Police Report for Identity Theft: Which Country Do You File In?

Every guide to reporting identity theft assumes you live where you were born. If you do not, the first question is one none of them answer.

You hold a passport from one country. You live and pay rent in a second. Your oldest bank account, your student loan and your parents' address are still in a third. Someone has used your details. Where do you go?

The answer is not obvious, and getting it wrong costs you days at the exact moment speed matters. This guide answers it first, then covers the report itself.

College Life is working with Bitdefender to help moved-abroad 18 to 35s keep their devices, data, money and identity safe while they live their whole lives online in a new country. In line with this mission, Bitdefender is providing College Life Club members with 50% off for young professionals and graduates, and a free-trial option for students. Become a member of College Life Club (free) to get this benefit right now.

Key Takeaways

Report in the country where the fraud happened, not the country whose passport you hold.
If money moved, report where the account is held as well. Banks want a local reference number.
Gather your evidence before you go, because most forces will not let you add to a report later.
The police report is a document you need for other people, not usually an investigation.
Do the free protective steps the same day, because a report on its own stops nothing.

Why a Police Report for Identity Theft Matters

People assume the point of reporting is that the police will catch someone. That is rarely what happens, and it is not why you do it.

So what is the report for? It is the document every other organisation asks you for before they will help.

Banks require it before writing off losses

A bank disputing a fraudulent transaction will usually ask for a crime reference number.
Without one, you are a customer making a claim. With one, you are a victim with a case file.
The number matters more than the report's contents in almost every conversation you will have.

Get the reference number in writing before you leave, and photograph it. People routinely walk out with a verbal number they cannot read back a week later. The bank will not accept an approximation of it.

Credit bureaus need it to remove entries

Fraudulent accounts and searches appear on your credit file and stay there.
Removing them almost always requires a police reference.
Left in place, they affect renting and borrowing for years.

This is the one with the longest tail. A rejected rental application two years from now traces straight back to whether you filed.

Employers and universities ask for it

If documents in your name were used, institutions want evidence you reported it.
The report shows the timeline, which protects you from any suggestion you were involved.
Bitdefender Digital Identity Protection gives you dated alerts, which is useful supporting evidence for when you first knew.

Keep the alert emails. A timestamped notification is stronger than your memory of when you noticed something wrong.

It creates a record if it happens again

Repeat fraud with the same stolen documents is common.
A prior report links the incidents and makes the second one easier to handle.
Countries with identity registers use the report to flag your documents as compromised.

File even when the loss is small. The value is mostly in the record, not in the recovery. Small first incidents are often the test run for a larger second one.

With the purpose clear, the harder question is which country's police you are filing with.

Which Country You Report In

This is the part written for people who have moved. The rule is simpler than it looks once you stop thinking about nationality.

Here is the rule: you report where the crime happened, which means where the account, the transaction or the application was.

Report where the fraud occurred, not where you are from

Your passport country is irrelevant unless the fraud happened there.
A fake tenancy application in Spain is a Spanish crime, whatever passport you hold.
The police force with jurisdiction is the one where the harm landed.

Stop looking for the embassy first. Embassies help with lost documents, not with reporting a crime committed in your country of residence. They will send you to the local police, a day later than you needed to go.

Report in your country of residence for anything local

Rental fraud, local bank accounts, phone contracts and job scams are all local crimes.
A fake listing that took your deposit is reported where the property is, which our rental agreement guide covers from the contract side.
Most forces let you file online or by appointment, in the local language.
Bring a translator or a translation app, because the report is written in that language.

Ask for a copy in writing at the time. Requesting one later is a separate process in several countries and can take weeks.

Report separately where the money is

If a home-country account was hit, that country's process also applies.
Two reports is normal and not duplication, because each bank needs its local reference.
Start both on the same day, since the second one gets harder to explain later.

Doing both feels excessive and it is still the right call. Each institution only recognises its own jurisdiction's paperwork, and neither will chase the other on your behalf.

Use the national fraud body where one exists

Some countries route fraud through a central body rather than a local station.
In the US, the FTC's identity theft service generates a recovery plan and an affidavit.
Across the EU, Europol's online reporting page lists the correct national route for each member state.

Check the national route before queuing at a police station. In several countries the station will redirect you to the online form.

Do not wait until you are back home

People delay reporting until a trip home, which can be months.
Delay weakens the claim with banks and lets the damage compound.
If you cannot file in person, ask about filing remotely, which many forces now allow.

Time is the one thing you control here. Every week of delay makes the conversation with your bank harder.

Once you know where to go, prepare properly before you go there.

How to File a Police Report for Identity Theft

The report is a form. It goes better when you arrive with everything, because most systems make amending it awkward.

The one thing to know: bring documents, dates and amounts written down, not remembered.

Write the timeline first

List every event with a date: the first alert, the transaction, the letter, the phone call.
Include when you noticed, which is often much later than when it started.
A written timeline is faster to take a statement from and harder to garble.

Do this at home, calmly, before you file. Officers taking the statement work from what you say in the room. A page of dates is easier to read from than a memory under stress.

Gather the evidence

Screenshots of transactions, emails, letters, and any account you did not open.
If the fraud started with a message you still have, Bitdefender Scamio can identify the pattern it belongs to. That is worth quoting in your statement.
Screenshots need dates visible, and originals kept rather than forwarded copies.
Export bank statements as PDFs rather than relying on the app being available later.

Keep everything in one folder from the start, named by date. Reconstructing evidence after the fact is where people lose days, and banks close disputes while you are looking.

Bring your identification

Passport or residence card, proof of address, and your local registration number if you have one.
Take copies as well as the originals, because some stations keep a copy.
If your ID itself was compromised, say so explicitly at the start.

Say it in the first minute rather than the tenth. It changes which process they open and saves repeating yourself.

Be precise about money

State amounts, currencies, dates and the institution for each transaction.
Say clearly whether the money left an account or whether credit was taken in your name.
Those are two different offences in most legal systems and get handled differently.

Precision here is what makes the report usable by your bank. Vague reports get accepted and then bounce back.

Get the reference number and a copy

Ask for the crime reference number and confirm the spelling before leaving.
Request a written or emailed copy of the report itself.
Ask what the process is to add information later, because there usually is one.

Do not leave without the number. Every subsequent step in this article depends on having it.

Filing is the middle of the process, not the end. The same day, do the parts that limit the damage.

What to Do the Same Day You File

A report documents what happened. It does not stop anything continuing. These steps do, and they are free.

Start with the accounts that can be used to reach other accounts.

Secure your email before anything else

Your inbox resets every other account, so it goes first.
Change the password and check for forwarding rules someone else added.
Sign out of other sessions only after you have confirmed a way back in.

Forwarding rules are the detail people miss. A password change does nothing if a copy of everything still leaves the building.

Change reused passwords

Any password used in more than one place is now a live risk.
Prioritise banking, government portals and anything holding documents.
Bitdefender SecurePass makes this practical, because doing it by hand is what causes people to stop halfway.

Work down from the accounts that hold money or documents. Perfect coverage is less important than getting the top ten done today, then finishing the rest over the week.

Contact the banks with your reference number

Call rather than email, and quote the crime reference.
Ask them to flag the account and note the fraud on file.
Confirm what they need in writing and by when, then send it the same day.

Deadlines here are short and are enforced. Missing a bank's window is a common way people lose a claim they would have won.

Freeze or flag your credit file

A freeze blocks new accounts being opened in your name.
Where a freeze is unavailable, ask for a fraud marker on the file instead.
Do this in both countries if your credit history exists in two.

This is the single most effective free action available. It stops the expensive outcome rather than reporting it, and in several countries it takes under ten minutes online.

Alert the organisations holding your documents

Employers, universities and landlords may hold copies of what was stolen.
Tell them so they treat later requests with suspicion.
The same care applies to routine new-hire paperwork, where document requests are normal and easy to imitate.

A short factual message is enough. You are not asking them for anything, you are removing their assumption that a request in your name is genuine.

What Happens Next

Expect the process to be slower and quieter than you want. Knowing the shape of it helps.

The realistic outcome: the report supports your recovery, and the investigation itself goes nowhere.

Most cases are not investigated individually

Volume means individual reports are recorded rather than pursued.
They feed pattern analysis, which is useful at scale.
This is not a reflection on your case or on how well you filed.

Set your expectations accordingly and focus on the recovery. The report earns its value at the bank and the credit bureau, both of which will act on it within days.

Recovery takes weeks, sometimes months

Disputes, removals and reissued documents all run on institutional timelines.
Keep a log of every call, with names and dates.
That log is what resolves the eventual disagreement about who said what.

Assume you will need to prove your own diligence. The people who recover fastest are the ones with a paper trail.

Watch for the second wave

Details that surfaced once tend to surface again.
Follow-up scams often reference the real incident to seem credible.
Recovery-service offers arriving unprompted after a fraud are frequently fraud themselves.

Treat any unexpected contact about the theft as suspicious. Legitimate organisations will be reachable through numbers you find yourself, on a website you navigated to rather than clicked through to.

Reissue documents where you can

A compromised passport or ID number may be replaceable, depending on the country.
Ask during the report whether the document can be flagged.
If you are opening an account afterwards, expect extra checks and allow time.

Some numbers cannot be changed, which is why monitoring matters after the fact. That is the case where paid alerts do work you cannot do yourself.

Close the loop in both countries

Confirm in writing that each institution has resolved its part.
Recheck your credit file in both countries after three months.
Keep the report and reference number indefinitely.

File it with your important documents. You will be asked for it again, and finding it in two years is otherwise a project.

Conclusion

If you live abroad, the first question about reporting identity theft is jurisdiction, and the answer is where the fraud happened rather than where your passport is from. If money moved in a second country, report there too. Two reports is normal.

The report itself is straightforward once you arrive prepared. Bring a written timeline, dated evidence, precise amounts and your identification, and do not leave without a crime reference number in writing.

Then do the free work the same day. Secure your email, change reused passwords, call the banks with your reference, and freeze what can be frozen. The report documents the problem; those steps are what stop it growing.

The purpose of this guide was to help moved-abroad 18 to 35s keep their devices, data, money and identity safe while they live their whole lives online in a new country. To help you on this journey, College Life has partnered with Bitdefender to make your life easier. Join College Life Club for free and start taking advantage of this today.

Frequently Asked Questions

Which country do I report identity theft in if I live abroad?

The country where the fraud happened. Your nationality does not decide this. If money moved from an account in another country, file a second report there too. Each bank needs a reference from its own jurisdiction.

Do I need a police report for identity theft, or is a bank report enough?

You usually need both. Banks and credit bureaus ask for a crime reference number before removing fraudulent entries. Without one, your claim is treated as a customer complaint rather than a fraud case.

What is an identity theft affidavit?

It is a sworn statement describing the fraud, used in the US alongside or instead of a police report. The FTC generates one through its identity theft service, and many institutions accept it directly.

Will the police actually investigate my case?

Usually not individually. Reports are recorded and used for pattern analysis rather than pursued one by one. The report still matters, because it is what banks, bureaus and employers require from you.

How long do I have to report identity theft?

Report as soon as you know. Banks impose short windows for disputing transactions, often measured in days. Delay is the most common reason a claim that should have succeeded does not.