7 Essential Steps to Prevent Identity Theft

Identity theft is a growing problem in Canada. In 2023 the Canadian Anti-Fraud Centre (CAFC) recorded more than 11,000 reports involving identity theft and fraud, and both government agencies and financial institutions have noted a rise in incidents. Criminals use many methods to obtain personal data; common tactics include:

• Taking personal or financial information from your mailbox or recycling bin
• Harvesting data from spoofed websites that mimic banks or government services
• Posing as bank or government representatives to phish for details by phone, email or text

Often, victims only discover the theft after fraudsters have used their details to empty bank accounts or open new loans and credit cards in their name. Recovering from identity fraud can be stressful and time-consuming — from reclaiming stolen funds to repairing credit — which is why preventing theft and detecting it early are so important.

How to protect yourself from identity theft

There are practical, effective steps you can take to protect your personal and financial information. Some are low-tech: lock your mailbox, shred sensitive documents, and watch your mail. Other measures are digital: monitor your credit reports, enable robust cybersecurity on your devices, and consider an identity protection and credit monitoring service such as Equifax Complete Protection to receive alerts about important changes to your Equifax credit report.

Below are seven concrete actions to help reduce your risk and detect fraud sooner.

1. Lock your mailbox.

Your mailbox may contain highly sensitive documents — social insurance numbers (SIN), credit card statements, and bank correspondence. A lockable mailbox (prices start around $40) or a rented post office box provides a basic, effective barrier to opportunistic thieves.

2. Shred financial documents.

Shredding bills, credit card offers, bank letters and other documents with personal data prevents fraudsters from digging through your recycling for information. Affordable shredders are available at office-supply stores, and shredding is a simple habit that significantly reduces risk.

3. Be wary of phishing scams.

Phishing attempts by phone, text, email and social media are increasingly sophisticated, aided by advances in artificial intelligence. Never provide personal data unless you initiated the contact. If a message looks strange — odd fonts, typos, or requests to click a link rather than check your account directly — treat it as suspicious. Do not reply or click links in unsolicited messages.

Clear signs of fraud include emails that urge you to click a link instead of checking your account, slightly altered email addresses or URLs, or any message that pressures you to act immediately. Comprehensive protection services can help flag suspicious communications; for example, Equifax Complete Protection includes device protection through a partnership with Bitdefender, which can help recognize malicious messages.

4. Practice good cybersecurity habits.

Fraudsters often try to access email or online banking accounts. Avoid entering sensitive information on public Wi‑Fi and use strong, unique passwords for each account. A reputable password manager can generate and store complex passwords and check for security leaks. Equifax Complete Protection includes a password manager via a partnership and also offers NordVPN to encrypt your online traffic when using public networks.

Enable two‑factor authentication (2FA) wherever possible. 2FA adds an extra verification step that makes it harder for attackers to access your accounts even if they obtain a password.

5. Get daily credit alerts with Equifax Complete.

Identity fraud can go unnoticed for long periods. Daily credit monitoring highlights key changes to your Equifax credit report — such as new credit applications, new accounts opened in your name, or a phone number added to your file — allowing you to detect suspicious activity quickly. If your identity is stolen, Equifax Complete includes identity restoration services and up to $1 million in identity theft insurance (not available to residents of Quebec), plus access to a dedicated restoration specialist to help repair the damage.

6. Set up dark web monitoring and alerts.

Your personal data may eventually appear on the dark web, where cybercriminals buy and sell stolen information. Dark web monitoring scans those hidden sites and alerts you if your details surface. Services such as the WebScan feature included with Equifax Complete notify you when personal data tied to your identity is found in illicit marketplaces, so you can act quickly.

7. Report fraud immediately.

If you suspect your identity has been compromised, file a police report with your local force and report the incident to the Canadian Anti-Fraud Centre so they can track trends and assist with investigations. Use the CAFC’s Fraud Reporting System or call 1-888-495-8501. Also contact both Canadian credit bureaus to place a fraud alert on your credit files.

As identity theft grows more common, it’s increasingly important to take preventative steps and monitor your accounts proactively. Combining simple physical safeguards like locking your mailbox and shredding paper with strong digital habits and credit monitoring can greatly reduce your exposure and help you detect problems sooner.

Equifax Complete Protection offers a combined set of tools—credit monitoring, dark web scanning, device and password protections, social media monitoring and identity restoration—to help Canadians detect fraud faster and recover if their identity is stolen. The service is available for $34.95 per month, with a promotional offer of $9.95 for the first 30 days.

More about fraud:

• Your ID was stolen — here’s what to expect
• Why do Canadians keep falling for scams?
• How to protect your email account from scams and fraud
• You’ve just discovered someone stole your identity — is it too late?
• Six phishing scams targeting young Canadians (and how not to fall for them)