What to do after sending an identity document or ID information to an unintended recipient.
Short answer
Stop further sharing, save evidence of what was sent and to whom, ask the recipient to delete it where appropriate, and watch for suspicious identity or financial activity.
Do not send additional identity information to correct the mistake.
Save the message, recipient details, date, and exactly what information was shared.
If appropriate, ask the recipient to delete the document and confirm that it has not been shared.
Monitor important accounts and be cautious of follow-up messages that use the exposed information to appear legitimate.
Check it now
A practical check for what to do when personal information has been exposed online.
Open the checkSomething already happened?
If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.
If you see activity you don't recognise, secure the affected account directly, change the password, enable MFA, review recent activity and linked devices, and contact the provider if necessary.
Keep exploring