Scammed? What now
Scammed? What nowUpdated

I shared my ID, BSN or DigiD with a scammer. What now?

Do this now

Short answer

If you also gave bank details or codes, call your bank first. Then change your DigiD password and check in My DigiD whether someone else has logged in with it. Report it to the government's identity fraud reporting centre (CMI) and to the police.

What should I do now?

  1. Call your bank if you also shared bank details

    Did you give bank details, a PIN or login codes as well as your ID or DigiD, or do you see payments you don't recognise? Call your bank straight away and have your card and access blocked. Veilig Bankieren, run by the Dutch Banking Association (NVB), lists the banks' fraud numbers; the lines for blocking a card are open day and night. You can often block your card yourself in your banking app too. Once you have reported it, any further misuse of your card or app is not your loss, unless you acted fraudulently yourself (Article 7:529(4) of the Dutch Civil Code).

    Source: veiligbankieren.nl (opens in a new window)
  2. Secure your DigiD

    Can you still log in? Change your password in My DigiD straight away. Check the DigiD app section to see which devices the app is active on, and deactivate any device you don't know. Then switch on the setting to always log in with two steps, so a password alone is no longer enough. Can't log in or change your password any more? Call the DigiD helpdesk on 088 123 65 55.

    Source: digid.nl (opens in a new window)
  3. Check what was done with your DigiD

    In My DigiD, the usage history shows where your DigiD was used to log in. See a login that wasn't you, for example at the Tax and Customs Administration (Belastingdienst)? Contact the DigiD helpdesk and that organisation. With your DigiD, someone can change the bank account number the tax office pays into. Report that to the tax office's fraud victims desk: call the BelastingTelefoon helpline (0800 0543, free) or e-mail loket.fraudeslachtoffers@belastingdienst.nl with your name, BSN, phone number and a short description. The tax office will contact you within 24 hours. Also check on mijn.overheid.nl that your details are still correct.

    Source: belastingdienst.nl (opens in a new window)
  4. Report it to the identity fraud reporting centre

    The CMI, part of the National Office for Identity Data (RvIG), helps victims stop the misuse and repair the damage. If you can't sort things out with an organisation yourself, the CMI can mediate, for example with the police, the vehicle authority RDW or the tax office. In the online guide, choose the form that fits: the one for when you gave out a copy of your ID, or the one for other identity fraud if something has already been taken out in your name. After the form for a copy of your ID, you get an e-mail reply within one day.

    Source: rvig.nl (opens in a new window)
  5. Report it to the police

    You report identity fraud at a police station; you can't do it online. Book an appointment on 0900-8844, which is answered day and night. Tell what happened as a sequence of facts and bring as much evidence as you can, such as chats, e-mails, screenshots and bank statements. If the report isn't going smoothly, ask for the police's ID specialists (the AVIM unit). Did you enter your bank details on a fake site? That kind of phishing you can report online.

    Source: politie.nl (opens in a new window)
  6. Get personal advice from the Fraudehelpdesk

    Did you enter your DigiD on a fake site or after a fake message? DigiD advises you to contact the Fraudehelpdesk, the national fraud helpline, as well. They give personal advice on your situation. Call 088-786 7372 (Monday, Tuesday, Thursday and Friday 9:00 to 12:00 and 13:00 to 15:30, Wednesday 13:00 to 15:30) or report it at any time through the form on their website.

    Source: fraudehelpdesk.nl (opens in a new window)
  7. Consider a new passport, ID card or driving licence

    Does a scammer have a copy or photo of your passport, ID card or driving licence? Then consider replacing that document as a precaution, as the CMI advises. You apply for a new one at your municipality. Is your actual document lost or stolen? Report that to the municipality straight away. You can't get a new BSN, and you don't need one: according to the RvIG, nobody can commit identity fraud with your BSN alone. If you have to hand over a copy later, use the government's KopieID app.

    Source: rvig.nl (opens in a new window)
  8. Check BKR and don't pay unknown bills

    Check with Stichting BKR, the Dutch credit register, whether there are loans or credit in your name that you don't recognise, and check again after a while. Get a bill or reminder for something you didn't order? Don't pay if you had nothing to do with it. Tell the company or debt collector that you are reporting it to the police, ask for the application papers and give them to the police. Then send them a copy of your police report and ask them to cancel the bill.

    Source: rijksoverheid.nl (opens in a new window)

Will I get my money back?

That depends on what happened. Did the scammer use your details to take money from your account, without you making that payment? Then your bank must refund the amount immediately, at the latest by the end of the next working day after you report it (Article 7:528 of the Dutch Civil Code). That does not apply if the bank has reasonable grounds to suspect fraud and reports them in writing to the financial markets regulator (AFM). You only bear the loss yourself if you acted fraudulently, deliberately or with gross negligence (Article 7:529). The bank has to back that up with evidence: the fact that your card or app was used is not enough on its own (Article 7:527). Report such a payment without delay and no later than 13 months after the debit (Article 7:526). Whether sharing your codes was grossly negligent is something the bank decides case by case, on grounds of reasonableness and fairness; on top of that, each bank has its own goodwill policy.

Did you transfer money yourself, for example 'verification fees' via iDEAL? According to Veilig Bankieren you will in principle not get that back, and an iDEAL | Wero payment cannot be reversed. Call your bank straight away anyway. In bank helpdesk fraud, banks usually do compensate as a goodwill gesture, if you have reported it to the police, it is a personal account and it is the first time it has happened to you.

If you paid by credit card, you can usually claim the money back; your card's terms explain how.

Getting bills for things someone else ordered in your name? Don't pay if you had nothing to do with the costs.

Bank rejects your claim? Complain to the bank first. After its final answer, or if it has not responded after 8 weeks, you can go to Kifid, the financial services complaints body: within 3 months of that answer or within 1 year of first raising the complaint with the bank.

Nobody can promise you in advance that you will get your money back.

Make your letter

Fill in your details and you get a letter or summary that you check and send yourself. FFCheck sends nothing and files no police report or notification for you.

Official help

  • Your own bank

    Blocks your card and app; this is where you report payments you did not make. Veilig Bankieren lists each bank's fraud number.

  • DigiD helpdesk

    Helps if you can't log in or change your password, and with misuse of your DigiD.

  • Identity fraud reporting centre (CMI)

    Records your report, advises on next steps and mediates with organisations if you can't sort things out yourself.

  • Police

    Takes your identity fraud report, by appointment at a police station.

  • Fraudehelpdesk

    The national fraud helpline: personal advice after a scam, and reports.

  • Tax and Customs Administration, fraud victims desk

    For misuse of your DigiD or details at the tax office, such as a changed bank account number. Call the BelastingTelefoon helpline or e-mail loket.fraudeslachtoffers@belastingdienst.nl.

Frequently asked questions

Can I get a new BSN?

No, you can't get a new BSN. According to the National Office for Identity Data, the BSN carries no personal information, and nobody can commit identity fraud with a BSN alone. Do stay extra alert for phishing.

I only sent a photo of my ID. What can a scammer do with it?

With a copy of your ID, someone can for example take out a phone contract in your name. Report it to the CMI using the form for people who gave out a copy of their ID: it is meant for when you don't trust it, even if nothing has happened yet. Also consider applying for a new document at your municipality as a precaution.

Can I report it to the police online?

Not identity fraud. For that you go to a police station by appointment; call 0900-8844. Phishing of your bank details can be reported online on politie.nl. Not sure what kind of fraud it is? Call 0900-8844 as well.

I'm getting bills for orders I never placed. Do I have to pay?

Not if you had nothing to do with the costs. Tell the debt collector you are reporting it to the police, ask the company for the application papers and give them to the police. Also ask whether someone used a copy of your ID: a copy is not a valid proof of identity. Stay in touch with the debt collector or bailiff so they know where things stand.

Someone is calling on behalf of the Fraudehelpdesk or my bank to get my money back. Is that real?

Hang up. The Fraudehelpdesk never contacts you about banking matters, and scammers can make the real phone number appear on your screen. Don't give any details and don't install software that lets someone see your screen. Call your bank yourself, on a number you looked up yourself.

Someone used my DigiD to change my bank account number at the tax office. What now?

Report it to the tax office's fraud victims desk: call the BelastingTelefoon helpline (0800 0543, free; Monday to Thursday 8:00 to 20:00, Friday 8:00 to 17:00) or e-mail loket.fraudeslachtoffers@belastingdienst.nl. Put your name, BSN, phone number and a short description in the e-mail; the tax office will contact you within 24 hours. Report it to the DigiD helpdesk and the CMI as well.

Official sources

Last checked: 27 October 2026

Other situations