Identity Theft in New Zealand — What to Do (2026)
About this article
Sourced from New Zealand Acts of Parliament (legislation.govt.nz), regulations, and official government guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Identity theft — someone using your personal details to open accounts, take loans, or commit fraud — needs a fast, organised response. Using another person's identity to obtain a benefit can be an offence under the Crimes Act 1961, and the misuse of your personal information also engages the Privacy Act 2020.
The key first steps are to secure your accounts (change passwords, enable two-factor authentication), tell your bank and any affected providers, and report to Police (105). IDCARE is a free identity and cyber support service for New Zealand and Australia that can build you a tailored response plan and help deal with banks, credit bureaus and agencies. You can also place alerts with the credit reporting bureaus so new credit can't easily be opened in your name. If an organisation's breach exposed your details, you can complain to the Office of the Privacy Commissioner.
When does it apply?
- Someone has used your identity to open accounts or take credit.
- Your ID documents or logins were stolen or exposed in a breach.
- You're seeing unfamiliar accounts or transactions in your name.
What to do if your identity is stolen
- Secure your accounts — change passwords, turn on two-factor authentication.
- Tell your bank and report to Police (105).
- Contact IDCARE for a free response plan.
- Place alerts with credit bureaus to block new credit in your name.
What should you NOT do?
- Don't reuse the compromised password anywhere.
- Don't ignore small unfamiliar transactions — they're often a test run.
- Don't share more ID details with unverified callers.
About Scams & Fraud Recovery in New Zealand
If you've been scammed in New Zealand, act fast — the first hours matter most. Report fraud to NZ Police (111 emergency / 105 non-emergency and online reporting), contact your bank immediately to try to stop or recover funds, and use Netsafe for online harm. Scams are crimes under the Crimes Act 1961 (obtaining by deception, s 240) and the Fair Trading Act 1986; online harm is covered by the Harmful Digital Communications Act 2015. Investment scams go to the Financial Markets Authority (FMA).
Police: 111 / 105. Netsafe: 0508 638 723. Report spam texts to 7726.
Common Questions
What is the identity theft right in New Zealand?
Identity theft — someone using your personal details to open accounts, take loans, or commit fraud — needs a fast, organised response. Using another person's identity to obtain a benefit can be an offence under the Crimes Act 1961, and the misuse of your personal information also engages the Privacy Act 2020.The key first steps are to secure your accounts (change passwords, enable two-factor authentication), tell your bank and any affected providers, and report to Police (105). IDCARE is a free identity and cyber support service for New Zealand and Australia that can build you a tailored respo...
When does it apply — identity theft?
Someone has used your identity to open accounts or take credit.Your ID documents or logins were stolen or exposed in a breach.You're seeing unfamiliar accounts or transactions in your name.
What should I do if my identity is stolen in New Zealand?
Secure your accounts — change passwords, turn on two-factor authentication.Tell your bank and report to Police (105).Contact IDCARE for a free response plan.Place alerts with credit bureaus to block new credit in your name.
What should you NOT do — identity theft?
Don't reuse the compromised password anywhere.Don't ignore small unfamiliar transactions — they're often a test run.Don't share more ID details with unverified callers.