Front Page: NCSC-FI
Front Page: NCSC-FI

Information security now!

Identity theft can take place following a data breach, for example. Keep reading for advice on how to proceed if you have been targeted by identity theft or your personal data has been made public as a result of a data breach.

What is identity theft

Identity theft entails using someone else’s identity. To this end, perpetrators of identity theft make use of another person's personal data, identification data or other information that can be used to identify an individual. Such information includes names and address details, personal identity codes, phone numbers and online banking credentials.

In practice, identity theft may mean assuming the identity of another person and using it to make a purchase at an online store, which is then billed to the victim of the identity theft.

Criminals use a number of methods to collect the personal data required to commit identity theft, including exploiting data leaks on the internet or perpetrating phishing scams. The kind of personal data used to commit identity theft has recently been obtained by criminals via scam phone calls in which they have claimed to represent technical support.

“A person who in order to deceive a third party unlawfully uses the personal information, access codes or other corresponding identifying information of another and in this manner causes economic loss or more than petty impediment to the person to whom the information belongs, shall be sentenced for identity theft to a fine.”

What can I do if I have been the victim of identity theft?


Make sure you carefully consider the following steps. A ban on address changes, for example, has consequences when submitting a notification of a change of address. Familiarise yourself with the available options, materials and services carefully before taking action.


Prevent financial damage

If a criminal has gained access to your online banking account or your credit card details, contact your bank immediately.


Set a voluntary ban on credits

You can set a voluntary ban on credits for yourself in the Positive credit register's e-service. The voluntary ban on credits can be set either for an indefinite or a fixed period. You can remove the credit ban at any time. 


Vero: How to restrict the changing of your bank account number to MyTax only

If you wish, you can choose that your bank account number can be changed only by a person who has logged in to MyTax. If you do so, the account number cannot be submitted on paper.

  • Go to MyTax and select Taxpayer details.
  • Scroll down to Setting security restrictions on the use of Tax Administration services.
  • Select Change the restrictions.
  • Under Method of reporting details, select Reporting details permitted in MyTax only.
  • Click Next.
  • Re-check the changes you made and click Submit.

Police: Notify the police of a lost document and apply for new identification.

If criminals have gained access to the picture or details of your identification, notify the police of a lost document and apply for new identification.

If your personal and address data require particular protection, consider applying for a non-disclosure for personal safety reasons and address protection. Applications for a non-disclosure for personal safety reasons can be submitted to the Digital and Population Data Services Agency. (External link) The decision to apply should be based on careful consideration. The need for a non-disclosure for personal safety reasons must always be justified, and an application is required in all cases.