Back

Practical guide

Theft or loss of identity documents, identity theft, bank fraud... This guide walks you through every step to protect yourself and assert your rights.

Protect your documents before sharing them

Most cases of identity theft don't start with a stolen wallet.

They start when you send a copy of your ID to someone — for a rental, a job, an online process — and that copy ends up in the wrong hands.

Who can ask for your ID?

Many people and organizations ask for a copy of your ID. Not all requests are legitimate. Here are the most common cases:

🏠

Property rental

Agencies, landlords, shared housing platforms

💼

Recruitment / employment

Employers, temp agencies, freelance platforms

🏦

Banks and insurance

Account opening, contract subscription

📱

Telecom operators

Mobile subscription, internet box

🚗

Vehicle rental

Car rental agencies, car sharing

🏥

Health and insurance

Health insurance enrollment, healthcare organizations

📦

Online purchases

Identity verification for major purchases

🎓

Educational institutions

Enrollment, scholarships, internships

Always ask yourself: does this person or organization really need my ID? Would a bank account number or proof of address be enough? When in doubt, ask why and on what legal basis.

The 6 golden rules for sharing an identity document safely

1

Always send a PDF, never a photo

A photo (JPG, PNG) of your ID can be easily reused, printed, or modified. A PDF file with a watermark (see step 2) is much harder to exploit.

💡 How to convert a photo to PDF?

  • On iPhone: open the photo → Share → Print → pinch to zoom on the preview → Share the PDF
  • On Android: open the photo → Share → Print → Save as PDF
  • On PC/Mac: open in software (Word, Paint, Preview) → File → Export as PDF
2

Add a watermark on every copy you send

This is THE most effective and simplest protection.

A watermark is a semi-transparent text placed over the image of your document. It makes the copy unusable for any purpose other than the intended one.

What should the watermark contain?

Provided to [Recipient name]
On [Today's date]
For [Specific purpose]

Example: "Provided to Durand Real Estate Agency — On 04/11/2026 — For apartment rental application 12 Lilas Street"

How to add a watermark?

  • Acrobat Reader (free): Open the PDF → Tools → Edit PDF → Add text → Type the watermark → Adjust transparency and size → Place it diagonally on the document
  • On smartphone: use a free app like iLovePDF (iOS/Android) → open the PDF → Watermark → custom text → save
  • Preview (Mac): Open the PDF → Tools → Annotate → Text → type the watermark → adjust the color to light gray semi-transparent
3

Verify the recipient before sending

Before sending your ID to anyone, verify:

  • Rental: does the agency really exist? Is the property real? Visit before sending your documents
  • Employment: is the company registered? Check on societe.com or infogreffe.fr
  • Online: is the site using HTTPS? Does it have legal notices? Verifiable reviews?

🚨 Warning signs: urgent request "send your documents within 24 hours", request via WhatsApp/Telegram, no official website, listing too good to be true (very low rent, very high salary).

4

Hide unnecessary information

Does the recipient need all the information on your document? Often, only your name and photo are needed.

  • You can hide (blur or cover) the ID card number if only the name is required
  • For a rental application: your ID card AND proof of address are enough. Refuse to provide more
  • For an employer: they have no right to ask for your bank details or social security number before actual hiring
5

Keep a record of your submissions

Systematically note to whom, when, and why you sent a copy of your ID. A simple table or a note on your phone is enough:

DateRecipientReasonDocument sent
04/11/2026Durand AgencyRental applicationID card (PDF + watermark)
03/15/2026Bank XAccount openingID card + proof of address

This record will be invaluable if a problem occurs to identify where the leak came from.

6

What to do if you already sent without protection?

Don't panic, but act quickly:

  • Ask the recipient to delete the unprotected copy and resend a watermarked version
  • Monitor your FICOBA statement regularly (see the "Bank fraud" section below)
  • Sign up for free on ProtectMyId to be alerted if your document is used fraudulently
  • If you have serious concerns, file a formal statement at the police station

Businesses: educate your clients on secure document sharing

You collect identity documents as part of your business (real estate, banking, insurance, recruitment, healthcare)? You play a key role in protecting your clients.

1

Encourage watermarking

Include in your forms: "We recommend adding a watermark with our name and the date on any ID copy submitted." Your clients will trust you more.

2

Accept only PDF files

Refuse JPG/PNG photos of ID documents in your collection process. Require PDF format. It's more secure and easier to archive.

3

Delete copies after use

In compliance with GDPR, do not keep copies of ID documents beyond the time necessary for processing. Inform your clients of the retention period.

4

Verify with ProtectMyId

Integrate the ProtectMyId API into your onboarding processes to verify in real time whether a presented document has been reported stolen. It's the missing piece in your KYC.

Learn more about business plans →

Theft or loss of identity documents

Here are the essential steps to follow immediately after the loss or theft of your identity documents.

1

File a police report or declare the loss

Go to the police station or gendarmerie to file a report (in case of theft) or a loss declaration. You will receive a receipt essential for subsequent procedures.

You can save time by filing an online pre-complaint on the Ministry of the Interior website. An appointment will be scheduled for you to officially sign the complaint.

2

Get your documents replaced

DocumentProcedureCostTimeline
National ID cardPre-application on France Titres (ANTS) + equipped city hall€25 (fiscal stamp)2 to 6 weeks
PassportPre-application on France Titres (ANTS) + city hall€86 + €25 = €1112 to 4 weeks
Driver's licenseOnline application on France Titres (ANTS)€2515-20 business days
Health cardReport to CPAM via ameli.fr or call 3646Free2 to 3 weeks

For the health card, download a rights certificate from ameli.fr in the meantime.

3

Report the theft on ProtectMyId

Sign up for free on ProtectMyId and report your stolen document. After validation by our team, the document will be listed in our database, accessible by partner organizations (banks, insurers, government agencies).


Identity theft

Identity theft is a criminal offense under article 226-4-1 of the Penal Code: up to 1 year imprisonment and €15,000 fine.

If the fraudster is a spouse or partner: 2 years and €30,000.

1

File a complaint for identity theft

File a complaint at the police station or by registered letter with acknowledgment of receipt to the Public Prosecutor of the competent Judicial Court. Prepare all evidence: creditor letters, suspicious bank statements, formal demands received, etc.

2

Identify the extent of the fraud

Request your FICOBA statement (Bank Accounts Registry) on impots.gouv.fr > "Other services" > "Access the FICOBA file". This statement lists all bank accounts opened in your name, including those opened fraudulently.

3

Exercise your GDPR rights with the companies involved

Send access requests (Article 15 GDPR) to each company involved (banks, telecom operators, online retailers...). They have 1 month to respond. Request:

  • Copies of contracts signed in your name
  • Identity documents provided during sign-up
  • Proof of identity verification performed
  • Transaction/operation history

These documents are essential evidence for your criminal and civil case. If no response within 1 month, file a complaint with the CNIL.

4

Request deletion of fraudulent data (Article 17 GDPR)

Once the fraud is documented, request the erasure of all data related to fraudulently opened accounts/contracts. Since the processing of your data is unlawful (you never consented), erasure is a legal right.

5

Contact France Victimes

Call 116 006 (free, 7 days a week, 9am-8pm). France Victimes supports you through all procedures: filing complaints, challenging blacklisting, free legal aid. A network of 130 local associations can also meet with you in person.


Bank fraud related to identity theft

Banking ban, loans taken out without your knowledge, fraudulently opened accounts... Here's how to restore your situation.

The FCC (Central Check Registry) and FICP (Credit Incident Registry) are managed by the Banque de France. If a fraudster used your identity, you may be wrongly listed.

Removal procedure:

  1. Contact the Banque de France to check your status (online or at a branch)
  2. Identify the reporting institution
  3. Send a registered letter with acknowledgment of receipt to that institution with a copy of your police report, requesting removal
  4. The institution must notify the Banque de France, which proceeds with removal within 4 business days
  5. If refused, take the matter to the Judicial Court

Favorable case law (CA Versailles, May 27, 2025): once identity theft is proven, the institution has an obligation of complete erasure. It cannot impose any "special mention" not provided for by law.


Your GDPR rights as a victim

Right of access (Art. 15)

Obtain a copy of all data held in your name by any organization. Free of charge. Response within 1 month.

Right to erasure (Art. 17)

Demand the deletion of data collected through fraudulent contracts/accounts. Since the processing is unlawful, erasure is a legal right.

CNIL complaint

If an organization does not respond within 1 month, file an online complaint on cnil.fr. 37% of CNIL complaints concern the right to erasure.

Letter template

The CNIL provides official letter templates. Always include: a copy of your ID, your criminal complaint reference, and a precise description of your request.


Useful contacts and resources

Protect your identity now

Sign up for free and report your stolen documents to prevent their fraudulent use.