Protect Your Devices from Identity Theft

This is the second in a series of columns about protecting the people and information that matter most from fraud and scams. More columns will follow.

Many people assume that changing passwords and avoiding obvious phishing links is enough to protect their phones and other devices. In reality, preventing identity theft requires a broader approach. Criminals can target devices anywhere—at home, at work and in public—and they use a variety of methods to gain access. Even without physically stealing your phone, attackers can intercept Bluetooth or Wi‑Fi connections and “mirror” your device to their own, exposing saved passwords, messages and other personal data that can be used to commit fraud.

Scammers are constantly refining their techniques, but there are practical steps you can take to lower your risk. Below are clear, actionable tips for securing your devices and guidance on what to do if your identity is compromised.

Steps to safeguard your devices

“The first line of defence is to require a passcode or biometric authentication every time you unlock a device,” says Octavia Howell, vice‑president and chief information security officer at Equifax Canada. Without that barrier, anyone who picks up an unlocked phone or tablet can access your information with a simple swipe.

Think of an unlocked device as an open door. If you want to prevent an easy breach, always lock your devices and require authentication—PIN, fingerprint, Face ID or a comparable secure method—before they can be used. Additionally, install a reputable security app on your phone or tablet and keep it updated. Mobile anti‑malware tools can help detect risky apps and malicious activity.

Only download apps from trusted app stores—Google Play, Apple’s App Store, Microsoft or your device’s official marketplace—and verify app permissions before installing. Limit apps’ access to location, contacts, camera and microphone unless it’s strictly necessary.

Be cautious on public Wi‑Fi

Where you connect matters. Home and workplace networks are generally set up as private and controlled, but public Wi‑Fi in cafés, airports and hotels is far less secure. Using public Wi‑Fi for casual browsing may be acceptable, but avoid logging into banking or financial accounts and do not perform transactions over unsecured networks.

If you must use public Wi‑Fi for anything that requires a password, use a reputable virtual private network (VPN) to encrypt your traffic. Treat email and other password‑protected services as sensitive: when on public networks, postpone sign‑ins or connect only through a secure VPN.

How advanced threats are evolving

New technologies such as generative artificial intelligence are raising the threat level. Fraudsters have used AI to create convincing fake voice messages, video clips or messages appearing to come from family members asking for money. If you receive an urgent request that seems out of character, pause and verify before responding.

Good verification practices include hanging up or putting the call on hold and contacting the person directly via a known phone number or messaging method. Families can adopt private passphrases or gestures—safe words or signals known only to family members—to confirm identity in sensitive situations.

If you suspect identity theft

Many victims feel embarrassed and hesitate to report a possible breach, but delaying only makes recovery harder. If you believe your identity has been compromised, act immediately. Report the incident to your local police, inform your bank and any other financial institutions, and contact Canada’s credit bureaus, including Equifax.

If your social insurance number (SIN) may have been exposed, notify the Canada Revenue Agency. You should also report scams and fraud to the Canadian Anti‑Fraud Centre so authorities can track patterns and warn others.

Practical steps to reduce ID theft risk

“Preventing threats to your personal data is not about if it will happen, but when,” Howell warns. The good news is that you can reduce risk and improve your ability to recover if something goes wrong.

Regularly monitor your credit reports and set up alerts for unusual activity, such as sudden drops in your credit score or new accounts opened in your name. Consider subscribing to an identity‑protection service that provides continuous monitoring, dark‑web scanning and identity restoration support if your information is misused.

Equifax Complete Protection, for example, combines credit monitoring with dark‑web searches and identity restoration services. While no service can guarantee prevention, these tools can provide early warning and professional assistance to resolve fraud more quickly.

Read more about fraud prevention:

• Your ID was stolen: what to expect
• Relationship fraud and romance scams: what Canadians need to know
• 7 ways to protect yourself from ID theft
• How to protect your email account from scams
• Why do Canadians keep falling for scams?