Stop identity theft

There is a type of identity theft using the Internet called “phishing.” Pronounced “fishing,” that’s exactly what thieves are doing, fishing for your personal financial information. They want your account numbers, passwords, Social Security numbers, and other confidential information so they can use your financial accounts or run up bills on your credit cards.

In the worst case, you could find yourself a victim of identity theft. With the sensitive information obtained from a successful phishing scam, these thieves can take out loans or obtain credit cards and even a driver’s license in your name. They can do damage to your financial history and personal reputation that can take years to unravel. But if you understand how phishing works and how to protect yourself, you can help stop this crime.

How phishing works

You may receive an email that looks like it comes from a trusted company you know, like your bank, or even from a government agency. This email might alert you to a serious issue that needs your quick attention, using phrases like immediate attention required or please contact us about your account. It may threaten that your account will be closed unless you provide confidential information and urge you to click a link to visit their website. In a phishing scam, this link could take you to a fake website that looks just like the real one, or sometimes it could lead to the actual company site but will trigger a pop-up asking for your financial details. You may be prompted to update your account or verify your identity by sharing sensitive information like your Social Security number, account number, password, or personal verification information such as your mother’s maiden name. If you provide this information, you could fall victim to identity theft.

How to protect yourself

Never share your personal information in response to unsolicited requests, whether by phone or online, as phishing attempts can mimic legitimate sources and may even use fake security icons. If you’re unsure about a contact’s legitimacy, reach out to your financial institution directly using verified contact information from your account statements or reputable sources. Never disclose your account details or passwords over the phone or in response to unexpected online requests, as legitimate institutions will not ask you to verify such information in that manner. Regularly review your account statements to ensure that all charges are accurate, and if your statement is delayed or missing, contact your financial institution for clarification; if online account access is available, check your account activity frequently to identify any suspicious transactions.

What to do if you fall victim

Contact your financial institution right away and inform them of the situation. Close any accounts that you believe have been tampered with or opened fraudulently. Reach out to the security or fraud department of each financial institution and follow up with written communication, including copies of any supporting documents. It is crucial to notify credit card companies and financial institutions in writing; send these letters by certified mail with a return receipt requested so you can track what the company received. Keep copies of all your correspondence and enclosures. Report any suspicious contacts to the Federal Trade Commission online at http://www.ftc.gov/bcp/edu/microsites/idtheft/ or by calling 1-877-IDTHEFT. Check with your state Attorney General’s office to see if state law mandates that the police take reports for identity theft; you can find the contact number in the Blue Pages of your phone book or at www.naag.org. If possible, file a report with local police or the police in the area where the identity theft occurred. Obtain a copy of the police report or the report number, as this can assist you when dealing with creditors who need evidence of the crime. If the police are hesitant to take your report, request to file a Miscellaneous Incidents report.

If you disclose sensitive information in a phishing attack, contact one of the three major credit bureaus listed below and discuss whether to place a fraud alert on your file. A fraud alert will help prevent thieves from opening a new account in your name.

Equifax

800-525-6285
P.O. Box 740250
Atlanta, GA 30374
www.equifax.com

Experian

888-397-3742
P.O. Box 1017
Allen, TX 75013
www.experian.com

TransUnion

800-680-7289
P.O. Box 6790
Fullerton, CA 92634
www.transunion.com

You can fight identity theft

Here’s how:

• Never provide personal financial information, including your Social Security number, account numbers or passwords over the phone or the Internet, if you did not initiate the contact.
• Never click on the link provided in an e-mail you think is fraudulent. In addition to stealing your personal information, the link may contain a virus that can contaminate your computer.
• Do not be intimidated by an e-mail or caller who suggests dire consequences if you do not immediately provide or verify financial information.
• If you are unsure whether a contact is legitimate, go to the company’s Website by typing in the site address or using a page you have previously book marked, instead of using a link provided by the e-mail.
• If you fall victim to identity theft, act immediately to protect yourself. Alert your financial institution. Place fraud alerts on your credit files. Monitor your credit files and account statements closely.
• Report suspicious e-mails or calls to the Federal Trade Commission through the Internet at http://www.ftc.gov/bcp/edu/microsites/idtheft/, or by calling 1-877-IDTHEFT (1-877-438-4338)

To learn more about keeping your money safe, visit the http://www.mymoney.gov/scams.shtml Website.