Online consumers in Canada, the UK, and the U.S. are the most frequent victims of identity theft, twice the rate of France, Germany and Spain, according to a new study released by online payment service PayPal.

The research, conducted by Ipsos, examined online security fears and habits in the United States, Canada, France, Germany, Spain, and the United Kingdom.

The survey found that 10% of online shoppers in Canada, the U.S., and the U.K. had experienced identity theft. This compares with about 5% in France, Germany and Spain. Approximately 25% of online shoppers in the three English-speaking countries knew friends or family who had their identities stolen. In Canada, Ontario was hardest hit with 12% saying they have been victims of identity theft, followed by Alberta (9%), and Quebec and BC (8%). Less than 6% of Atlantic Canadians said they have been victims of identity theft.

“Concerns about identity theft form a universal language,” says Michael Barrett, chief information security officer at PayPal. “The PayPal study sheds light on a few simple things that consumers can do to feel more confident in shopping online.”

While there is a national discrepancy between those who have been victims of identity theft, or know someone who has, (49% of Americans have been victim or know someone who has, versus 13% of Germans), the level of concern for identify theft is high everywhere. Over 85% of Canadians, American and British consumers are either slightly or very concerned.

“Canadians are aware of the issue of identity theft and are proactively doing things to reduce the odds of falling victim to it,” says Darrell MacMullin, country manager, PayPal Canada. “One interesting bit of information that came out of this survey is that we are a nation of shredders! 67% of us shred all financial statements, which is a simple, yet effective, way to help protect yourself.”

Though choosing and safeguarding passwords is one of the most important factors to online security, attitudes and behaviors vary greatly between cultures. German online consumers keep their passwords to themselves. Only about one in four (28%) has ever shared an account password with a family member or significant others. This compares with 60% of Americans, 56% of French, and 48% of Canadian consumers who shared passwords.

Almost half of online consumers in all countries surveyed use important dates, family member names, nicknames or pets’ names as their online passwords. Nick name (22%), pet’s name (21%), and birth or anniversary date (15%) are the top password choices in Canada. Canadian consumers are among the most lax when it comes to updating their passwords. Fifty-seven per cent of Canadian consumers change their passwords less than once per year or only when required to do so.

“Consumers should use different passwords for each site and be sure to include a combination of letters, numbers and symbols,” says Barrett. “And remember, using the same password at multiple sites is like using the same key for your house, car and office. If that key is stolen, then you’re more exposed.”

The survey found that about 40% of online consumers in all six countries use social networking sites, and some of these consumers display personal information that they also use for passwords.

The study was conducted by Ipsos Research from May 28 – June 3 in the United States, August 19 – 26, in Canada, and August 15 – 25 in Europe. The e-mail survey reached 1,000 panelists in each of the six countries: the United States, Canada, France, Germany, Spain and the United Kingdom. All respondents had shopped online in the past 90 days.