Skip to main content
Transport and Communications Agency

Advice for victims of identity theft or data breaches

Identity theft can take place following a data breach, for example. Keep reading for advice on how to proceed if you have been targeted by identity theft or your personal data has been made public as a result of a data breach.

What is identity theft

Identity theft entails using someone else’s identity. To this end, perpetrators of identity theft make use of another person's personal data, identification data or other information that can be used to identify an individual. Such information includes names and address details, personal identity codes, phone numbers and online banking credentials.

In practice, identity theft may mean assuming the identity of another person and using it to make a purchase at an online store, which is then billed to the victim of the identity theft.

Criminals use a number of methods to collect the personal data required to commit identity theft, including exploiting data leaks on the internet or perpetrating phishing scams. The kind of personal data used to commit identity theft has recently been obtained by criminals via scam phone calls in which they have claimed to represent technical support.

“A person who in order to deceive a third party unlawfully uses the personal information, access codes or other corresponding identifying information of another and in this manner causes economic loss or more than petty impediment to the person to whom the information belongs, shall be sentenced for identity theft to a fine.”

Criminal law 9 a § (10.4.2015/368)

What can I do if I have been the victim of identity theft?

Make sure you carefully consider the following steps. A ban on address changes, for example, has consequences when submitting a notification of a change of address. Familiarise yourself with the available options, materials and services carefully before taking action.

Do like this

  1. Step 1

    Prevent financial damage

    If a criminal has gained access to your online banking account or your credit card details, contact your bank immediately.

  2. Step 2

    Report the offence to the police

  3. Step 3

    Set a voluntary ban on credits

    You can set a voluntary ban on credits for yourself in the Positive credit register's e-service. The voluntary ban on credits can be set either for an indefinite or a fixed period. You can remove the credit ban at any time. 

  4. Step 4

    Vero: How to restrict the changing of your bank account number to MyTax only

    If you wish, you can choose that your bank account number can be changed only by a person who has logged in to MyTax. If you do so, the account number cannot be submitted on paper.

    • Go to MyTax and select Taxpayer details.
    • Scroll down to Setting security restrictions on the use of Tax Administration services.
    • Select Change the restrictions.
    • Under Method of reporting details, select Reporting details permitted in MyTax only.
    • Click Next.
    • Re-check the changes you made and click Submit.
  5. Step 5

    Finnish Patent and Registration Office: Apply for a registration ban

    Apply to the Finnish Patent and Registration Office for a registration ban. Also make sure that any existing information cannot be altered without first contacting you at a specific phone number or email address.

  6. Step 6

    Digital and Population Data Services Agency: Apply for a ban on address changes or address change protection

    Digital and Population Data Services Agency: Block a notification of move.

  7. Step 7

    Police: Notify the police of a lost document and apply for new identification

    If criminals have gained access to the picture or details of your identification, notify the police of a lost document and apply for new identification.

  8. Step 8

    Digital and Population Data Services Agency: Consider protecting your address information

    Consider protecting your address information.

If your personal and address data require particular protection, consider applying for a non-disclosure for personal safety reasons and address protection. Applications for a non-disclosure for personal safety reasons can be submitted to the Digital and Population Data Services Agency. Ulkoinen verkkopalvelu. The decision to apply should be based on careful consideration. The need for a non-disclosure for personal safety reasons must always be justified, and an application is required in all cases.

Read more about identity theft

Page was last updated