Identity data: carelessness is the biggest threat — not cyber criminals

How often do companies still email copies of identity cards to each other, complete with national register numbers? Why do shops ask for an ID to issue a customer loyalty card? In doing so, they put themselves and their customers at risk. There is no longer any excuse for such practices around sharing identity data.

By sending this information, you lose all control over it. With just a name, date of birth and national register number, criminals can easily impersonate someone and take out fraudulent telecom or energy contracts, or even loans. The damage is real and often difficult to undo.

Replace careless habits with good practices

We must unlearn these careless habits, and take up new, more secure practices. For example:

• where possible, opt for digital identification solutions such as itsme
• share only strictly necessary data and shield sensitive information such as the national register number
• don’t send such identity data details via email, WhatsApp or Messenger. Use paid, professional file-transfer tools instead
• always add a note (digitally or by hand) such as ‘copy for [purpose] – [date]’ to any copy of an ID card

Upcoming improvements

Fortunately, some improvements are already on the way. As of October 2025, European banks verify that names and account numbers match when processing transfers, helping to prevent fraud.

The EU is also working on certified trust services, such as electronic signatures and registered digital delivery. By early 2027, the European Digital Wallet will be launched, allowing all EU citizens to identify themselves digitally and securely share official documents such as driving licences and diplomas.

These will be important steps towards building a more robust and secure digital society. But until then, it starts with yourself!