Identity Theft and a Default You Don’t Recognise: The First 24 Hours

Finding a default on your credit file that you don’t recognise is alarming. Your first thought might be that it’s an error, but it could also be a sign that someone has used your identity to obtain credit.

Identity theft can result in defaults appearing on your credit file for debts you never agreed to take on. These fraudulent defaults can damage your credit score and block future finance applications just as much as legitimate ones.

The good news is that defaults resulting from identity theft can often be challenged successfully if you act quickly and follow the right steps. But time matters — the sooner you respond, the better your chances of resolving the situation efficiently.

This guide covers what to do in the first 24 hours after discovering an unknown default that could be linked to identity theft.

Is it identity theft or an honest mistake?

Not every default you don’t recognise is the result of identity theft. There are several innocent explanations to consider first:

• Account in a different name variation: The default might be listed under a maiden name, nickname, or slight spelling variation of your name
• Joint account you forgot about: Old joint accounts, guarantees, or authorised user arrangements can sometimes result in unexpected defaults
• Corporate or business debt: If you’ve been a director or guarantor for a business, personal guarantees can appear on your personal credit file
• Genuine error: Credit providers do sometimes make mistakes with account numbers, names, or addresses

However, certain red flags suggest identity theft rather than an administrative error:

• The creditor is completely unknown to you
• The address associated with the account isn’t yours and has never been yours
• The account was opened recently while you were monitoring your credit
• There are multiple unknown accounts from different providers
• The debt amount or account type doesn’t match anything you would have applied for

If multiple unknown accounts appear suddenly, this strongly suggests systematic identity fraud rather than a simple error.

Hour 1: Stop and document everything

Your immediate reaction might be to start calling everyone, but the first hour should be spent gathering information and creating a record.

Get your complete credit report

If you’ve only seen a summary or partial report, obtain your full credit report from all three major credit reporting bodies:

• Equifax
• Experian
• Illion (formerly Dun & Bradstreet)

Each may contain different information, and identity thieves sometimes target specific credit providers that report to only one agency.

Got a default on your credit file? Lodge it with Default Gone right here, or call us on (02) 5502 7025. $399 flat per consumer per default. We do not guarantee removal — outcomes depend on the facts of each case — but we will prepare and lodge the dispute properly.

Document what you find

Create a detailed record including:

• Date you discovered the unknown default
• Credit provider’s name and any reference numbers
• Account opening date (if shown)
• Default amount and date listed
• Address associated with the account
• Screenshots or photos of your credit report
• Any other suspicious accounts or enquiries

Check for other suspicious activity

Look beyond just defaults. Identity thieves often leave other traces:

• Recent credit enquiries you didn’t authorise
• New accounts you didn’t open
• Changes to your address or contact details
• Unusual contact from debt collectors or credit providers

Hours 2-6: Contact the credit provider directly

Once you have documentation, contact the credit provider that listed the default. Don’t wait for business hours if they have 24-hour phone lines.

What to ask for

When you call, ask for:

• Details of when and how the account was opened
• What identification was provided when the account was established
• The address used on the application
• Whether any identity verification was performed
• Copies of the original application and any supporting documents
• Details of any payment history before the default

What to say

Be clear that you believe you’re a victim of identity theft:

“I’ve found a default on my credit file for an account I didn’t open. I believe I may be a victim of identity theft. I need to understand how this account was opened and dispute this listing.”

Document the conversation

Record:

• Date and time of your call
• Name of the person you spoke to
• Reference number for your inquiry
• What information they provided
• What next steps they outlined
• Any case or dispute reference numbers they gave you

Some credit providers have specific identity theft procedures and may immediately flag the account for investigation.

Hours 6-12: Report the potential fraud

Police report

Consider making a police report, especially if:

• You have strong evidence of identity theft
• Multiple fraudulent accounts are involved
• The amounts are substantial

Many credit providers and credit reporting bodies will ask for a police report number when disputing identity theft cases. Even if police don’t actively investigate, having a report number strengthens your case.

IDCARE

IDCARE is Australia’s national identity and cyber support service. They provide free support to identity theft victims and can guide you through the recovery process. Contact them on 1800 595 160 or through their website.

Credit reporting bodies

Contact the credit reporting bodies to:

• Report the suspected identity theft
• Request a fraud alert on your file
• Ask about their identity theft procedures
• Request that they investigate the listing

A fraud alert makes it harder for identity thieves to open new accounts in your name, though it may also make it slightly more difficult for you to obtain credit legitimately.

Hours 12-24: Protect yourself going forward

Consider a credit ban

If you’re confident that identity theft has occurred, consider requesting a credit ban. This prevents any new credit applications in your name for 21 days (extendable). While more restrictive than a fraud alert, it provides stronger protection if you’re actively being targeted.

Secure your other accounts

Change passwords and enable two-factor authentication on:

• Bank accounts
• Email accounts
• Government services (myGov, ATO)
• Any accounts that contain personal information

Monitor for ongoing activity

Set up monitoring for:

• New credit enquiries
• Changes to your credit file
• Unusual bank account activity
• New accounts opened in your name

Preserve evidence

Don’t destroy anything, even if it looks unrelated. Keep:

• All correspondence from the credit provider
• Screenshots of your credit reports
• Notes from phone conversations
• Any physical mail sent to wrong addresses
• Records of your dispute actions

This documentation will be crucial if you need to pursue formal disputes or legal action.

What to check for ongoing protection

Once you’ve taken immediate action, establish ongoing monitoring to catch any further identity theft attempts:

• Monthly credit report checks: Download your free annual reports and consider paid monitoring services for more frequent updates
• Bank statement reviews: Look for unfamiliar transactions, especially small “test” amounts that fraudsters use to verify stolen details
• Mail monitoring: Watch for credit cards, statements, or collection notices for accounts you didn’t open
• Government account security: Regularly log into myGov and ATO accounts to check for unauthorised access or changes
• Phone and utility bills: Identity thieves sometimes redirect services or add new accounts
• Address monitoring: Check that your address details haven’t been changed with banks, government agencies, or credit providers

When the default might be legitimate (but forgotten)

Sometimes what looks like identity theft turns out to be a legitimate but forgotten debt. This can happen with:

• Old mobile phone contracts that continued after you thought they were cancelled
• Gym memberships with continuing obligations despite believing you had cancelled
• Utility accounts that remained in your name after moving house
• Buy now, pay later accounts that you signed up for online and forgot about
• Joint accounts where your partner or family member defaulted

If investigation reveals the account was legitimately yours, you can still challenge the default if the proper process wasn’t followed before listing it. Many defaults are removed not because the debt was invalid, but because the credit provider didn’t follow the required notification procedures.

How Default Gone helps

Default Gone helps Australians challenge unfair, incorrect or unlawfully listed defaults. We collect the relevant information, prepare the dispute, lodge it with the credit provider and/or credit reporting body, track the response and explain the outcome in plain English.

The standard Default Gone service is $399 per consumer, per default (limited launch pricing — normally $399). There are no stage fees, no success fees and no surprise invoices. The fee covers the work performed, not a sought outcome.

For identity theft cases, our dispute process focuses on whether the debt was legitimately yours and whether proper procedures were followed. If you discover the account was opened fraudulently, we can help prepare a comprehensive dispute that addresses both the identity theft and any procedural failures.

Identity theft vs procedural defaults

It’s worth understanding that there are two separate grounds for disputing an identity theft related default:

1. The debt is not yours: If someone used your identity to obtain credit, you’re not liable for the debt regardless of whether it was validly listed

1. Procedural failures: Even if the identity thief followed proper default listing procedures with the fake account, credit providers have additional obligations when identity theft is suspected

Both angles may be worth exploring, and successful challenges often combine arguments about both the legitimacy of the debt and the adequacy of the listing process.

Recovery timeframes

Identity theft cases can take longer to resolve than simple default disputes because they often involve:

• Police reports and investigations
• Detailed identity verification processes
• Coordination between multiple agencies
• Additional evidence gathering
• Potential legal proceedings against the identity thief

While credit providers must respond to disputes within 30 days, complex identity theft cases may require multiple rounds of investigation. However, many credit providers will place a temporary hold on the listing while investigation occurs.

Prevention for the future

Once you’ve dealt with the immediate identity theft, consider long-term prevention strategies:

• Regular credit monitoring: Check your credit file at least annually, preferably more frequently
• Secure document disposal: Shred bank statements, credit offers, and any documents containing personal information
• Online security: Use strong, unique passwords and be cautious about what personal information you share online
• Mail security: Use a locked mailbox and redirect mail when moving
• Phone security: Be wary of callers requesting personal information, even if they claim to be from banks or government agencies

When to consider legal action

Most identity theft related defaults can be resolved through the standard dispute process. However, you may want to seek legal advice if:

• The credit provider refuses to remove an obviously fraudulent default
• You’ve suffered significant financial losses due to the identity theft
• The identity theft was extensive and involved multiple fraudulent accounts
• You can identify the person who stole your identity
• The credit provider failed to follow proper identity verification procedures

Legal action is usually a last resort, but may be necessary in cases involving substantial losses or clear negligence by credit providers.

Disclaimer

Default Gone is not a law firm and does not provide legal or financial advice. We do not undertaking that a default or judgement will be removed. Outcomes depend on the facts, documents and response from the credit provider, credit reporting body or relevant legal pathway.

Frequently asked questions

How quickly should I act if I suspect identity theft?

Act immediately. The first 24 hours are crucial for documenting the fraud, contacting credit providers, and protecting yourself from further damage. Quick action often leads to better outcomes and can prevent additional fraudulent accounts being opened. Contact the credit provider, obtain full credit reports from all agencies, and consider placing fraud alerts or credit bans to prevent further misuse of your identity.

Can a default be removed if it was the result of identity theft?

Yes, defaults resulting from identity theft can often be successfully disputed and removed. If you can demonstrate that you didn’t open the account or authorise the debt, the default should be removed from your credit file. However, this requires proper documentation and evidence that the account was fraudulent. The process may take time as credit providers need to investigate the identity theft claim thoroughly.

Do I need a police report to dispute an identity theft default?

While not always legally required, a police report significantly strengthens your identity theft dispute. Many credit providers and credit reporting bodies expect a police report for identity theft cases. Even if police don’t actively investigate, having a report number demonstrates that you’ve taken the matter seriously and provides official documentation of the alleged fraud.

What if I can’t prove the identity theft but still don’t recognise the default?

Even without definitive proof of identity theft, you can still dispute the default on other grounds. The credit provider must be able to demonstrate that you legitimately owe the debt and that proper procedures were followed when listing the default. If they cannot provide adequate documentation or followed incorrect processes, the default may be removed regardless of whether identity theft occurred.

How long does it take to resolve an identity theft default dispute?

Identity theft disputes typically take longer than standard default disputes due to additional investigation requirements. While credit providers must respond within 30 days, complex cases may require multiple investigation rounds. Most identity theft cases are resolved within 60-90 days, though extensive fraud involving multiple accounts may take longer. Some providers place temporary holds on disputed listings while investigating.

Will disputing an identity theft default affect my credit score immediately?

Disputing a default doesn’t immediately remove it from your credit file or improve your credit score. The default remains listed during the investigation period. However, if the dispute is successful and the default is removed, your credit score should improve relatively quickly. Some credit providers may place a temporary notation indicating the listing is under dispute, which may be viewed more favourably by some lenders.

Can identity thieves use my details to get defaults listed even if I monitor my credit?

Yes, sophisticated identity thieves can sometimes obtain credit and default even under monitored credit files. They may use variations of your details, target specific lenders, or use stolen documents that pass initial verification checks. This is why regular monitoring should include checking all three credit reporting bodies and reviewing any unfamiliar enquiries or accounts, not just defaults.

What should I do if the credit provider claims I opened the account but I’m certain I didn’t?

Request detailed documentation including the original application, identification provided, signature verification, and any supporting documents used to open the account. Compare these against your actual documents and signatures. If discrepancies exist or if documents were clearly forged, this strengthens your identity theft claim. Consider obtaining expert handwriting analysis if signature fraud is suspected and the amounts involved justify the cost.

If you want a starting point, our free credit scan captures the basics in five minutes.