From 74efde3d22bfa8d26a297dc57ef9f6e0f2e745bf Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Wed, 25 Feb 2026 18:36:45 +0100 Subject: Final review of the article and publishing it --- content/blog/identity-theft-germany.md | 47 +++++++++++++++++++--------------- 1 file changed, 27 insertions(+), 20 deletions(-) diff --git a/content/blog/identity-theft-germany.md b/content/blog/identity-theft-germany.md index 7d7e64a..0f0ddac 100644 --- a/content/blog/identity-theft-germany.md +++ b/content/blog/identity-theft-germany.md @@ -1,7 +1,7 @@ --- title: How to deal with identity theft in Germany date: 2026-02-25 -draft: true +draft: false --- [Jump to checklist](#what-do-i-do-next) @@ -9,8 +9,8 @@ draft: true One of the perks of living in such a big vibrant metropolitan city, is the privilege of searching for flats in such a competitive market, and getting the chance to deal with all of the challenges that come with -competing with a bot fueled application process on user-friendly website like -"immobilienscout24" or "kleinanzeigen".[^1] +competing with a bot fueled application process on websites like "immobilienscout24" or "kleinanzeigen", +which seem to be as popular with bots and scammers as they are with users and landlords.[^1] Once you get a response, each application starts to diverge, depending on the "Hausverwaltung", the real estate agent, or the "Vermieter:innen" who sometimes just want to collect your info, @@ -33,7 +33,7 @@ and name, this is what happened to me, or at least how I think my identity was s This information can be used for a multitude of actions, including but not limited to: -- Get pre-paid phone number. +- Get a pre-paid phone number. - Get a loan! # How do I recognize it? @@ -50,7 +50,7 @@ to apply for an e-SIM that they might need to confirm or ask support about? I'm quite confident that my email hasn't been compromised, partially thanks to having MFA enabled on it, and reviewing my logins and active sessions. -A few days later, I received a `POSTIDENT` request from a bank, asking to do this identification in order to +A few days later, I received a `POSTIDENT` request from a bank, asking me to complete this identification in order to continue processing my credit request. So, yes, my identity was stolen, and someone or something was actively using my data to take a loan in my name. @@ -59,13 +59,13 @@ So, yes, my identity was stolen, and someone or something was actively using my Here is the list of things I have done so far: -- [ ] Don't scan (QR Codes) or click any `POSTIDENT`/`WEB ID` links. +- [ ] Don't scan (QR Codes) or click any `POSTIDENT` or `WEB ID` links. - [ ] File a police report about suspected internet fraudulent activity on one of the following: - - Berlin police portal: [https://www.internetwache-polizei-berlin.de][2] - - Germany police portal (redirects to local portal): https://portal.onlinewache.polizei.de/de/ + - Berlin [police portal][2] + - Germany [police portal][3] (redirects to local portal) - [ ] Keep a copy of the filed police report and the **procedure number**, you **WILL** need it later. - [ ] Notify the issuing bank of "identity fraud" or "Identitätsbetrug". - - If possible go to the issuing bank and report this with evidence (ideally the police **procedure number** ).[^3] + - If possible go to the issuing bank and report this with evidence (ideally the police **procedure number**).[^3] - [ ] Notify your bank about fraudulent activities done in your name.[^4] -
English template @@ -112,18 +112,24 @@ Here is the list of things I have done so far:
-- [ ] Request a (free) [SCHUFA datenkpie nach Art.15 DS-GVO][4]. -- [ ] Register identity fraud on the [SCHUFA platform][5] via email. - - [ ] Police report "Anzeige" or "Merkblatt-Opferschutz" with the procedure number. - - [ ] Info where the police report is being processed, you can get that from the police portal (ex. [Berlin][2]). - - [ ] Scanned copy of your ID. - - [ ] Read the information sheet on identity fraud from [SCHUFA website][5]. - - [ ] Fill and sign "consent to reporting identity fraud" document from [SCHUFA website][5]. - - [ ] Send the with the attached forms to the `identitaetsschutz(at)schufa(dot)de`. +- [ ] Optional: Request a free Datenkopie nach Art.15 DS-GVO from the [SCHUFA platform][4]. +- [ ] Register identity fraud via email on [SCHUFA website][5]. + - [ ] Read the information sheet on identity fraud from the [SCHUFA website][5]. + - [ ] Fill and sign the "consent to reporting identity fraud" document from the [SCHUFA website][5]. + - The info on where the police report is being processed (available from the police portal, e.g. [Berlin][2]). + - [ ] Send the following to `identitaetsschutz(at)schufa(dot)de`: + - Signed form from the previous step. + - Police report ("Anzeige" or "Merkblatt-Opferschutz") with the procedure number. + - Scanned copy of your ID. - Update the police report with any information that you get over time. +For e-SIM related issues, detecting phone fraud is harder — it was by luck that I came across that email about the +support ticket opened on my newly issued e-SIM. I reached out to the provider, but haven't heard anything back. +At least the impact is more contained and less dangerous (unless someone manages to find a way to use it to SIM swap +my number with that e-SIM somehow, but again, I don't use SMS 2FA, so it's still mostly harmless). + Hopefully this saves someone the panic of figuring this out on their own.
-Stay safe!✌️ +Stay safe, and let me know if you have insight on e-SIM theft or have a similar checklist!✌️ --- [^1]: There is a much safer path, which is applying to the state-owned companies, @@ -137,13 +143,14 @@ informed me that they have informed the SCHUFA about this, cancelled the credit and will update the police incident report (which I provided them with a reference to), all of this while using my basic level German skills. -[^4]: Some online banks like "DKB" don't provide you with any way to talk/contact to them directly, -but rather provide an "AI Assistant" that only speaks German, and can "assist" you with your requests, +[^4]: Some online banks like "DKB" don't provide you with any way to contact them directly, +but rather provide an "AI Assistant" that only speaks German and can "assist" you with your requests, because, if I'm stressed about losing my life-savings, or someone is taking a loan in my name, _the first thing I think about is how helpful would it be if I can talk to an AI Chat Bot right now!!!_ [1]: https://www.settle-in-berlin.com/playberlinflatquest/ [2]: https://www.internetwache-polizei-berlin.de/index_start.html +[3]: https://portal.onlinewache.polizei.de/de/ [4]: https://www.meineschufa.de/service/datenkopie [5]: https://www.schufa.de/en/contact-us/registration-identity-fraud/ -- cgit v1.2.3