Utility bills leaked: what it means and what to do

What this data is

Bills or account records from electricity, gas, water, internet or phone providers, often showing your name, service address, account number, usage, amount due and payment details.

The risk on its own

Utility bills are commonly accepted as proof of address, so a leaked bill is a ready made identity document. It confirms who lives at a property and which companies they use. Account numbers on the bill can also help pass customer service checks.

The risk combined with other data

With your date of birth, ID number or bank details, a utility bill supports account opening, credit applications and address changes. Criminals can use real account numbers and amounts to send convincing fake bills. Usage data may also show when a home is empty.

How criminals use it

• A fraudster uses your leaked bill as proof of address to open a bank account or credit card.
• An email copies your real utility account number and asks you to pay an overdue bill to a new bank account.
• A caller claims your power will be disconnected today unless you pay by card over the phone.
• Unusually low usage data suggests a property is vacant.

What to do now

1. Log in to the utility account and check contact details, payment methods and recent bills.
2. Ask the provider to add a password or extra verification to your account.
3. Pay bills only through the official app, website or the payment details on a verified bill.
4. Consider a credit freeze if your bill leaked with date of birth or ID information.
5. Ignore disconnection threats and call the provider on its official number.

Frequently asked questions

Why are utility bills useful to fraudsters?

Many organisations accept them as proof of address, so they help criminals pass identity checks.

Will a utility company threaten immediate disconnection by phone?

Providers follow notice processes before disconnection. Treat urgent payment calls as suspicious and verify directly.

Should I close my utility account?

Usually not. Add account protection, monitor bills and watch for fraud using your address.

Breaches that exposed this data

• eThekwini Municipality: 2016-09-07, 82K accounts, Dates of birth, Deceased date, Email addresses, Genders, Government issued IDs, Names

Tools that help

• Email Breach Check
• Phishing Link Checker
• Email Header Analyzer

Related guides

• Identity Theft Checklist: What to Do in the First 48 Hours
• Credit Freeze Guide: US, Australia, UK and Canada Steps
• Phishing Email Received? What to Do in the Next 15 Minutes
• Senior Scam Protection: A Family Plan That Actually Works