diff options
Diffstat (limited to 'content')
| -rw-r--r-- | content/blog/identity-theft-germany.md | 92 |
1 files changed, 92 insertions, 0 deletions
diff --git a/content/blog/identity-theft-germany.md b/content/blog/identity-theft-germany.md new file mode 100644 index 0000000..b1de048 --- /dev/null +++ b/content/blog/identity-theft-germany.md @@ -0,0 +1,92 @@ +--- +title: How to deal with identity theft in Germany +date: 2026-02-25 +draft: true +--- +[Jump to checklist](#what-do-i-do-next) + +# Berlin flat hunt + +One of the perks of living in such a big vibrant metropolitan city, is the privilege of searching for flats +in such a competitive market, and getting the chance to deal with all of the challenges that come with +competing with a bot fueled application process on user-friendly website like +"immobilienscout24" or "kleinanzeigen".[^1] + +Once you get a response, each application starts to diverge, depending on the "Hausverwaltung", +the real estate agent, or the "Vermieter:innen" who sometimes just want to collect your info, +or scam you (with overpriced "fitted" kitchen). + +Pass that hurdle, and enjoy having to submit all your personal information to someone you barely trust, +and in most cases, just an employee who don't care that much about ensuring safe handling of this documents +(which are sometimes asked physically), before making a cup of tea and enjoying a cozy evening reading +German rental contracts with details about "charging you for the use of their electronic door system" +and the need to "paint the outside of doors and windows that open to the inside", the dream!!! + +There is even a video game about [Berlin flat quest][1] that is almost as fun as the real thing! + +Long story short, you made a mistake at some point and sent one or more un-redacted documents to someone +who had a fake ad., or to someone who later offered you an outrageous contract clauses +(like paying the caution in cash to their bank account[^2]). + +Now your ID or a bank slip is in the wrong hands, both of which have information about your address, birth-date, +and name, this is what happened to me, or at least how I think my identity was stolen. + +These information can be used for a multitude of actions, including but not limited to: + +- Get pre-paid phone number. +- Get a loan! + +# How do I recognize it? + +In the following days/weeks, I started noticing emails from services that I never signed up for coming to my mailbox, +which is not in itself a sign, it could be from many other sources (or leaked website information). + +One of the emails that alerted me, was an email from an e-SIM provider asking for some information +regarding the e-SIM complaint that I created for their support team. + +This didn't make any sense to me, especially if my data was leaked (name, address), why would they use my email +to apply for an e-SIM that they might need to confirm or ask support about? + +I'm quite confident that my email hasn't been compromised, partially thanks to having +<abbr title="Multi Factor Authentication">MFA</abbr> enabled on it, and reviewing my logins and active sessions. + +Few days later, I received a `POSTIDENT` request from a bank, asking to do this identification in order to +continue processing my credit request. + +# What do I do next? + +Here is the list of the things, I have done so far: + +- [ ] Don't scan or click any `POSTIDENT`/`WEB ID` requests. +- [ ] File a police report about suspected internet fraudulent activity on one of the following: + - Berlin police portal: https://www.internetwache-polizei-berlin.de + - Germany police portal (redirects to local portal): https://portal.onlinewache.polizei.de/de/ +- [ ] Keep a copy of the filed police report and the **procedure number**, you **WILL** need it later. +- [ ] Notify the issuing bank of "identity fraud" or "Identitätsbetrug". + - If possible go to the issuing bank and report this with evidence (ideally the police **procedure number** ).[^3] +- [ ] Notify your bank about fraudulent activities done in your name.[^4] +- [ ] Request a (free) [SCHUFA data copy][4] here: https://www.meineschufa.de/dakobs/ +- [ ] ["Register identity fraud"][5] on the SCHUFA platform (can do it over email). +- Update the police report with any information that you get over time. + +--- +[^1]: There is much safer path, which is applying to the state-owned companies, +but this takes significantly longer to process. + +[^2]: That's illegal, don't do that, the caution needs to be put in at least a joint bank account, and +most of the time, a special bank account that can't be used independently by either parties. + +[^3]: Shout out to "Targo Bank", and their **outstanding** employee who helped me navigate this situation and +informed me that they have informed the SCHUFA about this, cancelled the credit request, +and will update the police incident report (which I provided them with a reference to), +all of this while using my basic level German skills. + +[^4]: Some online banks like "DKB" don't provide you with any way to talk to them +directly, but rather provide a "AI Assistant" that only speaks German, and can +"assist" you with your requests (and redirect you to pages that are not linked on the banking app/website), +because, if I'm in stress about losing my life-savings, or someone is taking a loan in my name, +_the first thing I think about is how helpful would it be if I can talk to an AI Chat Bot right now!!!_ + +[1]: https://www.settle-in-berlin.com/playberlinflatquest/ +[4]: https://www.meineschufa.de/service/datenkopie +[5]: https://www.schufa.de/en/contact-us/registration-identity-fraud/ |