AIS shopCareersSign In or register

What can I do to protect myself online?

What can I do to protect myself online?

IDCARE, Australia’s leading national identity and cyber support service for the community, has provided the Australian Sports Commission (ASC) with the following information on signs of identity theft and misuse and how individuals can further protect their personal information.

Identity criminals use personal information for typically one of four reasons:

  • To commit direct financial misuse – such as fraudulent credit card spends or applying for a personal loan or mobile phone account (this is the most common);
  • To enable further deception – such as impersonating someone’s email account to deceive others;
  • To enable financial misuse – such as setting up a transaction account; or
  • To build an identity – by collecting more information about a person through accessing their credit reports or stealing their mail.

Signs of identity misuse include:

  • You notice transactions from your bank accounts and cards you did not initiate.
  • You receive an unsolicited email, phone call or SMS by people who claim to know you, or are impersonating government or business, asking you to provide further information, including payment details, credential information or other identity details.
  • You receive a bill in the mail for a service you did not request.
  • You are locked out of your email account, social media, online banking, or permanently lose your mobile phone signal.
  • Your friends, relatives or work colleagues are enquiring about an email or social media post you apparently sent that you had nothing to do with.

Depending on the type of information that may have been exposed, IDCARE recommends you consider the following proactive measures.

  • Inform your financial institution that your personal information may be at risk of identity misuse and ask them what additional measures they recommend.
    • An incident involving a credit card does not automatically mean that the credit card will be cancelled and a new one reissued. Talk to your institution about your options.
  • Change any online banking passwords and if you haven’t already, explore whether your online banking has multi-factor authentication security (such as using a token PIN or SMS code – in addition to your username or account ID and password).
  • Check out your Credit Reports for any unexplained credit checks.
    • Every Australian can get free access to their credit reports. You may have three different credit reports from each of Australia’s three separate credit reporting bureaus.
    • To apply for your credit report follow the steps in IDCARE’s Fact Sheet – Credit Reports Australia, opens in a new tab.
    • If you have a foreign passport or driver licence talk to IDCARE about your options (submit a support request form, opens in a new tab and use the referral code ASP 19 H).
    • If you find entries on your credit report that cannot be explained or are incorrect, such as a different address, please contact IDCARE immediately.

  • If you think you may experience misuse involving credit, you can also apply for a Credit Ban with each of Australia’s credit reporting bureaus.
    • Like credit reports, credit bans are free under Australian privacy laws.
    • They sound bad, but a credit ban will prevent credit providers from accessing your credit report as part of a credit check. This helps to safeguard against anyone using your information to fraudulently take out credit in your name.
    • Credit bans won’t upset any existing credit lines you may have, such as credit cards and loans.
    • They are only in place for 21 days in Australia, but you can ask for an extension if you think you face an enduring risk and provide a police report number. The police report number for this incident provided by the AFP is PN 6416080.
    • To apply for credit bans follow the steps in IDCARE’s Fact Sheet – Credit Bans Australia, opens in a new tab.
  • Remain vigilant to unauthorised requests to port your mobile telephone number to another provider.  
    • If this occurs or your phone loses a permanent signal, contact your telecommunications service provider to confirm whether a request for porting has occurred, and if so, request a reversal.
    • You should also contact your financial institution to temporarily suspend online banking and change your email password and set up multi-factor authentication with another mobile number or email address. More information about this type of scam can be found at IDCARE’s Fact Sheet on Porting, opens in a new tab.

  • You may wish to notify your driver licence issuer that your licence may be compromised. Some states and territories make a notation on a person’s account if they believe their licence is at risk. This alone will not prevent someone from misusing your licence.
  • In most states and territories a driver licence number cannot be changed. And for the states that do (Queensland and Victoria), they will only change the licence number if an individual experiences identity misuse (not just the exposure or theft of the licence).

  • Consider contacting the Department of Human Services Identity Security and Response team (ISAR) by calling 1800 941 126 (8 am to 5 pm AEDT Monday to Friday) to let them know that your Medicare Card may have been accessed by an unknown third party.
  • ISAR will connect you with the Medicare Help Desk who will assist you with obtaining a new Medicare Card.
  • A replacement Medicare Card is free.
  • Discuss with the Identity Security and Response team potential risks to your MyGov account, or if you don’t have one, risks relating to someone setting up one in your name.

There are limited ways sensitive health information can be misused for financial gain but this kind of information can be leveraged to facilitate blackmail. IDCARE advises that most threats to expose information are nothing more than a bluff. If you come across something unusual, it is advised not to respond, open links or attachments and report it immediately to IDCARE, opens in a new tab.

Unauthorised access of sensitive health information in and of itself can cause emotional distress. The ASC has set up a support line, which can be accessed by calling 1800 318 237.

  • Change your email and social media passwords and activate multi-factor authentication if available.
  • Remain vigilant to telephone call, SMS and email phishing scams. You can report suspicious activity to IDCARE, opens in a new tab. One of their case managers will work with you to determine what it is, what it could be, and what can be done about it.

Back to top