Protect Yourself from Change of Address Scams

Change of address scams are a growing form of identity theft in which criminals redirect your mail or digital communications to an address or inbox they control. By intercepting bank statements, credit cards, tax documents, or password reset codes, fraudsters can gain access to your personal and financial information.

These schemes often begin when someone submits a fraudulent address change through the postal service. In more sophisticated cases, criminals contact your financial institution or other service providers while impersonating you, attempting to update the mailing address, email, or phone number on your account. Because these requests can appear routine, the change may go unnoticed until the scammer starts misusing your accounts.

Warning signs to watch out for

Be alert if you notice any of the following:

• Your bills or statements suddenly stop arriving 
• You receive an address change notification you did not request 
• You spot unfamiliar transactions or new accounts in your name 
• Mail arrives opened, delayed, or appears tampered with
• You receive "Account Updated" alerts for changes you didn't make

How to protect yourself

Taking a few simple precautions can help safeguard your personal information:

• Monitor your accounts and notifications. Review your statements regularly and pay close attention to address change or profile update alerts. If something looks off, contact your financial institution immediately using the phone number on your debit card or official website.
• Enable Multi Factor Authentication (MFA). MFA adds an extra layer of security, making it harder for fraudsters to access your accounts—even if they try to redirect recovery emails.
• Limit personal information shared publicly. Avoid posting your full address, phone number, or birthdate on social media, where criminals can easily collect it. 
• Use trusted channels when updating information. Submit a change of address through the official postal service website or a local post office, and never provide personal information to unsolicited callers, emails, or texts.
• Set up electronic statements and account alerts. These can help you spot unusual activities faster.