What is identity theft?

Identity theft is any kind of deception, scam, or crime that results in the loss of personal data, including the loss of usernames, passwords, banking information, credit card numbers, Social Security Numbers and health ID’s, that is then used without your permission to commit fraud and other crimes.

Up to 9 million Americans have their identities stolen each year according to the FTC1, and at least 534 million personal records have been compromised since 2005 through attacks on the databases of businesses, government bodies, institutions, and organizations2. If those breaches were spread evenly across the U.S. population of 310 million, everyone would have had their identities stolen one and two-thirds times.

For some consumers, identity theft is an annoying inconvenience and they can quickly resolve their problems and restore their identity. For others recovering their identity can cost hundreds, even thousands of dollars, take months to resolve, cause tremendous damage to their reputation, cause them to lose job opportunities, even influence the rejection of loan applications for school, homes or cars because would-be employers or loan companies see the damage on your credit scores. Some consumers have even been arrested for crimes committed by someone using their identities and have had to prove that they were not guilty.

How are identities stolen?

Consumers become victims of identity theft through many types of exploits. These can happen the old-fashioned ways when crooks (including family members!) steal mail from your mailbox, rummage through your trash for bills and bank statements, steal wallets and purses, or make an extra copy of your credit card – perhaps when your waiter or clerk walks off to process your payment.

Online identity theft occurs when users fall for tactics like phishing and confidence scams; or download malware onto their computers or smartphones that steals their information; use wireless networks that are insecure; take out money from an ATM that has been rigged with a skimming device that collections your information; share their passwords with untrustworthy people, or by having their information stolen when data records are breached on companies, government, and educational sites.

How can I protect my identity online?

Below are a few key steps you can take to prevent identity theft online:

1. Protect your computer and smartphone with strong, up-to-date security software. If your computer or phone is infected with malicious software, other safeguards are of little help because you’ve given the criminals the key to all your online actions. Also be sure that any operating system updates are installed.
2. Learn to spot spam and scams. Though some phishing scams are easy to identify, other phishing attempts in an email, IM, on social networking sites, or websites can look very legitimate. The only way to never fall for phishing scam is to never click on a link that has been sent to you. For example, if the email says it’s from your bank and has all the right logos and knows your name, it may be from your bank – or it may not be. Instead of using the link provided, find the website yourself using a search engine. This way you will know you landed on the legitimate site and not some mocked up fake site.
3. Use strong passwords. Weak passwords are an identity thief’s dream – especially if you use the same password everywhere. Once the thief knows your password, they can log you’re your financial accounts and wreak havoc. You need passwords that are long (over 10 characters), strong (use upper and lower case letters, numbers and symbols), and that has nothing to do with your personal information (like name, age, birthdate, pet). Password managers and two-factor authentication (2FA) are also both best practices for password management.
4. Monitor your credit scores. By law you have the right to three free credit reports per year; from Experian, Transunion, and Equifax.These three credit bureaus work together through a website called AnnualCreditReport.com so you can quest all three reports at once in one of the following ways:
   1. Go to the Web site. Through this highly secure site, you can instantly see and print your credit report.
   2. Call toll-free: (877) 322-8228. You’ll go through a simple verification process over the phone after which they’ll mail the reports to you.
   3. Request by mail. If you live in certain states, fill out the request form and mail it to the Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. (Get more details.)
   Note: Remember that after you request a report, you will have to wait a year to get it free of charge again from the same credit reporting company. (Of course, you can pay for a copy of your credit report at any time.)
5. Review your credit score. Look to see if there are new credit cards, loans or other transactions on your account that you are not aware of. If there are, take immediate steps to have these terminated and investigated.

Consistently applying these eight steps to both defend and monitor your credit score will reduce the risks of having your identity stolen, and alert you instantly if such a problem arises. Internet security solutions with identity theft protection can guard against specialized malware designed to steal personal information by logging your keystrokes or snooping on your browsing sessions. Protect usernames, account numbers, and other personal information against spyware and other online threats targeting valuable personal data.