Ukrainian Tax ID (ІПН) Identity Theft: How to Protect Your Most Sensitive Number

Your ІПН (Індивідуальний податковий номер) is a 10-digit number that connects to nearly every aspect of your financial and legal life in Ukraine. Unlike a phone number or email address, your ІПН cannot be changed. Once it is compromised, the damage can follow you for years. Yet most Ukrainians share their ІПН freely — writing it on job applications, sending it through Viber, and photocopying it at every government office. That carelessness has made ІПН-based identity theft one of the fastest growing crimes in Ukraine.

Here is why your ІПН matters more than you think, how criminals use it, and what you can do to protect yourself.

What Makes the ІПН So Valuable to Criminals

Your ІПН is tied to:

• Bank accounts — Required to open any account at PrivatBank, Monobank, or any Ukrainian bank
• Tax records — Your entire income and tax payment history
• Employment history — Every employer you have ever worked for
• Government benefits — Social payments, pensions, and humanitarian aid
• Business registration — Used to register as a ФОП (individual entrepreneur)
• Credit history — All loans and credit applications
• Property records — Real estate ownership and vehicle registration

With your ІПН and a few other pieces of personal data (full name, date of birth), a criminal can impersonate you for financial fraud.

How Criminals Exploit Stolen ІПН Numbers

1. Fraudulent Loan Applications

Criminals use stolen ІПН numbers to apply for microloans through online lending platforms. Many of these platforms have minimal identity verification — an ІПН, a phone number, and basic personal data are enough. The loans are approved, the money goes to the criminal, and the debt and collection calls go to you.

2. Fake ФОП Registration

Your ІПН can be used to register a fraudulent ФОП (sole proprietorship) in your name. This fake business can then be used for money laundering, tax evasion, or fraudulent invoicing. You may not discover it until the State Tax Service comes after you for unpaid taxes on income you never earned.

3. Government Benefit Fraud

Scammers use stolen ІПН numbers to claim government benefits, humanitarian aid, or social payments intended for you. This is particularly prevalent with wartime assistance programs distributed through Diia and PrivatBank.

4. Bank Account Opening

With enough personal data built around your ІПН, criminals can open bank accounts in your name. These accounts are then used for money laundering, receiving fraud proceeds, or cryptocurrency scams. When law enforcement investigates, the trail leads to you.

5. SIM Card Registration

Since Ukraine requires identity verification for SIM cards, stolen ІПН data combined with forged documents can be used to register phone numbers in your name. These numbers are then used for fraud, scam calls, or as burner phones for criminal activity.

Where Your ІПН Gets Exposed

Most ІПН theft does not happen through sophisticated hacking. It happens through everyday carelessness:

• Unencrypted messages: Sending your ІПН through Viber, Telegram, or SMS to employers, accountants, or government offices
• Photocopies: Leaving copies of your ІПН card at offices, HR departments, and service centers
• Data breaches: Employer databases, online services, and government systems that store your ІПН without proper encryption
• Social engineering: Scammers calling and pretending to be from the tax service, Diia, or your bank
• Public registries: Some Ukrainian public databases inadvertently expose ІПН information
• Wartime displacement: Lost or stolen documents during evacuation

How to Protect Your ІПН

Minimize Exposure

1. Never send your ІПН through regular messaging apps — Viber, Telegram, and SMS messages are not secure
2. Add a watermark to digital copies stating "For [specific purpose] only — [date]" so copies cannot be reused
3. Ask why before sharing — Many situations where someone requests your ІПН do not actually require it
4. Keep track of who has your ІПН — Maintain a list of every entity you have shared it with

Monitor for Misuse

1. Check your credit history regularly through the Ukrainian Credit Bureau (Українське бюро кредитних історій)
2. Monitor your tax records through the State Tax Service portal for unfamiliar income reports
3. Review your Diia account for government benefits or registrations you did not initiate
4. Set up Google Alerts for your ІПН number to catch any online exposure

Secure Your Digital Copies

1. Store digital copies in encrypted storage — not in your phone's regular photo gallery
2. Delete ІПН photos from messaging apps after they have served their purpose
3. Use a password manager to store the number if you need quick access
4. Shred physical copies when they are no longer needed

What to Do If Your ІПН Is Compromised

1. Check your credit history immediately for unauthorized loan applications
2. Visit your local tax office to verify no fraudulent ФОП has been registered in your name
3. Report to the Cyber Police at cyberpolice.gov.ua
4. Notify your bank and request enhanced security measures on your accounts
5. Monitor your Diia account for unauthorized document access
6. File a complaint with the Commissioner for Personal Data Protection

Unfortunately, you cannot change your ІПН. This makes prevention far more important than remediation.

Share Your ІПН Safely When Required

There are legitimate situations where you must share your ІПН — with a new employer, an accountant, a bank, or a government agency. When you do, stop sending it through Viber or Telegram. Use LOCK.PUB to create a password-protected link containing your ІПН and any supporting documents. Set it to expire after the recipient has accessed it. This way, your tax ID does not sit permanently in anyone's chat history, and you maintain a record of who you shared it with and when.

Ukrainian Data Protection Law

Ukraine's Law on Personal Data Protection (Закон України «Про захист персональних даних») gives you rights over how your ІПН and other personal data are processed. You have the right to:

• Know who holds your personal data and why
• Request correction of inaccurate data
• Demand deletion of data that is no longer necessary
• Object to processing of your data for certain purposes
• File complaints with the Commissioner for Personal Data Protection

Exercise these rights, especially when organizations demand your ІПН without clear justification.

The Bottom Line

Your ІПН is a permanent, unchangeable identifier tied to your entire financial and legal identity in Ukraine. Treating it casually — sending it through unencrypted messages, leaving photocopies everywhere, sharing it without questioning why — puts you at serious risk of identity theft that can take years to resolve.

Be deliberate about when and how you share this number. When sharing is necessary, use encrypted, self-destructing channels like LOCK.PUB instead of leaving your most sensitive identifier exposed in messaging apps. Your ІПН deserves the same protection as your passport — because in many ways, it is even more valuable to criminals.