Identity Theft Risk Calculator
Estimate your annual and five-year identity theft risk from breach exposure, credential reuse and the controls you have.
Inputs
Annual Identity Theft Risk
16.4%
Five-Year Cumulative Risk
59.1%
Risk vs the Population Baseline
11.70×
Risk Score
66/ 100
Risk Band
High
Step by step
Values used
Breaches your data appeared in = 5 breaches; National ID or SSN exposed = Yes; Card or bank details exposed = No; You reuse passwords across sites = Yes; MFA on every important account = No; Credit file frozen or locked = No; Times your data was listed for sale = 3 listings
Identity Theft Risk
annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5.
Annual Identity Theft Risk
= 16.4
Five-Year Cumulative Risk
= 59.1
Risk vs the Population Baseline
= 11.70 ×
Risk Score
= 66 / 100
Risk Band
= High
How it works
The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau. It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.
Formula
Identity Theft Risk
annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5.
- 1.4 %
- Share of adults reporting identity theft in a year, from national victimisation surveys
- multipliers
- 4× for national ID exposure, 1.8× for password reuse, 0.35× for a credit freeze
Frequently Asked Questions
How is Identity Theft Risk calculated?
annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5. The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau.
Why does Identity Theft Risk matter?
It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.
What values do I need to enter?
This calculator takes 7 inputs: Breaches your data appeared in, National ID or SSN exposed, Card or bank details exposed, You reuse passwords across sites, MFA on every important account, Credit file frozen or locked, Times your data was listed for sale. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Why is a credit freeze weighted so heavily?
Because it blocks the most damaging outcome. Most identity theft losses come from accounts opened in your name, and a freeze stops a lender from pulling your file, so the application fails regardless of how much data the attacker holds. It is free and reversible in most jurisdictions.
Is this a prediction?
No. It is a relative risk model built on published base rates and rough multipliers, useful for comparing scenarios and prioritising controls. Nobody can compute an individual's true probability of identity theft.
You might also need
- Credential Exposure CalculatorCommonly used together
- Password Reuse Risk CalculatorCommonly used together
- Security Question Strength CalculatorCommonly used together
- Authentication Health Score CalculatorAlso in Password Security
- MFA Security CalculatorAlso in Password Security
- Password Entropy Score CalculatorAlso in Password Security