Moving is one of the most exciting milestones in life. It's also one of the most dangerous periods for your personal and financial identity. Fraudsters know exactly when you're most vulnerable — and a change of address is the signal they're waiting for.
In Canada, identity theft costs victims an average of $10,000 and 200 hours of time to resolve. And the period immediately surrounding a move — when your personal information is scattered across a dozen institutions mid-update — is when you're most at risk. Here's exactly how it happens, and what you can do about it.
Why Moving Makes You a Target
Think about what happens the moment you move. Your personal information — your name, old address, new address, and account details — is simultaneously in transit across dozens of systems. Banks are being notified. Government departments are being updated. Physical mail is being redirected. Accounts are mid-update.
During this window, your information is more exposed than at almost any other point in your life. And fraudsters are specifically watching for this window.
The old address is the primary attack surface. After you move, the person or family who moves into your former home can receive mail intended for you — sometimes for months. That mail can contain enough information to impersonate you completely.
The 5 Ways Fraudsters Exploit a Change of Address
Intercepting mail at your old address
Bank statements, credit card offers, pre-approved loan letters, and government documents delivered to your old address are a goldmine for identity thieves. A single credit card offer contains everything needed to apply for new credit in your name — your full name, address history, and sometimes the last four digits of an existing account.
The person living at your old address doesn't need to be malicious for this to happen. Mail left in a communal mailbox, an unlocked lobby, or an outdoor box can be taken by anyone.
Fraudulent change-of-address submissions
This one shocks most people. A thief who knows your name and old address can submit a fraudulent mail forwarding request with Canada Post — redirecting your mail to their address. You won't receive any physical confirmation at your new address. By the time you notice mail has stopped arriving, weeks of financial correspondence may have already been harvested.
This attack is particularly effective because most victims assume the problem is a mail delivery error, not fraud.
Exploiting mid-update account gaps
When your address is partially updated across institutions — some have the new address, some still have the old — fraudsters can exploit the inconsistency. Financial institutions use address as one factor in identity verification. When your records don't match, it can create confusion that a sophisticated fraudster exploits to pass security questions or bypass two-factor verification tied to mailing address.
Pre-approved credit offers
Canadian households receive an average of 4–6 pre-approved credit card or loan offers per month. During a move, these offers continue flowing to your old address indefinitely until each financial institution is individually updated. Each offer contains enough personal information to submit a fraudulent credit application — and each approved application dings your credit and creates debt you'll have to spend months disputing.
SIM swapping using stolen mail data
SIM swap fraud — where a thief transfers your phone number to their SIM card — requires your name, address, and account number with your carrier. All of this can be found in a few pieces of mail delivered to your old address. Once they have your phone number, they can intercept two-factor authentication codes for your bank, email, and investment accounts.
The Warning Signs You've Already Been Targeted
Most victims of moving-related identity theft don't know it's happened until significant damage has already been done. Watch for these signals in the weeks and months after a move:
Mail you expected stops arriving at your new address
Unexplained drop in your credit score
Bills or collection notices for accounts you didn't open
Unfamiliar hard inquiries on your credit report
Unable to log in to online banking or email (password changed)
Calls from collectors about debts you don't recognise
CRA or government notices referencing a different address
Your phone suddenly loses service (SIM swap in progress)
If you spot any of these signs, act immediately: contact your bank, freeze your credit with Equifax and TransUnion, and file a report with the Canadian Anti-Fraud Centre at 1-888-495-8501.
How to Protect Yourself During a Move
Update your address at the source — not just with Canada Post
Mail forwarding catches some physical mail but does nothing to protect your digital accounts or prevent fraudulent re-forwarding. The only real protection is ensuring every institution has your correct new address before anyone has a chance to intercept your old mail. Relocasa does this systematically, across all your providers at once.
Opt out of pre-approved credit offers
Contact Equifax and TransUnion directly to opt out of having your information shared for pre-approved credit offers. This removes a significant source of personally identifiable information from your mail stream.
Check your credit report within 30 days of moving
Pull your free credit report from both Equifax and TransUnion within 30 days of your move. Look for any hard inquiries or new accounts you don't recognise. In Canada, you can request your report for free by mail or online.
Contact your carrier to add a SIM lock
Ask your mobile carrier to add a SIM lock or port-out PIN to your account. This prevents your phone number from being transferred to a new SIM without in-person verification, blocking the most common route for two-factor authentication bypass.
Notify the new occupants of your old home
If possible, leave a forwarding note for whoever moves into your old home asking them to return any mis-delivered mail. Most people are happy to cooperate. This gives you an extra layer of protection for anything that slips through before your address updates are fully processed.
Set a 90-day alert and review
Set a calendar reminder for 90 days after your move to review your credit report, check for any mail still arriving at your old address, and confirm all critical accounts have been updated. This is the window in which most moving-related fraud is discovered — and the earlier you catch it, the easier it is to reverse.
How Relocasa Closes Every Vulnerability
Each of the five attack vectors above has one thing in common: they all depend on your old address continuing to receive mail addressed to you. The moment that stops happening — because every provider has your new address on file — the attack surface disappears.
Relocasa works through your accounts systematically, notifying each provider of your new address so that your old address is removed from every system simultaneously. There's no 90-day window of exposure. No mid-update gap for fraudsters to exploit. No pre-approved credit offers sitting in a mailbox that isn't yours.
The result isn't just a cleaner address change — it's a fundamentally more secure move.
Don't leave your identity exposed during your move.
Relocasa updates your address with every provider that matters — closing the fraud window before it opens. Start today and move with confidence.
Secure Your Address ChangeTrusted by thousands of Canadians. Takes minutes to start.