Protecting Yourself Against Identity Theft
Identity theft is a growing but often hidden crime that involves the stealing of a person's identifying information. Victims of this type of theft may not realize what has happened to them for months or even years. Typically, most people only find out that they are victims of identity theft when they encounter the often devastating consequences of the crime. These consequences may include mysterious but serious tax penalties, or being summoned to court for debts they did not incur. Millions of Americans fall victim to identity theft every year, and each incident can cost thousands of dollars in losses and many hours of time to rectify. The damage that an identity thief can inflict upon a victim may linger for years or even last a lifetime.
What is Identity Theft and How Can it Affect You?
Identity theft is popularly defined as the act of assuming the identity of another person, in part or in whole. This typically means impersonating someone else for the purpose of fraudulent acts, such as obtaining a loan or to avoid paying taxes. The Federal definition of identity theft, however, does not require the actual use of a phony identity for fraudulent purposes. The willful act of acquiring someone else's identification information, such as a Social Security number, without authorization, is a Federal crime under the law 18 USC § 1028A, also known as "aggravated identity theft". In addition there are numerous state laws that prosecute this crime as well, and in many cases these laws are even harsher than Federal laws.
Victims whose identity have been stolen can suffer a wide range of consequences as a result of this crime. For example, they can find themselves liable for massive bills for medical or dental services. They may also be left to deal with large balances on credit cards they never opened, or home loans they never took out. In addition, an identity thief can clean out bank accounts or even private retirement accounts such as 401(k)'s. A person may even enter adulthood to find themselves confronted with tax liabilities and private debts incurred during their childhood, as a result of identity theft. Likewise, an elderly person could find themselves burdened with mysterious debts, sometimes incurred in their name by a child or relative. Victims of identity theft may not be able to obtain any form of credit as a consequence of this type of crime. Background checks for employment purposes may also turn up false but highly adverse information about a victim because of identity theft, which can result in the loss of employment opportunities.
- Criminals use a wide variety of means to commit identity theft. This includes "social engineering", which means to trick someone into giving away personal information to someone they believe they can trust. More sophisticated criminals never confront their victim at all, instead resorting to breaking into databases stored online, where they can pilfer thousands of personal information records at a time.
- Businesses may also be harmed when a criminal creates a totally false, or "synthetic" identity. This includes credit card and home equity loan companies that lend out money, only to find that the debtor doesn't exist at all, making it almost impossible to collect on the debt.
- People who suffer identity theft may take years and spend thousands of dollars just to undo the damage that can be done to their credit and good name within a single day.
- Identity theft is increasingly being used by terrorist and organized crime groups as a means to obtain funding for their activities. It is entirely possible that a victim may be arrested for terrorist acts that they did not commit, as a result of identity theft.
How to Prevent Identity Theft?
While there is no perfect way to avoid becoming a victim of identity theft, there are ways to severely limit one's level of vulnerability. A common method of preventing identity theft is to secure one's mailbox so that it can only be opened with a key. Another way is to use a cross-cut shredder to destroy personal documents before throwing them away, so that anyone going through the trash cannot piece the information back together to read it. In addition, it is never wise to give out personal information to someone over email, or during a phone call that the person did not initiate. Banks rarely if ever ask for identifying information via email, so if a consumer gets an email asking for this, they should report it to the bank immediately, and decline to comply with any such requests. Consumers can opt out of pre-approved credit offers, as well as prevent credit cards from being fraudulently opened in their name by placing freezes on credit reports. This freeze will prevent credit card companies from doing a credit check on the person, which is necessary to establish a new account.
In the age of the Internet it is always advisable for net surfers to stay up to date with the latest Internet security measures, including antivirus software, firewalls, operating system patches, and web browser security upgrades. When shopping online, customers should always require that a website be secure before they make purchases and share personal information. Any site that asks for credit card information, names, addresses, or other identification-related data, should start with an "https" as a prefix to their web address, instead of "http". This can also be verified by the presence of a "lock" icon which appears at the bottom of all major web browsers when visiting a secure site. This will reduce the likelihood that personal information will be intercepted on its way from a computer to the organization's website.
- Early detection is a key strategy to limiting the damage that can be done by identity theft, or even preventing it. Consumers should routinely monitor their credit reports for suspicious activity, such as attempts to open mysterious credit accounts.
- If a person's wallet is stolen they should report it immediately. Any items of personal identification that was lost should be replaced and changed, including but not limited to Social Security numbers and driver's licenses.
- When getting rid of a hard drive, always completely wipe all data from the drive. Thieves may acquire used hard drives and mine them for sensitive personal information.
- Computers are under constant attack by viruses, worms and trojans. One way to limit one's vulnerability to identity theft is to turn the computer off when it is not in use.
- Personal documents left at home should be kept in a safe or other secure container which is difficult for thieves or visitors to access.
- Beware of phishing. Phishing is when a website is created that poses as an otherwise trustworthy entity in order to collect personal information. Consumers are often lured to these sites by fraudulent emails. If at all possible, avoid going to any site that is linked via email and never share personal information on such a site.
- Government entities collect and maintain databases of Social Security numbers and other critical forms of personal information from all citizens within their jurisdiction. Despite the best security measures a person can take, if a hacker breaks into those databases, they can potentially steal thousands or even millions of identities at a time.
Additional Resources
- Cornell University Law School: 18 USC § 1028A - Aggravated Identity Theft - This resource explains the Federal definition of identity theft, and the punishment thereof.
- The Federal Trade Commission: Identity Theft - This is the FTC's identity theft information clearinghouse. It contains information on how to detect and prevent identity theft.
- The United States Department of Justice (US DOJ): Identity Theft and Identity Fraud - The Department of Justice's website for identity theft and fraud. Explains the nature of the crime as well as how it is committed, and what the US DOJ is doing to stop it.
- California Department of Justice - Office of the Attorney General: Identity Theft - California's government website for identity theft issues. It also contains information on how to clear one's name if one is a victim of identity theft.
- The Federal Deposit Insurance Corporation (FDIC): Identity Theft - This is the FDIC's identity theft website. It contains advice on various techniques that thieves use, as well information about prevention.
- On Guard Online: Identity Theft - A United States Government website dedicated to information on how to avoid becoming a victim of various cyber crimes, including identity theft.
- Scambusters: All About Identity Theft - A wide variety of techniques used by identity thieves are listed on this website.
- Social Security Online: Replace a Social Security card for an adult - The Social Security Administration's information page on how to get a new Social Security card in case one is stolen. Also contains a link for how to replace a child's card.
- The Internal Revenue Service's identity fraud resources page - People who need information on how to deal with identity theft from a taxpayer's perspective will find this page to be useful.
- Attorney General's Consumer Protection Home Page: Identity Theft - Explains what identity theft is, as well as advice on how to detect and avoid it. It also contains information regarding a hotline for Missouri residents.
- Identity Theft Info - Identity Theft Info is a major clearinghouse for information about identity theft. It includes statistics, prevention and detection advice, as well as the latest information on identity theft techniques.
- World Privacy Forum: Medical Identity Theft - The World Privacy Forum's page for medical identity theft. Describes the nature of medical identity theft, how victims can fight back, and what concerned citizens can do about it.
- United States Department of the Treasury: Terrorist Financing (PDF) - A United States Treasury document which discusses the link between identity theft and terrorism.
- Privacy Rights Clearinghouse - Coping with Identity Theft:Reducing the Risk of Fraud - Information about identity theft and tips on how to avoid becoming a victim.
- Anti-Phishing - A website that explains the concept of phishing. People who are interested in reading about the latest technological and law enforcement efforts against phishing, will find a wealth of information at this site.
- Financial Privacy Now: Consumers Union's Guide to Security Freeze Protection - This website contains advice on which states have passed laws mandating the right to prevent access to one's credit report files. It also contains advice on how to freeze credit reports in states that haven't passed such laws.
- Utah's IRIS Identity Theft Information System: Identity Theft and Online Resumes - Explains the threat of identity thieves preying on job seekers. Also includes advice on how to avoid becoming a victim.
- The United States Department of Education: Identity Theft - The Department of Education's advice web page regarding identity theft prevention.