Estimate your annual and five-year identity theft risk from breach exposure, credential reuse and the controls you have.
The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau. It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.
Identity Theft Risk
annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5.
annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5. The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau.
It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.
This calculator takes 7 inputs: Breaches your data appeared in, National ID or SSN exposed, Card or bank details exposed, You reuse passwords across sites, MFA on every important account, Credit file frozen or locked, Times your data was listed for sale. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Because it blocks the most damaging outcome. Most identity theft losses come from accounts opened in your name, and a freeze stops a lender from pulling your file, so the application fails regardless of how much data the attacker holds. It is free and reversible in most jurisdictions.
No. It is a relative risk model built on published base rates and rough multipliers, useful for comparing scenarios and prioritising controls. Nobody can compute an individual's true probability of identity theft.