If your identity is stolen in France, first preserve evidence that your information has been used, then secure your accounts and notify the relevant organisations. If a loan, account or transaction was created without your consent, gather the available evidence before filing a police report and assessing the extent of the fraud.

Identity theft does not always begin with an emptied bank account. It may surface through a demand to repay an unfamiliar loan, a bank account you never opened or an unusual login. Your response should depend on what you have actually discovered. This guide distinguishes a potential risk from fraud already detected.

You have lost an identity document: what should you do first?

Losing an ID card or another personal document does not by itself prove that someone is using it. However, it warrants vigilance: Service Public notes that a lost or stolen document can precede identity fraud.

Distinguish the facts: is the document simply missing, or have you already received an unusual request in your name? Record what you know about the disappearance and keep related communications.

The official guidance discussed here does not detail the specific process for reporting or replacing a merely lost or stolen document. Check the administrative requirements for your document rather than assuming an identity-theft complaint is automatically justified.

You are asked to repay an unknown loan: what order should you follow?

A demand concerning a loan you never took out is a warning sign identified by Ma Sécurité. Your priority is to preserve that demand before making numerous calls or offering explanations.

• Preserve: the letter or message, related emails and texts, contact details and website addresses mentioned, and useful screenshots.
• Secure: online accounts by changing passwords and enabling two-factor authentication.
• Notify: your bank and the organisation making the demand, clearly disputing that you took out the loan.
• File a police report: submit the evidence of unauthorised use of your identity.
• Check further: review your accounts, other possible loans and received messages.

Ma Sécurité also mentions checking Banque de France records for possible loan applications. This supplements other checks but is not conclusive proof on its own; the exact access procedure and scope are not specified here.

How can you show that you did not consent?

Two questions must be separated: whether a loan exists in your name and whether you authorised it. A repayment demand may support the first but does not settle the second. Keep your objections and the replies received; do not assume one document will resolve everything.

The cited official sources do not provide an exact list of documents to request from the lender to establish lack of consent. Avoid promising a single decisive proof: describe the facts precisely, gather available records and clearly document your objection.

A bank account was opened in your name: how can you find it?

An unfamiliar account may also indicate identity theft. Save any unusual bank correspondence before taking action. Then alert the bank concerned and your own bank so they can assess necessary security or blocking measures.

An official way to look for other accounts opened in France is Ficoba, the register of bank accounts. Ma Sécurité says it can be accessed through the personal area of the French tax website under “Other services”. It helps identify accounts but does not establish who opened them.

In practice, keep two columns: “accounts I recognise” and “accounts I do not recognise”. For each discrepancy, record the institution, discovery date and messages received.

Once you have gathered the evidence, file a police report. Keep monitoring statements and correspondence: an unknown account may not be the only warning sign.

An administrative procedure appears to have been carried out for you: what should you check?

This is more complex when a letter or administrative change suggests someone acted in your name. The general advice still applies: save the notice, messages, screenshots and relevant website address, then notify the agency that appears to have handled the procedure.

Explain precisely what you recognise and dispute. If access to your personal account seems compromised, change its password and enable two-factor authentication where available. If misuse is confirmed, gather evidence to file a police report.

The information presented here does not describe one procedure for every administrative action. Giving the same form or deadline for every agency would therefore be misleading. The immediate aim is to document the discrepancy and alert the service actually involved.

You sent your documents to a fake listing: should you wait for fraud?

Service Public identifies fake rental and job listings as situations that may precede identity theft. Sending a document copy does not prove it has already been misused, but it calls for extra vigilance.

Keep the listing, exchanged messages, website details and documents sent. If an unknown loan, suspicious account or unusual login later appears, these records help reconstruct events. Where misuse is confirmed, follow the recommended order: evidence, account security, relevant organisations, police report and further checks.

For future requests, do not send copies automatically. Check who is asking and why. The cited recommendations do not specify a particular method for protecting copies.

How can you organise evidence without getting overwhelmed?

The challenge is not just reacting quickly but explaining events clearly. A short timeline can be more useful than a disorderly collection of screenshots: for each event, note what you discovered, where you saw it and which organisation you contacted.

The guiding principle: evidence records an observed fact; a dispute explains why you do not recognise a transaction. Both help make the situation understandable, but they serve different purposes.

Keep original emails and messages, relevant bank statements and page addresses. Do not delete a suspicious notification before saving it. Continue checking accounts, loans and correspondence for other possible activity.

If a fake account or fraudulent content appears online, Ma Sécurité also recommends reporting it through the portal for illegal online content.

Frequently asked questions

What is the first thing to do after identity theft?

First preserve screenshots, emails, text messages, statements and website addresses linked to the fraud. Then secure access, contact the organisations involved and file a police report with the evidence.

How can I check whether an account was opened without my consent?

Ficoba lists accounts opened in France. Access is available through the personal area of impots.gouv.fr under “Other services”; report any unknown account to the relevant institution.

How can I prove a loan was taken out without my consent?

Keep the repayment demand and correspondence disputing the loan, then present them when filing your police report. The cited guidance does not specify the exact documents needed to establish lack of consent.

How can I reduce the risks when sending an identity document?

Avoid automatically sending copies and verify the recipient and reason, especially for rental or job listings. Fake listings are a recognised risk, but the cited guidance does not describe a specific technique for securing copies.