IEDOM I What to do in case of fraud or identity theft ?

What to do in case of fraud ?

Bank cards and online payments

Hacked bank card

If you notice any suspicious or unauthorised transactions on your bank card, contact your bank immediately to report the fraud and block your card.
If the fraud is proven, your bank must refund the amount involved and restore your account to the state it would have been in had the fraud not occurred.

Preventing online fraud

A few simple tips can help protect you from online scams :

Never share your personal or banking information over the phone via text message or email ;
Do not click on links in unsolicited emails or text messages ;
Use secure websites for your online purchases (look for ‘https’ in the URL) ;
Be wary of unsolicited messages requesting confidential information ;
Always verify the authenticity of communications, and if you have any doubts, contact your bank directly using an official phone number or email address.

Fraudulent bank transfer

If you notice that a transfer has been made from your account without your authorisation :

Contact your bank immediately You have up to 13 months to report the unauthorised transfer and request a refund of the debited amount ;
Change the password for your online banking account ;
Review all registered beneficiaries and scheduled transactions, and inform your bank of any suspicious additions or scheduled operations.

Your bank must promptly refund the amount of the unauthorised transaction and restore your account to the state it would have been in had the fraudulent operation not occurred. This includes reimbursing any fees resulting from the transaction. You do not need any special insurance to benefit from this legal protection. In the event of a dispute, your bank can only refuse to reimburse you if it can prove that you were negligent in safeguarding your banking credentials, or that you acted fraudulently.

Funds sent to a fraudulent IBAN

If you realise that you have made a transfer to a fraudulent IBAN, notify your bank immediately and request a fund recall due to fraud. The sooner you act, the greater the chance of successfully retrieving the funds. Please note that the bank is not liable if the error was due to incorrect information that you provided (e.g. an incorrect BIC or IBAN). You should also file a report with the police or gendarmerie as soon as possible.
To ensure the security of your transfers, take precautions before making a payment.

Beware of urgent requests

Fraudsters often use pressure tactics to push you into acting quickly. Be especially wary of supposedly ‘urgent’ requests that prompt immediate transfers. Never give in to pressure without taking the time to carefully verify all information.

Review the provided carefully bank details (IBAN)

Before making a transfer, take the time to carefully examine the bank account details (IBAN) you’ve been given :

Check for signs of tampering : Make sure the document does not contain suspicious blank spaces or visible alterations ;
Consistency of typography : The font and formatting should be uniform and in line with what banks typically use ;
Verify the BIC/SWIFT code : The BIC/SWIFT code – essential to identify the beneficiary’s bank – should match the logo of the bank. Feel free to use an IBAN checker or contact your bank to confirm the information.

Double-check before making a transfer

Call back using a trusted number: Before proceeding with a transfer, contact the requester using a verified phone number to confirm the transaction ;

These extra checks are essential, as banks do not yet systematically verify that the beneficiary’s name matches the provided IBAN. Always take the time to verify the legitimacy of the request before transferring funds.
If you still have doubts about the legitimacy of the transfer request after carrying out all verification, it’s best not to proceed. It is always safer to delay a payment than to risk an irreversible loss of funds.

Please note

Spoofing: a sophisticated form of fraud

Spoofing is a fraudulent technique used by scammers to impersonate a trusted digital identity – often your bank – in order to steal personal information and divert funds from your account. This type of scam can take several forms :

Phone calls where the displayed number appears to come from someone you trust, such as your bank or a public authority ;
Emails that closely mimic the layout and branding of official communications from your bank, government agencies or private companies ;
Text messages (SMS) that appear to come from legitimate sources and include urgent messages requiring your immediate attention.

What to do in case of identity theft ?

Identity theft is a serious criminal offence involving someone using your personal information without your consent to carry out actions in your name. It can result from the loss or theft of your ID documents or occur online via social networks and other digital platforms.

Consequences of identity theft

A fraudster who steals your identity may open bank accounts, issue bad cheques or take out loans in your name that they do not repay. These actions can lead to& severe financial consequences, including being listed in payment incident files and facing debt collection procedures from bailiffs or recovery agencies. Restoring your situation requires you to prove the identity theft, which can be a long and complex process.

Steps to take in case of identity theft

1 File a police report as soon as possible

As soon as you realise that you are a victim of identity theft, report it to your local police station or gendarmerie. You can also file a report online via the French Ministry of the Interior’s website. At the same time, report the incident on Pharos, the official platform for reporting illegal online content.

2 Notify your bank

Immediately inform your bank of the situation. If you have accounts with multiple banks, it is essential that you contact each of them so that they can take appropriate measures to protect your accounts and finances.

3 Check accounts opened in your name

To find out whether any bank accounts have been fraudulently opened in your name, you can request a list of all accounts registered under your identity via the national bank account register (Ficoba). This request is made through the CNIL (Commission nationale de l’informatique et des libertés). Visit the CNIL website to exercise your right of access to this file.

4 Check whether you are listed by the Banque de France

It is important to verify whether your name appears in either the central cheque register (FCC) or the register of credit repayment incidents (FICP) held by the Banque de France.
Consultez notre page dédiée to learn how to complete this process.

If you are not listed

It is recommended to check regularly whether you are listed, as the Banque de France cannot make preventive entries.

If you are listed

The Banque de France will provide you with a list of incidents and the banks that reported them.
You have to submit an identity theft file to the Banque de France/IEDOM, including:

A signed letter listing the banks where you did not open an account or take out a loan, but which have reported you ;
A copy of your police report ;
A copy of your identification document.
You can submit the file online Banque de France’s online service or in person at the IEDOM office in your area

Once the file has been reviewed and a credit institution acknowledges the identity theft, the Banque de France will add a special note to the relevant incidents.
When banks consult these files, they will see that you are not responsible for these incidents.

Flyer – Identity theft for individuals

What to do in case of a reimbursement refusal following fraud ?

As fraud techniques continue to evolve and affect clients of all profiles, the Observatory for the Security of Payment Means has issued thirteen recommendations aimed at improving reimbursement processes for victims of fraud.
These recommendations seek to enhance the efficiency of reimbursements and emphasise the importance of vigilance and user responsibility in securing payment methods.

Here is an overview of the main recommendations: :

Timeframe for investigations : Payment service providers are advised to complete their investigations within 30 days, except in exceptional cases. This helps to prevent the loss or omission of relevant information, and ensures that customers receive a clear and definitive response within a reasonable timeframe.
Terms and timeframe for fund recovery : If funds must be reclaimed following an initial reimbursement, customers should be informed of this possibility at the time of reimbursement. The period for reclaiming funds should not exceed 30 days after the initial reimbursement, except in exceptional circumstances.
Information to be provided to the customer in case of reimbursement refusal or fund recovery : If reimbursement is refused or funds are reclaimed, the payment service provider must clearly inform the customer of this decision and the reasons behind it. The provider must also supply detailed information on how to file a complaint.

These measures are designed to ensure greater transparency and fairness in the handling of fraud claims, thereby helping to restore consumer confidence in secure payment systems.

You can consult the recommendations issued by the Observatory for the Security of Payment Means regarding the reimbursement of fraud victims..

Caution: use and investment in crypto-assets

Although crypto-assets are attracting a growing number of investors, they carry significant financial risks and are highly speculative. Any potential investor must understand that these investments may result in the complete loss of their investment. Promises of quick and high returns should always be approached with extreme caution.

Investing in crypto-assets requires a thorough understanding of these products and their risks. Be particularly aware of fraud risks, such as purchasing non-existent crypto-assets or financing fictitious projects. The French financial market authority (AMF — Autorité des Marchés Financiers) maintains a blacklist of fraudulent crypto-asset websites, which is available on its official website.

Learn more

What to do in case of fraud or identity theft ?