The Writer

The Writer's Site

How To Protect Yourself Against Identity Theft

by Alan Jacobson

During the course of his career as a novelist, Alan Jacobson has spent eight years working with the FBI on a variety of matters, from serial offenders to facility security and identity theft. He has edited several published research papers for the Bureau, and has worked with police, sheriff departments, and bomb squads on site security.

Identity theft is the fastest-growing crime. Last year alone, almost 10 million Americans fell victim at a cost of $5 billion. How mainstream has identity theft become? Social Security numbers ("SSN") have been auctioned on eBay—yes, eBay—and an Internet search for "fake ID" produces a plethora of offshore operations selling holographic identification cards that look authentic.

Who is behind this? The usual cast of characters: crack addicts, methamphetamine users, organized crime, and nefarious individuals. Identity theft has become an international problem: rings of thieves based in countries such as Russia steal, then sell, your personal information in organized crime circles. Law enforcement recently busted a professionally organized syndicate that utilized a corporate executive structure and a web-based login system that allowed criminals to purchase blocks of stolen identity information for predetermined prices.

The problem is multi-faceted. First, a variety of personal information is exposed on the web by individuals, companies, and government agencies. Identity thieves find this data using search engines in a technique known as "Google hacking." In one study, using Google for less than an hour, participants exposed sensitive information on nearly 25 million people. They unearthed names, birthdates, SSNs, and credit-card information. Google hacking has inspired the creation of how-to web sites and books, which outline the process of submitting targeted search queries with special commands to elicit sensitive information. One expert stated that it would take the average Joe only 30 minutes, following one of the step-by-step books, to master it.

Google isn't to blame for Google hacking—they just provide the getaway car for the bank robbers. One thing they do have control over is protection of your privacy and personal info. But Google's free "Gmail" email service has come under fire because Google searches everyone's email messages for data they then sell to companies who want to market to you. (I personally cringe when I send email to someone with a Gmail account, and think twice about what I include in the message.) Further, Google’s Terms of Service reportedly state that Gmail messages may remain on its system for an indefinite period—even after an account has been deleted—increasing the likelihood this information—your personal information—could be compromised by identity thieves.

Clearly, there's not a lot you can do about your personal data hanging out on the Internet. Refusing to use Gmail is but a small solution to a big problem. Here are 15 easy steps you can take to thwart thieves:

Obtain a locking mailbox. Thieves troll neighborhoods looking for credit card statements, checks, credit card offers, and the like. An unlocked box is an invitation for years of headaches.
Do not list your address or phone number on your checks. Your names are sufficient and banks will comply with this request. (Note: if you use online banking, the address of record on your account will likely be printed on the checks.)
Do not list your home address on your drivers license or other ID in your wallet. Wallets are lost and stolen, and the last thing you want is for the thief to know where to find you should he want to return for more.
Do not keep your home address or other personal information in your car. Cars are broken into and stolen. Check your insurance and registration cards; if your address is there, cut it out.
Do not carry your SSN in your wallet. More on this later.
Shred all mail labels that contain your name and address; did you know that your trash is sorted at state prisons? That means those pre-approved credit card solicitations you receive are passing through the hands of convicted criminals.
Obtain a Private Mail Box ("PMB") for use when ordering materials online or over the phone. This prevents you from listing your home address on a company's server—which may be hacked or otherwise compromised by shoddy security. (Change your credit card address to the PMB, because online orders will kick back your purchase if the shipping and billing addresses are different.)
Your medical records are sometimes handled by an outsourced company—which is often in a foreign country. While you sign a privacy agreement with your physician, a transcriptionist in Pakistan could be typing up his reports. What's in your medical records? Personal information. Only provide your doctor's office with need-to-know data. They don't need your SSN or drivers license number.
Don't put personal information in emails. Email is NOT secure. Home addresses, bank or investment account numbers, social security numbers, and passwords are best exchanged via fax (alert the recipient of its impending arrival) or phone.
Do not click on a link in an email you receive from your financial institution. In "Phishing," thieves send emails that purport to be from your bank asking you to log in to your account to verify/update information or correct an error. They include a link to the page where you can access your account; but this link takes you to a look-alike website that's logging every keystroke you make—and stealing your username and password. Protect yourself: go directly to the bank's website yourself or use a Favorite you've bookmarked.
Do not give out your SSN unless you're dealing with the IRS or another government agency that demands it. For financial institutions that request it for identification, give them the last four digits. They'll then ask for other identifiers they have in your record (birthdate, mother's maiden name, etc.).
Call your credit card company or bank if a new card or account statement is late. A missing card or bill may mean someone called the company using your name and changed the billing address to prevent you from catching their shopping spree.
Order a free copy of your credit reports once a year to verify their accuracy: Equifax (www.equifax.com), Experian (www.experian.com), and TransUnion (www.transunion.com).
If you suspect you've been victimized, immediately file a report with local police, or the police where the identity theft took place. Get a copy of the report (or report number), as you'll need it when filing a theft affidavit. Your bank, credit card company, and soon-to-descend collection agencies will require this affidavit for each fraudulent transaction incurred.
When choosing passwords, don't use easily-obtained information like your birthdate or zip code. Do not use real words; "strong" passwords include symbols, numbers, and a combination of capital and lowercase letters.

Have I crossed the line into paranoia? Consider this: six years ago, when identity theft was beginning to become a problem, we moved to a new house. Our home builder erected a plain mailbox, and shortly thereafter our bank mailed several boxes of new checks to us. Only one box arrived.

The criminals used the checks at a variety of retailers including Safeway, Home Depot, Albertsons, and Wal-Mart, and printed more checks via mail-order check printers using our bank account number. They sold these checks to other criminals. Because of alert staff at Home Depot, a woman attempting to write a check was caught and arrested. She had a California Driver's License containing her photo—and my wife's name. She was a methamphetamine addict who lived 30 miles away. It took a year and a half before credit agencies and debt collectors finally stopped harassing us.

The situation is far worse if they get hold of your social security number—in which case your credit is destroyed forever. In rare instances, the government issues new SSNs, but your destroyed credit on your "old" number does not get eradicated. People with impeccable credit have been unable to buy homes, cars, and other large-ticket items.

It is our responsibility to take the necessary steps to protect our personal information. Just like we lock our doors when we leave home, we must lock the areas of entry into our personal information. Failure to do so could result in a great deal more loss than items from your home—it could cause years, if not a lifetime, of headaches, wasted time, and ruined credit.

Also see:
► Info on writing, getting published, and marketing your book. Click here.

►NEW: The business of publishing: what you earn and when you get it. Click here.

►NEW: Protecting yourself: Copyright - how it works, what it means. Click here.

►NEW: Publishing Contracts: what authors need to know (by attorney/author Daniel Steven). Click here.

DISCLAIMER: Any “advice” or information provided on this website is based on the author’s experience and knowledge, and is intended only as background, and for purposes of general interest. It is NOT LEGAL ADVICE, and, in fact, could be incorrect. If you have questions about this information, how it applies to your particular situation, or anything else of a legal nature, CONSULT AN ATTORNEY.