ask for.

Bank information sits apart. If account access went across as well, a job that wants your bank login is the thing to read next.

The first day, in the order your documents open things

Start with whatever uses those documents as a key, not with whatever feels most urgent.

Your email account first, because it is the reset route for everything else. Change the password, switch on two-factor authentication, and check the forwarding rules and recovery addresses — those get altered quietly and survive a password change.

Then your phone account, because a number moved onto a different SIM makes every code-based check worthless. Call the provider, ask for a port-out lock or transfer PIN, and ask for a note on the account.

Then your bank and anywhere holding money. Say what was exposed and ask for a marker on the file, so a future application or change of address gets challenged rather than processed.

Then government and tax services, and anywhere you uploaded the same document: rental portals, gig platforms, exchanges, marketplaces. The document that verified you there is the document they now hold.

Warnings on your credit file, and why that step carries the most weight

Contacting the credit reference agencies does more than anything else on the list, because it sits in front of what identity documents get taken for.

There is more than one agency and they do not share everything, so contact each of the main ones where you live. Ask two questions: what free warning or alert can be placed on the file, and what a freeze or lock does. Names, durations and conditions differ by country and change, so take the answer from the agency rather than from an article.

Where such a marker exists, it makes a lender stop and verify before granting credit in your name, turning an instant approval into a phone call to you. That is the mechanism worth having.

A thin file, or one you have never looked at, is no barrier to this. Building it up is a separate job — building credit from nothing — and the file you protect today is the same one.

The follow-on contact, and why it will know real things about you

Expect to be approached again, and expect the second approach to be better than the first.

Whoever holds your documents holds enough to sound legitimate. A caller who knows your address, your date of birth and the last job you applied for has proved only that the information moved. Recovery offers, fraud warnings, redelivery notices, tax messages, replacement job offers — each works better when the sender can quote something true.

The rule that survives all of it is one-directional: never act on contact that came to you. End the call, then dial the organization on a number you found yourself — a statement, the back of your card, a site you typed in. No real fraud investigator asks you to move money to a safe account, read out a code, or install remote access software.

The person who recruited you may reappear under a new name, built the same way, which is why how to tell if a recruiter is fake is worth reading while this is fresh.

Start a written log today

Open one document and put everything in it, beginning now.

Every call: date, time, who you spoke to, what they said, any reference number. Every email and letter: saved, not skimmed. The original messages from the scam contact: screenshotted, because accounts get deleted. A running list of which organizations you have told and what each said it would do.

On day one this feels like busywork. It stops the first time something surfaces long after the event and you are asked to prove when you reported it and to whom. A dated log survives that gap; memory does not.

A formal report belongs in the same record — who to report a side hustle scam to sets out which body handles which part.

What to watch for later, and the free checks that surface it

Set a recurring reminder to look, because attention fades faster than the risk does.

Check the credit file yourself. In a lot of countries a basic version costs $0. What you are hunting for is anything you did not do: an account you never opened, a search from a lender you never approached, an address you have never lived at.

Watch the post as well as the screen; physical letters are the ones people miss. A card you did not apply for. A statement for an unknown account. A debt letter for a stranger at your address. Your own post going missing, which can mean a redirection was set up.

Watch for accounts opened with services rather than lenders: mobile contracts, buy-now-pay-later arrangements, utility accounts, gig platforms. Those open with exactly the document you sent.

Where sequence stops and a dispute begins

This is a page about sequence, not a legal opinion, and there is a point where it stops being enough.

If your details have already been used — an account exists, a debt is being chased, a company says you signed something — you have moved from prevention into dispute, and disputes are won with paperwork rather than explanation. That is where free legal aid, a law center, a citizens advice service or a nonprofit credit counselor earns their existence. Take the log with you.

Go to the police where you can describe an offense against you: documents used, an account opened, someone presenting themselves as you. Ask for a crime reference number and put it in the log, because organizations ask for it.

If money left as well as documents, that runs on a much shorter clock and has its own order of operations. Start getting money back after paying a scam today rather than tomorrow, because payment routes close fast.