Identity Fraud first draft

1 files changed, 92 insertions, 0 deletions

diff --git a/content/blog/identity-theft-germany.md b/content/blog/identity-theft-germany.md
new file mode 100644
index 0000000..b1de048
--- /dev/null
+++ b/content/blog/identity-theft-germany.md
@@ -0,0 +1,92 @@
+---
+title: How to deal with identity theft in Germany
+date: 2026-02-25
+draft: true
+---
+[Jump to checklist](#what-do-i-do-next)
+
+# Berlin flat hunt
+
+One of the perks of living in such a big vibrant metropolitan city, is the privilege of searching for flats
+in such a competitive market, and getting the chance to deal with all of the challenges that come with
+competing with a bot fueled application process on user-friendly website like
+"immobilienscout24" or "kleinanzeigen".[^1]
+
+Once you get a response, each application starts to diverge, depending on the "Hausverwaltung",
+the real estate agent, or the "Vermieter:innen" who sometimes just want to collect your info,
+or scam you (with overpriced "fitted" kitchen).
+
+Pass that hurdle, and enjoy having to submit all your personal information to someone you barely trust,
+and in most cases, just an employee who don't care that much about ensuring safe handling of this documents
+(which are sometimes asked physically), before making a cup of tea and enjoying a cozy evening reading
+German rental contracts with details about "charging you for the use of their electronic door system"
+and the need to "paint the outside of doors and windows that open to the inside", the dream!!!
+
+There is even a video game about [Berlin flat quest][1] that is almost as fun as the real thing!
+
+Long story short, you made a mistake at some point and sent one or more un-redacted documents to someone
+who had a fake ad., or to someone who later offered you an outrageous contract clauses
+(like paying the caution in cash to their bank account[^2]).
+
+Now your ID or a bank slip is in the wrong hands, both of which have information about your address, birth-date,
+and name, this is what happened to me, or at least how I think my identity was stolen.
+
+These information can be used for a multitude of actions, including but not limited to:
+
+- Get pre-paid phone number.
+- Get a loan!
+
+# How do I recognize it?
+
+In the following days/weeks, I started noticing emails from services that I never signed up for coming to my mailbox,
+which is not in itself a sign, it could be from many other sources (or leaked website information).
+
+One of the emails that alerted me, was an email from an e-SIM provider asking for some information
+regarding the e-SIM complaint that I created for their support team.
+
+This didn't make any sense to me, especially if my data was leaked (name, address), why would they use my email
+to apply for an e-SIM that they might need to confirm or ask support about?
+
+I'm quite confident that my email hasn't been compromised, partially thanks to having
+<abbr title="Multi Factor Authentication">MFA</abbr> enabled on it, and reviewing my logins and active sessions.
+
+Few days later, I received a `POSTIDENT` request from a bank, asking to do this identification in order to
+continue processing my credit request.
+
+# What do I do next?
+
+Here is the list of the things, I have done so far:
+
+- [ ] Don't scan or click any `POSTIDENT`/`WEB ID` requests.
+- [ ] File a police report about suspected internet fraudulent activity on one of the following:
+  - Berlin police portal: https://www.internetwache-polizei-berlin.de
+  - Germany police portal (redirects to local portal): https://portal.onlinewache.polizei.de/de/
+- [ ] Keep a copy of the filed police report and the **procedure number**, you **WILL** need it later.
+- [ ] Notify the issuing bank of "identity fraud" or "Identitätsbetrug".
+  - If possible go to the issuing bank and report this with evidence (ideally the police **procedure number** ).[^3]
+- [ ] Notify your bank about fraudulent activities done in your name.[^4]
+- [ ] Request a (free) [SCHUFA data copy][4] here: https://www.meineschufa.de/dakobs/
+- [ ] ["Register identity fraud"][5] on the SCHUFA platform (can do it over email).
+- Update the police report with any information that you get over time.
+
+---
+[^1]: There is much safer path, which is applying to the state-owned companies,
+but this takes significantly longer to process.
+
+[^2]: That's illegal, don't do that, the caution needs to be put in at least a joint bank account, and
+most of the time, a special bank account that can't be used independently by either parties.
+
+[^3]: Shout out to "Targo Bank", and their **outstanding** employee who helped me navigate this situation and
+informed me that they have informed the SCHUFA about this, cancelled the credit request,
+and will update the police incident report (which I provided them with a reference to),
+all of this while using my basic level German skills.
+
+[^4]: Some online banks like "DKB" don't provide you with any way to talk to them
+directly, but rather provide a "AI Assistant" that only speaks German, and can
+"assist" you with your requests (and redirect you to pages that are not linked on the banking app/website),
+because, if I'm in stress about losing my life-savings, or someone is taking a loan in my name,
+_the first thing I think about is how helpful would it be if I can talk to an AI Chat Bot right now!!!_
+
+[1]: https://www.settle-in-berlin.com/playberlinflatquest/
+[4]: https://www.meineschufa.de/service/datenkopie
+[5]: https://www.schufa.de/en/contact-us/registration-identity-fraud/