Protecting yourself from identity theft

AVOIDING IDENTITY THEFT

  1. Do not disclose your full nine-digit Social Security number unless absolutely necessary, and never use it as an identifier or password. Question those who ask for it.
  2. Avoid paper billing by requesting secure electronic statements instead. If you require hard copies, you can print and store them safely without risking mail theft.
  3. Lock your mailbox if it's lockable.
  4. Shred documents containing personal information (name, account numbers, social security number, birth date) before throwing them away. 
  5. Configure your computer and/or smartphone to require a password for use, and set another password for sensitive files. Use unique passwords that include a combination of letters, numbers, and symbols. Do not use your birth date, a close relative's birth date, or a combination of letters and numbers on Splashdata's annual list of the most stolen passwords.
  6. Avoid using the same password for different accounts, and change your passwords once or twice per year.
  7. Install and update antivirus, anti-malware, and security programs on all computers, tablets, and smartphones.
  8. Don’t disclose information commonly used to verify your identity on social networking sites, such as date of birth, city of birth, mother’s maiden name, name of high school, etc. If you do, don't use that information to verify your identity.
  9. Avoid using credit or debit cards or conducting online banking transactions or making purchases, paying bills, or sending sensitive information over unsecured WiFi networks (e.g., any network without a password log-in, such as on trains, at airports, coffee shops, or hotels).
  10. Disable Bluetooth connections on devices when not in use.
  11. Watch out for “phishing” and other “social engineering” scams. Phishing is when identity thieves request personal information by pretending to be a legitimate entity, such as a bank or the IRS. Ignore unsolicited requests for personal information by email or over the phone, and only contact entities by means you know to be authentic. Do not contact an entity by clicking a link sent as part of an email requesting personal information, because phishers often link to authentic-looking, fake webpages. You can also call the phone number on the back of a card previously issued to you, or call the phone number on an old statement from that issuer. 
  12. Fight “skimmers.” Do not give your debit card to a restaurant server or anyone who could have a hand-held skimming device out of sight. When using an ATM, look for suspicious cameras and holes, and touch to confirm that extra parts (loose or slightly different colors) have not been installed over the card reader. Always cover your hand while hand typing a PIN, and avoid using ATMs in secluded locations.
  13. When accessing financial information on your smartphone, only use apps authorized by your bank or published by reputable app makers. Apps that show thousands of downloads are probably safe. Do not access apps on public open wi-fi.
  14. Place security, or credit freezes, on your credit report. Our separate “security freeze” tips explain how to guarantee peace of mind against new account identity theft by freezing your credit reports, then thawing them only when you are in the credit markets. A creditor will deny credit to an imposter who applies for credit using the name and Social Security Number of a consumer who has placed a freeze.

DETECTING IDENTITY THEFT

  1. Check your monthly statements for unauthorized charges. Be suspicious of phone calls about surprise debts.
  2. Sign up to receive email and/or text notifications of account activity and changes to account information.
  3. Instead of paying for over-priced subscription credit monitoring, use your free annual credit reports by law as your own credit monitoring service. Every 12 months, federal law gives you the right to receive one free credit report from each of the three main consumer reporting agencies, Equifax, Experian and TransUnion. Instead of requesting three at the same time, request one credit report from one of the bureaus every four months. Verify that the information is correct, and an account has not been opened without your knowledge. Free credit reports are available online at AnnualCreditReport.com or by calling 1-877-322-8228. Seven states – Colorado, Georgia, Maine, Massachusetts, Maryland, New Jersey and Vermont also provide an additional free report by state law, available by contacting each bureau directly.

Types of Identity Theft:

Federal law recognizes two sorts of identity theft—existing account fraud and new account (account takeover) identity theft.

Existing Account Fraud: Victims of data breaches where only their account numbers were taken are well-protected by law, although victims of lost debit card numbers may face bounced checks and cash flow problems until the bank replaces their funds. The Electronic Funds Transfer Act (EFTA) provides for no liability if you notify the financial institution within 60 days if only your debit card numbers are stolen. However, if you actually llose a debit card or other device that can access your bank account, your liability could be up to $500 if you fail to notify the bank within 2 days of finding out about the loss and could increase even higher if you fail to notify the bank within 60 days. Under the separate Truth In Lending Act, credit card customers are always well protected by law, never facing liability of greater than $50 for fraudulent use of a card.

New Account Identity Theft: A thief who obtains your Social Security Number may attempt to open new accounts in your name. This form of identity theft is difficult to clear up. A thief who obtains your email address may contact you in a phishing scam to try and trick you into providing your SSN and birth date, which are the keys to new account identity theft. Thieves apply for credit with your name, your SSN and their own address. The creditor then obtains a credit report and issues credit to the thief.

Be Wary of New Types of Identity Theft: Note that online tax preparers and the IRS itself have been hacked, resulting in tax refund fraud. Health insurance data breaches may result in medical services theft. A federal agency, the Office of Personnel Management (OPM), has recently been breached. Detailed security clearance dossiers that were taken provide thieves with the opportunity to commit new account identity theft and could subject victims to reputational risk and emotional harms, since information on possible marital affairs, drug and alcohol abuse treatment, previous arrests even without convictions, may have been taken.

WHAT TO DO WHEN YOU DETECT NEW ACCOUNT IDENTITY THEFT

Step 1: Notify your financial institutions.

If you discover that your wallet, checkbook, credit card or other sensitive information has been lost or stolen, immediately notify the issuing bank, credit card issuer, or relevant institution to close all existing accounts. 

Step 2: Get an Identify Theft Affidavit.

If you suspect identity theft, report it to the Federal Trade Commission using the online complaint form or by calling 1-877-ID-THEFT. When making the report, you will be given an option to receive an Identity Theft Affidavit. This document, together with the police report, will be critical to minimizing the damage.

Step 3: File a police report.

If you believe you are a victim of identity theft, file a report with your local police department. When you make the report, bring a copy of the Identity Theft Affidavit. The police report will be important for insurance purposes. Keep copies of the police report and Identity Theft Affidavit.

Step 4: Contact the three major credit reporting companies and place a fraud alert on your accounts. If you haven’t already, it’s time to place a security freeze.

An important next step is to place a fraud alert and a security freeze on your credit report. Placing a fraud alert tells businesses checking your credit rating that there may be fraud involved in the account. The fraud alert must be renewed after 90 days, and it entitles you to receive one free credit report from each of the main agencies. The security freeze stops anyone from seeing your credit report without your permission. Alerts and freezes can be placed by contacting the toll-free fraud number of any of the three consumer reporting companies noted below. Initiating a credit freeze does not impact your credit score.

  • TransUnion: 1-800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790
  • Equifax: 1-800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374-0241
  • Experian: 1-888-EXPERIAN (397-3742); www.experian.com; P.O. Box 9554, Allen, TX 75013

Step 5: If your social security number was stolen, contact the Social Security Administration.

File a report and access resources at www.idtheft.gov. You can also call 1-800-772-1213.

MORE IDENTITY THEFT RESOURCES


 

Issue updates

Report | U.S. PIRG Education Fund | Consumer Protection

Predatory Loans & Predatory Loan Complaints

This is the seventh in a series of reports that review complaints to the Consumer Financial Protection Bureau. In this report, we explore consumer complaints about predatory loans, categorized in the database as payday loans, installment loans, and auto title loans.

> Keep Reading
Blog Post | Consumer Protection

Consumers Count: Five years of the CFPB standing up for consumers | Kathryn Lee

This week, the Consumer Financial Protection Bureau turns five years old! As part of our efforts to tell more people about the CFPB, we're cross-posting this video blog and comments written by Zixta Q. Martinez of the CFPB (check out the infographic at the end, too!).

> Keep Reading

Open Letter Calling on L’Oreal to be Toxic-Free

An Open Letter to the CEO of L’Oreal calling on the company to Pledge to be Toxic-Free

> Keep Reading

Open Letter Calling on Unilever to be Toxic-Free

An Open Letter to the CEO of Unilever calling on the company to Pledge to be Toxic-Free

> Keep Reading
Report | U.S. PIRG Education Fund | Public Health, Consumer Protection

Getting Personal with Chemicals

We should be able to trust that the products we buy are safe — especially the ones our families use every day, directly on our bodies. However, we looked into common ingredients in popular personal care products, and found that when we use these products, like shampoo, baby wipes, deodorant, shaving gel, or perfume, we are often dosing our bodies with chemicals that can disrupt our hormones, cause developmental problems, cause cancer, and more.

This consumer guide describes the results of our investigation of 10 popular personal care products that contain chemicals of concern.

> Keep Reading

Pages

News Release | U.S. PIRG | Consumer Protection

We urge CFPB to issue safeguards for mobile financial services and privacy

We urge (along with the Center for Digital Democracy) the CFPB to issue rules so consumers can use mobile financial services without placing their privacy at risk or exposing themselves to new forms of predatory lending and other unfair practices. We filed a joint comment in response to a CFPB information request.

> Keep Reading
News Release | U.S. PIRG | Consumer Protection

U.S. PIRG’s Christine Lindstrom Testifies before U.S. Senate Banking Committee on Campus Debit Cards

U.S. PIRG Higher Education Program Director Chris Lindstrom testified before the Senate Banking Committee today on campus banking issues, private student loans and other issues concerning financial products on campus.

> Keep Reading
News Release | U.S. PIRG Education Fund | Consumer Protection

Report: Spirit Is Most Complained-About Airline

WASHINGTON – Spirit Airlines passengers are most likely to complain about their experience, according to a report released today by the U.S. PIRG Education Fund. Among major airlines, Spirit generates the most complaints for its size and generates an increasing number of complaints each year. Other most-complained about firms include Frontier Airlines, United Airlines, and American Airlines.

> Keep Reading

Why do we hate debt collectors? Mistaken identity

You expect to hear from a debt collector when you don't pay your bills. But what do you do when you get calls or letters from a collection agency for a debt you don't owe?

> Keep Reading
News Release | U.S. PIRG Education Fund | Consumer Protection

Report: Mistaken Identity Tops Debt Collection Complaints

WASHINGTON –Debt collectors trying to collect debt from the wrong person were the top source of complaints to the Consumer Financial Protection Bureau (CFPB), according to a report released today by the U.S. PIRG Education Fund. The report also found that debt collection, the newest category in the database, is already a top source of complaints to the CFPB, outpacing common consumer products such as credit cards and bank accounts.

> Keep Reading

Pages

Blog Post | Consumer Protection

CFPB getting results for consumers this week | Ed Mierzwinski

Last week, a senior bank industry lawyer said he was "amazed" at the amount of work the CFPB had accomplished "in such a short amount of time." This week, the CFPB stepped up its game another notch, when it returned $34 million to consumers who'd been deceived by a medical debt credit card pitched by their doctors and dentists and their receptionists and also took a big step toward ending forced arbitration in consumer contracts. Had any victims of the medical credit card wanted to go to court because they'd been ripped off, they couldn't, since the small print on that card, like the small print on most others, would send them instead to arbitration, no better than a kangaroo court.

> Keep Reading
Blog Post | Consumer Protection

Shopping? We've got your back, online and in the store. | Ed Mierzwinski

Whether you're shopping for toys or anything else this holiday season, the state PIRGs have new resources to help you make better, safer choices. We also have tips to protect your privacy and your wallet from online scams and rip-offs.

> Keep Reading
Blog Post | Consumer Protection

Will U.S. Trade Deal With Europe Eliminate Consumer Protections? | Ed Mierzwinski

Tomorrow, Tuesday, on Election Day, Washington State voters will consider the question "Yes On 522: To Label Genetically-Modified Foods." The right to choose your food is a right that American consumers want and every European citizen already has. But at the behest of the powerful agribusiness industry, U.S. trade negotiators want to take it away from all of us on both sides of the Atlantic in a secret deal. U.S. PIRG is among the consumer groups pushing back.

> Keep Reading
Blog Post | Consumer Protection

How To: Using the CFPB's Consumer Complaint Database | Laura Murray

Since June 2011, the Consumer Financial Protection Bureau (CFPB) has been getting results for consumers by allowing them to file complaints about a variety of financial products and services.  The complaint process has helped thousands of consumers settle disputes with their banks and lenders.  Many of these consumers obtain tangible relief through the process.

> Keep Reading
Blog Post | Consumer Protection

CFPB gets results for consumers, slams Chase for deceptive card add-ons | Ed Mierzwinski

Earlier this week, USPIRG Education Fund released "Big Banks, Big Complaints," a report documenting how the CFPB is helping bank customers with its public complaint database. Today, the CFPB announced it had imposed a $20 million civil penalty on JP Morgan Chase and ordered it to refund $309 million to over 2 million consumers for deceptively marketing junky credit card add-on products, some of which consumers didn't even receive. The CFPB is getting results.

> Keep Reading

Pages

View AllRSS Feed

Support us

Your tax-deductible donation supports U.S. PIRG Education Fund’s work to educate consumers on the issues that matter, and the powerful interests that are blocking progress.

Learn More

You can also support U.S. PIRG Education Fund’s work through bequests, contributions from life insurance or retirement plans, securities contributions and vehicle donations.