Having your passport details fall into the hands of a scammer can be worrying. Your passport contains valuable personal information that could potentially be misused for identity fraud, fake applications, or other scams. However, having your passport details does not automatically mean that your identity has been stolen. Taking the right steps quickly can reduce the risk.
1. Stay Calm and Assess What Was Shared
First, determine exactly what information the scammer has. This could include your passport number, full name, date of birth, nationality, passport expiry date, or even a photograph or scan of your passport.
The risk may be higher if the scammer has a complete passport copy combined with other personal information, such as your address, phone number, email address, bank details, or National Insurance number.
Do not provide the scammer with any additional information, even if they claim they need it to “verify” your identity.
2. Report Your Passport as Lost or Stolen if Necessary
If your physical passport has been lost or stolen, you should report it to the relevant UK authorities and arrange for a replacement.
If you still have your physical passport but a scammer has obtained a photograph or copy of it, the situation is different. You should still seek official guidance rather than automatically assuming that the passport itself needs to be cancelled.
For UK passport-related guidance, use the official GOV.UK passport service.
3. Report the Scam
If you are in England, Wales or Northern Ireland, you can report fraud and cybercrime through Action Fraud.
Give as much information as possible, including:
- How the scammer contacted you
- What passport information you provided
- The scammer’s phone number, email address or social media account
- Screenshots of messages
- Any payment information you shared
- Copies of suspicious documents or communications
If you are in Scotland, fraud should generally be reported to Police Scotland.
4. Watch Your Bank and Financial Accounts
If you also gave the scammer your bank details, card information, online banking credentials or security codes, contact your bank immediately using the number on your bank card or an official banking app.
Ask your bank what protective measures are appropriate. If you notice an unfamiliar transaction, report it immediately.
Importantly, do not use a phone number or link supplied by the scammer to contact your bank.
5. Consider Identity Theft Protection
Passport information can potentially be used as part of an identity fraud attempt. Keep an eye out for unexpected:
- Credit applications
- Loans or finance agreements
- Mobile phone contracts
- Government correspondence
- Bills or accounts you did not open
- Changes to your credit report
- Emails about services you never requested
You can check your credit file with the major UK credit reference agencies, such as Experian, Equifax and TransUnion.
If you discover an account or application that you did not make, contact the organisation involved and explain that you believe your identity has been used fraudulently.
6. Secure Your Email and Other Accounts
If the scammer also knows your email address, make sure your email account has a strong, unique password and enable two-factor authentication where available.
Also be cautious about follow-up messages. Scammers sometimes use stolen passport information to make subsequent phishing attempts appear more convincing.
For example, a scammer might contact you pretending to be from a bank, government department, passport office or police service and claim that you need to pay a fee to “protect” your identity.
This can be a second-stage scam.
7. Be Careful With Calls Claiming to Be From the Government
A genuine-looking passport or identity scam can sometimes be followed by phone calls demanding money.
Do not assume a caller is legitimate simply because they know your name, date of birth or passport number. Scammers can use previously obtained information to sound convincing.
If someone asks you to transfer money, reveal passwords, share one-time security codes, install remote-access software or move money into a “safe account,” stop and independently verify the request.
8. Keep Evidence of the Scam
Save screenshots, emails, text messages, phone numbers, payment receipts and other evidence.
Don’t delete suspicious communications until you have reported the incident and determined that you no longer need the information.
Keeping a record can make it easier for banks, law enforcement agencies and other organisations to investigate what happened.
9. What If You Only Shared Your Passport Number?
If you only gave the scammer your passport number and basic identifying information, don’t panic.
The appropriate response depends on what else the scammer knows and what they are trying to do. Continue monitoring your accounts and be particularly suspicious of unexpected communications asking for more information.
If you provided a full passport scan or photograph, especially alongside financial or other identity information, consider reporting the incident and obtaining official advice promptly.
10. Don’t Pay Someone Who Promises to “Recover” Your Identity
After being scammed, you may receive messages from people claiming they can recover your money, cancel your passport, remove your information from the internet, or “hack” the scammer.
Some of these are recovery scams.
A legitimate organisation should not require you to send cryptocurrency, gift cards or large upfront payments simply to “recover” your identity or money.
Final Thoughts
If a scammer has your passport details in the UK, act quickly but don’t panic. Determine exactly what information was exposed, report the scam through the appropriate official channels, contact your bank if financial information was involved, secure your online accounts and monitor your credit and correspondence for suspicious activity.
