What's the difference with identity impersonation?

Impersonation is a method: someone poses as you or your bank for the length of a call. Identity theft is a harm that settles in: a third party acts in your name with organizations, over time, and the effects are discovered afterward. The first is defeated in the moment; the second is repaired, slowly.

Do I have to pay the amount demanded while the situation gets sorted out?

That's precisely the point to have settled by a professional rather than a website: the answer depends on the nature of the debt and where the procedure stands. What's certain is that you need to dispute it in writing without delay and keep proof of the dispute. Don't leave it unanswered.

How did they get my documents?

Usually by accumulation rather than a single theft: a document sent to a fake listing, a breach at an organization, a proof of identity given to someone who didn't need it. That's what makes the starting point hard to pin down, and why the useful question is rather where your documents are circulating today.

Identity theft

In plain terms

Someone acts in your name over time: a loan opened, a subscription taken out, a filing made. You usually find out through a reminder letter about something you never asked for.

Definition

Identity theft is a third party's sustained use of a real person's identity to carry out acts in their name: taking out a loan or subscription, opening an account, completing an administrative procedure. It differs from identity impersonation in the social-engineering sense, which means posing as someone for the length of a single exchange: here, the borrowing isn't the method but the harm, and its effects are often discovered long afterward.

How it works

The raw material builds up by accumulation: an ID document photographed and sent "for verification," data from a breach, a proof of address, information left public. Taken separately these details look harmless; put together, they're enough to fill out a file. The use then happens remotely, with organizations that don't know you and verify on paper. This explains the most painful feature of this harm: the lag. The file is put together and accepted without anything reaching you, and you only learn it exists at the first unpaid bill, through a reminder, an unexplained credit refusal, or a letter from an administration. At that point, the burden of proving it wasn't you falls on you in practice, which is why keeping evidence from day one is decisive.

Warning signs

Reminder or collection letter for a contract you never took out
Credit or rental refusal with no explanation tied to your real situation
Letter from an administration about a procedure you never started
Bill or contract in your name sent to an address that isn't yours
Bank account or payment method appearing in your name without your involvement
Summons or notice about facts you have nothing to do with

How to verify

Don't use the contact details shown on the letter you received: look up the organization yourself and call it to confirm the file exists and to get its date, address, and the documents supplied. These details are what a dispute rests on. Ask your bank to check what's open in your name.

What to do

Only send an ID document once you understand why it's needed, and never to someone who contacted you first. When sending one really is necessary, a copy marked by hand with the recipient, the purpose, and the date limits its reuse.

If it already happened

File a police report without waiting: it's the document every organization will ask for, and not having it blocks everything else. Dispute in writing with each organization involved, keeping proof of postage. Notify your bank. Check whether you're listed in a payment-incident file and start the removal process if so. Legal support is more useful here than elsewhere, since the process runs over several months and with several parties: the relevant authority can direct you to assistance schemes. Keep everything — letters, exchanges, dates — from day one.

Frequently asked questions

What's the difference with identity impersonation?: Impersonation is a method: someone poses as you or your bank for the length of a call. Identity theft is a harm that settles in: a third party acts in your name with organizations, over time, and the effects are discovered afterward. The first is defeated in the moment; the second is repaired, slowly.
Do I have to pay the amount demanded while the situation gets sorted out?: That's precisely the point to have settled by a professional rather than a website: the answer depends on the nature of the debt and where the procedure stands. What's certain is that you need to dispute it in writing without delay and keep proof of the dispute. Don't leave it unanswered.
How did they get my documents?: Usually by accumulation rather than a single theft: a document sent to a fake listing, a breach at an organization, a proof of identity given to someone who didn't need it. That's what makes the starting point hard to pin down, and why the useful question is rather where your documents are circulating today.

Official sources

Cybermalveillance.gouv.fr — Assistance and reporting (French government cybersecurity assistance service)

This article is part of the Data and digital identity family. Last updated: 2026-09-03.