SECURITY SERIES - PART 3 OF 5
Identity Theft & Online Scams: Protecting Your Digital Identity
Published: February 2026 | Reading Time: 12 minutes
Series: Online Security for Everyday Users | Author: Sean Kevin Wyndham-Quin, Mac & PC Farnham
Previously in this series: In
Part 1, we covered phishing attacks. In
Part 2, we explored malware and ransomware. Today, we're looking at identity theft and the scams that can devastate your finances and reputation.
The Cost of Identity Crime
£1.2 billion stolen through identity fraud in UK (2025)
1 in 15 UK adults will be a victim of identity theft
£15,000 average loss to romance scam victims
300 hours average time to fully recover from identity theft
What is Identity Theft?
Identity theft occurs when criminals use your personal information—name, date of birth, address, National Insurance number, or financial details—to impersonate you for financial gain or other malicious purposes.
Unlike a stolen wallet that you notice immediately, identity theft often goes undetected for months or even years, allowing criminals to cause maximum damage to your finances and credit rating.
What Criminals Can Do with Your Identity
💳 Financial Fraud
- Open credit cards in your name
- Take out loans
- Empty bank accounts
- File fraudulent tax returns
🏥 Medical Fraud
- Use NHS services in your name
- Get prescriptions
- Create false medical history
- Affect your insurance
🏠 Housing Fraud
- Rent properties
- Apply for mortgages
- Change council tax records
- Utility fraud
⚖️ Criminal Activity
- Commit crimes in your name
- Create criminal record
- Get driving penalty points
- Immigration fraud
💼 Employment Fraud
- Work using your National Insurance
- Claim benefits
- Affect your tax records
- Damage employment history
📱 Account Takeover
- Hijack email and social media
- Access online shopping accounts
- Cryptocurrency theft
- Gaming account theft
How Criminals Steal Your Identity
1. Data Breaches
When companies you do business with get hacked, your information is stolen in bulk and sold on the dark web.
Recent Major Data Breaches (2024-2025):
• Electoral Commission (UK) – 40 million voter records
• British Library – Staff and user data
• Royal Mail – Customer delivery information
• Multiple NHS trusts – Patient records
What was stolen: Names, addresses, dates of birth, email addresses, phone numbers, and sometimes financial data
Check if you've been affected: Visit HaveIBeenPwned.com and enter your email address to see if your data has been in a known breach.
2. Social Media Over-Sharing
Criminals piece together your identity from information you voluntarily share online.
Dangerous Information to Share on Social Media:
- Full date of birth – Used for identity verification
- Mother's maiden name – Common security question
- Pet names – Common password choice
- First car – Security question
- School you attended – Security question
- Current location – When you're away from home
- Address or house number – Visible in photos
- Boarding passes – Contain personal details
- Children's names and schools – Safety risk
3. Physical Document Theft
- Stealing mail (bank statements, credit card offers)
- Going through bins (dumpster diving)
- Lost or stolen wallets and purses
- Unsecured documents at home
4. Phishing and Social Engineering
As covered in Part 1, criminals trick you into providing information directly.
5. Insecure Websites and WiFi
- Shopping on unencrypted websites (no HTTPS)
- Using public WiFi without VPN
- Fake WiFi networks at cafes and airports
Warning Signs You've Been a Victim
- Unexpected bills or credit card statements for accounts you didn't open
- Credit applications denied for unknown reasons
- Strange entries on your credit report – Accounts or inquiries you don't recognize
- Missing mail – Especially bank statements or credit cards
- Calls from debt collectors about debts you don't owe
- Tax return rejected – Someone already filed using your details
- Medical claims you didn't make appearing on insurance statements
- Can't access online accounts – Passwords changed without your knowledge
- Small unauthorized charges – Criminals testing if card works
- Notification of data breach from a company you use
Common Online Scams in 2026
Romance Scams: The £15,000 Heartbreak
Romance scams are among the most emotionally and financially devastating. Criminals create fake dating profiles, build relationships over weeks or months, then request money.
Typical Romance Scam Timeline:
Week 1-2: Meet on dating app or social media. Very attractive profile, great conversation
Week 3-6: Intense emotional connection develops. Daily messages, declarations of love
Week 7: First money request. "Emergency" – medical bills, business deal, travel to meet you
Week 8-12: More requests. Amounts increase. "Investment opportunity," "Customs fees for gift"
Week 13+: Still haven't met in person. More excuses. More money requests
Total Average Loss: £15,000 per victim
Romance Scam Red Flags
- Extremely attractive profile photos (likely stolen from models or actors)
- Declares love very quickly (within days or weeks)
- Claims to be working abroad (oil rig, military, international business)
- Poor grammar despite claiming to be from UK/US/Australia
- Refuses video calls or always has excuses why camera doesn't work
- Plans to meet in person repeatedly fall through
- Asks for money for emergencies, business deals, or travel
- Requests gift cards, cryptocurrency, or wire transfers
- Wants to move conversation off dating platform quickly
- Stories don't add up or change frequently
Investment and Cryptocurrency Scams
Fake investment opportunities promising guaranteed high returns with little or no risk.
Common Investment Scam Tactics:
• Guaranteed returns: "Make 40% return every month, guaranteed!"
• Urgency: "Limited slots available, invest now or miss out"
• Fake testimonials: Photos of luxury cars and mansions
• Celebrity endorsements: Using deepfakes or stolen images
• Complexity: Complicated schemes to confuse you
• Small initial investment: £100 becomes £500 to build trust, then they ask for thousands
Types of Investment Scams
| Scam Type |
How It Works |
Warning Sign |
| Ponzi Schemes |
Early investors paid with money from new investors |
Unsustainable returns, collapses when recruitment stops |
| Pyramid Schemes |
Earn by recruiting others, not selling products |
Focus on recruitment over product |
| Crypto Scams |
Fake exchanges, rug pulls, pump and dump |
Celebrity endorsements, guaranteed profits |
| Forex Trading |
Fake trading platforms that manipulate results |
Can't withdraw winnings, pressure to invest more |
| Property Investment |
Non-existent developments, fake rental income |
Properties don't exist, overseas locations |
💡 Remember: If an investment seems too good to be true, it absolutely is. Legitimate investments carry risk and are regulated by the Financial Conduct Authority (FCA).
Shopping and Marketplace Scams
Fake online stores and fraudulent sellers on legitimate marketplaces.
Fake Online Stores
How to Spot Fake Shopping Websites:
❌ Prices too good to be true (designer goods at 70% off)
❌ Recently created domain (check whois.com)
❌ Only accepts bank transfer or cryptocurrency
❌ No contact information or only email
❌ Poor grammar and spelling
❌ Stolen product photos (reverse image search)
❌ No customer reviews or only 5-star reviews
❌ Pressure to buy now (countdown timers)
Facebook Marketplace & eBay Scams
- Non-delivery: Pay, never receive item
- Counterfeit goods: Fake designer items
- Overpayment scam: Buyer sends too much, asks for refund, original payment bounces
- Fake payment confirmations: Screenshot of "payment" that never arrives
- Deposit scams: Rental properties that don't exist
Job and Employment Scams
Fake job offers designed to steal money or personal information.
- Job offers without interview or with minimal screening
- Work from home earning thousands per week
- Upfront fees for equipment, training, or background checks
- Receiving checks to deposit and forward (money laundering)
- Mystery shopper jobs requiring you to cash checks
- Requests for bank details before formal job offer
- Salary way above market rate for the role
- Communication only via WhatsApp or text, never phone
Tech Support Scams
Criminals claiming to be from Microsoft, Apple, or other tech companies.
Typical Tech Support Scam Call:
"Hello, this is David from Microsoft Windows Support Center. Our systems detected a virus on your computer sending spam emails. We need to remote access your system immediately to prevent your internet being disconnected."
What they really do:
- Show you fake virus warnings (actually normal Windows logs)
- Install remote access software
- Install actual malware
- Steal banking credentials
- Charge £200-£500 for "repairs"
- Lock your computer and demand more money
⚠️ CRITICAL: Microsoft, Apple, Google, and other legitimate tech companies will NEVER cold-call you about computer problems. Any such call is 100% a scam. Hang up immediately.
Charity Scams
Fake charities appearing after disasters, tragedies, or during holiday seasons.
How to Verify a Charity
- Check Charity Commission website (register-of-charities.charitycommission.gov.uk)
- Verify charity registration number
- Research the charity online (independent reviews)
- Never give cash to door-to-door collectors
- Don't click links in unsolicited emails
- Donate directly through official website
- Be wary of emotional pressure tactics
How to Protect Yourself from Identity Theft
- Monitor your credit report – Use free services like ClearScore, Experian, or Equifax (check monthly)
- Use strong, unique passwords – Password manager is essential (see Part 5)
- Enable two-factor authentication – Everywhere it's available, especially banking and email
- Shred financial documents – Before putting in bin (cross-cut shredder)
- Secure your mailbox – Consider lockable mailbox if mail frequently stolen
- Use HTTPS websites only – Look for padlock icon in browser
- Don't overshare on social media – Limit who can see your posts, avoid posting birthday, address, etc.
- Review bank statements monthly – Look for suspicious transactions, even small ones
- Freeze your credit – If not applying for credit, freeze it at all three bureaus
- Use virtual credit cards – Services like Revolut or Curve for online shopping
- Be suspicious of unsolicited contact – Verify independently before providing information
- Check HaveIBeenPwned.com – See if your email appears in data breaches
What to Do If You're a Victim
Immediate Actions if Identity Stolen:
- Contact your banks immediately – Report fraud, freeze accounts
- Change all passwords – Start with email, then banking, then everything else
- Report to Action Fraud: 0300 123 2040 or actionfraud.police.uk
- Place fraud alert on credit reports – Contact Experian, Equifax, TransUnion
- Report to credit reference agencies – Add protective registration
- File police report – Get crime reference number
- Contact CIFAS – Apply for protective registration (£25 for 2 years)
- Check credit report thoroughly – Look for fraudulent accounts
- Report to companies affected – Any fraudulent accounts opened
- Keep detailed records – All correspondence, dates, reference numbers
- Check HMRC – Ensure no fraudulent tax returns filed
- Monitor for 12+ months – Identity theft effects can be long-lasting
Red Flags Checklist: Is This a Scam?
- Too good to be true (free money, massive discounts, guaranteed returns)
- Urgency and pressure (act now or miss out, limited time offer)
- Requests for payment by gift cards, cryptocurrency, or wire transfer
- Unsolicited contact (you didn't initiate the conversation)
- Requests for personal information
- Poor grammar and spelling
- Won't communicate via official channels (phone, email)
- No way to verify identity or legitimacy
- Asks you to keep opportunity secret
- Emotional manipulation (fear, greed, sympathy)
- Celebrity endorsements (usually fake or deepfake)
- Can't find independent reviews or only positive reviews
UK Resources for Fraud Victims
| Organization |
Contact |
Purpose |
| Action Fraud |
0300 123 2040 actionfraud.police.uk |
Report fraud and cybercrime |
| Citizens Advice |
0800 144 8848 citizensadvice.org.uk |
Consumer advice and support |
| CIFAS |
cifas.org.uk |
Protective registration against fraud |
| Victim Support |
0808 168 9111 victimsupport.org.uk |
Emotional and practical support |
| Financial Ombudsman |
0800 023 4567 financial-ombudsman.org.uk |
Disputes with financial companies |
| National Cyber Security Centre |
ncsc.gov.uk |
Cybersecurity guidance |
Action Plan: Protect Yourself This Week
7-Day Identity Protection Challenge:
- Day 1: Check your credit report on ClearScore or Experian
- Day 2: Visit HaveIBeenPwned.com to check for data breaches
- Day 3: Review and tighten social media privacy settings
- Day 4: Set up account alerts for banking and credit cards
- Day 5: Shred old financial documents, organize important papers
- Day 6: Enable two-factor authentication on 5 more accounts
- Day 7: Educate one family member about scams (share this article!)
Victim of Identity Theft or Online Scam?
At Mac & PC Farnham, we can help secure your devices, change passwords safely, and set up proper protection to prevent future attacks. We work with clients affected by scams to restore security.
Call 07769 804065
Or email: skwquin@macpcfarnham.uk
📧 Coming Next Week: Part 4 explores social engineering, doxing, trolling, and online harassment—how to recognize manipulation tactics and protect yourself from targeted attacks.
About the Author: Sean Kevin Wyndham-Quin has over 20 years of experience in computer repair and security. At Mac & PC Farnham, he helps victims of identity theft and scams secure their devices and recover their digital lives.
Tags: identity theft, online scams, romance scams, investment fraud, shopping scams, cybersecurity, fraud prevention, UK cybercrime, computer security Farnham, scam awareness