Someone is using my identity — what now?

Accounts, subscriptions or debts appearing in your name: act in this order — stop new damage, document everything, then unwind each fraudulent contract with the fraud file you built.

1. File the police report firstEverything downstream — banks, registers, telecoms — will ask for it. Report identity fraud specifically, list every known misuse, keep the case number and a copy.
2. Alert your bank(s) and check creditFlag fraud on your accounts, review recent transactions and any credit taken in your name. Ask the national credit register for your file (free access right) and have fraud alerts or blocks placed where the register offers them.
3. Replace the compromised documentIf your ID/passport data is out there, report it and request reissue — the old number lands on national and international invalid-document lists, which kills its usefulness for new sign-ups.
4. Dispute each fraudulent contract in writingTo each company: “This contract was concluded fraudulently in my name — police report attached. I demand cancellation, zeroing of claims, and deletion of my data from your records and any debt-collection or credit files you fed.” They must clean up the ripple, not just their own ledger (Art. 16-17, 19).
5. Chase the data trailArt. 15 requests to the companies where accounts were opened: what data was used, where did it come from? That answer often reveals the breach or broker behind your case — and gives your DPA complaint teeth.
6. Keep a running dossierOne folder: police report, correspondence, deadlines, screenshots. Identity fraud resurfaces months later via debt collectors — your dossier turns each recurrence into a five-minute reply instead of a new crisis.

Verified against the sources above on 18 July 2026. Information, not legal advice.