Some time ago, I answered the phone to someone claiming to be from the fraud team of my business bank account. They knew my name. They knew the last four digits of my card. They obviously had my phone number.
They said there’d been suspicious activity on my account, “a direct debit had been set up for a gym membership”, and they wanted to double-check if I had processed it.
A good 20 minutes went by with us discussing how my data could have been breached before the real scam nearly played out. A suspicious payment they wanted me to accept, so that they could examine it in greater detail.
I hung up before any real damage was done, but what stuck with me afterwards wasn’t the near-miss. It was the question of how on earth they had my name, my phone number, and my card number.
That information had to have come from somewhere. A data breach, a leaked customer list, a photo of my card taken over my shoulder, a dodgy card machine. As much as I’d love to, I’ll probably never know exactly how.
And I feel it is necessary to give myself some credit here, I’m generally VERY careful. I don’t click dodgy links, I use strong passwords, and I make sure to have a VPN turned on while using public WiFi networks.
That experience is a big part of why I’m writing this article. Because when you’re traveling, you’re handing your details over far more often than usual (to hotels, car rentals, airlines, booking platforms, rental hosts), and each of those handovers is another potential weak point.
So this is about the practical identity theft protection tips I use while traveling, to keep my identity safer (including my credit cards and passport), things I have learned throughout my travels and since this call. Including a new service offering from the team at NordVPN – NordProtect.
Quick note: NordProtect is currently only available to US residents. If you’re reading from outside the US, the tips below still apply, but the service itself won’t be available where you are.
Why travel puts your identity at risk
It’s a real shame, because travel is supposed to be the time you can truly relax. But it can also be when your identity is most at risk.
You’re carrying your passport in places you don’t know. Logging into accounts on Wi-Fi networks you’ve never used before. Handing your card over at unfamiliar payment terminals. And often doing all of this while jet lagged and nowhere near as sharp as you’d be at home.
Add crowded airports, tourist-heavy streets, and the occasional dodgy ATM into the mix, and there are more ways to lose control of your personal information than most people realize.
However, I have good news for you. There are definitely things you can do to stay protected!
Why I recommend NordProtect
When it comes to protecting your identity, it is just as important to get ahead of potential thieves (by following the identify theft protection tips below), as it is to monitor your private data.
That’s where NordProtect comes in, an identity protection service (currently available to people in the US) that both monitors any leaks and provides support if something were to happen, including:
- Daily credit monitoring with alerts for new account inquiries, public records, address changes, and significant credit score shifts
- 3-bureau monitoring across TransUnion, Experian, and Equifax, so nothing slips through because one bureau missed it
- Credit lock that instantly locks or unlocks your TransUnion credit file from the app, blocking unauthorized new credit inquiries
- Monthly VantageScore® 3.0 credit score updates with insights into what’s impacting your score
- Up to $1 million in identity theft recovery coverage for eligible expenses, including legal fees and restoration costs
- Dedicated restoration specialists who help file reports, contact creditors, and work with credit bureaus on your behalf
- Cyber extortion protection covering up to $50,000 in eligible expenses for ransomware or online blackmail incidents
- Dark web monitoring that scans for exposed personal data (social security numbers, emails, US phone numbers) and sends real-time alerts
- A centralized dashboard that pulls all your alerts and monitored assets into one place
Dark web monitoring and is the one that would’ve flagged my details floating around before that scam call ever came in. And should anything have happened, the rest would have helped me navigate my way out of it.
The best identity theft protection tips
From one traveler to another, here are my top tips for protecting yourself from identity theft while in new, unfamiliar places. Whilst I am no cybersecurity expert, these are the steps I take myself based on my experience of traveling.
Only bring the documents you actually need
I used to travel with my driver’s license, two credit cards, a debit card, my passport, and half a dozen loyalty cards hidden at the back of my wallet. Now it’s my passport, one credit card, and one digital card on my phone. That’s it.
Every extra document or card you carry is another thing that can be stolen, lost, or photographed over your shoulder. Anything sensitive that you don’t actively need on the trip (social security card, spare bank cards, old IDs) is safer at home.
Don’t send passport photos over WhatsApp
This is a bit of a controversial one, because it is such a common ask. But I really don’t like to send photos of my passport over any kind of messaging app, like WhatsApp.
It is quite common for the host of a short-term rental to message you, asking for a photo of your passport before check-in. It feels normal enough.
But a passport photo sent over a messaging app is now sitting on someone else’s phone. Possibly backed up to their cloud. Possibly forwarded. Possibly stored somewhere with terrible security. That’s a lot of trust to place in someone you’ve never met.
If a host genuinely needs to verify your ID, ask if you can show it in person at check-in, or upload it through the booking platform’s official verification system.
This is also where NordProtect‘s dark web monitoring comes in useful as a backup. If your details do end up somewhere they shouldn’t, the service scans for exposed data like social security numbers, emails, and US phone numbers, and alerts you if any of it shows up.
Keep your ID and cards out of sight
Sounds obvious, but I have seen many travelers do just the opposite. Passports are left on café tables while people take photos. Wallets sticking out of back pockets on the metro. Cards laid on the bar while someone chats to a friend.
I keep all of my cards and ID in a money wallet strapped around my waist, or left behind in the hotel safe. Basically, if I’m not actively holding it or using it, I make sure it is out of sight and zipped away.
Be cautious of unfamiliar ATMs
I am very cautious of ATMs. Particularly ones that look run down, poorly maintained, and like they’ve been tampered with. Or standalone ones in quiet areas.
I try to stick to ones that are located inside banks (or just outside), inside airports, or in well-lit locations with a lot of people around.
Card skimmers can be pretty common in busy tourist spots. Every time you use an ATM, give the card reader a little wiggle before you insert your card. If it feels particularly loose, I won’t use it.
I also cover the keypad with my other hand when I enter my PIN. It blocks the view of anyone looking over your shoulder, as well as any hidden cameras that might be aimed at the keypad.
Don’t use public WiFi without a VPN
Something as simple as connecting to a public WiFi network can put your data at risk. Be it a WiFi network in an airport, hotel, or cafe.
You don’t know who else is on the network, who set it up, or whether the network you just joined is even the real one. “Starbucks_Free_WiFi” and “Starbucks-Free-WiFi” are easy to confuse, and one of them might be a fake network.
This is the one risk I learned never to take. So, I use NordVPN on my phone and laptop the whole time I’m abroad, and I’d recommend reading my full NordVPN review if you want to know why I pick them as my go-to provider.
A VPN provider encrypts your connection, so even if someone is snooping on the network, they can’t see what you’re doing. Without one, logging into your bank or email on public WiFi is a risk that could lead to your identity being stolen within minutes.
Secure your phone and laptop properly
Your devices can be a huge identity theft risk. When I think about what I have on my phone, I can think of these just off the top of my head: banking apps, my email (the master key to resetting every other password I own), photos of documents, saved passwords, and my messaging apps with all sorts of personal details.
If your phone gets stolen and it’s not locked, a thief has access to your entire digital life within minutes.
Here is the minimum security setup I recommend for your devices before you travel:
- A strong passcode, not a four-digit one. Six digits at least, or better, an alphanumeric one
- Biometric unlock (Face ID or fingerprint) so you’re not typing your passcode in public
- Turn on Find My iPhone / Find My Device, so you can remotely wipe it if it goes missing
- Automatic software updates on, just in case of any security updates
Don’t broadcast your travel in real time
I know, I know. This one is annoying if you’re active on Instagram or other social media networks. But real-time location posts are basically a public announcement that your home is empty. And if someone has your name from a stolen wallet or a data breach, it doesn’t take much to work out where you live.
Thankfully, without social media, I don’t have this issue. But I do delay posting my blog content until I am home. Nothing I share loses its value by being a week later, and a lot of risk disappears.
If you do want to share in real time, make sure you have everything else covered in this list and at least don’t combine it with anything that identifies where you live. No photos of your house, your street, or your car license plate.
Monitor your accounts during and after the trip
I used to avoid looking at my accounts whilst abroad, mostly because I didn’t want to know how much I’d been spending. Eek. But really, it is so important to do this. By keeping an eye on your transactions, you can flag anything suspicious very quickly.
I now check my main accounts every couple of days while I’m traveling, and properly scan through everything when I get home.
This is where NordProtect‘s credit monitoring is incredibly useful (for anyone US-based). It runs daily credit monitoring and alerts you to new account inquiries, address changes, public records, and significant credit score shifts.
NordProtect users also get 3-bureau monitoring across TransUnion, Experian, and Equifax, so nothing slips through just because one bureau doesn’t catch it.
The credit lock feature is worth knowing about, too. You can instantly lock or unlock your TransUnion credit file, which blocks unauthorized new credit inquiries. Handy if you get an alert that doesn’t look right and you want to act quickly whilst investigating it further!
What do I do if things go wrong?
A lot can be avoided through prevention. But even then, a lot of this is out of our control. Identity thieves are always finding new ways to source data, and it can be hard to stay on top of it.
My near-miss with the fake fraud team is the perfect example. I hadn’t done anything wrong (or at least, that I am aware of). So it’s worth having a plan just in case your identity does get stolen.
Know which bank numbers to call. Know how to freeze your cards from your banking app. Know where your passport details are backed up in case the physical one is lost or stolen (I keep a scan in an encrypted password manager).
And this is where NordProtect really stands out. The service includes up to $1 million in identity theft recovery coverage for eligible expenses, including legal fees and restoration costs. There are also dedicated restoration specialists who help file reports, contact creditors, and work with credit bureaus during recovery. Cyber extortion protection covers up to $50,000 in eligible expenses related to ransomware or online blackmail.
My verdict: The best identity theft protection
Unfortunately, there is no single thing you can do to protect yourself from identity theft. Rather, a variety of measures that are, thankfully, relatively simple to do.
And, on top of this, a great service like NordProtect can give you the peace of mind that your data privacy is being monitored in the background, so that if anything does go wrong, you will know very quickly!
I am looking forward to seeing NordProtect being rolled out in other countries across the world (it is currently just available in the US), because I can see this being such a great and useful tool for people everywhere.
To summarise, my identity protection setup these days is a mix of habits and tools:
- A VPN running the whole time I’m traveling (I use NordVPN, full review here)
- The smallest possible wallet when I’m abroad
- All the built-in security features set up on my phone and laptop
- Account checks every few days on the road
- If you are US-based, I also recommend using NordProtect for deeper and automatic monitoring
If your life also involves handing your details to hotels, airlines, rental hosts, and booking platforms on a regular basis, these identity protection tips are a must!
And given how my data ended up in a scammer’s hands despite me being careful, I’d rather have the safety net than not.
FAQs
What is the best way to protect your identity online?
The honest answer is that there isn’t one single thing. It’s a combination of strong, unique passwords (use a password manager), two-factor authentication on every account that offers it, a VPN when you’re on public WiFi, and being skeptical of unexpected calls or emails asking for your details. If you’re US-based, adding an identity monitoring service like NordProtect on top of those habits gives you a way to catch breaches you couldn’t have prevented yourself.
How can I tell if my identity has been stolen?
The usual signs are small charges you don’t recognize on your bank statements, new account inquiries showing up on your credit report, mail or emails about accounts you didn’t open, and calls from debt collectors about debts that aren’t yours. If you’re using a credit monitoring service, you’ll usually get alerted before any of those show up. If you’re not, checking your credit report every few months is the next best thing.
Is it safe to use hotel WiFi?
Not without a VPN. Hotel WiFi networks are shared, often poorly secured, and a known target for attackers who set up fake networks with similar names. If you’re just browsing, the risk is low. If you’re logging into your bank, email, or anything with payment details, use a VPN every time.
Should I tell my bank I’m traveling?
Yes, for most banks it’s still worth a quick heads-up before you leave. It reduces the chance of legitimate transactions being flagged as fraud and your card getting blocked while you’re abroad. Some banks now detect travel automatically through your phone, but a 30-second notification in the app is cheaper than being stuck without a working card in a different time zone.
What should I do if my passport is stolen while traveling?
Contact your nearest US embassy or consulate as soon as possible. They can issue emergency travel documents to get you home. Also report the theft to local police (you’ll usually need the police report for the embassy and any insurance claims), and let your bank know in case the same person took other things. Having a scan of your passport stored in a secure location, like an encrypted password manager, makes all of this much faster.
Does NordProtect work outside the US?
Not currently. NordProtect is only available to US residents, and the credit monitoring features specifically cover the three major US credit bureaus. If you’re outside the US, the travel safety habits in this article still apply, but you’d need to look for an equivalent service in your own country.
My go-to travel health insurance:
Leave a Reply