How to Steal an   Identity
My Name Is… Richard Hollis David Burton Sean Bennett                  ?… Call me Ishmael
The Definition               “Identity theft is the pilfering of a             individual’s personal identification       ...
First Recorded Theft    Genesis iii: 13 …and the woman said, “The serpent beguiled   me, and I did eat”.
According to … Identity theft is the world’s fasted            growing crime
Why?  1. Hard to  identify         2. Hard to stop
Why? 3. “That’s where the money
That’s Where the Moneyis…              2001Name, Address DOB = £2.00Credit card # = £2.00Expiry date = £ 3.00Security Code...
Chat Up Line # 63 In March 2008 there were 76.8 millionNational Insurance numbers in the UK*.                           *U...
The Price We Pay• Identity fraud accounts for a criminal cash  flow of £12m per day.• The mean fraud amount per victim is ...
Fraud Breakdown
Who Are You ?
Three Elements 1. Attributed 2. Biometric 3. Biographi    c
Attributed Identity •   Your name •   Date of birth •   Place of birth •   M other’s name •   Father’s name •   Family mem...
Biometric Identity•   Your height•   Your weight•   Color of your eyes•   Color of your hair•   Color of your skin•   Birt...
Biographic Identity •   Birth certificate •   School records •   Work permit •   Drivers license •   Places of     employm...
2 TypesTemporary       BulletproofAttributed   AttributedBiographic   Biometric             Biographic
Top Ten TipsHow to Steal an Identity
Tip Number 1• Take one that’s not being  used  – Friend (or frenemy)  – Neighbour  – Dead relative  – Pensioner or invalid...
Birth & Marriage Notices
Genealogy Searches
List Pensioners
Death Notices
Get a Life…
People Search Engines
Google ‘em
Tip Number 2• Go through their mail  –   Credit card applications  –   Credit card statements  –   Bank statements  –   Lo...
Tip Number 3• Go through their trash  –   Credit card applications  –   Credit card statements  –   Bank statement  –   Lo...
Tip Number 4• Ask for it!  –   “Pretexting” phone call  –   Letters to former employers  –   Military records  –   FOIA re...
Credit Reports
Credit Reports
Tip Number 5Buy the information  –   Marketing companies  –   Mailing lists  –   Targeted media  –   Email databases  –   ...
Mailing Lists
Marketing Companies
Private Investigators
Tip Number 6Buy an ID
Buy Two…
Buy Three…
That’s Where the Moneyis…•   Passport: £350•   Driver’s license: £75•   Birth Certificate: £50•   Bank statements: £50•   ...
Tip Number 7               Hack one!               •   Cookies               •   Applets               •   Trojans        ...
Armies Up Their Sleevies
Starter Kit…Sam Spade very effectivefreeware tool that crawlswebsites searching andgrabbing email addressesand address his...
Data Base Hacking• AKA: “The Mother Load”• One stop shopping for your  all your identity data needs…• Think…Amazon, eBay, ...
Data Shadow
Chat Up Line #18In one week, the average person living in Britainhas 3,254 pieces of personal information storedabout him ...
Chat Up Line #27The average UK citizen is in over 750 databases.*                                 *UK Information Commissi...
FactYou and I are bought and     sold every day
Data =
Why Bother Hacking?
Why Bother?
Why Bother?
Why Bother?
Tip Number 8• Make one
Make One
Make One
Tip Number 9• Old school  – Steal a wallet  – Steal a purse  – Kidnap someone !
Tip Number 10• Don’t get caught
Don’t Get Caught• Once you have it:        Take control of it        Change mailing address        Open new accounts us...
Face of an Identity ThiefRicky Leonard Swaner, 50,arrested by FBI in Feb2006 on multiple-countFederal indictment fraud,ide...
Reduce Your Risk             • WAKE UP !             • Practice ID discipline             • Protect information           ...
Protect Yourself•   BE PRO-ACTIVE!•   Look after your identity•   Don’t give it away•   Don’t throw it away•   Don’t sell ...
Questions ?
26 Dover Street         London    United Kingdom  +44 (0)20 3170 8955+44 (0)20 3008 6011 (fax)
Upcoming SlideShare
Loading in …5
×

Risk Factory How to Steal an Identity

4,950 views

Published on

The Top 10 methods used by fraudsters to steal identity information and what to do about it.

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
4,950
On SlideShare
0
From Embeds
0
Number of Embeds
11
Actions
Shares
0
Downloads
30
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Risk Factory How to Steal an Identity

  1. 1. How to Steal an Identity
  2. 2. My Name Is… Richard Hollis David Burton Sean Bennett ?… Call me Ishmael
  3. 3. The Definition “Identity theft is the pilfering of a individual’s personal identification information, such as name, date of birth, passport number, drivers licence, credit card number, mother’s maiden name etc. in order to commit fraud”
  4. 4. First Recorded Theft Genesis iii: 13 …and the woman said, “The serpent beguiled me, and I did eat”.
  5. 5. According to … Identity theft is the world’s fasted growing crime
  6. 6. Why? 1. Hard to identify 2. Hard to stop
  7. 7. Why? 3. “That’s where the money
  8. 8. That’s Where the Moneyis… 2001Name, Address DOB = £2.00Credit card # = £2.00Expiry date = £ 3.00Security Code = £3.00 2006 Total = £10.00 Name, Address DOB = £1.00 Credit card # = £1.00 Expiry date = £ 1.00 2012 Security Code = £2.00 Name, Address DOB = £.25 Total = £5.00 Credit card # = £.25 Expiry date = £ .25 Security Code = £.25 Total = £1.00
  9. 9. Chat Up Line # 63 In March 2008 there were 76.8 millionNational Insurance numbers in the UK*. *U.K. Information Commissioners Office UK Population = 61 million
  10. 10. The Price We Pay• Identity fraud accounts for a criminal cash flow of £12m per day.• The mean fraud amount per victim is currently estimated at £5,783.• The mean resolution time is over 100 hours per victim.• Over 75% of victims are unable to clear up associated credit problems after 6 months.
  11. 11. Fraud Breakdown
  12. 12. Who Are You ?
  13. 13. Three Elements 1. Attributed 2. Biometric 3. Biographi c
  14. 14. Attributed Identity • Your name • Date of birth • Place of birth • M other’s name • Father’s name • Family members • Your race Characteristics ascribed to you at birth
  15. 15. Biometric Identity• Your height• Your weight• Color of your eyes• Color of your hair• Color of your skin• Birthmarks• Your DNA• Your fingerprints• Your footprints• Your retinal pattern Your distinguishing• Your smell… physical characteristics
  16. 16. Biographic Identity • Birth certificate • School records • Work permit • Drivers license • Places of employment • Places of residences • Marriage certificate (s) • Divorce certificate (s) Your life story • Credit history information
  17. 17. 2 TypesTemporary BulletproofAttributed AttributedBiographic Biometric Biographic
  18. 18. Top Ten TipsHow to Steal an Identity
  19. 19. Tip Number 1• Take one that’s not being used – Friend (or frenemy) – Neighbour – Dead relative – Pensioner or invalid – Child – Co-worker – Person sitting next to you?
  20. 20. Birth & Marriage Notices
  21. 21. Genealogy Searches
  22. 22. List Pensioners
  23. 23. Death Notices
  24. 24. Get a Life…
  25. 25. People Search Engines
  26. 26. Google ‘em
  27. 27. Tip Number 2• Go through their mail – Credit card applications – Credit card statements – Bank statements – Loyalty card promotions – Membership applications – Telephone calling cards – Tax information – Pay stubs - receipts
  28. 28. Tip Number 3• Go through their trash – Credit card applications – Credit card statements – Bank statement – Loyalty card promotions – Membership applications – Telephone calling cards – Tax information – Pay stubs - receipts – Credit card carbons
  29. 29. Tip Number 4• Ask for it! – “Pretexting” phone call – Letters to former employers – Military records – FOIA requests – DPA requests – Public records
  30. 30. Credit Reports
  31. 31. Credit Reports
  32. 32. Tip Number 5Buy the information – Marketing companies – Mailing lists – Targeted media – Email databases – Membership lists – Private detectives – Cyber sleuths
  33. 33. Mailing Lists
  34. 34. Marketing Companies
  35. 35. Private Investigators
  36. 36. Tip Number 6Buy an ID
  37. 37. Buy Two…
  38. 38. Buy Three…
  39. 39. That’s Where the Moneyis…• Passport: £350• Driver’s license: £75• Birth Certificate: £50• Bank statements: £50• University Degree £45• Utility statements: £50• Insurance certificates: £25
  40. 40. Tip Number 7 Hack one! • Cookies • Applets • Trojans • Phishing • Pharming • Harvesting • Botting! • Data Base
  41. 41. Armies Up Their Sleevies
  42. 42. Starter Kit…Sam Spade very effectivefreeware tool that crawlswebsites searching andgrabbing email addressesand address histories etc..
  43. 43. Data Base Hacking• AKA: “The Mother Load”• One stop shopping for your all your identity data needs…• Think…Amazon, eBay, Visa, MasterCard…• Think Google
  44. 44. Data Shadow
  45. 45. Chat Up Line #18In one week, the average person living in Britainhas 3,254 pieces of personal information storedabout him or her in databases.* *Evening Standard Survey August 2008
  46. 46. Chat Up Line #27The average UK citizen is in over 750 databases.* *UK Information Commissioners Report: “What Price Privacy?” 2009
  47. 47. FactYou and I are bought and sold every day
  48. 48. Data =
  49. 49. Why Bother Hacking?
  50. 50. Why Bother?
  51. 51. Why Bother?
  52. 52. Why Bother?
  53. 53. Tip Number 8• Make one
  54. 54. Make One
  55. 55. Make One
  56. 56. Tip Number 9• Old school – Steal a wallet – Steal a purse – Kidnap someone !
  57. 57. Tip Number 10• Don’t get caught
  58. 58. Don’t Get Caught• Once you have it:  Take control of it  Change mailing address  Open new accounts using a new (false) address  Request higher credit limits  Never drain the account  Charge repeated small amounts to cards  Move on…
  59. 59. Face of an Identity ThiefRicky Leonard Swaner, 50,arrested by FBI in Feb2006 on multiple-countFederal indictment fraud,identity theft and obtainingpossession of over 2million dollars of controlledsubstances by fraud.
  60. 60. Reduce Your Risk • WAKE UP ! • Practice ID discipline • Protect information – Personnel – Client - database – Credit card – Company
  61. 61. Protect Yourself• BE PRO-ACTIVE!• Look after your identity• Don’t give it away• Don’t throw it away• Don’t sell it• Don’t let it be taken from you• Look after it as if it belonged to you
  62. 62. Questions ?
  63. 63. 26 Dover Street London United Kingdom +44 (0)20 3170 8955+44 (0)20 3008 6011 (fax)

×