1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
---
title: How to deal with identity theft in Germany
date: 2026-02-25
draft: true
---
[Jump to checklist](#what-do-i-do-next)
# Berlin flat hunt
One of the perks of living in such a big vibrant metropolitan city, is the privilege of searching for flats
in such a competitive market, and getting the chance to deal with all of the challenges that come with
competing with a bot fueled application process on user-friendly website like
"immobilienscout24" or "kleinanzeigen".[^1]
Once you get a response, each application starts to diverge, depending on the "Hausverwaltung",
the real estate agent, or the "Vermieter:innen" who sometimes just want to collect your info,
or scam you (with overpriced "fitted" kitchen).
Pass that hurdle, and enjoy having to submit all your personal information to someone you barely trust,
and in most cases, just an employee who doesn't care that much about ensuring safe handling of these documents
(which are sometimes asked physically), before making a cup of tea and enjoying a cozy evening reading
German rental contracts with details about "charging you for the use of their electronic door system"
and the need to "paint the outside of doors and windows that open to the inside", the dream!!!
There is even a video game about [Berlin flat quest][1] that is almost as fun as the real thing!
Long story short, you made a mistake at some point and sent one or more un-redacted documents to someone
who had a fake ad., or to someone who later offered outrageous contract clauses
(like paying the caution in cash to their bank account[^2]).
Now your ID or a bank slip is in the wrong hands, both of which have information about your address, birth-date,
and name, this is what happened to me, or at least how I think my identity was stolen.
This information can be used for a multitude of actions, including but not limited to:
- Get pre-paid phone number.
- Get a loan!
# How do I recognize it?
In the following days/weeks, I started noticing emails from services that I never signed up for coming to my mailbox,
which is not in itself a sign, it could be from many other sources (or leaked website information).
One of the emails that alerted me, was an email from an e-SIM provider asking for some information
regarding the e-SIM complaint that I created for their support team.
This didn't make any sense to me, especially if my data was leaked (name, address), why would they use my email
to apply for an e-SIM that they might need to confirm or ask support about?
I'm quite confident that my email hasn't been compromised, partially thanks to having
<abbr title="Multi Factor Authentication">MFA</abbr> enabled on it, and reviewing my logins and active sessions.
A few days later, I received a `POSTIDENT` request from a bank, asking to do this identification in order to
continue processing my credit request.
So, yes, my identity was stolen, and someone or something was actively using my data to take a loan in my name.
# What do I do next?
Here is the list of things I have done so far:
- [ ] Don't scan (QR Codes) or click any `POSTIDENT`/`WEB ID` links.
- [ ] File a police report about suspected internet fraudulent activity on one of the following:
- Berlin police portal: https://www.internetwache-polizei-berlin.de
- Germany police portal (redirects to local portal): https://portal.onlinewache.polizei.de/de/
- [ ] Keep a copy of the filed police report and the **procedure number**, you **WILL** need it later.
- [ ] Notify the issuing bank of "identity fraud" or "Identitätsbetrug".
- If possible go to the issuing bank and report this with evidence (ideally the police **procedure number** ).[^3]
- [ ] Notify your bank about fraudulent activities done in your name.[^4]
- [ ] Request a (free) [SCHUFA data copy][4] here: https://www.meineschufa.de/dakobs/
- [ ] ["Register identity fraud"][5] on the SCHUFA platform (can do it over email).
- Update the police report with any information that you get over time.
Hopefully this saves someone the panic of figuring this out on their own.<br>
Stay safe!✌️
---
[^1]: There is a much safer path, which is applying to the state-owned companies,
but this takes significantly longer to process.
[^2]: That's illegal, don't do that, the caution needs to be put in at least a joint bank account, and
most of the time, a special bank account that can't be used independently by either parties.
[^3]: Shout out to "Targo Bank", and their **outstanding** employee who helped me navigate this situation and
informed me that they have informed the SCHUFA about this, cancelled the credit request,
and will update the police incident report (which I provided them with a reference to),
all of this while using my basic level German skills.
[^4]: Some online banks like "DKB" don't provide you with any way to talk to them
directly, but rather provide an "AI Assistant" that only speaks German, and can
"assist" you with your requests (and redirect you to pages that are not linked on the banking app/website),
because, if I'm in stress about losing my life-savings, or someone is taking a loan in my name,
_the first thing I think about is how helpful would it be if I can talk to an AI Chat Bot right now!!!_
[1]: https://www.settle-in-berlin.com/playberlinflatquest/
[4]: https://www.meineschufa.de/service/datenkopie
[5]: https://www.schufa.de/en/contact-us/registration-identity-fraud/
|
