Identity theft or account takeover

First steps

• Contact your bank immediately on the number on the back of your card. 159 connects you to most UK banks safely.
• Change the password on your email account first, then banking, then everything else. Use a different password for each.
• Turn on two-factor authentication everywhere you can.
• Sign out of all other devices in your email and social media settings.
• Report fraud to Action Fraud (0300 123 2040).
• Check your credit report with a free service for accounts you did not open.
• Consider Cifas Protective Registration, which flags your identity to lenders.

Get ready before it happens

• Use a password manager
• Two-factor authentication on email and banking
• Check whether your email has appeared in data breaches (the exposure check, coming in a later phase)