You cannot keep your personal data secret, so protect what can be abused with it: credit in your name, accounts you hold, and documents that prove who you are.
Identity misuse rarely begins with a stranger guessing your details. It begins with data that was collected legitimately, stored somewhere, and later leaked or sold.
That means the useful question is not 'how do I hide my identity?' but 'what can be done with my identity, and what slows that down?'
Reduce what can be done in your name
- Check your credit file with the agencies that operate in your country, and check whether they offer a free or paid alert when new credit is requested in your name.
- Consider a credit freeze or a protective notice where your country allows it. A freeze blocks new applications rather than monitoring them afterwards, which is the more useful of the two.
- Register for official post redirect protection when you move, so that mail containing account details does not follow an old address.
- Keep your identity documents in one place you control, and know what to do if they are lost. Report a lost passport, ID card or licence promptly.
- Where a copy of a document is required, ask whether a partial or stamped version is acceptable, and write the purpose on the copy.
What does not help much
- Paying a monthly fee for 'dark web monitoring' of your data. It cannot remove anything and it reports what you already assume: that your data has circulated.
- Deleting social accounts as a reaction. It removes context you may need, and the data is already copied elsewhere.
- Using the same 'secret' answers to security questions as your passwords. Facts like a mother's maiden name are exactly what is findable.
- Assuming a young-looking account is safer. A new account with no history is what the person impersonating you would create, not what protects you.
Act in this order when something has already happened
- 1Secure the accounts you own before chasing the person: email first, then banking, then everything linked to that email.
- 2Change passwords on any account that reused the compromised password, and turn on two-factor authentication where it is not already on.
- 3Tell your bank and any credit agency that operates in your country, so notes are attached to your file before applications are made.
- 4Report to the police where the loss is financial or documents are involved, and keep the reference number. Insurers and banks often ask for it.
- 5Keep a dated log of what happened and what you did. It is tedious and it is the difference between a report and an argument.
Frequently asked questions
Is identity theft protection worth paying for?
Ask what it actually does in your country. Free credit alerts and a freeze, where available, do more than a monitoring subscription: one prevents new credit from being opened, the other only tells you afterwards.
How would I notice misuse of my identity?
Unexpected letters about accounts you did not open, calls about debts that are not yours, a change in your credit score, missing post, or rejected applications for a reason that makes no sense.
Does deleting my accounts on social media protect me?
It reduces what new data can be scraped. It does not remove what has already been copied, and it can strip away evidence you might need later.
Written by The BaitScan team
Last updated September 16, 2026
Results are automated risk estimates based on public indicators and heuristics.