Identity Theft Resource Center

Some Consumer Reports are Just Plain False

2012-02-21T10:35:00.000-08:00

A recently published consumer report is advocating the general idea that identity theft is a diminishing crime and that most services offered to protect consumers hold little, if any, value. The trouble is, their research in many places is superficial and/or incomplete, and in some places completely irrelevant. It seems as though for a piece regarding the existence of identity theft, the experts who provided opinions on the topics, were not experts in identity theft at all.

All major federal agencies that have anything to do with identity thefthave universally said that incidence of identity theft are getting worse, not better. That includes organizations like the FBI, FTC, and DOJ. According to the same Department of Justice study that is cited in questionable pieces includes the statement, “in 2010 about 7% of households in the US (about 8.6 million) had at least one member age 12 or older who had experienced one or more types of identity theft victimization.” While that is a slight decrease from the 2009 number of 7.3%, it should not be overlooked that the overall trend is still very much an upward one.

According to the aforementioned study only 5.5% (about 6.4 million households) experienced this same type of victimization in 2005. It should be noted that 2010 is the first year that any decrease can be seen anywhere in the numbers over the last five years.

Further, the Federal Trade Commission (FTC), the federal agency most responsible for monitoring identity theft activity in the United States, found that identity theft has been the top complaint from consumers in their annual survey for the past eleven years running. These are not merely concerns being expressed mind you. These numbers have nothing to do with subjective fears which can be influenced by paranoia and outside influences, but are actual complaints, i.e. incidents of identity theft being reported.

As the Victim Advisors at the ITRC have dealt with victims of criminal identity theft almost every day for the last ten plus years, we feel somewhat more qualified to talk about this issue from a truly “expert” perspective. Anecdotally, I can tell you that I speak with a victim of criminal identity theft nearly every single day. For something that “doesn’t happen a lot,” it sure happens a lot, and to those who have to go through it, it means a lot to have someone on their side helping them through it.

Think Your Mac is Immune to Malware? Think Again

2012-02-16T10:54:00.000-08:00

A recent study done by a cyber security firm known as F-Secure, found that 58 new threats to the Mac operating system were discovered between April and December of 2011. It is a commonly perpetuated falsehood amongst consumers that viruses and malware are only issues for PC platforms, not Macs. Unfortunately, this is a fallacy. Viruses are like any program; they have to be written with platform specific languages, with instructions written for that machine, operating system, type of processor, etc. What this means in simple layman’s terms is that in order to infect a Mac, you must develop software designed for a Mac.

So while it is technically true that Macs have historically been far less likely to become infected with a virus or malware, the reasons for this discrepancy should be examined. Is it really that Macs are so much more secure?The reality is that Macs are only less likely to be infected…so far, because there are less of them in operation as opposed to PC platforms. As such, they represent a lower possible return on any investment in time and money a cyber criminal or criminals may choose to invest in developing and spreading malware. At this point, because the Mac operating system still owns a minority of the market share, it is comparatively safer than PC operating systems…for now. One scenario that could happen to make attacks on Macintosh computers more common: an increase of Market share of MacOS X computers. Macs must control enough of the market to entice profit-driven malware and viruses to be more commonly developed.

As Internet usage and personal computer ownership continues to become more common the world over, it is entirely plausible that niche-market viruses could develop to focus on Mac operating systems.Remember that while the Mac system is - at this point - more secure, it is more a result of being a less common target of cyber-criminals, and not because the system is inherently more secure. Be wary of links from people you don’t know, or spam emails, as one wrong click can expose your Mac to malware in the same fashion it would a PC. As Macs become ever-more popular, expect the number of threats to increase in a linear fashion.

"Think Your Mac is Immune to Malware? Think Again" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click here to take the survey. We appreciate your efforts to help us make the internet safer.

M86 Cyber Threat Security Review

2012-02-15T10:31:00.000-08:00

M86 Security, a global expert in real-time threat protection recently published a security review on the most recent trends they are seeing in cyber-threats during the second half of 2011.After probing e-mail threat tendencies and the Web in general the report makes some interesting assertions. Most notably, taking note of spam trends, the study found that while spam emails on average diminished significantly from September to December of last year, the total amount of e-mail junk having malevolent attachments increased to over 5 percent from not even 1.

The study found that incoming amounts of spam declined to 70% of all incoming e-mail traffic during December 2011. While that seems a large number, when compared to the numbers in September, which were over 90%, it is clear that there was a significant down-trend in spam frequencyAdditionally, the study made note of the largest host countries for spam and malevolent email activity.

It was somewhat surprising to see that the USA at 51.4% was far and away the leader, with Russia in a distant second place at only 6%. The study showed the most prominent botnets were behind the maximum amount of e-mail junk. M86 reports that during 2011, personalized assaults have become increasingly sophisticated.

Direct assaults on national infrastructure and government sites rose through the use of key-logging.The overall gist of the study points to traditional email spam becoming less common. The threat of malevolent effect through email seems to have increased overall however, as targeted breaches and dangerous attachments to email have become more common. The study seems to indicate that email predators are switching tactics rather than reforming their practice. Be wary of emails from people you don’t know, and never under any circumstances download email attachments unless you are familiar with and trust the source of the email. Keep your anti-virus software up to date and contact the authorities if you feel you have been the victim of an email related scam.

"M86 Cyber Threat Security Review" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Beware of Online Love

2012-02-14T09:08:00.000-08:00

Well, Valentine’s Day is here again. And without putting too much of a damper on all the love in the air, we at the ITRC wanted to make sure we put out a short, friendly reminder about the risks of online dating scams. Remember not all online scams come off free sites like Craigslist or Facebook. Online dating sites can be a great way for busy people to connect with one another, as long as you exercise a healthy amount of caution and skepticism in your dating experience.

If you’re one of the growing number of individuals who make use of online dating services, even those with a membership fee, there is a risk becoming a scam victim.Your virtual sweetheart will gain your trust and later will become the victim of some tragedy that ONLY you and your money can save them from.

Does your online honey always respond to your emails within 15 minutes no matter what time of day you communicate? Is his/her grammar and spelling questionable? Meaning sometimes vague? None of these factors independent of one another necessarily indicates you’re speaking to a scammer, but taken together be mindful of these indicators as they may save your heart and your bank, from breaking.In addition to the aforementioned indicators, be especially concerned if your online sweetheart demonstrates any of the following behaviors:

The person wants to leave the dating site immediately and use personal email or telephone.
They claim they're in love within moments of meeting you online.
They say they're from the U.S. but are traveling overseas.
They plan to visit, but are prevented by some sort of emergency or deal gone bad.

If you suspect your dating site is promoting spam messengers or scammers, notify the Better Business Bureau at www.bbb.org.

"Beware of Online Love" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

The Court Experience for Identity Theft Victims

2012-02-10T09:26:00.000-08:00

A majority of identity theft cases never make it to court. If they do, you’ll want to arrive armed with the knowledge of what your rights are and what tools the law allows you to use to rectify your identity theft issue. Keep in mind, as you read this information, that each case is unique. What one victim experiences may not be your experience, even within the same jurisdiction and court. This general information is not meant to take the place of legal advice from an attorney, or advice from a DA victim assistance counselor. However, it might help you understand the complexities of the judicial process.

Throughout the process of clearing your name, you have most likely filled out a number of affidavits. On these forms is some information you might not want publicly known. This could be your new driver’s license number, mother’s maiden name, former addresses or names used, new address, birth date and account numbers.

Many victims do not know that you may request that identifying information be redacted (blackened out) from documents being put into court records or given to the defense attorney during discovery. Unfortunately, we have heard of cases where the perpetrator has gotten these documents and now has even more information than he/she originally had. Talk with the detective and DA on your case about your options. These will vary from jurisdiction to jurisdiction. Throughout the court process, take detailed notes. Note names of people who testify, the name of the judge, DA, court reporter and even the probation officer. Write down who said what, judicial rulings, anything the defendant says. Jot down questions about things you don’t understand or items you feel were ignored. You can ask the DA or victim assistance counselor about those later.

There are some very basic expectations you should understand for each step in the trial. At the arraignment, you probably will not be asked to speak, and may not be involved. Sometime after the arraignment, someone from the DA’s office may contact you to let you know about the date of the trial. Depending on your city or county, you should expect that this DA will not be the DA who later will try the case. Frequently, victim contact is just an administrative function, and the DA’s rotate this duty. If you become aware that your perpetrator has been arrested, and you have not been contacted by the DA, you should call the DA’s office and ask for the calendar coordinator. You may need to be persistent.

If you are involved in the arraignment, you will be a spectator. Typically, the defendant will go up to the front of the room along with his/her attorney. The court will read the charges and ask how they plead. Expect to hear the words, “Not guilty.” Do not react to this; this is just a legal process. The judge will quickly review the DA’s charges. Then the judge will set a preliminary trial date, a readiness hearing date and decide bail.

Following the arraignment, the formal trial will begin next. Keep in mind; this is the people’s case, represented by the prosecutor, not yours. The DA may not present the information you wish. He/she may not focus on points you think are important and may even settle for a plea bargain without consulting you.
Many factors figure into the way a prosecutor presents a case. The prosecutor must consider the type of penalty asked for, and how many counts (acts of criminal behavior) charged in the case. For example, sometimes your case is just one of several cases that are being charged against an alleged imposter. The DA will focus on the crimes that have the best chance of successful prosecution, or that hold the highest resulting penalty. Those crimes may not be yours. Sometimes a DA has a wealth of criminal activities to prosecute, but going after each incidence won’t help improve his/her case. The judge might see such actions as persecution, or a waste of time. Be aware that the penalty might not change between 31 counts and 15 counts in a specific case.

Again, take notes. Keep your cool and act in a professional manner. You may not even need to say anything until the imposter is found guilty and the court moves into the sentencing phase. If you are called to testify, follow the directions given to you by the DA’s office prior to trial.

If the defendant is found guilty, the judge will set a date for sentencing. If, however, a plea bargain has been struck, the case will move directly to sentencing. You will be notified of the date of this phase and you should talk with the DA prior to this date. You should also talk with the Probation Officer assigned to the case.

You have the right to submit a written Victim Impact Statement. If you want, you can also make a statement in court. The judge must read anything you submit to the court, prior to sentencing. Please do yourself a favor: Prepare a statement, keep it concise, accurate, clear, and complete. This is the best way to have your message heard clearly by the court. You may attach a financial statement detailing your costs and expected costs; include copies of any receipts that verify expenses.

If the imposter is found guilty, the judge will pass sentence. That sentence may include probation with review hearings. The Probation Department will give a report to the judge regarding probation progress (or lack thereof), and law enforcement is also permitted to search the convicted felon’s residence, car, person and belongings for any probation violations. Before a Review Hearing, victims who suspect that the felon is breaking probation or the law should notify either the police detective that was on the case or the assigned probation officer. Review Hearings give victims another chance to address the court, especially if probation violations affect them.

"The Court Experience for Identity Theft Victims" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Direct Connections to the Internet Protecting Yourself and Your Information Against Intruders

2012-02-09T10:20:00.000-08:00

In today’s world of commerce and travel, we’re all used to many public places offering free wifi to consumers. Open wifi connections are convenient. They allow us to leave the office and do work outdoors, do homework at a coffee shop rather than at home, or access important information almost anywhere. But though open wifi connections are great in public, they can lead to serious problems at home. Even today, thousands of homes do not have a firewall or security password on their wifi connection. These homes are broadcasting internet access, sometimes as far as a block away. Not only does this allow their neighbors to acquire free internet access, it can allow anybody within range to view the files that are on your computer, and download sensitive information such as your banking formation, tax documents, social security number, stored pictures, and anything else on your computer.

In rare instances, the thief used the victim’s computer to store illegal material such as child pornography so that the authorities wouldn’t find it on the thief’s computer. But luckily, there are several easy things that you can do to protect yourself from this intrusion.

Install a Firewall – A firewall determines who has access to your family’s network and who doesn’t. Whoever has access can go online and share files between computers. It is always important to make sure your firewall is constantly ENABLED and that it recognizes which computers can have access as well as have a password to enter.
You Need a Virus Scanner – regardless of if you have a Mac, PC, or Lenox based computer, you need to have a virus scanner. There is no such thing as a computer that is “virus-proof”. Hackers and criminals are clever and there is a code for every type of computer and program. A while ago, there was a virus code that could be imbedded in .jpg files. These viruses can open backdoors in your firewall, record everything you type, or allow thieves to insert other malicious programs or files onto your computer.
Be careful about what you download. Some files on the internet may look harmless but actually contain malware such as Trojans. Pay attention to your virus scanner while downloading new products. If it doesn’t like a program, don’t download or install it.

Initial protection from outside intrusion of your wifi based network is relatively easy. If you need assistance setting up your firewall or picking a virus scanner, consult your local computer expert.

"Direct Connections to the Internet Protecting Yourself and Your Information Against Intruders" was written by Kat. Kat is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Low Tech Ways to Fight Identity theft

2012-02-08T12:29:00.000-08:00

“What sort of things can I do to protect myself from Identity theft?” It’s a question asked of us at the ITRC every day. It’s without a doubt the most common question submitted by non-victim consumers, and it’s a valid one. Here are a few low-tech tips anyone can do to reduce their risk of identity theft.

Shred your Mail: A cross-cut paper shredder is a cheap and effective way to reduce your likelihood of identity theft. One of the primary ways identity thieves gain access to victim information is through old correspondence. Whether it be an old tax return, a bank statement, or an insurance bill, these simple pieces of mail are like gold to an identity thief, as these documents may hold troves full of your personal and sensitive information. Shredding old mail is a great and easy way to eliminate this risk.

Avoid carrying sensitive information in your wallet or purse: This one is one of the most often ignored pieces of advice on identity theft. It is also ironically enough one of the more common sources of identity theft issues. We receive calls literally everyday from victims who’ve had their wallet or purse lost or stolen, and because they made a habit of carrying their social security card, and/or birth certificate on their person, they are now dealing with an impending identity theft issue when they might have only had to worry about the relatively temporary problem of replacing credit cards and a drivers license. Unless you need them that day, never carry your social security card, birth certificate, or any other sensitive information on your person. In the event of a loss or theft, you’ll be incredibly glad you didn’t.

Know your billing cycles: Even in today’s technology prevalent world, many people still receive their various bills through good ole’ fashioned snail mail. Pay attention to when your various bills usually arrive (we’re talking dates here not days of the week). If a bill is more than a few days late it could be an indication that you’re being targeted for identity theft. What this could potentially mean, is that either you have a thief physically casing your mailbox and is trying to get away with quietly pilfering a few loose pieces of relevant looking correspondence in hopes of capturing some of your information. The other possibility is that someone may already have access to your identity, and is using that control to alter your listed active addresses with various accounts. Either way, keeping track of your billing statement cycles can be a low-tech yet effective way at tipping yourself off to potential trouble.

"Low Tech Ways to Fight Identity theft" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

How Identity Theft Affects your Taxes

2012-02-07T13:10:00.001-08:00

There are several situations in which identity theft can affect the processing of a tax return. Most involve someone misusing someone’s Social Security number (SSN), which the IRS uses to make sure the filing is accurate and complete and that they get any refund they are due.

It could be a sign of identity theft if a taxpayer receives an IRS notice that:

More than one tax return was filed for one tax year, or
IRS records indicate a taxpayer received wages from an employer they don’t know.

If someone uses a taxpayer’s SSN to file for a tax refund before the taxpayer does, the IRS may believe the taxpayer has already filed and received their refund. The taxpayer might not know this until they get a letter from the IRS indicating that more than one return was filed for them.
If someone has used a taxpayer’s SSN to get a job, the employer may report that person’s income to the IRS using the taxpayer’s SSN, making it appear to the IRS as if the taxpayer did not report all of their income on their tax return. In that situation, the IRS might send the taxpayer a notice that they appear to have received wages from an employer they don’t know.

If You Suspect Identity Theft - Contact the IRS

If you get a notice from the IRS, respond immediately to the name and number printed on the notice. If you think you have tax issues related to identity theft, let the IRS know as soon as possible, even if you don’t have any evidence that it’s affected your tax return. Contact the IRS Identity Protection Specialized Unit (IPSU) at 1-800-908-4490. The IPSU’s hours are 8:00 am to 8:00 pm (your local time).

Specialists will work with you to get your tax return filed, get you any refund you are due, and protect your account from identity thieves in the future. You can document the identity theft by submitting a police report or the IRS ID Theft Affidavit (Form 14039).

You’ll have to prove your identity with a copy of a valid government-issued identification, like your Social Security card, driver’s license or passport.

We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Identity Theft and the Elderly

2012-02-06T14:53:00.001-08:00

Identity theft is a crime that does not discriminate based on gender, ethnicity, or age. It is a serious crime, often times harbored by opportunity. The concept of opportunity holds relevant with the elderly populations who have become common targets to identity thieves. Schemes to defraud elderly victims are employed daily. While some may fall victims to telephone phishing scams, which may lead to identity theft because their personal identifying information has been revealed to an inquiring stranger, others fall victims to their own relatives or those closest to them.

How does identity theft happen to the elderly? In recent news, a 22-year-old woman was charged with 10 counts of forgery for stealing 10 checks from her elderly great-great-aunt and fraudulently cashing them. In other news, a woman was indicted for 46 felony charges for stealing over $300,000 from her elderly patient for whom she provided home health care services. The thief carried her scheme through a period of five years. The elderly often require care that forces them to have others manage their information, thus making them vulnerable to identity theft.

The elderly commonly receive “marketing” calls selling services that require the “victim” to provide personal information, which often times includes the Social Security Number. These calls vary from providing discounted Medicare services, winning prices, and often times debt consolidation. Thieves take advantage of the willingness of these victims to provide their personal information.

The elderly generation does not only have to deal with the issues above, often times they deal with issues concerning their Medicare cards – which displays their Social Security Number translated into their Medicare number. The elderly do not necessarily have to carry their Social Security card to fall victims in case of a lost or stolen wallet; the number is on other identifying documents. The loss of a Medicare card is treated as the loss of a Social Security card because it can lead to identity theft.

"Identity Theft and the Elderly?" was written by Gabby Beltran. Gabby is the Public Information Officer and a Bilingual Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Financial Identity Theft: The Basics

2012-02-03T14:29:00.000-08:00

Almost everybody has heard the horror stories and nightmarescenarios of an identity thief gaining your personal information and using itto establish credit card, loans and other lines of credit that you would nothave applied for yourself. But what these scenarios rarely talk about are thesteps you can take to prevent such and event from occurring, or what to do toclear your name should you find yourself in this situation.

Something that anybody can do, at any time, is place a free90 Day Fraud Alert on their credit reports. This requests that credit issuers(credit card companies, cell phones, etc) contact you first before they approveof any applications for credit. This will not affect accounts you have open oryour credit score. As well, you can replace the fraud alert every 91 days at nocharge, or extend it to seven years with a police report. The fraud alert canbe applied for over the phone or going to each credit agency’s websitedirectly. It’s always a good idea to place the fraud alert with all threecompanies yourself to make sure that possible fraud doesn’t get in the way ofyour protection.

Once you place the 90 Day Fraud Alert the credit reportingagencies will send to you a letter with instructions on how to gain a free copyof your credit report. This way you canmake sure that everything is ok with your credit reports and fraud isn’t takingplace. This report does not count towards your annual free credit report,allowing you to save that one for later.

But what should you do if there is something on your creditreport? The first step is to take your credit report to your local policedepartment and file an Identity Theft Report. It is important that you specifyIdentity Theft and not fraud because they are two different types of crime andfraud will not get you a police report.

Once you have obtained a police report, contact thecompanies that are reporting fraudulent accounts. Request to speak to theirfraud or identity theft department and inform them of the fraudulent account.Ask them to send to you their identity theft packet. If they don’t have one,you can use the Identity Theft Affidavit on the FTC’s website. Fill out thesedocuments, get them notarized, and send them back to the company/s with a copyof your police report. Some companies will ask for other things like aphotocopy of your driver’s license. Make sure you send these documents withyour packet. Make sure you send it Certified Mail Return Receipt so that youget proof of when they received your paperwork.

Continue to talk to these companies and, if need be, sendthem any documents they may request. If all goes well, they will recognize thiswas identity theft and they won’t hold you responsible. Make sure you get thisin writing. Computers get error and humans make mistakes. These letters ofclearance come in handy when this happens.

For more long term/permanent options for protection fromidentity theft (especially after you have already been victimized) look intofreezing your credit reports with the three credit reporting agencies. Theprocess is slightly different for each state, but all states offer the freezefor free to victims with a police report.

For more information the ITRC has literature on financialand identity theft protection at www.idtheftcenter.org.

"Financial Identity Theft: The Basics" was written by Kat. Kat is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

How Wifi Hotspot Hacks Occur

2012-02-02T09:28:00.000-08:00

Imagine these scenarios:

You are on vacation and you open your laptop in your hotel room. You log into the public wifi network, and quickly agree to the Terms and Conditions (without reading them of course), and start to do your normal Internet activities. For just a second, you have a fleeting thought: “Is my computer at risk?” And then you begin your normal Internet activities and quickly forget all about it.

You are waiting to catch your flight in an airport and, after grabbing a cup of coffee and opening your laptop, you see that there’s a “Free Public Wifi” network available. You login to your banking account to transfer funds. You have a vague sense that you might not be doing something safe, but you figure that you’re only going to be online for fifteen minutes, so you’re probably okay, right?

How Safe Are Wifi Hotspots?

Many of us assume that using a wifi network at a hotel or airport is the same as logging into our network at home or at the office. But the risks of using wifi networks at a hotel or airport are exponentially greater than those experienced at home or in an enterprise setting.

For example, while sharing folders, printers, desktops, and other services can be useful at home or in the office, doing so is inappropriate on a public network, where competitors or hackers can access this information.

Most private networks use firewalls to defend users against Internet-based attacks. This is not necessarily true in public wireless networks, where security practices vary widely. You may assume you are safe from outside attacks, but you really have no idea whether any firewall lies between your laptop data and the Internet.

Business travelers willing to connect to any network that offers free Internet access are especially vulnerable to such attacks. It is literally impossible to tell the safe networks from the bad ones. Wireless eavesdropping is possible everywhere. Only a small percentage of public networks prevent wireless eavesdropping, and many networks leave wifi users completely responsible for their laptop security, with extensive or complete file and service exposure.

So What Should I Be Worried About?

Okay, so now you are probably aware that using a public wifi network while on the road exposes you to a lot of security risks. But what risks are we talking about exactly?

The following is a list of different types of hacks that can occur in public wifi hotspots:

Sniffers: Software sniffers allow eavesdroppers to passively intercept data sent between your web browser and web servers on the Internet. This is the easiest and most basic kind of attack. Any email, web search or file you transfer between computers or open from network locations on an unsecured network can be captured by hackers. Sniffing software is readily available for free on the web and there are 184 videos on YouTube to show budding hackers how to use them. The only way to protect yourself against wifi sniffing in most public wifi hotspots is to use a VPN, such as PRIVATE WiFi™.

Sidejacking: Sidejacking is a method where an attacker uses packet sniffing to steal a session cookie from a website you just visited. These cookies often contain usernames and passwords, and are generally sent back to you unencrypted, even if the original log-in was protected via HTTPS. Anyone listening can steal this log-in information and then use it to break into your Facebook or gmail account. This made news in late 2010 because a programmer released a program called Firesheep that allows intruders sitting near you on a public wifi network to take over your Facebook session, gain access to all of your sensitive data and send viral messages and wall posts to all of your friends.

Evil Twin/Honeypot Attack: This is a rogue wifi access point that appears to be a legitimate one, but actually has been set up by a hacker to eavesdrop on wireless communications. An evil twin is the wireless version of the “phishing” scam: an attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. When a victim connects, the hacker can launch man-in-the-middle attacks, listening in on all Internet traffic, or just ask for credit card information in the standard pay-for-access deal. Tools for setting this up are easily available (e.g., Karma and Hotspotter). One recent study found that over 56% of laptops were broadcasting the name of their trusted wifi networks, and that 34% of them were willing to connect to highly insecure wifi networks.

ARP Spoofing: Address Resolution Protocol (ARP) spoofing, also known as ARP flooding, ARP poisoning or ARP Poison Routing (APR), is a technique used to attack a wireless network. ARP spoofing allows an attacker to sniff traffic on a LAN and modify or stop the traffic altogether. This attack can only occur on networks that make use of ARP and not another method of address resolution. ARP spoofing sends fake, or “spoofed”, ARP messages to a LAN which associates the attacker’s MAC address with the IP address of the victim. Any traffic meant for the victim’s IP address is mistakenly sent to the attacker instead. The attacker could then forward the traffic to the actual default gateway (passive sniffing) or modify the data before forwarding it (man-in-the-middle attack). The attacker could also launch a denial-of-service attack against a victim by associating a nonexistent MAC address to the IP address of the victim. A successful APR attempt is invisible to the user.

“Free Public Wifi” Rogue Networks: “Free Public Wifi” networks are ad-hoc networks advertising “free” Internet connectivity. Once you connect to a viral network, all of your shared folders are accessible to every other laptop connected to the networks. A hacker can then easily access confidential data on your hard drive. These viral networks can be used as bait by an Evil Twin. “Free Public Wifi” networks turn up in many airports. Don’t connect to these networks and you won’t infect your laptop. If you find this kind of network on your laptop, delete it and reconfigure your adapter to avoid auto-connecting to any wireless network.

Man-in-the-middle Attacks: Any device that lies between you and a server can execute man-in-the-middle attacks, which intercept and modify data exchanged between two systems. To you, the man-in-the-middle appears to be a legitimate server, and to the server, the man-in-the-middle appears to be a legitimate client. In a wireless LAN, these attacks can be launched by an Evil Twin.

You Should Know What You Are Agreeing To

Remember those Terms and Conditions that you agreed to and didn’t read? Well, we’ve actually read them, and here is what some of them say:

Starbucks: It is the Customer’s responsibility to ensure the security of its network and the machines that connect to and use IP Service(s).
Boingo Wireless: There are security, privacy and confidentiality risks inherent in wireless communications and technology and Boingo does not make any assurances or warranties relating to such risks. If you have concerns you should not use the Boingo software or service. We cannot guarantee that your use of the wireless services through Boingo, including the content or communications to or from you, will not be viewed by unauthorized third parties.
JetBlue: Wireless internet connections such as that provided through the Service are not secure. Communications may be intercepted by others and your equipment may be subject to surveillance and/or damage. Since the wireless connection providing you with access uses radio signals, you should have no expectation of privacy whatsoever when using the service. Accordingly, in providing this service, JetBlue cannot and does not promise any privacy protection when you use the service. It is your sole responsibility to install and deploy technological tools to protect your communications and equipment that may be compromised by use of a wireless network.”

So How Can I Protect My Laptop?

Okay, so now you know how dangerous wireless networks can be, and the various kinds of attacks you may face when using them. So what specifically can you do to protect yourself and your data?

Below are some proactive steps you can take to protect yourself when using such networks, and services you can use that provide laptop security.

Disable or block file sharing

Enable a Windows Firewall or install a third party personal firewall
Use file encryption
Most importantly, use a VPN

The one thing that they all have in common is that it is your responsibility to protect yourself. The best way to protect your sensitive information is to use a Virtual Private Network, or VPN, which encrypts the data moving to and from your laptop. The encryption protects all your Internet communication from being intercepted by others in wifi hotspots. In addition, VPNs can prevent hackers from connecting to your laptop and stealing your data files.

The above article was posted on Friday, July 1st, 2011 by Jared Howe for Private WiFi. Private WiFi is a personal VPN software that encrypts your data in public wireless hotspots. Using our easy software prevents identity thieves from hacking into your emails, online banking, social media accounts, and other personal information. You can check them out at www.privatewifi.com.

Think Mail Fraud is an Outdated Crime? Think Again

2012-01-31T09:43:00.000-08:00

While most of the focus on fraud these days is centered on hacking and cyber scamming, it’s important to remember that mail fraud still has a very real impact in the fraud space. Scams involving stolen property, reshipping, money laundering, are all very real dangers which are still prevalent today. Last week, we asked Ricky Vida, an inspector with the US Postal Inspectors Office for some information on what he’s seeing in the mail fraud space, and what sort of things consumers should be on the lookout for.

“One of the primary things we like to remind people of is that all foreign lotto’s are illegal.” Foreign lotto’s scams have become more prevalent in the last few years, as criminals have figured out that certain technologies can be used in collusion with the traditional mail service to make for a more effective scam. “Technologies like Google Earth and social media platforms are effective ways of learning more intimate information about who you are and where you live.” This background research can make an email scam aimed at inducing the victim to send money through the mail so much more personal and hence harder to identify as a scam.

Once you send money or goods through the mail to a foreign country like Jamaica or Nigeria, kiss it goodbye. By the time you realize you’ve become the victim of a mail scam, it will be too late to recover any stolen funds or property. The U.S. Government has no jurisdiction and little influence in the countries where many of these type of scams come from, leaving very few if any real options to redress any issue. In addition, you may now also have had some role in handling stolen property, mailing or cashing fraudulent checks, or sending money to criminal enterprises.

So what can the consumer do to lower their risk of falling victim to mail fraud? A little skepticism goes a long way. So you’ve won a Jamaican lottery (see above reference to foreign lotto’s), well did you buy a ticket? So you’ve won a new car and they want you to pay the taxes? Do you remember entering a give-away? Are they ready to make delivery on the car or do they want payment of the taxes up front and in full before delivery? You’ve won a free vacation? Well again, did you enter a contest? And if you’re a winner, why exactly do they need your banking information?

If you suspect you’ve been or the victim or the attempted victim of mail fraud or a related scam contact the Us Postal Inspectors office at (877) 876-2455 or at www.usps.com/postalinspectors

"Think Mail Fraud is an Outdated Crime? Think Again" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

Craigslist Scams

2012-01-30T10:17:00.000-08:00

Craigslist has become one of the prominent online tools to find…well just about anything. From job offers, to used cars, the site is one of the most convenient and comprehensive ways to buy or sell nearly any good or service. The ease of use and lack of expense draws all sorts of people to the site…and cyber criminals, fraudsters, and identity thieves are no exception.

Craigslist’s biggest strength is also its biggest danger. This is because nothing posted on Craigslist is verified by the site operator or any independent watchdog. The result is that you never really know until you know if you’re getting what was advertised.Be wary of any online forms seeking personal information. If it’s a job offer, have you been offered the job? Have you met the employer in person? Been to their office? Do they have a legitimate presence online? A Customer service department easily reachable by phone? If you’re unsure, DON’T give out any vital information, such as bank account numbers, social security number, or date of birth. There’s no guarantee the offer is a legitimate one.

Same goes for virtually anything else. Looking to rent an apartment? Have you seen the building and talked to the land lord in person? No legitimate land owner will need your personal information until you’re actually ready to move in. There’s really no need to have that information ahead of time via email. If they insist, there’s a good chance they’re attempting to scam you.Found that beautiful jet-ski you were looking for with a price that looks too good to be true? It probably is. Don’t buy it online. Request to set up a meeting so you can see the equipment and meet the owner for yourself. If they are hesitant to meet with you, keep right on searching, it’s a scam.

Craigslist can be a useful tool, but it’s important that consumers use it understanding it’s much like the virtual wild west. No law, no protection beyond your own skepticism. Be especially wary of any prompt to give personally identifying information early on in the process, before meeting the other party in person, or before doing some independent research on the other party or item. A healthy dose of paranoia will allow you to find the good or service you need, without becoming victim of the all-to-common Craigslist scam.

"Craigslist Scams" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

How Much Is Your Identity Worth….on the Black Market?

2012-01-26T10:57:00.000-08:00

By now it’s no secret, that the theft of your personal identifying information can be used by criminals to profit and can seriously damage your financial profile, costing victims on average several hundred dollars and over 30 hours of time spent resolving their identity theft issue (according to a recent Javelin study on identity theft). While we know that an individual’s identity is incredibly valuable to the individual, recently we asked the question, “Just how much is your identity worth…to the thieves themselves?” The answer might surprise you.

According to a study published by Symantec, the answer is “not much.” Criminals selling personal information to other criminals is an ever more common trend. Symantec looked at various aspects of an individual’s identity, including age, financial situation, level of online activity etc. and found that, on average a criminal can purchase PII from another criminal on the black market for somewhere between 12 and 16 bucks. Nope that’s not a typo. Not missing any decimal places. The going rate for all your personal information, and the implied ability to completely destroy your life, is less than the cost of taking a date to the Friday night movie.

How is this possible?

Well it seems that, as is commonly the case in cybercrime, the thieves are often frustratingly intelligent. A certain sub-class of identity thief has realized a simple truth: that harvesting the personal information of larger numbers of consumers through use of hacking and other internet-related techniques, and then reselling that information to other fraudsters is potentially even more profitable and far less risky than making use of an individual identity themselves. Rather than using a consumer’s identity for financial gain, a move that undoubtedly leaves a trail to follow; this class of thief has discovered that stealing this information in volume and storing it is relatively easy. Re-selling this information to other criminals online and letting them attempt to gain from it eliminates much of their risk. Meaning that if and when the authorities do catch up with the criminal who’s using your social security number to run up your credit, really the one they’re catching is only the crook that’s using your information, and not necessarily the crook who actually stole your PII (personal identifying information) to begin with.

If you can develop a database with potentially thousands of pieces of consumer PII, and re-sell them at 15 bucks a pop, that’s a nice payday, with very little chance of getting caught. While some may choose to interpret this as an indication that, in fact, your identity isn’t that valuable, I would interpret it to mean that this practice has become disturbingly common. While complete protection is impossible, it serves as a fairly staunch warning that consumers should take what steps they can to ensure their information is as safe as it can be. Develop a healthy skepticism in your dealings online and vigilantly monitor your credit. After-all, if your information ends up on one of these virtual black markets, full of unscrupulous people, you have to ask yourself…“who doesn’t have fifteen bucks?”

"How Much Is Your Identity Worth….on the Black Market?" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

GAMEOVER - New Banking Trojan

2012-01-25T10:49:00.000-08:00

Well, those of you who have been paying any attention at all to cybercrime have heard of the Zeus Trojan. This nasty Trojan virus was first discovered about 4-5 years ago, and became widespread in 2009. The Zeus Trojan steals information on an infected computer by key-stroke logging and “form grabbing.” This allows the criminal to gain access to your logon credentials for social media sites (a big target), email accounts, and your financial accounts. If your username and password are given out to the criminals by the Trojan, it is not rocket science to log in to your financial account and direct some money out of the account. One large FBI case in 2010 led to over 90 arrests, and was responsible for ~$70,000,000 in thefts. The U.S. is one of the top 5 countries in the world for infection rate, and Wikipedia indicates that 3.6 million U.S. PCs may be infected. Believe it or not, the large majority of these infections are activated by computer users clicking on links in an email, or navigating to an unsafe web page. As Homer says... “Doh!”

Now, with the Zeus Trojan still on the radar, Government Computer News (www.gcn.com ) reports that a new variant of Zeus is being spread by, you guessed it, “phishing emails purportedly from financial institutions.” These institutions include NACHA, the Federal Reserve Bank, and the FDIC, very recognizable names. The bait email warns of a problem with a bank account or recent funds transfer and a link in the email points to a website where the consumer can “correct the problem.” A click on the links in the fake email takes the user to a website which downloads and activates the Trojan. Once the virus is quietly active on your PC it begins to target your banking information, and just as quietly sends it out for use by the criminals. NO, you don’t get pop-ups or nag advertisements from this one. In fact, you don’t even know it is in operation, if your antivirus didn’t catch it. With your financial credentials now in their possession, the thieves will find a way to move your money to “mules,” who help launder the money or convert it to expensive items that can be sold for cash.

It is interesting to note that many of the “mules” today may be ordinary citizens who are lured into a scheme to “work at home” or “reship merchandise.” They are lured by the chance of having a paying job in our difficult economic times. It’s sad, but these individuals may end up on the wrong end of a criminal investigation by being involved in these criminal activities.

Whether as a financial victim (computer user), or as a “mule” who ends up in a criminal investigation, the Game Over Trojan has something for you. So what to do?

Buy good antivirus software and keep your antivirus up to date. Schedule full scans every few days. Get a “second opinion” by scanning every few weeks with a free online antivirus scanner. Several reputable antivirus companies offer this service without charge.
Be very wary of emails which you were not expecting, especially if you don’t have an existing relationship with the purported sender. As a rule, don’t click on links in emails unless you have definite knowledge about the website. Remember that the link visible name may not be the same as the link target website. Good AV software will provide knowledge of known good websites. Most of those 3.6 million infected PCs got that way by clicking on the email link.
If you get an email that you feel might be important, contact the sending agency directly rather than click on any links. Remember, clicking on the link is exactly what the criminals desire you to do.
Do not entertain any on-line job offers that cannot be vetted by first directly contacting the company involved (by other means) and checking to see if the job offer is really from that company. If they don’t have brick stores somewhere, be suspicious. If they do, you can fact check that with a Google search, or other resource.
If a job requires you to cash a check (you’ll get your share), or activate an account, it is most certainly not legitimate. Get out!
If a job requires you to receive and resend shipments for any reason, it is not legitimate. Really, you think you can replace US Postal Service, UPS, FedEx, DHL, and other worldwide shipping companies? Any small company (and we are about as small as it gets) can have world-wide shipping accounts with these legitimate companies very easily. The criminals want you to ship it so that you will be the link between the criminal and law enforcement. Don’t do it.

I’m sure that next year we will be talking about the “Game On” Trojan or similar. Why? Because these exploits continue to work, and make the criminals lots of money. Your good deed is: Don’t be a victim!

We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

ITRC Facebook Survey

2012-01-24T10:11:00.000-08:00

The Identity Theft Resource Center (ITRC), anationally recognized non-profit focusing on identity theft and related issues,has just launched a Facebook Social Media Survey to measure interaction trendsbetween internet users and Facebook. The ITRC is conducting this surveyin order to better help victims with Facebook-related identity theft concernsand issues.

“As ourworld transforms more and more into a cyber environment, social networkingbecomes a larger part of our lives. Because of this, it is important tounderstand how social networking users comprehend the safety risks whileengaging on such sites. This can help in efforts to protect consumers bydefining problem areas.” says Nikki Junker, Social Media Coordinator for theITRC. “The survey results will help the ITRC in developing informativematerials and documents. These publications aim to educate consumers inorder to help minimize their risk of becoming victims of identity theft andmitigate the losses of those who have already become victims.”

To enter the contest just visit the ITRC’s websiteand click on the Do You Facebook? link or Click here to take the survey directly.

The contest will run from January 20, 2012 through February 28, 2012. Five $100 prize winners will be announced and contacted on February 29,2012. The survey results will be released on the ITRC website shortlythereafter.

How Do You Track Identity Theft?

2012-01-24T09:40:00.000-08:00

In cases of identity theft, the burden of proving their innocence typically rests on the victim’s shoulders. Many law enforcement agencies simply do not have the resources to conduct financial crime investigations, despite the budgetary increases. However, victims can coordinate their efforts with law enforcement to prove a case of identity theft.

Victims are often unaware of the evidence that financial crimes can leave behind. For these cases the following evidence may be available:

Application forms or application records
Signature cards (for any checking or bank account)
Credit history records (found on credit reports)
Transaction records
Billing statements
Shipping records
Videotapes (often part of security system monitoring cash registers)
Bankruptcy records

For victims of financial identity theft, it is important to note that in June 2004, provisions were added to the Fair and Accurate Credit Transaction Act (FACTA) – 609(e). One of these provisions states that any business entity should purport victims of identity theft with the credit applications and the transaction records for accounts that were reported by the victim as being fraudulent accounts. In such cases, the victim’s identifying information was used fraudulently.

In cases of criminal identity theft, the following pieces of evidence may be available for collection:

Department of Motor Vehicles records
Arrest records and outstanding warrants, criminal database searches
Passport records

Furthermore, in cases where the imposter uses your information to create a new life, or assume your identity other traces of evidence may be available, including those previously mentioned:

Social Security benefit records
Federal IRS tax records, state tax records
Employment records
Employee photo
Mortgage and property records
Fictitious business name applications and records
Business licenses
Medical and health insurance records

The trail of evidence will depend on the extent and type of the crime. This trail of evidence can help to identify the imposter, records can provide proof that signatures on forms or applications are not that of the victim, records can show trends which may be valuable to law enforcement, and but not limited to, it can establish a method of theft. However, victims should note that although there are certain records they can obtain, there are others that may only be available by subpoena – to release to law enforcement. Victims should direct their concerns to fraud investigators or their assigned detectives.

"How Do You Track Identity Theft?" was written by Gabby Beltran. Gabby is the Public Information Officer and a Bilingual Victim Advisor at the Identity Theft Resource Center. We welcome you to post/reprint the above article, as written, giving credit to and linking back to www.idtheftcenter.blogspot.com.

Protecting the Identity of the Deceased

2012-01-23T14:14:00.000-08:00

The loss of a loved one can be hard on those left behind. Not only are you going through the process of grieving, but you also have to take care of all of your loved-one’s affairs as soon as possible. This can be a difficult process for the person left with the task of executor. Below are some suggested steps that can and need to be taken to not only put your loved-one’s affairs in order but also to protect them from identity theft.

Don’t be overly specific with the obituary. Family tends to want to put everything about a person in their obituary. It’s only natural. But too much information can lead potential thieves to public records where they can gain access to your loved-one’s information. Don’t put specifics like their birth date or their last address. Also, specific locations of where they had lived in the past can also be used to track down their identity.
Acquire at least 12 copies of the death certificate when it becomes available. You’ll need these when talking to government agencies and the credit agencies.
Notify the Social Security Administration as soon as possible.
Notify the three credit reporting agencies of your loved-one’s passing by mailing them a copy of the death certificate. This website will walk you through it.
Get the last credit reports from the Credit Reporting Agencies (CRAs) so you know what accounts need to be closed and what debts need to be paid out of the estate.

Other groups that may need to be notified:

Insurance companies – auto, health, life, etc.
Veteran’s Administration
Immigration Services
Department of Motor Vehicles
Any membership programs- video rental, public library, fitness club, etc,

Losing a loved one is hard. But hopefully this information will help ease the processes of taking care of their affairs after they have gone.

If Scams Were Real: January 18th 2012

2012-01-18T14:08:00.000-08:00

Today, if scams were real:

Major Cheryl James desperately needs to speak with me, but didn't put anything in her email; just a subject and an attachment...if scams were real...
The US Financial Resource Team wants me to give them my social security number to see if I qualify for any grants. How nice of them... if scams were real...
I won $500 in free casino play for a casino site based out of London... if scams were real...

Victim of Identity Theft?: The Best Tool for Cleaning up an Identity Mess…and Why it May Not be Available to You

2012-01-18T09:04:00.000-08:00

Falling victim to an identity thief is more than just inconvenient; it can be downright traumatizing. Aside from the initial shock and surprise that occurs when you first realize you’ve been targeted; the most difficult aspect of dealing with your case is often figuring out just what to do; where to go, and who to speak to. Part of the process requires the consumer to reach out to the various creditors who may have been victimized by the thief’s activities to inform them of the fraudulent nature of the debts the consumer supposedly owes. Due to the fact that in most cases the suspect isn’t readily identifiable to be held to account for the damage they’ve done, the creditor is often the one left holding the bill. It is understandable then, that creditors require a police report from the victim or consumer before initiating an internal investigation into the debt in question. In fact, until such time as the consumer presents a police report, the creditor is free to flat deny any claim of fraud if they so choose. It follows logically then, that for a victim of identity theft, getting a copy of a police report is of paramount importance. What is somewhat harder to initially understand for the consumer, is why this seemingly simple task can sometimes turn into such a chore.

Traditional methods of law enforcement were never truly designed to deal with the complex nature of identity theft crimes. This crime has risen and crested right alongside the wave of technology, making identity theft in its modern form a relatively new problem for authorities to deal with. Many identity theft cases transcend traditional jurisdictional boundaries. Identity theft can occur in multiple counties, states, and countries; often simultaneously. This can make the job of investigating and convicting the criminal at times an incredibly difficult task for a local police force which is primarily focused only on preventing crime within their specific community.

It is for this reason that sometimes victims can meet resistance when attempting to file a police report for identity theft. From the officer’s perspective (one that’s not intimately familiar with identity theft cases) it may seem as though filing a police report is a fruitless waste of energy. Filling out additional paperwork for a crime he or she knows will most likely not end in a criminal conviction. This problem is compounded if the consumer or victim has no evidence to support their claims of victimization. Crimes associated with violence or traditional theft often draw a higher degree of focus from law enforcement at the community level. The important distinction that is sometimes missed is that the greatest value of a police report for a victim of identity theft is not the hope that the report will result in the bad guy getting caught. The single greatest value is the ability to successfully dispute fraudulent debts with the various creditors and merchants who were defrauded as a result of the crime. Catching the bad guy is a distant second to restoring credit worthiness in the eyes of the consumer/victim.

To address this difficulty, many states have in recent years adopted statutes commonly referred to as “right to report,” statutes. These are pieces of legislation written into an individual state’s statutory code. The language varies from state to state, but the essential design behind them is to establish the right of a consumer, any consumer, to obtain a copy of a police report if they are victims or even reasonably suspect they are victims of identity theft. Most of them establish a simple condition that either the crime occurred within the jurisdiction in which the victim is reporting (the theft or use of the victim’s personal information) or that the victim is a resident in the given jurisdiction. If this condition is satisfied, the consumer’s claim that they are an identity theft victim is accepted prima facie (at face value) to be true. As society, government, and law enforcement are becoming more cognizant of the difficulties surrounding identity theft and related crimes, “right to report” statutes are becoming more common every day.

To check whether your state is a “right to report state,” contact your state Attorney General’s office. In the event that your state is not among those with a right to report and you feel that you are or may be a victim of identity theft, gather as much documentation as you have available (credit report, bank statements, etc) and bring it with you when you visit the police station. Don’t be truculent, but be assertive. Explain if you have to, the reason getting a police report is so important for you. Explain that it’s not the desire for them to catch the bad guy, but the necessity for you to successfully dispute the resulting instances of fraud that has compelled you to file a report. Most of the time a level headed clear explanation will be enough to successfully obtain a copy of an incident report. In those extreme situations where no matter your tactics you are rebuffed, contact your state Attorney General’s office and file a complaint with them.
The “right to report,” is among the most effective tools a victim of identity theft has in their belt. If your state doesn’t have one, do what you have to; beg, plead, go around, go over…whatever you have to…get an incident report and get yourself on the road to restitution, to relief.

"Victim of Identity Theft?: The Best Tool for Cleaning up an Identity Mess…and Why it May Not be Available to You" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

If Scams Were Real: January 17th 2012

2012-01-17T15:12:00.000-08:00

Today, if scams were real:

Zenith Bank Compensation Unit has completed an investigation that I may have been the victim of a scam and am therefore entitled to $250,000... if scams were real...
Dr. Festus needs to speak to me about my former business partner...if scams were real...
The United Nations have a large fund of inheritance with my name on it... if scams were real...

Is It Fraud or Identity Theft?

2012-01-16T14:14:00.000-08:00

Victims of identity theft often believe that they are victims of fraud. Although, identity theft falls under the category of fraud, there is a fine distinction between the two. In most states, victims of identity theft have the right to file a police report for identity theft and receive a copy of the incident report. However, victims often find themselves going home empty handed, having not been able to file a police report and receive cooperation from the agency. More than often, these victims relay to law enforcement that they are victims of fraud. The problem is that by using the term ‘fraud,’ it entails the conduction of a thorough investigation – basically an obligation on behalf of law enforcement to investigate the crime. It means the collection of tangible evidence, and the knowledge to prove that the ‘accused’ committed the crime. Several conditions must be met, as fraud laws may change from jurisdiction to jurisdiction. Thus, fraud is a crime that is not easily proven, and therefore, may hinder the victim’s ability to clear their names and identities.

Like identity theft, fraud is committed for personal gain. However, identity theft is committed when someone’s personal identifying information is used for personal gain – financial, employment, evading law enforcement, and/or receiving medical services. In the area of identity theft, if a person reasonably suspects or believes that their personal identifying information has unlawfully been used by another person, they have the right to file a police report and receive a copy of such report. They may file incident reports with their local law enforcement agencies; however, potential investigations would be conducted by the law enforcement agency that has jurisdiction over the area where the crime was committed. Victims of identity theft can purport law enforcement agencies with copies of their credit reports to show the number of fraudulent accounts that were opened using their identities; other reports like earnings statement reports, driving records, background check reports, etc. may help the victims show abuse when the problem is not financial.

It is important for victims of identity theft to understand that unfortunately, clearing their names is something they will have to undertake on their own. Their primary concern should be to clear their records and identities, not have the perpetrator arrested. Often times, the problem is that these types of crimes leave no real traces behind – as for identity theft, the perpetrator may use the victim’s same information. Unless there are tangible facts and evidence, victims should redirect their efforts to clearing their identities, and protecting themselves from further abuse.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

Identity Theft and Cyber Crime Blues: California’s New eCrime Unit Gets Tough on Cyber Criminals

2012-01-13T10:47:00.000-08:00

Last month, State Attorney General Kamala Harris announced the creation of a new law enforcement unit to address the growing problems associated with identity theft and cybercrime. According to the F.T.C., California has the most identity theft complaints of any state (over a million complaints annually), and the third highest number per-capita.Known as the California e-Crime Unit, this new law enforcement group will include a group of 20 investigators and prosecutors whose sole responsibility will be to prosecute cybercrime.

While Florida, Texas, and Louisiana already have similar units in place, California’s promises to be the largest such unit yet created, with a broader mandate. Criminal activity such as identity theft, internet scamming, and hacking will be the units’ primary focus.The problem with catching cybercriminals is not the ability to track their activity, or to find sufficient evidence of their crimes. So then why is it decidedly more difficult to actually bring a cybercriminal or identity thief to justice? The primary reason is the relatively new unique challenges cybercrime presents.

Primary amongst these is the fact that a significant amount of cybercrime transcends traditional jurisdictional boundaries. Often it is beyond the scope of an individual local police force or district attorney to effectively build a case against and prosecute criminals who may commit their crimes in multiple counties, states, or even countries. Additionally such complication makes it confusing for the consumer to know just how to most effectively get help for their identity theft issues.These are exactly the issues Harris and this new task force are hoping to address. By developing a unit completely focused on cybercrime, with the mobility to help individual local and county jurisdictions seamlessly could potentially be a game changer in the battle on identity theft and cyber crime that has to this point, been a losing one. This is one of the strongest and most encouraging indicators yet that the severity of this problem is finally starting to hit home in the minds of legislators and law enforcement officials.

"Identity Theft and Cyber Crime Blues: California’s New eCrime Unit Gets Tough on Cyber Criminals" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

If Scams Were Real: January 13th 2012

2012-01-13T08:00:00.000-08:00

Today, if scams were real:

Ms. Peggy sent me an email about helping her to fulfill her dreams. Her dreams were contained in an attachment that I NEEDED to open... if scams were real...
Agent Edward John from the FBI emailed me asking to claim my $10.7 million. All I have to do is give them my banking account information so they can transfer those funds... if scams were real...
Martin Uhomoibhi the Human Rights Council President of the United Nations emailed to make me aware of a human rights fund I am entitled to and must distribute... if scams were real...

If Scams Were Real: January 12th 2012

2012-01-12T14:28:00.000-08:00

Today, if scams were real:

Mr Sanusi Lamido Sanudsi from the Bank of Central Nigeria needs me to contact him regarding my $12.5 million beneficiary fund...if scams were real...
Someone named Barb Wooten has had feelings for me for quite sometime now and has sent me an attached e-card to explain everything...if scams were real...
Captain Anthony from a National Guard Artillery unit in Iraq discovered some funds when on Routine foot patrol in Khalis Iraq. Now he is going to Afghanistan and cannot take the money with him so he would like me to take care of it until he gets back... if scams were real...

Google Chrome vs Firefox: Which is safer?

2012-01-12T08:55:00.000-08:00

When it comes to web browsers, you have options. The ultimate goal of any web browser is to provide people with a better Internet experience. Regardless of your preference, ask yourself what makes for a better Internet experience?

According to Firefox, they provide an “open community” where the key features are “openness, innovation, and opportunity.” It gives the users the ability to “shape their own online lives.” In terms of privacy and security, Firefox offers the add-on Flagfox 4.1.11 – said to provide several tools like site safety checks, malware checks, Whois (domain search – who owns the website), page code validation, and display of a flag to tell the user the location of the current website’s server, amongst others. This is supposed to add an extra layer of awareness to the user’s browsing experience, and the user has the ability the select these features or customize their own actions. Firefox’s goal is to be “unobtrusive” – thus, Flagfox does not actually track anything, nor does it send the information anywhere.

Google Chrome on the other hand, is dedicated to “help protect you and your computer from malicious websites as you browse the web.” This web search engine features safe browsing, sandboxing, and automatic updates. For Google Chrome’s safe browsing, users are informed with a warning message if the site they are visiting poses a malware or phishing threat – “Warning: Visiting this site may harm your computer!” Like Firefox, which also offers updates, Google Chrome offers automatics updates. These updates check for the latest security features, and require no action on behalf of the user. According to Google, their feature Sandbox adds an extra layer of protection by “protecting against malicious web pages that try to leave programs on your computer, monitor your web activities, or steal private information from your hard drive.” It prevents the self-installation of malware to your computer. Software Engineer, Nicholas Sylvain, notes that Sandbox was meant to be generic; therefore, it is not just limited to Google – which means that it can be used by others if they share Google’s “multi-process architecture.”

Whether your preferred web browser is Firefox or Google Chrome, both seem to place an emphasis on browser security – of course, through different approaches. Yet, nonetheless, they both express a deep concern for their users’ interests – an interest that lies in the power of the internet.

"Google Chrome vs Firefox: Which is safer?" was written by Gabby Beltran. Gabby is the Public Information Officer and a Bilingual Victim Advisor at the Identity Theft Resource Center.

CoreScore: The New Credit Score and How it Affects You

2012-01-11T08:39:00.000-08:00

Most people today are familiar with the term “credit score,” and what it generally entails. The traditional FICO credit score is used by money lenders of all types to determine a given applicant’s credit worthiness. It attempts to make this determination by looking at financial records such as credit card borrowing, bank transactions and mortgage information.

Recently the financial data collector CoreLogic, the company responsible for developing the new system, made the CoreScore available to lenders nationwide. This new rating system, in addition to using the traditional FICO credit reporting, will also examine things like rental history and the kinds of transactions which are more common at the lower end of the income spectrum. These will include car and rental payments, payday loans, even child support payments. CoreScore will scour court documents to determine new sources of financial information previously unavailable like property ownership, tax liens, audits, and various other sources of publicly available data. Chances are, if something can be financed, it can be linked to this score.

Rather than replacing the traditional reports provided by Equifax, Experian, and Trans Union, according to several public statements from CoreLogic employees, the goal seems to be to augment the traditional reporting method with a CoreScore in order to give lenders a more thorough and complete look at the individual’s financial history and trustworthiness. While this will undoubtedly have a negative impact on many low and moderate income consumers, others who suffer from a lack of credit history may actually have their lending prospects improved by this new score. It is unclear as yet exactly what the impact will be, but this much is clear: more and more of the information we once considered to be aspects of our private life are becoming both publicly available and financially pertinent information which can be used for, or more likely, against us. Credit history has become more vital than ever before in our economic lives and with new systems such as CoreScore being developed, this trend looks to be one that will continue into the foreseeable future.

"CoreScore: The New Credit Score and How it Affects You" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

Social Networking and Identity Theft

2012-01-10T15:28:00.000-08:00

What is a Social Networking Site?
Social networking websites are a place for internet users to come together, often in groups sharing common interests in hobbies, religion or politics. These websites may require a minimum amount of personal information in order to join. Profile pages, telling other users about yourself, are another standard. Once you are granted access to a social networking website you can begin to socialize. This socialization may include reading the profile pages of other members and possibly even contacting them.

What is Identity Theft?
Identity theft occurs when an imposter gains access to personal identifying information (PII) and uses it for personal gain and exploitation.

HOW IDENTITY THEFT MIGHT HAPPEN THROUGH SOCIAL NETWORKING SITES
Because you must divulge some level of personal information in order to use and fully benefit from social networking sites, the risk of identity theft exists for people who use them. Below are some of the ways that you might put yourself at risk of identity theft:

Using low privacy or no privacy settings
Accepting invitations to connect from unfamiliar persons or contacts
Downloading free applications for use on your profile
Giving your password or other account details to people you know
Participating in quizzes (e.g. How well do you know me?) which may require you to divulge a lot of personal information
Clicking on links that lead you to other websites, even if the link was sent to you by a friend or posted on your friend’s profile
Falling for email scams (phishing) that ask you to update your social networking profiles
Using no or out-of-date security software to prevent malicious software from being loaded onto your computer and stealing personal information

Here are some examples of how people may become victims of identity theft through social networking sites:

Example 1: A man receives a message from one of his friends which has a link to a funny video, so he clicks on it. The link does not bring up a video. The friend’s profile had been hacked, and now a form of malicious software is being downloaded onto the man’s computer as a result of him clicking the link. This software is designed to open a way for an identity thief to take personal information from the man’s system. It additionally sends a similar email to everybody he is connected with on his profile, asking them to “view the video”. Downloading free applications and software can be sources of this type of malicious software, too.
Example 2: Someone has hacked a woman’s social networking profile to harass her and sabotage her online reputation. They are posting embarrassing photos and rude comments on her profile. These photos and comments appear to be from her and are directed to her network of contacts, when in fact they are not. Although she has used the highest level of privacy settings, she has shared too much information online with others. Someone used her posted information to fraudulently access her profile. Always remember, that even though your profile may be set to “private”, treat everything you post online as public.
Example 3: Cybercriminals sometimes will create a page that looks just like the introductory page to a favorite social networking site. This page will ask you to re-enter your password. These criminals will get you to this page from a link in an email or private message or public post with a link to a fraudulent site. If you are already logged in to a networking site and then asked to log in again, be aware that it is a red flag and it is probably a scam designed to make you divulge a lot of personal information to someone with bad intentions.

HOW TO PROTECT YOURSELF:

Use the least amount of information necessary to register for and use the site. Use a nick-name or handle (although this is not possible with certain sites),
Create a strong password and change it often. Use a mix of upper and lower case letters, numbers, and characters that are not connected to your personal information (such as birthdates, addresses, last names, etc.).
Use the highest level privacy settings that the site allows. Do not accept default settings.
Be wise about what you post. Do not announce when you will be leaving town. Other things you should never post publicly: your address, phone number, driver’s license number, social security number (SSN), student ID number and even your home town. Thieves can figure out your social security number by what town you were born in and what year. It’s ok to post what year or how old you are, but with this information combined with where you were born, they can figure out your SSN.
Only connect to people you already know and trust. Don’t put too much out there – even those you know could use your information in a way you didn’t intend.
Read privacy and security policies closely – know what you’re getting into. Some major social networking sites actually say they will use or sell information about you (not individual data necessarily, but aggregate information based on your personal information and that of others using their site) in order to display advertising or other information they believe might be useful to you.
Verify emails and links in emails you supposedly get from your social networking site (e.g. the recent Facebook scam emails that asked customers to re-set their passwords). These are often designed to gain access to your user name, password, and ultimately your personal information.
Unclick the privacy settings that display the time stamps of your posts.
Install a firewall, reputable anti-spam and anti-virus software to protect your information-- and keep it updated!

Be certain of BOTH the source AND content of each file you download! Don't download an executable program just to "check it out." If it’s malicious software, the first time you run it, you’re system is already infected! In other words, you need to be sure that you trust not only the person or file server that gave you the file, but also the contents of the file itself.

Beware of hidden file extensions! Windows by default hides the last name extension of a file, so that an innocuous-looking picture file, such as "susie.jpg", might really be "susie.jpg.exe", an executable Trojan or other malicious software! To avoid being tricked, unhide those pesky extensions, so you can see them.

Use common sense. When in doubt, don’t open it, download it, add it, or give information you may have doubts about sharing.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

Trends in Child Identity Theft

2012-01-10T11:21:00.000-08:00

In 2011,advisors at the Identity Theft Resource Center (ITRC) identified 574 cases ofchild identity theft representing 10% of the total identity theft casesrecorded by the ITRC. In their 2010 report, the Federal Trade Commissionreported that 8% of identity theft complaints received involved someone19-years-old and under. In a recent 2011 Carnegie Mellon CyLab Report, childrenwere reported to be 51 times more likely to become victims of identity thanadults. In this same study, 10.2% ofchild identities scanned exhibited evidence of identity theft. Itseems clear from these statistics that child identity theft represents asignificant problem in the U.S.

There arevarious types of identity theft, for example, financial, governmental, medical,and criminal. Child identity theft usually involves one or more of thesetypes. Therefore, child identity theft is not a standalone category. It isimportant to keep in mind that each case involving a child’s identity requiresmultiple steps of correction. Furthermore, since the elapsed time between thecrime and the moment of discovery may be extended over a period of years, childidentity theft cases may be more serious and complex. The age of the victimis often times a factor considered in the mitigation steps, and what actionswill be required.

As childidentity theft becomes a growing concern for parents, many question why thievestarget children’s identities. There are several factors why a child’s identitymay be the perfect target. One of those factors is that parents would neverthink of checking a child’s credit history. Children should not haveestablished credit histories because they are not 18-years-old; therefore, theyare not of legal age to enter into a contract. One would never suspectany fraudulent activity. This gives the thieves the perfect cover-up, andcertainly the necessary time to commit the crime and exploit the identity. Asecond factor is the wide open possibilities that the child’s identityrepresents. It provides a clean and fresh start – in any and every way you lookat it. For instance, the Credit Reporting Agencies have no way ofverifying whether a Social Security number (SSN) belongs to a minor. Therefore, a credit report is established and associated with the first piecesof personal identifying information received. A child’s identity may alsobe used for other purposes such as - employment, to receive medical services,or evade law enforcement violations, amongst others.

There is noone way to pinpoint how a child’s identity is stolen. Often times, it may be asa result of thieves creating a “fake” 9-digit number and the number happens tobe a legitimate SSN assigned to a child. Another instance may be thatthieves figured out the way SSNs were generated before it was even assigned bythe Social Security Administration. Furthermore, it may be as a result ofa stolen document containing the child’s SSN. Unfortunately, in some cases, thechild’s identity may have been stolen by a child’s family member orrelative.

Over the pastyear, child identity theft has been a widely covered topic in the media. Withthis exposure, the issue has become a growing concern for parents, governmententities, credit reporting agencies and legislators alike. A child’sidentity represents an opportunity that is surrounded by a combination ofcircumstances – often favorable to the thief.

'Trends in Child Identity Theft' was written by Gabby Beltran. Gabby is the Public Information Officer and a Bilingual Victim Advisor at the Identity Theft Resource Center.

Do You Facebook? Take a minute to take our survey for Facebook users and be entered to win one of five $100 prizes. Click Here to take the survey. We appreciate your efforts to help us make the internet safer.

If Scams Were Real: January 10th 2012

2012-01-10T10:36:00.000-08:00

Today, if scams were real:

I am one of the chosen few to be selected to try a new electronic cigarette for free... if scams were real...
I have received an electronic copy for a ticket to Plano from American Airlines. Someone must have bought me a plane ticket. Too bad I don't know where Plano is... if scams were real...
Mr.Richard Paul wants me to contact his Secretary in Paraguay about a financial opportunity that could prove to be very lucrative... if scams were real...

Twitter Takeovers of 2011

2012-01-09T10:12:00.000-08:00

2011 turned out to be a very big year for Twitter. The masses seemed to discover that this platform made it (seemingly) possible to contact their favorite celebrities, news outlets and politicians directly. However, while it will take some time for the dust to settle and see if Twitter will remain the connection powerhouse it became in 2011, one thing is for sure… Today’s Tweeps should think Twice before believing their Tweets.

By far, the largest Twitter account to be taken over was that of Lady Gaga. Just like everything Ms. Gaga does, her Twitter account hack turned out to be large and dramatic. With more than 7 million followers on the social networking platform, Gaga has an unprecedented public outreach capability. And this December, when her followers (or as she calls them her “little monsters”) were offered free iPads it actually did not seem too good to be true. Alas, her followers learned soon after the hack that the scam was just another phishing attack and that their heroine was not as generous as they had hoped.

Pop stars and screen sirens were not the only target of Twitter account takeovers. Politicians got their fair share of abuse as well. If we learned one thing in 2011 it was to not to transmit scandalous pictures via tweet and/or direct message as was evidenced by the media circus known as “Weinergate”. This event taught us that even if nothing is sent out to our followers publicly, the information within our Twitter accounts can harm us, as was evidenced by a hacker finding and spreading some NSFW images from the congressman’s Direct Message outbox.

Perhaps the most sought after hacks were those of news outlets. Fox News, NBC and USA Today had their streams taken over. A group which called themselves ‘The Script Kiddies’ claimed that they were responsible for the takeover of all three accounts. The damage was minimal, but the hackers did have the opportunity to tweet from NBC’s account, a false report of a high-jacked airliner that had crashed into Ground Zero. Perhaps though the damage was not done by what the hackers posted, but by the possibilities of what they could have posted.

And so in 2012 we are left with trepidation of what hackers have in store for us. The mayhem that could be, should our celebrities, politicians or news outlets become controlled not by popular culture or corporate responsibility, but by a bunch of teenagers lurking behind keyboards. It should be an interesting year.

'Twitter Takeovers of 2011' was written by Nikki Junker. She is Social Media Coordinator and Victim Advisor at the Identity Theft Resource Center.

If Scams Were Real: January 6th 2012

2012-01-06T12:58:00.000-08:00

Today, if scams were real:

I received an email from the desk of Mr. Howard Phil. He is the Head of Remittance Department at
Washington DC First Bank... Here is the email he sent me:

From the desk of: Mr. Howard Phil
Head of Remittance Department

Washington DC First Bank

Ref: F/R/BnkA/ird/bnk/021

Date : 01/06/2012

Phone;+ 1 206 259 8572

Email;philhoward@e-mail.ua

Attn: Beneficiary,

We have received a payment credit instruction from the United Nations and World bank representative office in Switzerland to credit your account with your compensation funds allocated in your name to the tune of US$ 10 million (Ten million united states dollars) from their reserve joint accounts of World Bank/United Nations with us here.

We are told that you are one of the listed citizen that fall into the victim of scam by Africans some time ago and have to accept this amount as your full compensation from the World Bank /United Nations as you have been approved to claim this if you can accept it under minding any amount you might spend with them.

However, you shall required to re-confirm the following details as specified below to effect the wire transfer afore mentioned above to your designated account details:

{1}. Your Full Name:

{2}. Your Home Address And City/Country:

{3}. Your Confidential Tel, Cell and Fax.:

{4). Your Bank name:

{5}. Your Bank Address.:

{6). Your A/c Numbers.:

(7). Your Swift Code:

{8}. Your Routing Numbers.:

Please do provide the above information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liability of funds credited into a ghost account. Thanks for your co-operation while looking forward to serving you with the best of our service.

Thanks for your co-operation

Best Regards,

Mr.

Head of Remitance Department Washington DC First Bank.

I also got an email from the Bank of Nigeria about the distribution of my funds.... if scams were real...
ANDDDDDDDD.... I won the National UK lottery, for which I didn't buy a ticket. What a lucky day!... if scams were real...

Tips on Detecting Scams

2012-01-06T03:00:00.000-08:00

Today, thieves are coming up with more and more devious ways to try and trick you into giving them your personal information. What’s so important about your personal information? A crook can open up a new line of credit in your name, rent an apartment, purchase cars, homes, and other goods, get a job, get out of criminal acts, or take over your bank account. In other words, the instant you give up certain personal information to a thief, you are in jeopardy.

What information do thieves want?

Social Security Number
Bank account or credit card numbers
Driver’s license number
Insurance policy numbers (medical and auto)
Date of birth
State or employee identification number.

Here are some basic things to look out for when trying to determine if something is a scam or not.

UNIVERSAL RULES

If it’s too good to be true, it probably is.
When in doubt, check it out.
A bank, credit card company, or utility company will never ask for your personal information by email, whether you have an account or not, period.

Companies you may already be doing business with

Banks will always conduct all business conversations with you either in writing via postal mail or over the phone. In both instances they will identify you by name and already have your account information in hand. They have no need to request your account information!
Companies that do business strictly online (such as PayPal or Amazon) will address you by name. Never by “Dear Customer” or “Dear your@email.com "\
When in doubt, access your account directly with the company. Do not click on any links in any emails. Do not go to any websites they ask you to view. Always go directly to that company’s homepage and access your account. If there is a legitimate problem, the company will tell you when you access your account.

I want to get a line of credit with this company, is it legit?

Does the company advertise anyone can get credit – even without a Social Security Number? If so, it’s not legit.
Check with the BBB. See if this company is registered with them.
Do an online search. See if you come up with any articles that state that this company is a scam.
Is this company based in another country? If so, do they have a license to operate in the United States? If not, it is most likely a scam.
Does this company have a website? If so, is this website secure? Look to see if the website address includes https:// and has the picture of the lock. If not, it is not a secure website and could be open to fraud. If you are required to post personal or account information on the website, you must ensure that the page is presented by a secure link.
Does this company use a free email service or do they use an email address connected to their website. Use of free email services could be an indication of fraud.

I just got a notice that I won a prize/lotto. Is it legit?

Did you enter this contest or buy a ticket? You cannot win if you did not enter.
If it appears to be from a known company, contact the company and see if they legitimately have funded this contest.
Is this contest/lotto in the United States? If not, then it is most likely a scam.
England, Canada, Spain and the Netherlands (to name a few of the most popular variations) do not have a national lottery.
If the conditions of receiving your prize include sending money to “pay for taxes and fees” then it is a scam. Most legitimate prize-giving institutions take the tax fees out of the winnings so you don’t have to deal with it. If not, you will be asked to pay the taxes after you receive the prize money as part of your regularly scheduled yearly tax period. If there are “up front” costs before the prize is awarded, it is most certainly a scam.
A common scam trick is to send a check to the victim, requesting the victim to keep some of the money and send the balance back. This is always an indication of a scam.

Some rich person in another country or some US soldier stationed in another country wants to share their fortune with me or needs help moving their fortune to the United States. Is this for real?

This is a scam, Any checks they send you will bounce and you will be responsible for any and all money you have withdrawn from the bank.
It is illegal. You could be charged with money laundering, which is a federal offence.

ITRC@idtheftcenter.org .This project was supported by Grant No. 2007-VF-GX-K038 awarded by the Office for Victims of Crime, Office of Justice Programs, U.S. Department of Justice. Points of view in this document are those of the ITRC and do not necessarily represent the official position or policies of the U.S. Department of Justice.

This Solution should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims or their own use, should be directed to

If Scams Were Real: January 5th 2012

2012-01-05T11:05:00.000-08:00

Today, if scams were real:

There are 387 open positions in my area that are same day hire. No recession here! ...if scams were real...
I won a 7 day VIP Gold's Gym membership even though I never entered any contest... if scams were real...
I can buy 8 years of someone else's pension. I am not sure what it means but I think it means I get money...and I like that... if scams were real...

They Stole My House? Mortgage ID Theft

2012-01-05T10:45:00.000-08:00

Identity theft is a scaryoccurrence for any victim. Theft of yoursocial security number or your check cards can be traumatizing, but what ifsomeone were to purchase an entire home in your name? While not as common as some social securityrelated scams, it can happen, and can be more devastating than your averageutility or account fraud. There are afew different ways Mortgage ID theft occurs. The first and most obvious is the identity thief, having gained accessto enough of your personal information to successfully impersonate you, usesthis information to purchase a home in your name. All of a sudden a mortgage company or bankmortgage department that you had no idea about shows up on your credit report.

Anotherpossibility is the identity thief using your personal information to transferthe deed of the home you already livein, to either themselves or a third party without your knowledge. You continue to live in your home and payyour mortgage, having no idea you no longer technically “own” the home you’repaying for. Additionally, some thieveswill represent themselves as legitimate title holders, offering color of title(meaning a forged deed) to a prospective home buyer in order to take thebuyer’s money, while mortgaging or selling the real title to another party. Sometimes the thief will pose as a broker,offer to consolidate payment to help struggling home owners, take their money,and never inform the real mortgage holder that they are now responsible forpayment.

Inorder to avoid becoming a victim of mortgage identity theft, there’s a fewthings a consumer can do to protect themselves. To ensure there are no mortgages attached to your financial history thatyou’re unaware of, it’s a good idea to check your credit reports often toensure that there are no unfamiliar mortgages listed. A public records search, which many identityprotection plans include in their basic service, can let you know if your deedhas been transferred to another party without your knowledge, or perhaps alertyou to the use of your identity on a deed you are unaware of. It’s also always a good idea to verify anyproperty purchase with the county recorder’s office to ensure the deed you’repaying for is a legitimate title and not a forgery. These simple steps can go a long way topreventing the very serious issue of mortgage identity theft.

"They Stole My House? Mortgage ID Theft" was written by Matt Davis. Matt is a Victim Advisor at the Identity Theft Resource Center.

If Scams Were Real: January 2nd 2012

2012-01-03T10:34:00.000-08:00

Today, if scams were real:

I have been awarded a $5500 Pell Grant that I didn't apply for... if scams were real...
I can get $500 wired to my account in just 2 steps...if scams were real...
A DeLonghi 725TV 45-Pint Energy Star Dehumidifier with Patented Pump for $129.95 has been shipped to my address. I didn't order it, but it has shipped none the less... if scams were real...

Need to Order Your Child's Credit Report?

2011-12-28T10:51:00.000-08:00

If there are indications that your child’s Social Security Number has been compromised and used for financial gain, you must contact the three Credit Reporting Agencies (CRA’s) in writing. A minor under the age of 18 should not have a credit report. Therefore, if one exists it will contain information that does not match the correct information of the minor child.

There are some cases that appear to be identity theft but are not. Receiving a pre-approved credit card offer in your child's name might be upsetting. However, it might only be an innocent marketing tool sent by an affiliate of your bank because you opened a college fund or savings account for your child. We recommend that you opt out of all marketing lists with the bank when you open an account. A check of the credit reports will help you sort this out.

The ITRC and the three CRA’s do not recommend that you automatically check your child's credit report annually, unless you have an indication of a problem. To order reports unnecessarily actually opens a door to thieves because it could establish a credit report.

All correspondence should be mailed certified, return receipt. This correspondence should include:

A cover letter including the full name of the child, the child's date of birth and previous addresses for the last five years.
A copy of the child's birth certificate
A copy of the parent's state identification card, such as a driver's license or state/ military issued photo identification card.
A copy of the child's Social Security card

If the requestor is a guardian, but not a parent, he/she should state that and additionally include any documentation that legally appoints them as the guardian.

If you do not get a response from the CRAs within 30 days after getting your return receipt postcard, please file a complaint with the Federal Trade Commission.

TransunionP.O. Box 6790
Fullerton, CA 92834

ExperianP.O. Box 9532
Allen, TX 75013

EquifaxOffice of Consumer Affairs
P.O. Box 105139
Atlanta, GA 30348

Related Links:

ITRC Fact Sheet 120 - Child Identity Theft

ITRC Fact Sheet 120A – To Order a Child’s Credit Report

ITRC Fact Sheet 120B – Child Identity Theft Indicators

ITRC Letter Form 120 - Requesting a Child's Credit Report

This Solution should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims or their own use, should be directed to ITRC@idtheftcenter.org .

Copyright 2009, Identity Theft Resource Center ®, Created by the IT

If Scams Were Real: December 28th 2011

2011-12-28T08:52:00.000-08:00

Today, if scams were real:

Twitter is emailing about discount drug sales...if scams were real...
Dr. Sanusi Joseph, the Director of Wire Transfer/Telex Dept. (CBN) needs me to contact him immediately because my Nigerian business partners have been killed and so I need to handle all of the fund from our recent business deals...if scams were real...
Microsoft needs me to upgrade my software by tonight in order for my computer to continue working at 12:00am tonight... if scams were real...

If Scams Were Real: December 27th 2011

2011-12-27T09:47:00.000-08:00

Today, if scams were real:

Dr. Usman Hassan keeps contacting me based on some very important reasons. I don't know who he is, but he is persistent... if scams were real...
Mr. Jim Nolan from the Office of Reconciliation and Logistics Vaults,
International Monetary Fund (IMF) would like me to call him about an escrow account from which I stand to inherit $750k from. I just need to provide him with some very basic information...like my social security number... if scams were real...
The FBI emailed me to let me know that the first batch of my fund release is $3,000.000.00 USD and has been activated ready for release. This fund in total will come in batches of $3,000.000.00 USD and this is only the first Batch. My payment will be cordinated by Rev. John L. Hanz who will act between me and the paying bank in the UK... if scams were real...

If Scams Were Real: December 23rd 2011

2011-12-23T10:07:00.000-08:00

Today, if scams were real:

Chttirahan Pashika needs me to open an email attachment regarding changes to FDIC policy... if scams were real...
Edwin Costa has offered me a secret shopper position. I will get paid and be able to keep everything I buy while working...if scams were real...
Ghani Datuk Abdullah , the branch manager of the Hong Leong Bank Sarawak branch Malaysia found me in a google search and hopes I will be able to help him get 1.2 million dollars out of his country as he is a political refugee. I will be able to keep half of the money...if scams were real...

If Scams Were Real: December 22nd 2011

2011-12-22T13:18:00.000-08:00

Today, if scams were real:

Barrister Curtis Cliff doesn't want me to be surprised or afraid to receive a
message from him. He is the personal Assistant/ Attorney here in UK. to late Mr.Charles Falkenberg and needs me to take over the fortune of his late client's petrochemical company...if scams were real...
Ms. Jacqueline Sells wants me to never have a boss again so she is offering me the best job ever... if scams were real...
Mr. Albert Louis, the Auditor General, Santander Bank, UK, n the course of his auditing discovered a floating fund in an account, which was opened in 1990 at Abbey National Bank before it was bought over by Santander Group of which he is the auditor, belonging to a dead foreigner who died in 1999. He is now certain the money belongs to me... if scams were real...

If Scams Were Real: December 20th 2011

2011-12-20T12:47:00.000-08:00

Today, if scams were real:

I am the chosen winner of one of Apple's new products!...if scams were real...
The FBI needs my social security number so they can send me some money they found that belongs to me... if scams were real...
I won a $1000 Wal-Mart gift card right i time to finish my Christmas shopping...if scams were real...

If Scams Were Real: December 15th 2011

2011-12-15T09:35:00.000-08:00

Today, if scams were real:

Someone named Fern Austin sent me an email warning me of the harms of anesthesia and it appears she sells some prescription drugs at very low prices... if scams were real...
Dr. Shapek Tirelli from Libya needs me to help him transfer funds from Libya to the United States. I will be paid millions and millions for my help... if scams were real...
The US Border Patrol emailed me to inform me of the latest development as regards the delivery of my consignment package by the Diplomat Hilary Walker. Apparently this package was carrying 2.5 million dollars coming from Nigeria which is a Federal Crime. I need to reply to the email in order to avoid prosecution... if scams were real...

More Complex Cases of Identity Theft

2011-12-14T10:57:00.000-08:00

In addition to financial identity there, there is also: criminal, governmental, medical and identity assumption. Depending on the severity and complexity of your case there may be varying degrees in the difficulty of clearing your record. Clearly a stolen credit card is easier to take care of then someone who is using your SSN to work and has filed a bankruptcy with your name. If at any time you need support or additional information, please contact the ITRC at 888-400-5530.

1. Checking Accounts: Please refer to ITRC Fact Sheet 126, which goes through the problem in detail. You should file a police report with any of the following situations and contact the affected merchants. Please note: There is a new federal program called Check 21 that regulates financial institutions and check fraud called.

There are several types of checking account issues, including:

Checking account takeover
Stolen, washed or duplicated checks (refer to ITRC Solution 21)
Synthesized checks - With a good computer and printer anyone can put your name on a check and create a bank account number.
Cashing a stolen or counterfeit check - In this situation, someone asks you to cash a check they write to you or endorse to you. This is most likely a scam.

In some states, a bounced check may generate a warrant for your arrest. You need to clear the account problem with the bank and merchant, and also have that bank or merchant contact law enforcement to drop all charges. You will need to follow-up with the issuer of the warrant (usually the District Attorney or States Attorney) to be assured that the warrant is withdrawn. Don’t forget to get a “Letter of Clearance” that you will keep permanently.
2. Someone working as you: When someone is working as you, several types of problems may occur, on both the federal and state level. (Please see ITRC Solution 27). The first step is to contact the Social Security Administration and ask for a detailed non-certified copy of your work history. (Click here to download the application) Check it over carefully to see if it is correct.

3. Government Benefit Fraud: (this may be due to identity theft or simply clerical error)

Federal benefit problems - This situation can occur due to clerical errors, stolen mail or identity theft. Speak to the duty agent of the Office of the Inspector General of the Social Security Administration. They will initiate an investigation. If you are aware of an older person, or someone who is deceased, having problems due the theft of Social Security benefits, the OIG will assist you. You may also talk with your elder abuse department of the local police department.
State or county benefit programs - Most of these agencies have a fraud investigation unit. Talk with your case manager for a referral.

4. IRS issues: (Please see ITRC Solution 27) Some victims find out about an identity theft case when the following issues occur. In all of these situations, the initial step is to contact the IRS Identity Protection Specialized Unit, toll-free at 800-908-4490.

You also may contact the IRS Taxpayer Advocate if you have an unresolved issue related to identity theft, or you have suffered, or are about to suffer a significant hardship as a result of the administration of the tax laws, i.e. wage garnishment. Visit the IRS Taxpayer Advocate Service (TAS) www.taxtoolkit.irs.gov/identity_theft.cfm. Additional information is also available on the IRS website.

Examples of IRS issues include:

Child support payments are deducted from your paycheck (in this case you may need to contact the county or state that is garnishing payments).
The IRS contacts you about taxes owned due to an additional source of income not reported by you, such as a second job.
The IRS says that your child’s SSN is already listed as a dependent on another tax return.

5. Debt Collection: Never pay a bill that you don’t owe. See ITRC Fact Sheet 116 for complete details.

6. Bankruptcy issues: All bankruptcies need to be addressed by the Office of the Trustee of the U.S. Bankruptcy Court. Under the new federal law, bankruptcies declared by an imposter can be reversed. This is a situation in which you may wish to consult an attorney to make sure the paperwork is filed correctly.

7. Fraudulent Change of Address: If you suspect mail theft or mail fraud, contact the U.S. Postal Inspectors (USPIS) at 800-275-8777. When you move, a “change address form” is sent to both the new address and old address. Should you receive a notification and you haven’t moved, this is a warning to contact the USPIS immediately. A contact phone number is provided on the form you receive.

8. Student Loans: If it appears that someone has applied for and received a student loan in your name without your approval, you need to take action quickly. If you already have proof a problem, call the U.S. Dept. of Education Inspector General’s Hotline: (800) MIS-USED (800-647-8733). Also, contact the three Credit Reporting Agencies (See ITRC Solution 3) and order copies of all three of your credit reports. These reports will be free, since you suspect that you are a victim of identity theft.

Report any fraudulent activity to the police by filing a police report. A police report will help you to establish your status as a victim and provides you specific rights under state and federal laws.

Unfortunately some parents (family identity theft) do this and the police mistakenly say that since the victim benefited from the loan, it is not a crime. That is not true. Any use of your information without your consent is fraud and a crime. If you are unsure of how to proceed due to family issues, contact the ITRC toll-free at 888-400-5530.

9. DMV issues: When you become aware that someone else may have a driver’s license with your information, you need to speak with the DMV fraud investigator or Department of Public Safety in your state, or in the state where the problem is occurring. This action will start an investigation to determine the real license holder.

Should you lose your driver’s license, you will need to go back into your local office and have it replaced. Bring identifying information with you so that they can ensure you are the true licensee and not an imposter.

10. Identity Theft in Domestic Situations: (Please refer to ITRC Fact Sheets 115 – When you personally know the identity thief and ITRC Fact Sheet 115A if it is a spouse.) Each case is unique. Identity theft in a domestic situation has a varied emotional and financial impact on the victim. This requires the assistance of a specially trained advocate. Please contact the ITRC toll-free at 888-400-5530.

11. Medical Identity Theft: You might find this has occurred if you receive a bill for medical or pharmacy services, or you have been alerted, via an Explanation of Benefits, from your health insurance company of the use of your health insurance information. Refer to ITRC Fact Sheet 130 and ITRC Fact Sheet 130A for this type of case.

RESOURCES

Reduce Stress - See ITRC Fact Sheet 108 – Identity Theft – Overcoming the Emotional Impact. Please note that cleaning up the mess may take time. It will not be resolved overnight and you must be mentally prepared to attack your case with the least amount of stress. Find a healthy stress reducing activity and build a support team to help you during this period of your life.
Federal Trade Commission - Their publication is titled Take Charge. You can get a copy sent to you or you may download it from: http://www.ftc.gov/bcp/edu/pubs/consumer/idtheft/idt04.shtm. You may also call them at 877-IDTHEFT (877-438-4338). Additional information is available on their website: www.ftc.gov/bcp/edu/microsites/idtheft
http://www.identitytheft.org/ Source of a resource book and video written by an attorney and identity theft expert, Mari Frank. Please remember to indicate that the Identity Theft Resource Center referred you. It is full of letter forms, good advice and inspiration.

This fact sheet should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims for their own use, should be directed to ITRC@idtheftcenter.org .

If Scams Were Real: December 13th 2011

2011-12-13T14:51:00.000-08:00

Today, if scams were real:

The World Bank, Paris Club and United Nations has contacted me via email to let me know about an overdue inheritance owed to me.... if scams were real...
Mrs Karen Williams is going in for a cancer surgery today. She emailed me to ask me to contact her solicitor regrading 14.258 Million Dollars she has willed to me for charity work.... if scams were real...
Paul Howard Prince a Lawyer from the UK. He was a close friend and lawyer to "Muammar Gaddafi" and needs to me to take over his fortune due to his untimely death... if scams were real...

If Scams Were Real: December 12th 2011

2011-12-12T10:33:00.000-08:00

Today, if scams were real:

A man named Mark Brown has a job opportunity for me. The details are attached to the empty email he sent me... if scams were real...
Ambassador Dozi Nwanna wants to let me know that I am one of the bbeneficiaries to be compensated USD 140,000,000.00 from the Excess Crude Oil Revenue. Who wants a private jet for Christmas!!!??? ...if scams were real...
Barr Straus Kahn has found $5 Million approved to my email by the Federal Ministry of Finance United Nations. He is going to help me get the money I won... if scams were real...

If Scams Were Real: December 8th 2011

2011-12-08T12:40:00.001-08:00

Today, if scams were real:

My email ID won me 1.3 million British Pounds in the 'End of the Year' Irish Lottery...if scams were real...
I can get free unlimited Starbucks for a week if I fill out a survey. I wonder if I can buy everyone in the Starbucks coffee? People would love me...if scams were real...
A company called ClubVIP from Denmark wants to help me increase my fortune. I didn't even know I had a fortune.... if scams were real...

If Scams Were Real: December 7th 2011

2011-12-07T15:00:00.001-08:00

Today, if scams were real:

Lower monthly payments on my mortgage are only a click away... if scams were real...
Someone sent me coupons for free oil changes... if scams were real...
USPS sent me an email that they tried to deliver a package and my address was erroneous, not sure how they found my email if they don't have my address, but I'll go with it... if scams were real...

If Scams Were Real: December 6th 2011

2011-12-06T11:18:00.001-08:00

Today, if scams were real:

My ex is looking for me. How this website knows that the person googling my name is my ex I have no idea, but I think this means he wants me back... right? ...if scams were real...
David Cole needs me to read the letter attached to the email he sent me and respond ASAP regarding my money...if scams were real...
My Compensational Settlement of Escrow Accounts from the International Reconciliation and Logistics Vault and International Monetary Fund (IMF) came in. I just need to send them the information on where they can send my ATM card...if scams were real...

Smartphone Privacy and Security

2011-12-05T12:23:00.001-08:00

Ever thought of how well you know the functions of your phone? Now, ever thought of how much your phone knows about you? The increasing use of smartphones for daily activities, such as emailing, banking, web browsing, shopping, bill tracking, social networking, file storage, and entertainment gives your mobile device the ability to know everything about you. Your Smartphone’s knowledge, if not protected, is a potential risk to your security and privacy. The ultimate question to ask: Is my privacy and security at risk?

Mobile malware is a rising threat to privacy and security. What is mobile malware?

Mobile malware is a program especially created to wreak havoc on your phone. Once installed on your device, it may disrupt the phone’s system, in order to gather information stored in the device. It may also gain access to the device’s operating system, and take over the phone.
Mobile malware may present itself through fake mobile applications, web-browsing, and SMS/Text messages.

App-based malware attacks: may target a user’s financial information. This might include bank account numbers, passwords, and PINs. The access of such information may result in the loss of money and/or account take-over.
Web-based smartphone attacks: may result by clicking on an unsafe link. This may potentially give rise to “Phishing” scams or downloading infected files.
SMS/Text message-based attacks: can also be used to spread malware through unsolicited SMS/texts that request the user to reply or click on a link. Unknown to the user, malware may be installed to the device, leading to unauthorized access to the device’s information.

Securing your Smartphone device:

Passcode: A passcode is a simple step to take to protect your smartphone if it is stolen with all of your personal information. This simple step may be the difference between success and regret if your Smartphone is lost or stolen.
Antivirus software: Consider using mobile security antivirus software. There are Smartphone apps designed to monitor and protect your device against malware and spyware.
Software updates: Updating your Smartphone’s operating software is another step towards a secured device. Software updates are designed to fix problems in the device’s operating program, which may include fixing security vulnerabilities or other bugs that may diminish your Smartphone’s performance. Therefore, stay up-to-date on any software updates and make sure to install the latest version. After all, we are concerned with performance and usability – something a software update can improve.

Note: Do not allow your device to remember passwords. If your device is lost or stolen, the information is now compromised.

Android, iPhone, or BlackBerry: Which one do you have?

Regardless of whether you are an Android user, an iPhone user, or even a Blackberry user, your privacy and security may be at risk. Understanding the operating system of your Smartphone will require work on your part. This knowledge will help you understand the capabilities of your device and help you understand the threat to privacy and security.
All three platforms have their own App Stores and all three employ different security measures to monitor and vet the apps that are allowed to be on the Android Market, the Apple App Store, or the Blackberry App Store:
- Android’s Google Market runs an open market. As the Smartphone industry grows, it attracts more malware developers to organize attacks and put Smartphone privacy and security at risk. The Android Market has been criticized by the industry several times for not vetting its mobile applications before they are added to the Android Market. What does this mean for you Android phone users? You will need to exercise caution when downloading apps to your device.
- If you are an iPhone user, Apple reviews applications before they are added to the App Store. According to Computerworld, “When Apple reviews an app, it tries to verify several things, including these: Does the app do what it says it does? Does it function reliably? And does it respect the limitations that Apple has put on developers?” However, despite tighter security measures, it does not exempt the iPhone user from privacy and security threats.
- The BlackBerry Smartphone is trying to make a comeback and, despite being marginally behind the leading Apple and Android phones, its designer, Research in Motion (RIM) designed the phone with security in mind – encrypting data and giving its users the ability to control “how mobile applications interact with a BlackBerry and all of the data stored on it” – according to Computerworld.

Application Permissions/Access:
Ever wonder if the apps that you download put you at risk? If not, you probably should. Many apps are designed to capture a wide range of information. Did you know that apps can:

Read phone state and identity?
Track your location?
Read owner data?
Read contact data?
Record audio – your calls?
Take pictures?
Modify or delete SD card content?
Edit SMS/text or MMS messages?
Write sync settings?
Send SMS messages?
Write contact data?
Full internet access?

The best security practices when downloading apps are exercising caution and reviewing the app’s ratings, regardless of whether the app is free or paid.
You should carefully examine and pay attention to the permissions the app is requesting to access:

Android Market apps require the user to either grant or deny access – if you deny access you will not be able to download and install the app.
BlackBerry devices allow the user to go back to application permissions to modify or remove the ‘Trusted Application’ status. The status gives the application permission to access sensitive functionality on the device, which includes phone, GPS, and Internet – once given trusted permission, the application will not prompt the user for permission again before accessing the phone’s data.
iPhone apps will not disclose what the application has permission to access. When downloading an app whether free or paid, Apple requires the recognition of consent by having the user sign in using their Apple account. The primary reason behind Apple’s non-disclosure of the information, according to Computerworld, is because “Apple tries to prevent developers from having full-scale access to all of the data and hardware” on a device running on Apple’s operating system. However, apps still have access to certain system components.

Because apps have access to a lot of your personal information and data on your Smartphone, exercise a great level of caution when downloading apps and familiarize yourself with what the app really needs in order to run. If you feel it requires more than it really should, reconsider installing it.
Only download applications you trust. Android users are allowed to download apps from third-parties, whereas, iPhone users are only allowed to download apps from the Apple Store; unless, of course the iPhone has been “jail-broken.” Jail-broken iPhones can download applications from the “Cydia App Store” (apps that have not been approved by Apple).

Location (GPS) and WiFi:

Many applications request permission to access location. Consider turning off the location services (GPS) on your phone to protect your location privacy, unless it is necessary to perform a desired function. Keep in mind that you have the ability to enable and disable the location services on your phone.
Have you ever taken photographs with your Smartphone and posted them online? What’s the worst that can happen? As careful as you may be, if your GPS is enabled, your personal information may be exposed through a process called “geotagging.”
- According to Wikipedia, “Geotagging is the process of adding geographical identification ‘metadata’ to various media such as photographs, video, websites, SMS messages, or RSS feeds and is a form of geospatial metadata.”
- This information most often includes latitude and longitude coordinates which are derives from a global positioning system (GPS).
- While it sounds complicated, it really isn’t. It simply means the marking of a video, photo, or other media with an embedded location of where it was taken.
- Smartphones featuring GPS have made this “tagging” possible.
- “Geotagging” has been considered an infringement on public privacy and problems can arise if the information is given out unknowingly and/ or pulled by the wrong people. So, the photograph you took in front of your computer, at your doorstep, etc. has been recorded and may have possibly given your location.
To protect yourself, you can:
- Turn the geotagging feature off. Learn how to do it at www.icanstalku.com
- Download disabling software (it will search for geotagging information and delete it before sending).
- Be aware and educate yourself. Understand the information you are sharing.
- Consider what you post on the Internet. You never know who has access to it.
Protect your privacy and security by exercising caution while doing financial transactions or checking banking information while connected to public wireless networks (WiFi). Credit card and personal information transmitted through public WiFi may be up for grabs by identity thieves.
If you are a Smartphone user, it is highly recommended to use your Provider’s 3G Network to conduct any financial business. After all, you are paying for the service.

If Scams Were Real: December 5th 2011

2011-12-05T09:10:00.001-08:00

Today, if scams were real:

Mrs. Luisa Ejercito Estrada The Wife of Former President of Philippine emailed me. She needs a partner that will help her and her family claim the funds From The Courier Company in London with the documents that she will forward to me to claim the funds from the Courier Company In Europe for investment in my country. She will pay me handsomely for my help...if scams were real...
I can get a free diet patch that will make me lose 10 lbs in one week... if scams were real...
I won a $1000 gift card to Victoria's Secret!!!! if scams were real...

If Scams Were Real: December 2nd 2011

2011-12-02T09:03:00.001-08:00

Today, if scams were real:

I got an email from Dr. Ghanem Shakti. It is very important that I open whatever he has attached... if scams were real...
A lawyer named Henning Hansen needs to speak with me regarding my inheritance as I have been listed as next of kin for someone named Mr. McCoy Meyers...if scams were real...
I have been pre-qualified for a $5500 Pell Grant to go back to school... if scams were real...

If Scams Were Real: December 1 2011

2011-12-01T13:10:00.001-08:00

Today, if scams were real:

Sarah Winter wants to help my family. She even helped a mother who went from a "broken down minivan" to making $8000 a month... if scams were real...
I am one of the "chosen few" who get to try and keep an electronic cigarette free of charge if I just pay $9.95 for shipping... if scams were real...
Yahoo has sent me an email warning that there is a virus in my system and I need to download a program to get it removed... if scams were real...

Risks of Mobile Applications

2011-12-01T12:39:00.001-08:00

There is so much you can do on a mobile phone these days! Many tasks you would do on a computer can now be done while on the go with a Smartphone. However, with all of that accessibility comes a price. That price may be diminished safety and privacy. Mobile Applications help users do everything from order a pizza to deposit checks. The dark side of this convenience is the risk users may have when the security of the mobile applications are taken for granted.

Risks associated with Mobile Applications

There are many risks associated with the usage of mobile applications. Some of the more prominent ones are:

Malware: Malware is software that is intended to do a malicious act. It could damage or disable computers and computer systems, but is often used nowadays to retrieve information from an infected system. A Smartphone is much like a mini-computer so it makes sense that the risk of malware to computers is present on Smartphones as well. Malware can take many forms including Trojans, viruses, worms and others. This software may install things such as key logging software, spyware, botnets and other nasty things. These programs are often used to obtain personal information which can then be used for the financial gain of the criminals who have installed them, sometimes with a significant cost to the person affected.
Metadata: Metadata is data that describes a data file. For instance, when a digital picture is taken with a digital camera or Smartphone, there is the information contained in the picture file that recreates the image for others to view. However, in the same image file there is also information about that image, such as where the picture was taken (GPS location), when it was taken and information on the device which took it. Criminals can use this information to track consumers.
Application (App) Scams: There seems to be an application that will do just about any task these days. However, some of these apps are developed by criminals who are hoping users will download and install the application, which will then allow them access to the Smartphone’s
system, as well as possible user information, such as a credit card number or social security number, or account numbers and passwords stored on the Smartphone.
Insecure Applications (Apps): Recent studies show that even legitimate applications can allow sensitive information to be exposed to criminals looking for such information. Some of these applications include banking institutions and major retailers.

Protecting Yourself from the Risks of Mobile Applications
While it may seem like a scary world out there for those who want the convenience of mobile apps, there are ways to protect yourself. Knowing that you have taken preventative measures should ease a bit of the concern. Some things you can do to protect yourself from the risks of mobile apps are:

Install an anti-virus software program that protects against spyware and malware as well. Make sure this software is reputable and is kept current through frequent updates.
Enroll in a backup program which also provides the capability for your phone to be wiped. This will help protect the information on your phone should it become infected by malware.
Research apps to determine if they are safe before downloading them. Look at who developed the app. For most large companies the company should be the developer themselves. If the app is new, or not well known, do a quick Google search to see if there are any reviews of the app. A Google search for “app name – problems” may be rewarding.
Review what information you are allowing the application access to when you accept the terms and permissions. Make sure that the amount of information you are allowing the app to have access to is only the information it will need to perform its intended function. If it requires access to lots of personal information, you will have to weigh the need for the app versus the exposure of that information to others.
Turn geolocation and GPS off when it is not immediately needed. This can easily be done through the privacy settings on your Smartphone. Droids usually have an icon to turn on or off the GPS function. This will keep your location from being broadcasted unintentionally through picture uploads, tweets, etc.
Do not root or jailbreak your phone. This makes it much more susceptible to malware. For more information on jailbreaking and rooting see ITRC Fact Sheet 145 - Smartphone Threats.

Signs that your Smartphone may have been Compromised
One of the problems when a device is infected with malware (or has otherwise been compromised) is it will be difficult for the user to tell. Unless an anti-virus has been installed and alerts users to the presence of malware, there is no notification that a Smartphone has been compromised. However, there are a few indications that may mean that malware is present:

Decreased Performance: Just as your PC will slow down when infected with malware a Smartphone will do the same. Problems with slow operation and decreased functionability can mean that malware is present on a phone’s operation system.
Random action: If it seems as though your phone has a mind of its own it may mean it is being controlled by an outsider. If applications open on their own, the phone powers on or off by itself or items are downloaded without permission it may mean that software allowing outside access has been installed.
In known emails or phone calls: If a Smartphone’s call log shows calls that the you never made or emails have been sent to addresses you don’t recognize, this could be a sign of a Smartphone nabbing infected and compromised.

Steps to Take if You Become a Victim
Protection is key to remaining safe from malware on Smartphone’s.

If you have an anti-virus installed on the phone, the detection and removal of any malware should be simple and the anti-virus software will perform the task for you.
If you are unable to remove the malware then a backup program with wiping capability will be incredibly helpful. All information should be wiped from the phone and the backup information can be downloaded to a new phone.
If you believe that sensitive personal information has been compromised, then you should take appropriate action to protect yourself from identity theft. Please refer to ITRC Fact sheet 120 for information on how to do this.

Definitions

Key Logging: The use of a computer program to record every keystroke made by a computer or Smartphone user. The “key-logger” will then send the information to an outside server. This is often used in order to gain fraudulent access to passwords and other confidential information.

Spyware: Software that self-installs on a computer, enabling information to be gathered covertly about a person's Internet use, passwords, etc.
Botnets: A network of private computers infected with malicious software and controlled as a group without the owners' knowledge, e.g., to send spam.
Trojan: A Trojan horse, or Trojan, is malware that appears to perform a desirable function for the user prior to run or install but instead facilitates unauthorized access of the user's computer system.
Virus: A Virus is a software program capable of reproducing itself and usually capable of causing great harm to files or other programs on the same computer; they often have methods of infecting other computers.
Worms: A computer worm is a self-replicating malware computer program.
Geolocation: Geolocation is the identification of the real-world geographic location of an object, such as a cell phone or an Internet-connected computer terminal. For example, a picture taken with a Smartphone may record the location within the picture file. When the file is posted on a social network site, any viewer may be able to determine the location from the data saved on the picture file. This could tell someone exactly where your home is located.

If Scams Were Real: November 30th 2011

2011-11-30T09:50:00.001-08:00

Today, if scams were real:

Miriam Jean wants to know if I am searching for a Work From Home Job that really works? You see, they are coaching many individuals generating up to $3800 every month at the comfort of home, with only a computer and Internet connection! They are only open to a few more people to sign up with them, and it will be coming down in a few hours, simply I need to get in right away!...if scams were real...
Someone named Jessica N. has been searching for me. I can find out who Jessica N is and who else has been searching for me if I click on a link in an email...if scams were real...
"Microsoft Certified" sent me an email warning me that there were important updates I needed to download for the health of my PC and gave me the links to download. How nice of them...if scams were real...

If Scams Were Real: Cyber Monday Edition

2011-11-28T10:07:00.001-08:00

If scams were real on Cyber Monday:

Top products are 95% off on http://www.pagansitenetwork.net/ ... if scams were real...
Costco is giving away $500 gift cards ... if scams were real...
McDonalds is giving away sandwich vouchers via http://www.glbpa.net/ ... if scams were real...

If Scams Were Real: November 23rd 2011

2011-11-23T11:24:00.001-08:00

Today, if scams were real:

I got a telegraph in electronic form from Belfast. It may have said something good, but I couldn't stand to read all 5 pages so perhaps I am missing out... if scams were real...
Dr. Norman Lopes from Home First Mortgage emailed me to inform me I have been approved for a lower mortgage payment on my current home loan... if scams were real...
The United Nations Campaign Committee has sent me $348,724.92 via Western Union as a beneficiary of a defunct hedge fund...if scams were real...

If Scams Were Real: November 22nd 2011

2011-11-22T09:11:00.000-08:00

Today, if scams were real:

I just won five free turkeys from VONS. Not quite sure how I am supposed to actually get these turkeys, but I won them!..if scams were real...
I can get $1500 deposited into my account immediatly with no credit check. Black Friday here I come!!!!...if scams were real...
Dr. E Momoh needs my help in a very confidential matter that could make me very rich... if scams were real...

If Scams Were Real: November 21st 2011

2011-11-21T12:12:00.000-08:00

Today, if scams were real:

I won a date with Justin Beiber.... if scams were real...
Southwest Airlines is giving me two free flights to anywhere in the United States... if scams were real...
A woman named Jessica found me online, thinks I'm cute and wants to chat... if scams were real...

If Scams Were Real: November 16th 2011

2011-11-16T08:00:00.000-08:00

Today, if scams were real:

I can download unlimited MP3s for $2.99... if scams were real...
I got an email containing a "very important" attachment from Uladzimir Radzeuski from London... if scams were real...
Mr. Clement Okom would like me to help him transfer his funds into the US before they are seized by the evil government. He assures me that the transaction is 100% safe and I will be rewarded handsomely for my help... if scams were real...

When a Child is Using a Parent's Identity

2011-11-15T11:24:00.001-08:00

It’s a parent’s nightmare to find out their child is a thief. Discovering the target is you can be the beginning of an emotional roller coaster that includes denial, anger, feelings of betrayal, and confusion. You may find yourself up at nights, wondering what you did wrong. The answer is: you didn’t. Your adult child chose to take certain actions that have consequences. You did not cause them to do this.

Points to consider:

Identity theft is a crime that can drain your bank accounts, trust funds and retirement savings.
This is an opportunity to send a strong message to your child before they commit more serious crimes.
It’s not easy to tell the police your child is a thief. But if you don’t, who will? Who will be the next victim? Will your child progress to more serious crimes?

Here are some of your options. Each option has distinct ramifications. They are:

File a police report. Remember that anything that follows was a result of your child’s actions, not yours. The police report is a necessity to help clear your records and restore your good credit and reputation.
Don’t file a police report. Pay the bills. Assume the debt on your credit report. With this option, there will be consequences to you for the thief’s behavior. ITRC wants to make this very clear. If you pay the bill, you live with the damage created. Anything on your credit report remains your responsibility and will continue to affect your credit score for a period of seven years or more.
Draft an agreement with your child, stating that the “thief/child” will pay all the bills and accept responsibility. The problem is some creditors may not accept this agreement. The only acceptable agreement with most creditors is an agreement made between the creditor and your child. You should have absolutely no part in this process.

Be aware: Open conversations with the offending person can critically harm your position and case against them. Any hint of threat or coercion will undermine your ability to file a police report or seek prosecution.

Should you decide to take action against your child, then these are the first few steps to take.

Place fraud alerts with the three Credit Reporting Agencies and then obtain your credit reports (ITRC Solution 3).
Once you have proof of a crime, file a police report in the jurisdiction where you live. Make sure the police understand you will NOT change your mind and will participate in all prosecutorial matters. The police need to know you are firm in your commitment.
Refer to ITRC Fact Sheet 100 – Financial Identity Theft and proceed as recommended. For additional assistance and support, call the ITRC at
888-400-5530 and speak with an advisor. ITRC does not charge for assistance.

In the words of one mother, speaking to a judge sentencing her son: Your honor, please ignore my tears. Being here hurts me deeply. But I have done all I can to help my son understand that actions have consequences. Now I need your help to get him straight and bring back the son I still love.

Related Resource:
ITRC Fact Sheet 115 – When you Personally Know the Thief

itrc@idtheftcenter.org

This fact sheet should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims for their own use, should be directed to

If Scams Were Real: November 15th 2011

2011-11-15T09:17:00.001-08:00

Today, if scams were real:

Captain Anita George from the US Army would like me to open an attachment. Must be important if it is from the Army... if scams were real...
There are 15 new "legitimate" work from home offers in my area open today. They say they are legitimate so they must be...if scams were real...
Orchard Mastercard received my application for a platinum card and approved me. I don't ever remember applying for a credit card... if scams were real...

If Scams Were Real: November 14th 2011

2011-11-14T10:19:00.001-08:00

Today, if scams were real:

Jesus Leonard sent me an exciting offer to get an iPhone 4s for $27.92. Thanks Jesus!... if scams were real...
Louis Vuitton has sent me an email for a free purse! All I need to do is pay $3.95 via credit card for shipping...if scams were real...
There were 372 dream jobs posted in my area this morning... if scams were real...

Latest ITRC video on Privacy

2011-11-14T10:15:00.001-08:00

Check out our latest video on protecting your privacy while using a Smartphone or mobile device!

If Scams Were Real: November 3rd 2011

2011-11-03T13:14:00.000-07:00

Today, if scams were real:

I got a job offer for a job I did not apply for, but the pay looks great and I can work from home... if scams were real...
The New York Clearing House finally released my blocked funds, through the Clearing House Interbank Payments System (CHIPS). I didn't know I had any blocked funds.... if scams were real...
Mrs Sheerah King is dying and wants to give 8 million USD to fight HIV AIDS and Cancer and she wants me to do it... if scams were real...

2011-11-02T15:00:00.000-07:00

We at the ITRC are very excited about all of the new directions in which we are reaching out to help consumers and spread awareness of identity theft. One of these new avenues is video and here is one of our first productions! This is a video about the dangers of smartphone apps and will hopefully reach young consumers about what harm can be done through the unsafe use of mobile applications. We hope you enjoy our little creation!

Do you have an idea for a video to promote awareness about identity theft? Let us know!

If Scams Were Real: November 2nd 2011

2011-11-02T09:47:00.000-07:00

Today, if scams were real:

Mrs. Rosemary Russell needs to send me the final payment from a fund that I was a beneficiary to. I just need to send my full name,address,telephone number,and your account number to johnsonwilliams0777@gmail.com to process my payment and they will deposit $950k into my account... if scams were real...
I won a loan for $1500. Not quite sure how you 'win' a 'loan' but it is awful nice of them...if scams were real...
Apparently there are Russian women waiting for me to make them my bride. I can just pick them out from a website and they will marry me... if scams were real...

If Scams Were Real: November 1, 2011

2011-11-01T09:50:00.000-07:00

Today, if scams were real:

I have been hired for a job I did not apply for. I don't understand this whole recession thing. I have at least 25 job offers in my inbox... if scams were real...
I won a $25 Starbucks gift card. They must know how much I love caffeine since I never entered any contest... if scams were real...
Someone at the email 3a1b62e52b8b35a52025abc747485c499491ae99@skybizsite.net sent me a Halloween eCard that I have to download and see. How nice of them!...if scams were real...

If Scams Were Real: October 26th 2011

2011-10-26T13:31:00.000-07:00

Today, if scams were real:

This weeks free lunch will come from Subway... if scams were real...
I got this in an email "Hey there US President might be offering United states government Federal grants that will aid familys where you live that will energize a economic system. Investigate for yourself n9Gov . Com tend not to lose out. It does not last huge." I don't even know where to begin on this one...if scams were real...
Cpt. Emily Naslund emailed me from the Afghanistan war front. She is awaiting my response about some very important information...if scams were real...

If Scams Were Real: October 20th 2011

2011-10-20T15:59:00.000-07:00

Today, if scams were real:

I won a year's worth of free McDonalds. That is a lot of grease.... if scams were real...
There are open jobs that I am already qualified and hired for if I accept. I can work from home and make $70,000 a year... if scams were real...
Ms. Lily Rose Washington who is currently living in Kenya needs me to help transfer her fortune to the United States before her assets are frozen by a corrupt government. She will pay me 3 million dollars to help her... if scams were real...

Identity Theft Prevention Tips for Job Seekers

2011-10-18T11:35:00.001-07:00

While no one person can completely prevent identity theft from occurring, there are things we can do to minimize our exposure.

During the search for a new employment, job seekers may be at a slightly higher level of risk to identity theft. This fact sheet is designed to help you become aware of potential problem areas so that you can avoid them. You may also want to refer to ITRC’s “Workplace FAQ’s” about dealing with HR personnel if you are already a victim of this crime.

Most on-line resume posting sites have a “Be Safe” section. Read it carefully. If you see any questionable job postings immediately report it to that site. If you are approached by a scam or suspect a scam in progress, also immediately report it to that posting site.

Items that do not belong on a resume:

Your Social Security Number (SSN)
Date of birth (DOB)
EIN (taxpayer id number if you use that as an alternate to the SSN)
Driver’s license number
Marital status
Professional license number
Gender – it is against the law for them to ask you for this information
Age - it is unlawful for an employer to ask for this information
The reason why you left a past employer
The year you graduated from various schools and the school name. The school name is a personal choice issue. By knowing what school you attended and graduation date, a thief could discover more about you via alumni lists. An option is to just list your degree and subject or area of specialty.
Disabilities – unless the job specifies a request to describe any physical limitations, you should not offer this information up front
Any of the above information can be provided to an interested employer in person upon request. Keep in mind, a resume only opens the door to an interview. Jobs are not offered based on resume or application information.

Answering ads on the Internet or newspaper:

If they ask you to write your SSN on your resume or cover letter, ask why it is being requested and explain that you are not comfortable in doing that.
If someone calls you, and during the telephone interview asks for your SSN, do not give it out. Instead, tell them that you need to look it up and that you will call that person back with the number.
In the meanwhile, contact the company (look it up on the Internet) and ask the Human Resources Department to find out if that person actually works there.
A tip: if an email address does not contain the domain name of the company is more likely fraudulent than fact.
A tip: if the fax number given or phone number given is not in the same area code as the corporate number, this may be a scam artist.
Normally, companies do not do background checks on individuals they have not met. The request for a SSN for that purpose is suspect.
Be careful about going for work for a company whose only office seems to be outside of the United States. If you cannot check them out easily with a Yahoo or Google search, look for a job elsewhere.
Avoid companies that pay only in cash or money orders. That is not normal protocol.

Scams: Please see ITRC’s Scams & Consumer Alerts

Money transfer jobs: This scam begins with a company asking you to open a banking or checking account in your name. You are then sent what appear to be cashier’s checks, bank checks or money orders from “customers” to deposit. You may also be told to forward the online code for that account so the company can make withdrawals. The other scam is for you to make withdrawals and send a portion of it to the “hiring company.” You are paid a commission for your time.
Most often these are companies that claim they are outside of the United States. Avoid these jobs as they almost always are fronts for illegal activities and can result in possible criminal charges against you.
Jewelry making or envelope stuffing: The problem with these “opportunities” is that you frequently cannot satisfy your employer and therefore only 1 of 12 earrings are acceptable. These are time and money wasters.
Courier services: It is best to check out the hiring company with both the Better Business Bureau and with either the state or federal Attorney General’s Office to confirm that they are legitimate. Make sure you see exactly what you will be carrying and that you don’t end up getting arrested for trafficking stolen or illegal goods.
Avoid companies that ask if you have a bank account that you can use for their activities. A legitimate company will have its own bank account or will be able to open one itself. You should not be using your SSN to open an account for any company other than your own or one in which you act as the CFO.
Avoid companies that ask you to use your SSN to open a credit card for that company.
Use an attorney to set up a firm business contract describing all duties and obligations with anyone you meet via the Internet, who wishes to co-own a business with you. This is a stranger and legal documents must be involved to protect the interests of both parties.

Applications:
ITRC recommends that you do not fill in the sections asking for your driver’s license number or SSN. Instead, place a note saying “see below.” In the blank section at the bottom of the paper, write “Prefer to provide this information during the interview.” If asked, you can tell them that due to the explosive growth of this crime, you prefer not to include this sensitive information on forms. The reality is that this application may not be safely stored or may be thrown in the trash exposing you to possible identity theft.

Screening:

Companies might want to do a background check of you- financial and criminal. In CA you generally have the right to see the information, provided it was not first-hand interviews (i.e. law enforcement checks). Some victims of identity theft find out they are victims during this process. If possible, ask to see the results of any background checks done on you so that you can verify their accuracy.
If you find an error in your report, let the HR department know immediately. Ask for a photocopy of the report and tell them that this is either fraudulent or a clerical error. Ask for a few days to investigate the problem.
If the error/fraudulent records are in your credit history, you automatically qualify for a free credit report from each of the credit reporting agencies. Equifax 800-525-6285, Experian 888-397-3742, TransUnion 800-680-7289.
If the error is in a criminal background check, you need to contact the agency that reported the outstanding warrant and find out what is going on. Please contact the ITRC to help you or if you have any questions.

Resources:
When in doubt, you can check out a potential employer in many ways. One quick manner would be to look at the company website and verify its address, phone number and history.

The Better Business Bureau (www.bbbonline.com ) keeps a log of complaints about companies.
State Attorneys General also maintain files about companies as does the U.S. Attorney General and the Federal Trade Commission (www.ftc.gov )

You can also check out the URL of the company by using Trend Micro’s widget Check URL Safety link on the ITRC website.

itrc@idtheftcenter.org

This fact sheet should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims for their own use, should be directed to

If Scams Were Real: October 18th 2011

2011-10-18T11:25:00.000-07:00

Today, if scams were real:

I won a life insurance policy. I didn't even think that was possible...if scams were real...
Mrs. Carolyn Halla, a widow from London, has gotten Lung Cancer and needs me to spend her fortune on charitable organizations. For this I will receive a payment of 1.2 million dollars... if scams were real...
I also won a new iPhone 4s. I didn't even have to wait in one of those 8 hour lines! ... if scams were real...

If Scams Were Real: October 17th 2011

2011-10-17T09:54:00.000-07:00

Today, if scams were real:

I'm getting free Red Lobster for a month...if scams were real...
I can get a job and a Wal-Mart gift card... from the same company.. if scams were real...
I can lose 5 lbs a day with a diet pill that a company wants to send me for free... if scams were real...

If Scams Were Real: October 13th 2011

2011-10-13T13:41:00.000-07:00

Today, if scams were real:

I won two free flights on Southwest, though I never entered a contest to do so ... if scams were real..
Mr. Jack Walcot, Head Of International Remittance Department For the United Nations Development Programme needs to transfer my benificiary funds immediatly or they will be forfeited to the Libyan government.... if scams were real...
Someone named Diploma Harry is trying desparately to get me a package with confirmation number: XGTY23B... if scams were real...

If Scams Were Real: October 11th 2011

2011-10-11T09:30:00.000-07:00

Today, if scams were real:

Someone may have run a background check on me and I can find out who is I give my personal information to the company that ran it. Shouldn't they already have my information if they ran a background check on me? ... if scams were real...
I can get a platinum card with no credit check! They even have smiley faces in their subject line. How sweet...if scams were real...
Someone named Tupak wants me to grow my life through my visionary power and he can teach me how for free... if scams were real...

If Scams Were Real: October 7th 2011

2011-10-07T08:00:00.000-07:00

Today, if scams were real:

A website will give me a $100 gift certificate to KFC just for clicking on a link and visiting their website... if scams were real...
Dr. Dennis Maxwell of the British Finance Monitoring Unit has sent me an urgent message which I will need to download in order to read... if scams were real...
A company called The Tax Relievers can guarantee to make all of my past due taxes disappear for a fee of $14.95 ... if scams were real...

Medicare Cards and Social Security Numbers

2011-10-06T11:26:00.000-07:00

Many consumers complain that while they remove their Social Security cards from their wallets, the Social Security Number is still on their Medicare cards.

The ITRC would like to make the following recommendation. Not only could this tip keep an identity thief from getting your number, but it may also save your life one day.

Photocopy your Medicare card, front and back.
Put your original card in a safe, locked area. Only carry it with you on the days you KNOW you will need it.
Using scissors cut the photocopies of your Medicare card down to wallet size, cutting off the last four (4) numbers of your Social Security Number.
Staple these two business card size papers together, adding a third blank paper to the packet. On this blank sheet, write down following:

Emergency contact with the name and phone number of a person who can be reached in the event of an emergency. Your emergency contact person should have a sheet of paper with the last 4 numbers of your Social Security number and the following:
- Your pertinent medical history
- The name of your doctors
- A list of all the prescriptions you take, including over-the-counter pills.

ITRC@idtheftcenter.org .

This project was supported by Grant No. 2007-VF-GX-K038 awarded by the Office for Victims of Crime, Office of Justice Programs, U.S. Department of Justice. Points of view in this document are those of the ITRC and do not necessarily represent the official position or policies of the U.S. Department of Justice.

This Solution should not be used in lieu of legal advice. Any requests to reproduce this material, other than by individual victims or their own use, should be directed to

Copyright 2010, Identity Theft Resource Center ®, Created by the ITRC staff

If Scams Were Real: October 6th 2011

2011-10-06T08:00:00.000-07:00

Today, if scams were real:

If I take an online unemployment survey I can get $500 immediately... if scams were real...
I can sign up via email for something called a McDonalds Arch Card. I will get money back into my checking account every time I use the card... if scams were real...
There are Nikon D90 (usually over $1000) for $24 on an auction site... if scams were real...

If Scams Were Real: October 5th 2011

2011-10-05T08:00:00.000-07:00

Today, if scams were real:

Someone sent me a $250 gift card to Olive Garden. That is a lot of gnocchi... if scams were real...
A woman named Marissa is trying to get a hold of me because apparently we met on Facebook once and then she had to delete her account. I will not go into detail about what she said because I think I would have to change the rating of this blog, but let's just say she REALLY wants to get in touch... if scams were real...
If I take part in a survey about my favorite pizza I can get a free Pizza Hut Pizza. Even if I don't vote for them!... if scams were real...

Risks of Mobile Applications

2011-10-04T10:10:00.000-07:00

This blog offers recommendations on how to make your experience with mobile applications safe and enjoyable. The following subjects will be addressed:

Risks associated with Mobile Applications

Malware
Metadata
Application scams

Protecting Yourself from the Risks of Mobile Applications
Signs that your Smartphone may have been Compromised
Steps to Take if you Become a Victim
Definitions of Key Terms to Understand your Smartphone

Malware: Malware is software that is intended to do a malicious act. It could damage or disable computers and computer systems, but is often used nowadays to retrieve information from an infected system. A Smartphone is much like a mini-computer so it makes sense that the risk of malware to computers is present on Smartphones as well. Malware can take many forms including Trojans, viruses, worms and others. This software may install things such as key logging software, spyware, botnets and other nasty things. These programs are often used to obtain personal information which can then be used for the financial gain of the criminals who have installed them, sometimes with a significant cost to the person affected.
Metadata: Metadata is data that describes a data file. For instance, when a digital picture is taken with a digital camera or Smartphone, there is the information contained in the picture file that recreates the image for others to view. However, in the same image file there is also information about that image, such as where the picture was taken (GPS location), when it was taken and information on the device which took it. Criminals can use this information to track consumers.
Application (App) Scams: There seems to be an application that will do just about any task these days. However, some of these apps are developed by criminals who are hoping users will download and install the application, which will then allow them access to the Smartphone’s
system, as well as possible user information, such as a credit card number or social security number, or account numbers and passwords stored on the Smartphone.
Insecure Applications (Apps): Recent studies show that even legitimate applications can allow sensitive information to be exposed to criminals looking for such information. Some of these applications include banking institutions and major retailers.

Install an anti-virus software program that protects against spyware and malware as well. Make sure this software is reputable and is kept current through frequent updates.
Enroll in a backup program which also provides the capability for your phone to be wiped. This will help protect the information on your phone should it become infected by malware.
Research apps to determine if they are safe before downloading them. Look at who developed the app. For most large companies the company should be the developer themselves. If the app is new, or not well known, do a quick Google search to see if there are any reviews of the app. A Google search for “app name – problems” may be rewarding.
Review what information you are allowing the application access to when you accept the terms and permissions. Make sure that the amount of information you are allowing the app to have access to is only the information it will need to perform its intended function. If it requires access to lots of personal information, you will have to weigh the need for the app versus the exposure of that information to others.
Turn geolocation and GPS off when it is not immediately needed. This can easily be done through the privacy settings on your Smartphone. Droids usually have an icon to turn on or off the GPS function. This will keep your location from being broadcasted unintentionally through picture uploads, tweets, etc.
Do not root or jailbreak your phone. This makes it much more susceptible to malware. For more information on jailbreaking and rooting see ITRC Fact Sheet 145 - Smartphone Threats.

Decreased Performance: Just as your PC will slow down when infected with malware a Smartphone will do the same. Problems with slow operation and decreased functionability can mean that malware is present on a phone’s operation system.
Random action: If it seems as though your phone has a mind of its own it may mean it is being controlled by an outsider. If applications open on their own, the phone powers on or off by itself or items are downloaded without permission it may mean that software allowing outside access has been installed.
In known emails or phone calls: If a Smartphone’s call log shows calls that the you never made or emails have been sent to addresses you don’t recognize, this could be a sign of a Smartphone nabbing infected and compromised.

Steps to Take if You Become a Victim
Protection is key to remaining safe from malware on Smartphone’s.

If you have an anti-virus installed on the phone, the detection and removal of any malware should be simple and the anti-virus software will perform the task for you.
If you are unable to remove the malware then a backup program with wiping capability will be incredibly helpful. All information should be wiped from the phone and the backup information can be downloaded to a new phone.
If you believe that sensitive personal information has been compromised, then you should take appropriate action to protect yourself from identity theft. Please refer to ITRC Fact sheet 120 for information on how to do this.

Definitions

Key Logging: The use of a computer program to record every keystroke made by a computer or Smartphone user. The “key-logger” will then send the information to an outside server. This is often used in order to gain fraudulent access to passwords and other confidential information.

Spyware: Software that self-installs on a computer, enabling information to be gathered covertly about a person's Internet use, passwords, etc.
Botnets: A network of private computers infected with malicious software and controlled as a group without the owners' knowledge, e.g., to send spam.
Trojan: A Trojan horse, or Trojan, is malware that appears to perform a desirable function for the user prior to run or install but instead facilitates unauthorized access of the user's computer system.
Virus: A Virus is a software program capable of reproducing itself and usually capable of causing great harm to files or other programs on the same computer; they often have methods of infecting other computers.
Worms: A computer worm is a self-replicating malware computer program.
Geolocation: Geolocation is the identification of the real-world geographic location of an object, such as a cell phone or an Internet-connected computer terminal. For example, a picture taken with a Smartphone may record the location within the picture file. When the file is posted on a social network site, any viewer may be able to determine the location from the data saved on the picture file. This could tell someone exactly where your home is located.

This ITRC Fact Sheet was supported by a grant from the California Consumer Protection Foundation.

If Scams Were Real: October 4th 2011

2011-10-04T08:00:00.000-07:00

Today, if scams were real:

I can earn $30/hr just cruising the Internet...if scams were real...
Someone did a background check on me and I can find out who if I enter my personal information to verify I am who I say I am... if scams were real...
The Information Manager told me I can forget all of my worries through his simple program of eliminating my debt through easy work... if scams were real...

If Scams Were Real: October 3rd 2011

2011-10-03T13:45:00.000-07:00

Today, if scams were real:

On September 16, 2011, an amendment to the NACHA Operating Rules was made effective that established specific authorization and identification requirements for ACH transfers. Therefore in order to receive any of my ACH transfers I must re-enter all of my information. Though I still don't know what an ACH transfer is... if scams were real...
Mrs. Mellisa Lewis is going into cancer surgery today. She wants me to contact her lawyer and tell him that she has willed $14.25M to me for the good work of the lord. I must quote her personal reference number JJ/MMS/953/5015/GwrI/316us/uk. She has paid for the state tax on this money to be transferred to me. Isn't that nice of her? ... if scams were real...
I can get $250 of free McDonalds for taking a survey. I love McDonalds...if scams were real...