Identity Theft (Vic)
Identity theft involves a person using another person’s personal information without consent, often to obtain a benefit. The information can be used to apply for a credit card, passport, driver licence, birth certificate, tax file number, Medicare card, or other benefit. The stolen identity can then be used for illegal activity such as money laundering, dealing in stolen vehicles, drug trafficking, fraudulently claiming Centrelink payments, or obtaining a bank loan or mobile phone contract.
Information can be sourced from any document that contains personal information, and from public sources, including social media accounts which can include date of birth, photos and contacts.
States and territories each have their own legislation to deal with identity theft. This article deals with identity theft under Victorian law.
The crime of identity theft
The Crimes Act 1958 deals with identity theft. “Identification information” means “information relating to a person (whether living or dead, or whether real or fictitious), that is capable of being used (whether alone or in conjunction with other information), to identify, or purportedly identify, the person”. It includes:
- a name, address, date of birth or place of birth;
- marital status;
- information which identifies a person’s relative;
- a driver licence or driver licence number;
- a passport or passport number;
- biometric data;
- a voice print;
- a credit card or debit card, its number or data stored or encrypted on it;
- a financial account number, user name or password;
- a digital signature;
- a series of letters or numbers (or both), intended for use as a means of personal identification;
- an ABN.
If a person makes, uses or supplies identification information and:
- they are aware that, or are aware that there is a substantial risk that, the information is identification information; and
- they intend to use the information to commit, or help commit, an indictable offence (a crime punishable by more than 12 months imprisonment).
they face a maximum penalty of 6 years imprisonment.
It is not a defence if the person to whom the identification information relates consented to the making, use or supply of the dentification information.
If a person possesses identification information with the intention to commit or help commit an indictable offence, they face a maximum penalty of 3 years imprisonment.
It is not a defence if the person to whom the identification information relates consented to the possession of the identification information.
If a person possesses equipment used to make, use, supply or retain identification information, with the intention to commit, or help commit, an indictable offence, they face a maximum penalty of 3 years in prison.
A person can be found guilty of these offences even if commission of the indictable offence is impossible.
If a person is found not guilty of making, using or supplying identification information, they can still be found guilty of possessing identification information with intent to commit, or help commit, an indictable offence.
Reporting identity theft
It is important a victim acts quickly to minimise financial or other damage. The matter should be reported to police, who will provide a reference number as evidence of the reporting. Other agencies may need to be contacted, such as banks, the Australian Passport Office, or the driver licensing authority in the relevant state or territory. Online passwords will need to be changed and any unauthorised accounts closed. National identity and cyber support service IDcare offers free expert support to deal with identity theft.
A victim of identity theft should also obtain a copy of their credit report. A person is entitled to a free credit report every 12 months. The report will show which organisations have recently checked the person’s credit history, and those organisations can be advised not to authorise any new accounts. Credit reporting bodies can also place a ban period on the report, during which time the bodies will not disclose or add to the report.
Protection against identity theft
There are steps a person can take to protect their identity from being stolen. These include:
- using a locked mailbox and clearing mail regularly;
- shredding or destroying personal or financial papers before disposal;
- use anti-virus and security software on computers;
- not using public computers or unsecured wireless “hot spots” to do internet banking;
- use the most secure settings on social media sites, and take care if placing personal data such as birth dates, phone numbers or educational details on a profile.
The Commonwealth Government offers Identity Matching Services to help organisations verify a person’s identity. The Document Verification Service confirms whether biographic information provided matches official records, such as passports, driver licences and birth certificates. The Face Verification Service compares a photo provided against an image used on identity documents to verify someone’s identity. The Face Identification Service compares a photo provided against an image used on identity documents to identify a person. This service can be used only by national security, law enforcement and anti-corruption agencies and only in limited circumstances.
For advice or representation in any legal matter, please contact Armstrong Legal.