PROJECT: THEFT OF IDENTITY DOCUMENTS
PLEASE SHARE THIS PUBLIC DOCUMENT
THE CRIME THAT STARTS A CHAIN REACTION
The theft of an identity document is not merely the loss of a personal possession.
It can provide criminals with information and an opportunity to impersonate another person, commit fraud, gain access to financial services, obtain credit, register accounts or facilitate other criminal activities in the victim's name.
In South Africa, identity documents and identity numbers are used across numerous government, financial, employment, telecommunications and commercial processes. Although an identity document alone does not automatically give a criminal access to every service, stolen identity information can become a valuable tool when combined with other personal details, forged documentation, manipulated verification processes or information obtained through data breaches.
The consequences can extend well beyond the initial theft. Victims may discover that accounts have been opened,
applications submitted, contracts entered into or transactions conducted without their knowledge or consent.
In some cases, they only become aware of the problem when they receive unexpected payment demands,
encounter difficulties obtaining credit or are contacted about transactions they never authorised.
SSS warns that identity document theft must be treated as a potential precursor to identity fraud.
Early reporting, careful monitoring and prompt intervention are essential to limiting the damage.
1. HOW IDENTITY DOCUMENTS BECOME CRIMINAL TOOLS:
An identity document contains information that can be used to establish or imitate a person's identity. Criminals may target original documents, photographs, scanned copies, certified copies and digital images stored on phones, email accounts or cloud platforms.
Identity information may be obtained through several methods:
THEFT FROM HOMES AND VEHICLES:
Criminals may steal wallets, handbags, filing cabinets, safes and personal documents during burglaries, robberies or opportunistic theft.
LOST OR MISPLACED DOCUMENTS:
Documents that are discarded, abandoned or left unattended can be collected and exploited.
THEFT OF DIGITAL INFORMATION:
Criminals may access email accounts, mobile phones, cloud storage and online profiles containing identity documents.
EMPLOYMENT AND RECRUITMENT SCAMS:
Fraudsters may advertise fictitious vacancies and request identity documents, proof of residence, banking details and other personal information from applicants.
RENTAL AND ACCOMMODATION SCAMS:
Fake landlords and property agents may request identity documents under the pretence of conducting tenant verification.
ONLINE FRAUD:
Criminals may impersonate financial institutions, government departments, employers or service providers to persuade victims to submit copies of their identity documents.
INSIDER ACCESS AND DATA BREACHES:
Personal information held by organisations may be accessed, copied, disclosed or stolen by individuals who have legitimate access or who exploit weaknesses in information security.
Criminals do not necessarily need the original document. A clear photograph or scanned copy may provide sufficient information to support impersonation attempts, particularly when additional personal details are available.
2. WHAT CRIMINALS CAN DO WITH STOLEN IDENTITY INFORMATION:
Identity theft frequently becomes the starting point for further offences. Criminals may use stolen information themselves, sell it to other offenders or combine it with information obtained from separate victims and data sources.
The following criminal activities are of particular concern:
A. FINANCIAL FRAUD AND FRAUDULENT CREDIT APPLICATIONS:
Stolen identity information may be used to apply for credit cards, personal loans, store accounts, vehicle finance, cellphone contracts and other financial products.
Criminals may submit forged supporting documents, use manipulated photographs or exploit weaknesses in remote identity-verification procedures.
The victim may only discover the activity when receiving statements, collection notices, legal correspondence or notifications from credit providers.
B. BANK ACCOUNT FRAUD AND MONEY LAUNDERING:
Identity information can be used to support attempts to open bank accounts or manipulate existing accounts.
Criminals may also recruit or deceive individuals into opening accounts on their behalf. Such accounts can become channels for receiving, transferring or concealing proceeds from fraud and other criminal activities.
A stolen identity may therefore become part of a wider money-laundering operation.
C. SIM-CARD FRAUD AND TELECOMMUNICATIONS ABUSE:
Criminals may use stolen personal information to support fraudulent SIM-card registration, SIM-swap attempts or the manipulation of telecommunications accounts.
If a criminal succeeds in taking control of a victim's mobile number, the consequences can be particularly serious. The victim may lose access to calls, messages and security notifications, while the offender attempts to intercept one-time passwords or reset credentials for other accounts.
D. DIGITAL ACCOUNT TAKEOVER:
Identity information may be combined with stolen passwords, email addresses and other personal details to impersonate victims online.
Criminals may attempt to gain access to:
Email and social-media accounts.
Online banking and payment platforms.
Shopping accounts and digital wallets.
Government service platforms.
Business and professional accounts.
Once an email account is compromised, criminals may use it to reset passwords and gain access to additional services.
E. EMPLOYMENT AND BUSINESS FRAUD:
Criminals may use another person's identity to apply for employment, register business interests, enter into contracts or establish relationships with suppliers and customers.
This can expose victims to financial disputes, contractual obligations, tax-related complications and reputational damage.
F. FRAUDULENT DOCUMENTATION AND IMPERSONATION:
Identity information may be incorporated into forged identity documents, altered supporting documents or fabricated profiles.
These documents may then be used to impersonate victims during transactions, applications, recruitment processes or other verification procedures.
G. CRIMINAL IMPERSONATION:
In more serious circumstances, criminals may use another person's identity when interacting with law enforcement, financial institutions or other authorities.
This creates the risk of an innocent person becoming associated with activities they did not undertake.
Victims may subsequently have to establish that their identity was misused and that they were not involved in the relevant transactions or offences.
3. THE IDENTITY THEFT CHAIN REACTION:
Identity document theft rarely needs to end with the original theft. The information can be circulated, reused and combined with additional personal data, creating opportunities for multiple offences.
A typical sequence may develop as follows:
A criminal steals an identity document or obtains a digital copy.
The information is used to create a fraudulent profile or impersonate the victim.
Supporting information is obtained through social media, data breaches or other sources.
Fraudulent applications or account registrations are submitted.
Financial products, telecommunications services or other facilities are obtained.
Accounts or services are used to facilitate further fraud, financial transactions or criminal activities.
The victim receives demands, discovers unfamiliar accounts or experiences financial and administrative consequences.
Not every case follows this sequence, and some offences may occur independently. However, the same identity information can be exploited repeatedly and by different individuals. The criminal value of stolen identity information lies in its potential for repeated use.
4. RED FLAGS: HOW TO RECOGNISE THAT YOUR IDENTITY MAY HAVE BEEN COMPROMISED
Victims should not wait until financial losses occur before investigating suspicious activity.
Warning signs include:
Receiving SMS notifications or emails about applications that were never submitted.
Being contacted by creditors about accounts or outstanding balances that are unfamiliar.
Receiving bank notifications about changes to personal details or account access.
Discovering unfamiliar cellphone contracts or SIM-card registrations.
Losing mobile network connectivity unexpectedly, particularly when accompanied by suspicious banking notifications.
Receiving password-reset notifications that were never requested.
Discovering unfamiliar email addresses, telephone numbers or contact details linked to accounts.
Receiving correspondence from debt collectors or legal representatives about transactions the victim does not recognise.
Discovering unfamiliar business registrations or contractual arrangements.
Being informed that personal details have already been used in an application or transaction.
One suspicious notification does not necessarily establish identity theft. However, unexplained activity involving personal information should be investigated promptly.
5. WHAT TO DO WHEN YOUR IDENTITY DOCUMENT IS STOLEN:
The period immediately following the discovery of identity document theft is important. Delayed reporting can give criminals additional time to exploit the information.
SSS recommends the following steps:
1. REPORT THE THEFT TO THE SAPS:
Open a case and obtain the relevant CAS number. Retain copies of all supporting documentation and correspondence.
2. NOTIFY THE DEPARTMENT OF HOME AFFAIRS:
Report the stolen identity document and follow the prescribed process for obtaining a replacement.
A replacement document does not, by itself, prevent criminals from using information already copied or obtained.
3. NOTIFY YOUR FINANCIAL INSTITUTIONS:
Contact your bank and any relevant financial service providers.
Request that suspicious activity, unauthorised applications and changes to your personal information be investigated.
4. CONTACT THE CREDIT BUREAUS:
Request your credit report and examine it for unfamiliar accounts, credit enquiries, applications or other suspicious activity.
Report discrepancies and follow the relevant dispute procedures.
5. CONTACT YOUR MOBILE NETWORK PROVIDER:
If your SIM card or identity information may have been compromised, ask the service provider to investigate suspicious SIM-swap activity, unauthorised registrations and changes to your account.
6. SECURE YOUR DIGITAL ACCOUNTS:
Change compromised passwords, secure your primary email account, activate multifactor authentication and review account recovery details.
Prioritise email and financial accounts because they may provide access to other services.
7. PRESERVE EVIDENCE:
Keep suspicious SMS messages, emails, application notifications, statements, correspondence, screenshots and transaction records.
Do not delete information that may assist an investigation.
8. MONITOR YOUR IDENTITY AND FINANCIAL RECORDS:
Continue checking credit reports, bank statements, telecommunications accounts and other relevant services. Identity fraud may only become apparent weeks or months after the original theft.
Where fraud has already occurred, victims should request written confirmation that disputes have been registered and retain reference numbers for all communications.
6. PREVENTION: PROTECT YOUR IDENTITY BEFORE IT IS STOLEN:
Identity protection requires careful management of both physical documents and digital information.
SSS advises the public to:
Keep original identity documents in a secure location.
Avoid carrying unnecessary identity documents or personal records.
Never leave identity documents unattended in vehicles, workplaces or public spaces.
Avoid sending identity documents to unknown individuals or unverified organisations.
Verify the legitimacy of employers, estate agents, financial service providers and online businesses before supplying personal information.
Question requests for identity documents when the purpose of collection is unclear.
Where copies are genuinely required, watermark them with the intended recipient, purpose and date, without obscuring essential verification information.
Avoid sending identity documents through public or unsecured Wi-Fi networks.
Secure mobile phones and computers with strong passwords and available security controls.
Avoid storing unprotected photographs of identity documents in easily accessible folders.
Destroy unwanted copies and documents securely rather than discarding them intact.
Never disclose banking passwords, PINs or one-time passwords to anyone claiming to verify your identity.
A particularly important warning: A person who has a copy of your identity document is not necessarily entitled to use it for any purpose. Organisations collecting personal information must have a lawful basis for processing it and should take appropriate steps to protect it.
The Protection of Personal Information Act 4 of 2013 (POPIA) establishes requirements for the lawful processing and safeguarding of personal information. Members of the public should be cautious about organisations and individuals that collect identity documents without explaining why the information is required or how it will be protected.
7. THE LEGAL CONSEQUENCES:
Identity document theft and the subsequent misuse of personal information may involve several criminal offences, depending on the circumstances and evidence.
These may include:
Theft.
Fraud.
Forgery and uttering of forged documents.
Impersonation.
Unlawful access to computer systems or data.
Cyber-related offences.
Money laundering.
Contraventions of applicable financial and regulatory legislation.
The Prevention of Organised Crime Act 121 of 1998 may also become relevant where identity fraud forms part of organised criminal activities or money-laundering operations.
The Cybercrimes Act 19 of 2020 provides for offences involving unlawful access to data and computer systems, as well as other cyber-related criminal conduct.
Criminal liability depends on the specific conduct, the applicable legislation and the evidence available. Individuals who knowingly participate in fraudulent transactions, facilitate the misuse of identities or assist organised criminal networks may also face criminal consequences.
Identity theft should therefore not be regarded as a minor administrative matter. It can form part of a wider criminal operation involving financial losses, document fraud and organised networks.
8. THE IMPACT ON VICTIMS:
The consequences of identity theft are not limited to financial losses. Victims may spend considerable time attempting to correct inaccurate records, dispute fraudulent transactions, establish their identity and prove that they were not responsible for activities conducted in their names.
The damage may affect:
FINANCIAL STABILITY:
Fraudulent credit applications and unpaid accounts can create financial disputes and affect credit records.
EMPLOYMENT OPPORTUNITIES:
Incorrect information or fraudulent records may complicate recruitment and background-verification processes.
PERSONAL REPUTATION:
Victims may be associated with transactions, contracts or activities they know nothing about.
LEGAL AND ADMINISTRATIVE MATTERS:
Resolving fraudulent registrations, accounts and contractual arrangements may require extensive documentation and investigation.
EMOTIONAL WELL-BEING:
Victims may experience anxiety, frustration and a loss of confidence in institutions responsible for protecting personal information.
The burden often falls on the innocent victim to identify the fraudulent activity, report it, provide supporting evidence and follow up until the affected records are corrected.
9. SSS WARNING: YOUR IDENTITY IS A CRIMINAL TARGET:
Specialised Security Services (SSS) warns that identity document theft should be considered a serious security risk, particularly in an environment where financial services, telecommunications, employment processes and commercial transactions increasingly rely on digital identity verification.
Criminals do not always operate alone. Stolen identity information may be sold, exchanged or distributed between individuals involved in different forms of fraud. One criminal may obtain the document, another may create fraudulent supporting information, while a third may use the resulting identity profile to target financial institutions or unsuspecting members of the public.
This makes the detection and investigation of identity-related offences particularly important.
The public should also be cautious of individuals who request identity documents while claiming to represent SAPS, government departments, banks, legal practitioners, investigators or other professional organisations. Their identity and authority must be independently verified before any personal information is disclosed.
Anyone who suspects that their identity has been compromised should act immediately, report the matter and preserve all available evidence.
An identity document is more than proof of who a person is. It is a key component of access to financial, commercial,
legal and government services. When stolen or misused, the consequences can extend into several areas
of a victim's life and may take considerable time to resolve.
Identity document theft can be the first step in a chain of offences involving impersonation, financial fraud,
fraudulent credit applications, telecommunications abuse and organised criminal activity.
Prevention starts with protecting personal information, questioning unnecessary requests for documentation
and responding immediately when suspicious activity is detected.
SSS emphasises that identity protection is an ongoing responsibility.
A stolen document may be replaced, but the personal information contained in it can continue circulating
and being exploited long after the original theft.
Members of the public who require assistance with identity-related fraud, impersonation or associated criminal investigations are encouraged to seek appropriate assistance and report suspected criminal activity to the relevant authorities.
Mr. Mike Bolhuis and the SSS Specialist Investigators remain committed to investigating criminal activities,
assisting victims and educating the public about emerging threats.
Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.
This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.
How to Join the WhatsApp Channel:
1. Make sure you have the latest version of WhatsApp on your device.
2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:
3. Follow the prompts to join the channel.
4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)
CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.
ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.
Regards,
Mike Bolhuis
Specialist Investigators into
Serious Violent, Serious Economic Crimes & Serious Cybercrimes
PSIRA Reg. 1590364/421949
Mobile: +27 82 447 6116
E-mail: mike@mikebolhuis.co.za
Fax: 086 585 4924
Follow us on Facebook to view our projects -
EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.
STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.
POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv
SSS TASK TEAM:
Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.
Our mailing address is:
Mike Bolhuis Specialised Security Services
PO Box 15075 Lynn East
Pretoria, Gauteng 0039
South Africa
Add us to your address book
THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.
