Address fraud: what it is, warning signs, and how to protect your home address
Being behind major reports like The Mother of All Breaches and RockYou2024, our in-house cybersecurity experts and journalists provide unbiased, real-world testing and in-depth analysis.
We maintain complete transparency by openly sharing our testing methodologies with our audience.
Learn more
Address fraud is any type of fraud in which the malicious actor uses a fake address to steal money, hide from authorities, or get any other benefit. Unfortunately, any one of us can be a victim of address fraud, which is why you need to report it immediately, via official resources, such as USPIS, USPS, FTC, or IC3.
So, in order to share with you more information on what address fraud is, why it matters, what to do in such a case, and how to reduce the risk, I worked with the Cybernews research team to research address fraud. Stay with me if you want to learn more.
Our team combines cybersecurity experts and consumer protection specialists who rigorously test each identity theft protection service. All findings undergo verification from our fraud prevention experts to ensure accuracy and relevance. We maintain complete transparency about our testing methodology and regularly update our reviews as services evolve or when new threats emerge. Our testing includes a detailed examination of monitoring capabilities, alert systems, and recovery services across multiple scenarios. Learn more about our testing process.
What is address fraud?
Address fraud is using a false or inaccurate address for deceptive benefit, or using someone else’s real address without permission. This can be for different purposes, such as stealing money, accessing services, opening accounts, or even hiding from authorities.
However, address fraud differs from simple misdelivery. This happens when your mail or package is sent to the wrong address by mistake, without any intent to steal or deceive. Also, it’s not the same as identity theft, which involves stealing personal information to impersonate someone, although address misuse can be one of the tactics hackers use.
On top of this, it also distinguishes itself from mail theft or mail fraud, which is basically stealing mail or using it to commit fraud. While address misuse can be a signal, not every wrong-letter event is fraud.
Why your address matters
A home address is often treated as an “identity anchor”. The main reason is that it’s used across billing, accounts, deliveries, and verification flows. That said, it’s much more than just a simple identification of your home’s location. The address marks your overall existence, personal history, and even your legal and financial interactions.
However, an address alone may not be enough to steal an identity. Still, if the malicious actors manage to combine it with other leaked data, it can enable various scams. The most common ones include mail phishing, interception, account verification attempts, and a lot more.
Common address fraud tactics
Nowadays, there are all kinds of address fraud. But don’t worry. I’ve got your back. Below, I listed some of the most common address fraud tactics, such as:
- Change-of-address diversion. This tactic refers to your mail being redirected, mainly because the perpetrator files a false change-of-address request. Due to this, they’re able to receive the mail in a location they fully control.
- Mail phishing (“snail mail” scams). Probably the most common tactic is sending fake bills, prize notices, or government impersonation letters. This is designed to trick you into sharing your personal or financial details, including your address.
- Package interception/repeated misaddressed deliveries. This tactic refers to goods sent to your address under another name. Malicious actors use this to either hide the real recipient or to test stolen payment details.
- Brushing and rental listing scams. Brushing address fraud tactics refers to sending low-value packages to real addresses so that the scammers can post fake verified reviews online. On the other hand, the rental listing scams rely on using a real address in fake rental listings that the fraudulent actor doesn’t own, luring you into paying deposits or leaving your actual address.
- SIM swap. Ultimately, scammers often use SIM swap tactics, which is basically an account recovery attempt where the address is used as a “verification detail.”
What to do if you suspect address fraud
If you suspect address fraud, you need to take action immediately. The process is pretty straightforward. So, let’s go together through my step-by-step guide and help you stay safe:
- Don’t open other people’s mail. Make sure you also document what you received (photos, dates).
- Use USPS tools to spot missing mail early (e.g., Informed Delivery if eligible).
- If you suspect mail theft/diversion, report through the appropriate USPIS channel (mail theft/identity theft categories).
- If identity theft indicators exist, follow recovery steps via IdentityTheft.gov and consider credit protections (fraud alert/freeze).
- Tighten account security basics that reduce downstream harm (implement 2FA, password resets if you suspect any compromise).
Warning signs your address is being misused
Sometimes, no matter how hard we try to protect ourselves, we may encounter address fraud. However, you can potentially figure out whether someone is misusing your address by looking for the following warning signs:
- Sudden stop in expected mail/missing mail. In case you stop receiving regular bills, letters, or any other mail, it could mean that someone has tampered with it or redirected it without your knowledge.
- Repeated mail/packages for unknown names. Receiving mail or packages for unknown names is a huge red flag because it may mean your address is used in a fraudulent manner.
- Unexpected bills/statements/debt collector letters. If you get bills, statements, or debt collector letters for accounts you didn’t open, for example, it may indicate that someone is committing financial fraud using your address.
- Change-of-address confirmation notices. Ultimately, a change-of-address request you didn’t make is also a warning. This may show that someone is trying to redirect your email so they can commit identity theft using your address.
However, don’t panic. Keep in mind that warning signs aren’t always proof. So, treat them as a prompt to verify.
How to prevent address fraud long-term
To prevent address fraud in the long term, I recommend you:
- Secure your mailbox and retrieve mail quickly. I recommend pausing or holding mail when away, collecting it on time, or locking your mailbox when possible.
- Shred sensitive docs. Make sure you destroy all bills, bank statements, and even medical paperwork that has your address.
- Minimize oversharing of address in public posts and listings. Don’t share your home address on social media or real estate listings.
- Stay cautious with unsolicited messages/links. Treat any unexpected letters, emails, texts, or links with a little bit of suspicion, especially if they create urgency or request any personal details.
Make sure you treat any change-of-address confirmation you didn’t request as an urgent signal. Contact the affected services right away, as this is often an early warning sign of address fraud.
How to reduce your address exposure online
With the widespread internet connectivity and all the available tools, home addresses spread online through people-search sites, data brokers, public records (e.g., property listings), and breach dumps. That’s because as soon as the information is listed, anyone can sell it and use it for targeted scams, phishing, and any other address-based fraud.
Luckily, you can reduce exposure in two different ways:
- Manual opt-outs, where you need to request the removal of your information from each data broker individually. While this is effective, it’s time-consuming, repetitive, and data can reappear at any time without you being aware of that.
- Using automated data removal services, which handle opt-outs on your behalf across different sites. One of the best services for this is Incogni, which will help you save a lot of time and effort.
When identity theft protection tools can help
If address fraud signals broader identity risk, such as missing mail, new accounts, and verification attempts, you can use tools that may help with monitoring (credit file changes, dark web alerts) and recovery support.
Some of the most relevant identity theft protection tools are Aura, Coveron (formerly NordProtect), Norton LifeLock, and IDShield. If you want a more niche protection, then I recommend Surfshark Alert for breach monitoring or Incogni for data broker removal.
FAQ
Can someone legally use my address without my permission?
No, it’s not legal for someone to use your address without your permission. This especially applies to the intent of committing a certain fraud. Even though the address is public information, using it for official or personal gain without being a resident at the certain address is classified as address fraud.
What should I do if I get a USPS change-of-address notice I didn’t request?
If you get a USPS change-of-address notice you didn’t request, you should immediately contact them. The change-of-address notice is very often an early warning sign of address fraud, so contacting all the necessary entities will only prevent the fraud from happening.
Should I report address fraud to the police, the FTC, or USPIS first?
You should always report address fraud to the US Postal Inspection Service (USPIS) first, as well as to the Federal Trade Commission (FTC). This is because these agencies specialize in such crimes, especially mail-related and identity theft. However, you can also report to the police if you need or require local law enforcement for additional legal processes.
Can USPS Informed Delivery help me catch address fraud earlier?
Yes, USPS Informed Delivery can potentially help you catch address fraud earlier. This is because it will provide you with daily digital previews of your incoming mail. As a result, you’ll be able to monitor any unexpected mail or missing documents. This will then contribute to indicating fraudulent activity.