How my digital identity was stolen (and what you can do to avoid it)
I thought it was a mistake. A few weeks ago, going through my email, I found a string of notifications I didn't recognize. Credit cards I had never applied for had been activated, bank accounts had been opened in my name at institutions I had never even heard of and, worst of all, my mobile number had been ported from one carrier to another without my authorization.
And all of it happened because someone got hold of a copy of my ID card and my document number. A handful of digits was enough for my financial life to stop being mine overnight.
How did it happen?
In Chile, the national ID card is the document you use for practically every kind of paperwork: opening bank accounts, signing contracts, accessing services and much more. In my case, all it took was for someone to get a copy of my ID to set off this disaster.
What shocked me most was how easily large companies, such as banks and telecom operators, let this happen. They never notified me about suspicious activity, and they never bothered to verify my identity any more carefully.
In my experience, the banks only asked for the ID card to open accounts and activate cards. They didn't even run an extra check. The telecom operators were no better: with minimal data, someone managed to port my mobile number without my authorization.
It's alarming how exposed we are to systems that are supposed to protect us.
Identity theft cases are becoming more and more common in Chile. From "SIM swapping" —a technique where scammers take over your mobile number to intercept messages and calls— to fraudulent account openings, there are many possibilities. And the worst part is that, for the victims, the consequences are devastating.
Meanwhile, the big companies seem to be looking the other way.
What can you do to protect yourself?
Guard your ID like a treasure: avoid handing over your ID —or a photocopy of it— unless it is absolutely necessary. And if you do, write the purpose clearly on the copy, something like: "ID valid only for rental agreement".
Use two-step verification: set it up on your bank accounts and on the apps that matter. It's a simple measure, but a very effective one.
Monitor your data regularly: request your credit report from services like Dicom or Equifax so you can catch any irregularities.
Act fast at the first warning sign: if something doesn't add up, like suspicious calls or strange notifications, report it right away.
Demand better practices from companies: rolling out tools like Soyio could make the difference between a vulnerable system and a solid one.
A necessary reflection
What happened to me shouldn't happen to anyone. It's a reminder of how fragile our current data protection system is, and of how important it is to look after our personal information. But it's also an invitation to demand that companies take action. We can't keep relying on systems that aren't up to today's threats.
Tools like Soyio show that we can protect ourselves better, automate processes and build trust in an increasingly digital world. It's not only about protecting our data, but also about regaining the control and the peace of mind we all deserve.
Data is the most valuable resource of our era. It sits at the heart of our digital lives and, in the wrong hands, it can become a tool for destruction. Let's protect what is ours, and let's not let this fight stay a purely individual one. Sharing these experiences and talking about these problems is the first step toward raising awareness and driving change.
***
Andrés listened to the episode "Identidad en peligro" of Nicolás Orellana's podcast, featuring Óscar Quevedo, co-founder and CEO of Soyio, and decided to tell his story on our blog.
Fortunately, there are technology solutions that can help tackle this kind of problem. Soyio is revolutionizing the management of identities and consent. Our approach makes it possible not only to protect our personal data, but also to generate evidence and considerably reduce the risk of fraud.
With Soyio, companies can:
Unify identity and consent management: strengthening verification systems and making sure data is processed according to the strictest standards.
Automate the consent lifecycle: from the initial capture through to the exercise of access, rectification, cancellation and objection (ARCO) rights, making it easier to comply with current and future regulations.
Build trust through auditable evidence: recording every interaction on Blockchain, which ensures transparency and permanence.
A tool that not only simplifies how we manage our data, but also empowers users by giving them more control over their personal information. If you want to know more, get in touch with us here.
