Skip to content
Calcrivo

Identity Theft Risk Calculator

Estimate your annual and five-year identity theft risk from breach exposure, credential reuse and the controls you have.

Inputs

breaches
listings

Annual Identity Theft Risk

16.4%

Five-Year Cumulative Risk

59.1%

Risk vs the Population Baseline

11.70×

Risk Score

66/ 100

Risk Band

High

Step by step

  1. Values used

    Breaches your data appeared in = 5 breaches; National ID or SSN exposed = Yes; Card or bank details exposed = No; You reuse passwords across sites = Yes; MFA on every important account = No; Credit file frozen or locked = No; Times your data was listed for sale = 3 listings

  2. Identity Theft Risk

    annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5.

  3. Annual Identity Theft Risk

    = 16.4

  4. Five-Year Cumulative Risk

    = 59.1

  5. Risk vs the Population Baseline

    = 11.70 ×

  6. Risk Score

    = 66 / 100

  7. Risk Band

    = High

How it works

The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau. It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.

Formula

Identity Theft Risk

annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5.

1.4 %
Share of adults reporting identity theft in a year, from national victimisation surveys
multipliers
4× for national ID exposure, 1.8× for password reuse, 0.35× for a credit freeze

Frequently Asked Questions

How is Identity Theft Risk calculated?

annual risk = 1.4 % baseline × exposure multipliers × control multipliers; five-year risk = 1 − (1 − annual risk)^5. The model starts from the population base rate and applies multiplicative factors for exposure and for controls, which is how actuarial fraud scoring works. National ID exposure is the heaviest factor because it enables new-account fraud rather than just card misuse, while a credit freeze is the single strongest mitigation because it blocks new-account fraud at the bureau.

Why does Identity Theft Risk matter?

It converts a vague sense of 'I've been in a few breaches' into a comparable number, and shows which of the available controls actually moves it.

What values do I need to enter?

This calculator takes 7 inputs: Breaches your data appeared in, National ID or SSN exposed, Card or bank details exposed, You reuse passwords across sites, MFA on every important account, Credit file frozen or locked, Times your data was listed for sale. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why is a credit freeze weighted so heavily?

Because it blocks the most damaging outcome. Most identity theft losses come from accounts opened in your name, and a freeze stops a lender from pulling your file, so the application fails regardless of how much data the attacker holds. It is free and reversible in most jurisdictions.

Is this a prediction?

No. It is a relative risk model built on published base rates and rough multipliers, useful for comparing scenarios and prioritising controls. Nobody can compute an individual's true probability of identity theft.

You might also need