// Guides

Identity theft — what to do?

In identity theft, criminals use your name and data to order goods or services. What matters: quick hardening, a police report and a written, on-time objection to unjustified claims.

Updated: 2026-06-19

Immediate steps

1. 1Secure affected accounts: change passwords, enable 2FA, review unusual activity.
2. 2Check whether your data has leaked (e.g. HPI Identity Leak Checker, Have I Been Pwned).
3. 3File a police report — the case number helps when fending off claims.
4. 4Object in writing and on time to unjustified invoices, reminders and debt collection (Verbraucherzentrale template letters).
5. 5Check credit agencies (e.g. SCHUFA) and arrange correction/a fraud note if needed.
6. 6Inform affected banks, shops and providers; preserve all documents as evidence.

What not to do

• Do not ignore claims — respond in writing and on time.
• Do not pay anything “just to be safe” that you did not initiate.
• Do not let deadlines of court orders (Mahnbescheid) lapse — enforcement titles may follow.

Common questions

I received a court order (Mahnbescheid) — what now?

Object on time (usually within two weeks). Do not let the deadline lapse, otherwise an enforcement title may be issued.

Who helps officially?

The Verbraucherzentrale (advice, template letters), the police (report) and the BSI (technical guidance) are the main points of contact.

How do I prevent it?

Be sparing with data, use strong unique passwords, 2FA and regular leak checks.

Sources

• Verbraucherzentrale Hamburg — Identity stolen & account hacked
• BSI — Identity theft: protective measures