Recently I have been the victim of Identity Theft.
In October and November last year there were a total of 57 attempt to take out financial services in my name. So far two of these have succeeded in obtaining money.
Both of them were payday loan companies. I have reported the identity theft to Action Fraud. Both companies would openly talk to me about the loans and have recorded them as fraudulent.
I have signed up to a credit file checking service to allow me to see what the current state is. I will need to keep this up for a couple of months.
However neither of them have made any attempt to check that I am who I say I am. I have been sent the pdf bank statement used as part of the identification by one of the companies. Other than giving them publicly available information about myself (name, date of birth and address) no attempt has been made to validate who I am.
It can be hard to get a company to talk to you about fraud. Firms should really have an email address that can be used to report this. For example one of the finance checks went to Sky Mobile. I cannot find a means of talking to them without becoming a customer.
GDPR requests seem to be the only way to get a company to talk to them.