Written by Roy Morken, IT adviser and co-founder of Datafolka. Published 22 October 2026

Identity Theft: What to Do Now, 7 Steps in the Right Order

Photo: Kit (formerly ConvertKit) on Unsplash

You often notice it first on an invoice from an online shop you never bought from. Or the bank calls and asks whether you really applied for a consumer loan. Then someone has used your name, and the order of what you do over the next hours matters more than how fast you do it.

Identity theft means someone uses your personal details, such as your national ID number, BankID or card data, to buy, borrow or open accounts in your name. A common starting point is a link in an SMS or a fake login page where BankID was entered. Everything else follows from that.

1. Block BankID, cards and online banking first

Call the bank on the number printed on their website, not a number from an SMS or email. Ask them to block BankID and any cards that may be affected. As long as your BankID works for the fraudster, new loans and accounts can be opened while you deal with everything else. DNB recommends the same in its guidance on ID theft (in Norwegian).

2. Place a credit freeze with the credit bureaus

A credit freeze stops banks and shops from running a credit check on you. Without a credit check, nobody can grant a loan or instalment plan in your name. The freeze is free, but there is no single shared register. You have to place it with each bureau separately, for example Experian and Dun & Bradstreet. Log in with BankID once you have a new one.

The downside is that the freeze also blocks you. If you want to take out a loan or change mobile plan, you have to lift it first.

3. Report it to the police

Report it through politiet.no. Banks, debt collectors and insurers almost always ask for the report confirmation, so it is the document you will use most. Write down what happened, with dates, while you still remember.

Photo: CardMapr.nl on Unsplash

4. Change passwords from a device you trust

If you clicked on something, the PC or phone may be infected. Change the email password first, since it is used to reset everything else. Do it from another device if you are in doubt, and turn on two-factor authentication. If you are unsure whether the machine is clean, see our guide to removing viruses and malware.

5. Dispute claims in writing

If you get an invoice or a debt collection notice for something you did not buy, dispute the claim in writing to the creditor and attach the police report confirmation. Do not pay just to make it go away. If you pay, it can look as if you accept the claim.

6. Check your insurance

Many home contents policies include ID theft cover, which often means help with the clean-up. The stolen amount is not always covered. Call your insurer and ask what you actually have.

7. Keep watching for the next few months

Fraudsters often reuse the same details more than once. Read your post, go through your account statements and watch for emails about new accounts or credit checks. If you clear up one thing, a new claim can turn up from somewhere else.

If it concerns your business

If an employee work account or the company data has been misused, it is a security incident and not just a private matter. If personal data has leaked, you must assess whether the incident has to be reported to the Norwegian Data Protection Authority (Datatilsynet) within 72 hours. We help with IT security for small businesses when it happens, and with closing the gap afterwards.

Did it all start with a fake email or SMS? Also read how to recognise phishing and how to create passwords that hold up.

Claude AI helped me with wording and proofreading in this article.