Identity Protection
How to Check If Your Passport Information Was Leaked
Check the original incident notice, identify which passport fields were involved, and contact the issuing authority for guidance. Do not submit passport scans or numbers to an exposure checker or respond to unsolicited requests for payment.
What does passport-information exposure mean?
It means that passport-related data may have been accessed or shared outside its expected environment. It does not automatically mean the passport is invalid or that anyone used it fraudulently.
The issuing authority must determine whether replacement or another official action is required.
- Identify the exposed fields.
- Save the incident notice.
- Do not publish the passport image.
What scams can follow an exposure?
Scammers may pretend to be an embassy, airline, border agency, or identity service. They may request a passport image, one-time code, payment, or account login.
Verify every request through an official website and do not use contact details supplied only by the message.
- Urgent travel messages
- Fake government calls
- Requests for scans or codes
What must stay private?
Never submit a passport number, scan, authentication code, password, bank detail, or payment-card number to an exposure checker. Check only identifiers you own and are authorized to manage.
Exposure results cannot validate passport records.
Contact the passport authority
Use the official passport authority, embassy, or consulate website. Ask whether the passport should be reported, replaced, or monitored.
For U.S. passports, follow State Department guidance for lost or stolen passports. Other authorities may have different procedures.
- Use official government channels.
- Ask about replacement or reporting.
- Keep the case number.
Monitor identity and accounts
Review credit reports, financial statements, email security alerts, and government notices. Contact institutions immediately if you see unauthorized activity.
Consider a credit freeze when the exposure suggests broader identity risk.
- Review reports and statements.
- Secure your email.
- Consider credit protections.
Report confirmed misuse
Use IdentityTheft.gov or the relevant government process if your identity was misused. Preserve notices and do not upload passport records to unknown services.
Seek qualified help for legal notices or complex travel-document issues.
- Preserve evidence.
- Report confirmed identity theft.
- Seek qualified help when needed.
Know what an exposure check can and cannot show
A known-match result may provide context about an owned email address. It cannot prove that passport information was used, identify a criminal, or guarantee that no exposure exists.
Use official passport records for document decisions.
- Treat results as limited context.
- Do not access raw leaked records.
- Follow official instructions.
Frequently asked questions
Should I replace my passport after a leak?
Ask the issuing authority. Exposure alone does not determine whether replacement is required.
Can I check my passport number online?
Do not submit it to an exposure checker. Contact the passport authority through an official channel.
What if someone asks me for a passport scan?
Verify the request independently and use a secure official process only when necessary.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.