Account Opening Fraud (New Accounts in Your Name)
Criminals use stolen personal data to open bank accounts, credit cards, loans, or utility services in your name — spending freely before the debt lands on your credit file. You may have no idea until a lender or debt collector contacts you.
Last reviewed: 1 June 2026
What this scam is
Account opening fraud — sometimes called 'new account fraud' — occurs when a criminal uses enough of your personal information to pass a lender's identity verification and open a financial account in your name. Unlike account takeover, where an existing account is hijacked, this fraud creates a brand-new liability you never agreed to.
The data needed is typically a combination of full name, date of birth, address history, and a national identifier such as a Social Security Number or National Insurance number. All of this information is regularly exposed in data breaches and sold on criminal marketplaces. Once a fraudster has the data, they may apply for credit cards, personal loans, store accounts, mobile phone contracts, or utility services — anything that provides immediate financial benefit.
Because the victim never interacts with the new account, alerts may never arrive at the correct address. Lenders send statements to the fraudster's chosen address. The first warning many people receive is a declined credit application due to unexpected defaults, a letter from a debt-collection agency, or an unexplained drop in their credit score.
How it works
Fraudsters source personal data from data breaches, phishing campaigns, or physical document theft. They may also purchase pre-compiled 'fullz' (complete identity packages) on dark-web markets. With this data in hand, they identify financial products with online applications and low-friction identity checks.
After submitting the application using the victim's real data but a different delivery address or phone number, the fraudster waits for approval. They then use the account to make purchases, withdraw cash, or transfer funds before the credit limit is exhausted. Some open multiple accounts simultaneously to maximise the window before any one account is flagged.
Many lenders only report delinquencies to credit bureaux after sixty to ninety days of non-payment. This means the fraudster can spend months drawing on accounts before the victim's credit file shows any sign of the fraud. By the time the victim discovers the problem, the fraudster has long moved on.
Why this scam works
New account fraud succeeds because lenders rarely verify that the address receiving a card or statement matches the address on the credit file. Online applications process quickly and automatically, giving fraud detection little time to flag anomalies. The victim is absent from the entire transaction, so there is no moment at which a suspicious question gets asked of the right person. By the time defaults appear, the fraudster has extracted value and moved on.
Common red flags
- Credit report shows accounts, cards, or loans you never applied for
- Debt-collection contact regarding a balance you have no knowledge of
- Credit score drops unexpectedly with no change in your own accounts
- Hard credit enquiries on your report from lenders you never contacted
- Welcome letters or account-activation emails from institutions you did not approach
- Bills or statements arriving at your address for accounts in your name you did not open
- Lender rejects your application citing 'too many recent credit enquiries'
- Utility or mobile provider contacts you about an unpaid account you did not set up
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations, [Your Name] — your [Credit Card] application has been approved. Your card will be delivered to [Address You Do Not Recognise].
This is [Debt Collector] contacting you about an overdue balance of [Amount] on account [Number] opened [Date]. Please call [Number] to resolve.
Your [Retailer] store card statement is now available. Minimum payment due: [Amount]. Log in at [URL].
[Mobile Provider]: your new SIM for number [Number] has been activated. If you did not request this, call [Fraud Line].
Important: your [Bank] personal loan of [Amount] has been disbursed. First repayment due [Date].
Common variations
- Store credit account fraud (retail finance opened in-store with stolen ID)
- Mobile phone contract fraud (new SIM and handset obtained using victim's identity)
- Utility account fraud (gas, electricity, or broadband set up in victim's name)
- Buy-now-pay-later fraud (BNPL accounts opened online with low verification barriers)
- Payday loan fraud (high-interest short-term loans taken in victim's name)
How to verify before you act
Check your credit report at least once a year and consider signing up for a service that sends an alert whenever a new hard enquiry is made. In the US, you can also opt into Experian's free 'new account monitoring' service. If you see a hard enquiry you do not recognise, contact the lender named on it directly to ask whether an account was opened — you do not need to wait for a default to appear. Placing a credit freeze is the single most effective prevention measure and can be lifted temporarily when you need to apply for credit yourself.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Anyone whose data was exposed in a breach
- People who rarely check their credit report
- Young adults with limited credit history
- People who have recently moved address
What to do immediately
- Place a credit freeze with all major credit bureaux immediately to block further new-account openings
- Pull your full credit report from each bureau and list every unrecognised account and enquiry
- File an identity theft report at the FTC (IdentityTheft.gov in US) or Action Fraud (UK)
- Obtain a police report number for use in formal lender disputes
- Write to each fraudulent account's lender enclosing your identity theft report and police reference
- Notify your bank and existing card providers to heighten fraud monitoring on genuine accounts
- Set up real-time credit alerts so you are notified the moment a new enquiry or account appears
How to prevent it
- Place a credit freeze — it is free and blocks new-account applications without your PIN
- Review your credit report from all three bureaux at least annually
- Shred all documents containing personal identifiers before disposal
- Use a PO Box or locked mailbox to prevent postal interception
- Opt in to credit-alert services for hard-enquiry notifications
- Never share your national identifier unless it is legally required
- Consider an identity-protection service that monitors dark-web markets for your data
Evidence to preserve
- Credit reports showing fraudulent accounts and hard enquiries
- Any correspondence from lenders or debt collectors relating to unknown accounts
- Identity theft report confirmation and police case number
- Your own address history and proof of residence to demonstrate you were elsewhere
- Records of all dispute letters sent and lender acknowledgements received
- Screenshots of any credit-monitoring alerts triggered
- Written timeline of when you discovered each fraudulent account
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Am I responsible for paying back fraudulent accounts opened in my name?
No. Once you file an identity theft report and formally dispute the accounts with each lender, you are not legally obligated to pay. Document every dispute step carefully in case the lender pursues the debt further.
How long does it take to clear fraudulent accounts from my credit file?
Typically between three and twelve months if you act promptly. Complex cases can take longer. Maintaining a paper trail — every letter, every response, every phone call log — significantly speeds the process.