Speak Directly To a Lawyer Now

1300 038 223
Open 7am - Midnight, 7 days
Or have our lawyers call you:
  • This field is for validation purposes and should be left unchanged.

Identity Theft (Qld)


Identity theft involves a person using another person’s personal information without consent, often to obtain a benefit. The information can be used to apply for a credit card, passport, driver licence, birth certificate, tax file number, Medicare card, or other benefit. The stolen identity can then be used for illegal activity such as money laundering, dealing in stolen vehicles, drug trafficking, fraudulently claiming Centrelink payments, or obtaining a bank loan or mobile phone contract.

Information can be sourced from any document that contains personal information, and from public sources, including social media accounts which can include date of birth, photos and contacts.

States and territories each have their own legislation to deal with identity theft. This article deals with identity theft under Queensland law.

The crime of identity theft

Section 408D of the Criminal Code 1899 deals with identity theft. “Identification information” means “information about, or identifying particulars of, the entity that is capable of being used, whether alone or in conjunction with other information, to identify or purportedly identify the entity”. It includes:

  • a name, address, date of birth and place of birth;
  • marital status;
  • information which identifies a person’s relative;
  • a driver licence number;
  • a passport number;
  • biometric data;
  • a voice print;
  • information stored on a credit card or debit card;
  • a financial account number, user name or password;
  • a digital signature;
  • a series of letters or numbers, intended for use as personal identification;
  • an ABN.

If a person obtains, uses or supplies another entity’s identification information for the purpose of committing or helping to commit an indictable offence (a crime punishable by more than 12 months imprisonment) they face a maximum penalty of 5 years imprisonment.

It is immaterial whether the other entity is alive or dead, or exists or does not exist, or consents or does not consent to the obtaining, useor supply.

If a person possesses equipment for the purpose of committing or helping to commit an indictable offence involving identification information, they face a maximum penalty of 5 years imprisonment.

Reporting identity theft

It is important a victim acts quickly to minimise financial or other damage. The matter should be reported to police, who will provide a reference number as evidence of the reporting. Other agencies may need to be contacted, such as banks, the Australian Passport Office, or the driver licensing authority in the relevant state or territory. Online passwords will need to be changed and any unauthorised accounts closed. National identity and cyber support service IDcare offers free expert support to deal with identity theft.

Credit reports

A victim of identity theft should also obtain a copy of their credit report. A person is entitled to a free credit report every 12 months. The report will show which organisations have recently checked the person’s credit history, and those organisations can be advised not to authorise any new accounts. Credit reporting bodies can also place a ban period on the report, during which time the bodies will not disclose or add to the report.

Victim of identity theft certificate

Under the Act, when sentencing a person for an identity theft offence, a court can issue a certificate to the victim that identifies the victim and describes the away their identification information was used to commit the offence. The court can include any other information it considers appropriate. It can issue a certificate on its own initiative or on application by the victim or the prosecutor. The victim can present the certificate at agencies such as banks and businesses to help support a claim of identity theft. For instance, it can help the victim negotiate the removal of a fraudulent transaction from their record, or re-establish their credit rating.

A victim of identity theft under Commonwealth law can apply for a Commonwealth Victims’ Certificate.

Protection against identity theft

There are steps a person can take to protect their identity from being stolen. These include:

  • using a locked mailbox and clearing mail regularly;
  • shredding or destroying personal or financial papers before disposal;
  • use anti-virus and security software on computers;
  • not using public computers or unsecured wireless “hot spots” to do internet banking;
  • read a company’s privacy policy before supplying personal details to avoid your information being sold or supplied to third parties;
  • use the most secure settings on social media sites, and take care if placing personal data such as birth dates, phone numbers or educational details on a profile.

ID matching

The Commonwealth Government offers Identity Matching Services to help organisations verify a person’s identity. The Document Verification Service confirms whether biographic information provided matches official records, such as passports, driver licences and birth certificates. The Face Verification Service compares a photo provided against an image used on identity documents to verify someone’s identity. The Face Identification Service compares a photo provided against an image used on identity documents to identify a person. This service can be used only by national security, law enforcement and anti-corruption agencies and only in limited circumstances.

For advice or representation in any legal matter, please contact Armstrong Legal.

Sally Crosswell

This article was written by Sally Crosswell

Sally Crosswell has a Bachelor of Laws (Hons), a Bachelor of Communication and a Master of International and Community Development. She also completed a Graduate Diploma of Legal Practice at the College of Law. A former journalist, Sally has a keen interest in human rights law.

Legal Hotline
Open 7am - Midnight, 7 Days
Call 1300 038 223