Someone opens a line of credit in your name. Someone else creates a social media profile using your photo and name to scam your contacts. Another person requests a duplicate ID or tries to complete a banking transaction pretending to be you. Digital identity theft isn't a single event — it's a broad fraud category sharing one common element: someone else uses your personal information to act as if they were you, usually with financial or reputational consequences for the real victim.
Where the Stolen Information Usually Comes From
The attacker rarely "guesses" your information. They typically obtain it from some combination of: previous data breaches where your information got exposed, phishing that tricked you directly into handing it over, public information you shared on social media without thinking about how it could combine with other data, or even physical documents (ID, bank statements) discarded without proper destruction.
The Most Common Forms in the Colombian Context
Impersonation for financial transactions, using stolen personal data to request loans, cards, or open accounts in the victim's name — who only finds out when they start receiving collection notices for debts they never took on.
Cloning social media profiles, using the real victim's photos and public data to create a fake profile that contacts their real friends and family with urgent money requests, leveraging already-established trust.
Impersonation in government or service processes, using stolen or falsified identity documents to conduct transactions in the victim's name.
Using stolen identity to commit other digital crimes, where the real victim can end up unjustly linked to activities they never carried out, creating additional legal complications.
Early Warning Signs
Notifications from services you don't recognize, like confirmation emails for accounts you never opened, or password reset alerts for services you don't use.
Unexpected credit inquiries, visible in your credit history, that don't correspond to any application you made.
Contacts reporting strange messages supposedly sent by you, asking for money or information — a classic sign of a cloned social media profile.
Bills or charges for services you never signed up for, which can be the first visible clue that someone opened an account or credit line in your name.
What to Do If You Suspect You're a Victim
How to Reduce the Risk Before It Happens
Limit the personal information you share publicly on social media, especially combinations of data (birth date, city, full name) that together make impersonation easier. Use multi-factor authentication on important accounts, periodically check your credit history for unrecognized activity, and properly destroy physical documents with sensitive information before discarding them.
Frequently asked questions
How do I know if someone opened an account or credit line in my name?
Periodically checking your credit history through credit bureaus is the most reliable way to catch this early, before the debt escalates or significantly affects your credit profile.
Am I liable for debts someone incurred by impersonating me?
You shouldn't be once fraud is demonstrated, but the dispute and credit-history cleanup process can take time — which is why acting fast and documenting everything from the start matters so much.
What do I do if I see a fake social media profile using my photo?
Report it directly to the platform with evidence of your real identity, and let your close contacts know the fake profile exists so they don't fall for fraudulent requests.
Are digital identity theft and traditional identity theft the same thing legally?
They share the goal of impersonating the victim, but the digital component triggers specific criminal categories under Law 1273 related to the misuse of computer systems, in addition to traditional fraud statutes.
Let's talk
Digital identity theft is best prevented with good digital hygiene practices and best responded to with fast, documented action. If your business handles customer or employee identity information and wants to assess how to protect it, at T.I. RESCUE we offer cybersecurity consulting focused on protecting sensitive data. Need help assessing how your business protects its users' digital identity? Let's talk.
Contact usYou may also like
Comments (0)
Be the first to comment.