Scammers use details such as your ID number, phone number and email address to impersonate trusted organisations and make phishing attacks more convincing.