We manage so many aspects of our life online. Have you ever stopped to question how complacent you might be with your identity?


According to Scamwatch, in 2022, Australian lost at least $10 million to identity theft.1 As this type of scam is becoming more common, we want to help you be equipped to spot them. We’ve outlined some key things to be aware of and some tips to help you stay safe online. 

How strong are your passwords?

Remembering multiple passwords is a constant source of friction in online life. However, weak and commonly used passwords like ‘password123’ are the easiest way into your identity.

Once a fraudster has one password, they’ll test it on everything – from social media to online banking. It’s not enough to change one character of a compromised password, as fraudsters will test this.

  • Stop using the same password across multiple platforms.
  • Use a password manager to make it easier – then you just need one strong password to access your encrypted password vault.

How much are you sharing on social media?

So much of the seemingly innocuous information you share on social media could be a golden ticket to your identity – it’s important tobe careful with what you post.

Look into the information you share as public on social media profile page such as your full name, date of birth, or email address, and ask yourself whether it’s necessary. Limit public access to this information or remove it.

To reset your passwords, you usually have to answer security questions. The problem is, you’re probably leaving tell-tale signs across your social media channels. Examples include where you went to school, the names of your children, your mother’s maiden name and even your date of birth.

  • Keep your privacy settings on social media set high.
  • Ensure that your passwords are unique – not just regularly changing passwords, where one or two characters alters.
  • Don’t accept friend requests from strangers.

Has any of your mail gone missing?

If you haven’t received a regular statement by post lately, there’s a good chance you could be a victim of ‘boxers’ - people who raid mailboxes for valuable credit card and bank account details.

With a few documents they could have enough information to take out credit in your name. It’s important to check your credit file at least once a year, because it’s your responsibility to tell your bank if there is any unusual activity.

  • Switch to online statements. Notifications are usually sent by email, but documents are typically not linked from email.
  • Check your credit file every year.

Do you ever use public Wi-Fi?

If you’re travelling, it’s tempting to log in to the free café or hotel Wi-Fi. But if you then do any online banking or other transactions, your data could be at risk. 

  • Save online financial transactions for secure Wi-Fi.
  • Avoid logging into email address or social accounts on publicly available Wi-Fi.
  • Consider using a VPN, or using mobile data.

In every case, your best defence is to have unique password and to use two-factor authentication where possible. Be alert, look for clues – and if anything looks suspicious, let your bank know.

Talk to a specialist

Fill out our form so we can connect you with the right banking specialist.

Business banking

1800 620 673

Help and support

Visit our online Help Centre.

Additional information

1 https://www.scamwatch.gov.au/scam-statistics?scamid=30&date=2022

The information on this page has been prepared by Macquarie Bank Limited ABN 46 008 583 542 (AFSL and Australian Credit Licence 237502) and does not take into account your objectives, financial situation or needs. Before making any financial investment decision or a decision about whether to acquire a financial, credit or lending product, a person should obtain and review the terms and conditions relating to that product and also seek independent financial, legal and taxation advice. All applications are subject to Macquarie’s standard credit approval criteria. This information is intended for recipients in Australia only.