Identity theft default removal: The Cyber.gov.au and IDCARE workflow that actually works

Discovering defaults on your credit file that you never created is alarming, especially when they stem from someone stealing your identity and opening accounts in your name.

Identity theft defaults appear when fraudsters use your personal information to apply for credit, rack up debts, and disappear. The defaults land on your credit file because the accounts were opened using your details, even though you never applied for or used the credit.

While the experience is stressful, there is a clear official pathway to report the fraud, gather evidence, and challenge the fraudulent listings. The key is following the correct sequence: IDCARE first, then Cyber.gov.au, then credit disputes backed by your case reference numbers.

Got a default on your credit file? Lodge it with Default Gone right here, or call us on (02) 5502 7025. $399 flat per consumer per default. We do not guarantee removal — outcomes depend on the facts of each case — but we will prepare and lodge the dispute properly.

Short answer: The identity theft default removal process

When defaults appear due to identity theft, follow this sequence:

1. Report to IDCARE immediately (1800 595 160 or idcare.org) for identity theft support and case reference
2. Report to Cyber.gov.au using their online form for official fraud documentation
3. Gather supporting evidence including police reports, statutory declarations, and account verification attempts
4. Dispute the defaults with each credit provider and credit reporting body using your case references
5. Follow up within 30 days if the disputes are not resolved satisfactorily

The documentation from IDCARE and Cyber.gov.au creates an official fraud trail that strengthens your disputes significantly.

What identity theft defaults look like

Fraudulent defaults often share certain patterns that distinguish them from legitimate defaults you may have forgotten about:

Common identity theft default scenarios

Phone contracts in wrong locations: Mobile phone defaults showing services activated in cities where you have never lived, often using slightly different name variations or old addresses from data breaches.

Multiple defaults in short timeframes: Several defaults appearing within weeks of each other across different credit providers, suggesting coordinated fraudulent applications rather than genuine financial difficulty.

Utility accounts at unknown addresses: Electricity, gas, or internet defaults for properties you have never rented or owned, particularly in different states or rural areas.

Credit cards with zero usage history: Defaults for credit cards where the account shows minimal transaction history before defaulting, indicating the fraudster obtained the card but abandoned it quickly.

Red flags in the listing details

Address mismatches: The default shows an address you have never lived at, or uses an old address combined with your current personal details.

Name variations: Slight spelling differences in your name, or the use of maiden names, nicknames, or middle names you do not typically use for financial applications.

Contact attempts at wrong numbers: The credit provider’s records show they attempted to contact you on phone numbers you have never owned or used.

Income details that don’t match: Employment information or income figures that do not align with your actual employment history during the relevant period.

Step 1: Report to IDCARE immediately

IDCARE is Australia’s national identity and cyber support service, funded by the federal government to help victims of identity theft and cybercrime.

Why start with IDCARE

IDCARE provides free specialist support and creates an official case file that documents your identity theft claim. This case reference becomes crucial evidence when disputing fraudulent defaults.

The service is confidential, and IDCARE counsellors understand the emotional impact of identity theft while providing practical steps to limit further damage.

How to contact IDCARE

Phone: 1800 595 160 (Monday to Friday, 8am to 5pm AEST)

Online: Complete the “Get Help” form at idcare.org

Email: Not recommended for initial contact due to security concerns

When you contact IDCARE, they will assign you a case number and provide a personalised response plan based on your specific circumstances.

Information IDCARE will need

Personal details verification: Full name, date of birth, current address, and contact details to verify your identity and create your case file.

Fraud timeline: When you first noticed the identity theft, how you discovered it, and any suspicious activity leading up to the defaults appearing.

Affected accounts and services: List of all defaults, accounts, or services you believe were fraudulently created, including account numbers where known.

Supporting documentation: Any emails, letters, or account statements related to the fraudulent accounts, plus your legitimate identification documents.

What IDCARE will provide

Case reference number: Your unique IDCARE case number that you will use in all subsequent fraud reports and disputes.

Response plan: Step-by-step actions tailored to your situation, including which authorities to contact and in what order.

Template letters: Draft correspondence for contacting credit providers, credit reporting bodies, and other affected organisations.

Ongoing support: Follow-up contact to help you implement the response plan and address any complications that arise.

Step 2: Report to Cyber.gov.au

Cyber.gov.au is the Australian government’s official cybersecurity website, operated by the Australian Cyber Security Centre (ACSC). Their fraud reporting creates additional official documentation for your case.

Why Cyber.gov.au matters

While IDCARE provides support and case management, Cyber.gov.au creates a formal government record of the cybercrime. This adds weight to your fraud claims when dealing with credit providers who may be sceptical of self-reported identity theft.

The report also feeds into national cybercrime intelligence, helping authorities track fraud patterns and protect other Australians.

How to report on Cyber.gov.au

Visit cyber.gov.au and select “Report cybercrime” from the main menu. Choose “Identity theft” from the list of cybercrime types and complete the online form.

The form asks for details about:

• How your identity was stolen
• What personal information was compromised
• Financial losses or fraudulent accounts created
• Any suspects or suspicious contacts you received

Cyber.gov.au reference number

After submitting your report, Cyber.gov.au will provide a reference number. Keep this number safe—you will need it for credit disputes and any police reports.

The reference number demonstrates to credit providers that you have made an official government report about the fraud, strengthening your credibility.

Step 3: Gather supporting evidence

While IDCARE and Cyber.gov.au provide the official framework, additional evidence strengthens your fraud case significantly.

Police report (where appropriate)

Some identity theft cases warrant a police report, particularly if you know how your information was stolen or if significant financial losses are involved.

Contact your local police station or use the police assistance line in your state. Explain that you are a victim of identity fraud and need to make a report for credit dispute purposes.

The police report number adds another layer of official documentation to your fraud claim.

Statutory declaration

A statutory declaration is a legal document where you formally declare that the defaults were created without your knowledge or consent.

You can make a statutory declaration at any post office, police station, or before a justice of the peace. The declaration should include:

• Your full name and address
• Details of the fraudulent defaults
• Statement that you did not apply for or authorise the accounts
• Your IDCARE and Cyber.gov.au reference numbers
• Date and your signature before the witness

Account verification attempts

Try to contact the credit providers who listed the defaults to request account details. In many cases, you will find that:

• The application was made using personal details you would never use
• Contact details on file do not match your actual information
• The application process bypassed normal verification steps
• Employment or income details are incorrect

Document these conversations and keep records of any emails or letters exchanged.

Credit report timeline

Obtain copies of your credit reports from all three credit reporting bodies (Equifax, Experian, and illion) to establish a timeline of when the fraudulent accounts first appeared.

Look for patterns such as multiple applications on the same day, or applications that coincide with known data breaches affecting companies where you have accounts.

Step 4: Dispute the fraudulent defaults

With your IDCARE case number, Cyber.gov.au reference, and supporting evidence collected, you can now dispute the fraudulent defaults through official channels.

Disputing with credit providers

Contact each credit provider who listed a fraudulent default. Most have specific fraud departments that handle identity theft disputes differently from standard default disputes.

Required information for the dispute:

• Your IDCARE case number
• Cyber.gov.au report reference
• Police report number (if applicable)
• Statutory declaration
• Explanation of how you discovered the fraud
• Request for account application details to verify fraud

Credit provider response timeframe: Credit providers must investigate fraud disputes within 30 days and respond in writing with their findings.

Disputing with credit reporting bodies

Simultaneously dispute the fraudulent defaults directly with Equifax, Experian, and illion. Credit reporting bodies have obligations to investigate fraud claims and remove listings that cannot be verified.

Online dispute forms: Each credit reporting body has online dispute forms where you can upload your IDCARE and Cyber.gov.au documentation as evidence.

Fraud-specific pathways: Request that your dispute be treated as identity fraud rather than a standard default dispute, as fraud disputes receive priority handling.

Follow-up requirements

If credit providers or credit reporting bodies do not resolve the fraud dispute within 30 days, or if they refuse to remove obviously fraudulent defaults, you may need to escalate through external review pathways.

Keep detailed records of all correspondence and deadlines, as these become important if formal complaints are necessary.

What to check on your credit file

When reviewing your credit file for identity theft, check these specific areas:

• Enquiry section: Look for credit applications you did not make, particularly multiple enquiries on the same day

• Default listings: Verify that all defaults relate to accounts you actually opened and used

• Address history: Check for addresses where you have never lived, especially if they appear recently

• Personal details: Confirm your name spelling, date of birth, and contact details are correct

• Account history: Review the list of current and closed accounts for any you do not recognise

• Identification verification: Look for identity verification attempts you did not initiate

• Commercial credit enquiries: Check for business credit enquiries if you do not operate a business

• Court judgements: Verify any judgements relate to debts you actually incurred

Common identity theft scenarios

Data breach exploitation

Criminals obtain personal information from company data breaches and use it to apply for credit months or years later. The delay makes it harder to connect the fraud to the original breach.

Warning signs: Multiple applications using old addresses or employment details that match information stolen in known breaches.

Mail theft and redirection

Fraudsters intercept mail containing bank statements, credit offers, or utility bills, then use the information to apply for credit using your details but their contact information.

Warning signs: Defaults for accounts where the contact details do not match your actual phone number or email address.

Synthetic identity fraud

Criminals combine your real personal details with fictitious information to create a new identity, then build a credit history before defaulting on multiple accounts simultaneously.

Warning signs: Defaults appearing for addresses you have lived at combined with employment or income information that is incorrect.

Family member fraud

Someone close to you uses your personal information to obtain credit, often assuming you will not report family members to authorities.

Warning signs: Defaults for accounts opened using your correct details but with subtle changes that only someone with access to your documents could make.

How Default Gone helps

Default Gone helps Australians challenge unfair, incorrect or unlawfully listed defaults. We collect the relevant information, prepare the dispute, lodge it with the credit provider and/or credit reporting body, track the response and explain the outcome in plain English.

The standard Default Gone service is $399 per consumer, per default (limited launch pricing — normally $399). There are no stage fees, no success fees and no surprise invoices. The fee covers the work performed, not a sought outcome.

For identity theft cases, we work with your IDCARE case number and Cyber.gov.au reference to strengthen the fraud dispute. Our automated compliance review system tracks the 30-day response deadlines and escalates unresolved matters where appropriate.

When professional help makes sense

While you can dispute identity theft defaults yourself, professional assistance may be worthwhile when:

• Multiple defaults across different credit providers require coordinated disputes with consistent documentation

• Complex fraud scenarios involve synthetic identity fraud or sophisticated criminal operations

• Credit providers reject initial fraud disputes despite clear evidence of identity theft

• Time constraints prevent you from managing multiple disputes simultaneously

• Credit reporting body delays require escalation through external review pathways

Prevention strategies going forward

After resolving identity theft defaults, implement protective measures to prevent future fraud:

Credit monitoring: Set up free credit monitoring with all three credit reporting bodies to receive alerts about new applications or changes to your file.

Identity protection: Consider placing a ban period on your credit file, which requires additional verification steps before new accounts can be opened.

Document security: Store identification documents securely and shred financial paperwork before disposal.

Online security: Use strong, unique passwords for financial accounts and enable two-factor authentication where available.

Regular credit checks: Review your free credit scan every three months to catch any suspicious activity early.

Disclaimer

Default Gone is not a law firm and does not provide legal or financial advice. We do not undertaking that a default or judgement will be removed. Outcomes depend on the facts, documents and response from the credit provider, credit reporting body or relevant legal pathway.

Next steps

If you have discovered defaults that may be the result of identity theft, start with the official reporting process immediately. The sooner you report to IDCARE and Cyber.gov.au, the stronger your fraud case becomes.

For defaults that are clearly fraudulent but credit providers are refusing to remove them, professional dispute assistance can help navigate the complex requirements and deadlines.

Don’t let fraudulent defaults continue to damage your credit file when official pathways exist to challenge and remove them. Start your default check today to identify which defaults may be open to dispute.

Frequently asked questions

How long does the identity theft default removal process take?

The complete process typically takes 60-90 days. IDCARE responds within 1-2 business days, Cyber.gov.au provides immediate reference numbers, and credit disputes must be resolved within 30 days. However, complex cases involving multiple defaults or uncooperative credit providers may take longer.

Do I need to pay for IDCARE or Cyber.gov.au services?

No, both IDCARE and Cyber.gov.au provide free services funded by the Australian government. Be wary of companies claiming to offer “official” identity theft reporting for a fee—the legitimate government services are always free.

What if the credit provider says they verified my identity properly?

Request copies of the identification documents used during the application process. In genuine identity theft cases, fraudsters often use incomplete or inconsistent information that would not pass proper verification. Your IDCARE and Cyber.gov.au case numbers demonstrate official fraud reports that credit providers must investigate thoroughly.

Can identity theft defaults be removed even if I never reported them initially?

Yes, there is no time limit for reporting identity theft or disputing fraudulent defaults. However, earlier reporting strengthens your case as it demonstrates you acted promptly upon discovering the fraud. Even defaults that are years old can be disputed if you have evidence they were fraudulent.

What happens if different credit reporting bodies give different responses to the same fraud dispute?

Each credit reporting body investigates independently, so responses may vary. If one removes the fraudulent default but others refuse, use the successful removal as evidence in follow-up disputes. The fact that one major credit reporting body accepted your fraud claim strengthens your case with the others.

Should I close my existing bank accounts after identity theft?

Not necessarily. Focus first on disputing the fraudulent defaults and monitoring for new unauthorised activity. IDCARE will advise whether account closures are necessary based on how your identity was stolen and which information was compromised. Unnecessary account closures can complicate your financial life without providing security benefits.