Identity Theft:  Reducing the Risk of Fraud Minnesota Attorney General's Office 1400 Bremer Tower  445 Minnesota Street  St. Paul, MN 55101  (651) 296-3353  1-800-657-3787  TTY: (651) 297-7206  TTY: 1-800-366-4812
Agenda  What is Identity Theft? What information is stolen? Types of identity theft How they obtain your information How you can protect yourself What to do if you are a victim
What is Identity Theft America’s fastest growing type of robbery Consumers lost $50 billion last year Estimated 9.9 million victims in America Thieves steal personal information about you Spend money as fast as they can Move on to impersonate someone else
Personal Information What do the thieves want? Your name, address and date of birth Social Security number Driver’s License number Credit Card numbers ATM cards Telephone calling cards
HOW IS YOUR  IDENTITY STOLEN?
MAIL FRAUD SWEEPSTAKES/LOTTERY
MAIL FRAUD SWEEPSTAKES/LOTTERY
Dumpster Diving: Trash or Treasure What’s in Your Trash? Pre-approved credit card offers  – they complete the application and have card sent to them at another address Loan applications –  they   complete the application and have money sent to a phony address Bank statements  – they now have your bank account numbers. They create bogus checks Checks  – They create duplicate bogus checks
ATM Fraud Scheme Plastic strip placed into card insert Machine cannot read the card Machine continuously asks for PIN Thief nearby watches PIN being entered over and over Victim thinks ATM is broken and has the card Thief removes card and enters PIN
IRS Tax Form Scam “ IRS form” received from your bank, requesting sensitive information SSN DOB Bank account numbers PIN numbers Form is similar to real IRS forms Created and sent by an identity thief Once faxed to the number provided, thief has info to clean out your bank accounts
 
 
Department Store Scam Purchase made using a credit card Phone next to register rings Caller is “store security” – says you are a suspect in a credit card fraud Needs clerk to verify credit card information May ask clerk to get address and SSN Call came from thief on a cell phone watching nearby
DON’T CASH THAT CHECK Counterfeit bank checks Thief uses same tools - computer program and blank check stock to create fake bank checks Locates item being offered for sale - either online or in a publication Offers to buy, sends check for substantially more than agreed-upon price
DON’T CASH THAT CHECK Consumer deposits the fake check Bank can’t  immediately tell if it’s fake on its face Bank which “issued” check will eventually identify the check as fake, and will not pay Consumer has to reimburse his/her bank the entire amount of the check
DON’T CASH THAT CHECK
Skimming Scam Waiter in a restaurant takes your credit or debit card at the end of the meal Uses a small hand-held electronic device (called a “skimmer”) to swipe your card Only takes a second Your card information is stored in the skimmer Thief makes counterfeit card, or makes purchases over the phone or Internet
On-Line Fraud-ID Theft Unlike the frauds and thefts we have been discussing, these take place entirely via computer “Crackers,” viruses, spyware, “phishing,” “pharming”are threats All can result in identity theft
CON ARTISTS IN CYBER SPACE The top dollar loss complaint involved an auction fraud and totaled $30,340.00. E-mail is a simple and inexpensive way to perpetrate frauds.
“Crackers” Other computer users who try to gain access to your hard drive remotely over the internet Passwords, encryption, a firewall, use of a dynamic IP address can make their lives more difficult
“Phishing” Scam You get an email that looks like it comes from your bank, credit card company, etc. Asking you to “update their records” May be due to potential fraud, other reasons Provides a hyperlink to a web page where you enter your personal information The link takes you to a thief’s website that is disguised to look like the company’s.
“Phishing” Email
“Phishing” Email
“Phishing” Email Received: from 195.251.193.179 ([195.251.193.179]) by NHAGEX1.doj.state.nh.us with Microsoft SMTPSVC(5.0.2195.6713);   Wed, 26 Apr 2006 20:59:24 -0400 Received: from 68.80.170.80 by ; Wed, 26 Apr 2006 19:52:16 -0600 Message-ID: <@earthlink.net> From: &quot;service@paypal.com&quot; <service@paypal.com> Reply-To: &quot;service@paypal.com&quot; <service@paypal.com> To: richard.head@doj.nh.gov Subject: IMPORTANT Alert In Your PayPal® File Date: Wed, 26 Apr 2006 23:53:16 -0200 X-Mailer: Microsoft Outlook Express 6.00.2462.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=&quot;--348709423130884412442&quot; X-Priority: 1 X-MSMail-Priority: High Return-Path: service@paypal.com X-OriginalArrivalTime: 27 Apr 2006 00:59:24.0268 (UTC) FILETIME=[D34C62C0:01C66995]
Email sent to me About Your Payment. I am Cindy Williams, a US citizen; I reside here in Norman, Oklahoma. My residential address is 1900 Renaissance Drive Apt 1307 Norman, Oklahoma 73071, USA. Phone (405)366-5674. My late father was one of those that executed a business contacts in Nigeria years ago but the paying bank refuse him the payment till his death, having paid over $70,000 trying to get his payment but to no avail. After his death, I decided to travel down to Nigeria with some of his documents, after spending several weeks in Nigeria I was privileged to meet with Rev. Jacob Etebom, who was a member of the payment award committee. I asked him to help me in getting my father's payment since he is a member of the payment committee. It was after going through the legal processes that I got to discover that those contacting my late father are fake and with no genuine intentions .Then he assisted me in processing my father's payment and took me to the paying bank were i received an ATM card for the said payment, and today I have received my father's funds of $1.2Million USD. Mr. Jacob Etebom showed me some information of those that have not received their payment; and I saw your contact details as one of those that the World Bank approved their Payment of $5.5MillionUSD, so i decided to notify you on what to do, You have to contact Rev. Jacob now on this information below if you still have interest in receiving your funds. His name: Rev. Dr. Jacob Etebom, Email: ( e.jacob@jmail.co.za ) Phone:234-01-4921649, Office address: 2 Awolowo, Ikeja Lagos Nigeria You really have to stop your dealings with those contacting you because they will dry you up until you have nothing to eat like they did my late father. The only money I paid was just the ATM card activation fee and a compensation of Mr. Jacob's services, which I think you should know Just in case you might not be able to make the trip down to Nigeria. Please do not tell Mr. Jacob that i gave you this info, just tell him that someone recommended you to him. Thanks for your Understanding. Ms. Cindy Williams
Avoiding a Phishing Scam DO NOT respond to the e-mail. DO NOT provide personal information.
Avoiding a Phishing Scam SPOOFSTICK
Avoiding a Phishing Scam SPOOFSTICK Download Spoofstick on www.spoofstick.com
Pharming Scam A pharming scam is carried out through a copycat website Thief creates website that looks like a legitimate business’s website You enter the address of a legitimate business but are re-directed to a “spoofed” site.  When you enter personal information, it is sent to the con artists – NOT the legitimate business.
Pharming Warning Signs Site does not show security features (padlock, “https”). Text on page cannot be highlighted – the material is an image rather than words. If you enter information you will receive an “error” or “next page cannot be displayed” message.
 
How You Can Protect Yourself Security Freeze – January 1, 2007 A security freeze means that your file cannot be shared with identity thieves. Lift freeze in order to take out new credit. Free to victims of ID Theft.  If not a victim, $10.00 to place or lift the freeze. Go to:  www.ag.state.mn.us/consumer/ylr/FreezeLaw.asp   and the information will inform how to apply for this service.
How You Can Protect Yourself General Prevention Tips Check your credit reports at least once a year Follow up if bills don’t arrive on time Purchase a shredder Use a secured mailbox Do not print your SSN on checks Do not carry your SSN in your wallet/purse Keep items that contain your personal information in a safe place Visit  http://www.lookstoogoodtobetrue.com   for recent developments
Other Prevention Tips Carry only the credit/debit cards you need when shopping Remove your name from the marketing lists of the three credit reporting bureaus Sign up for the Do-Not-Call registry Opt out of sharing your financial information when given the opportunity When ordering new checks, pick them up at the bank Never toss credit card receipts in a public trash container When creating passwords and PINs, use a combination of letters and numbers – memorize them! Shield your hand when using a bank ATM or making long-distance phone calls with your phone card
Prevention for Computer Users Password-protect your computer, and files that contain sensitive personal data. Install firewall and virus protection software. Encrypt files with personal information. When shopping on-line, be sure you are dealing with a reputable company. When disposing of your computer, use a strong “wipe” utility program to remove data, or physically destroy the hard drive.
Protection When Traveling Have Post Office stop delivery of mail Carry only the checks and credit cards you will need.  Make a list of items in your wallet/purse and store in a safe place where you are staying (do not include account numbers). Include phone numbers of the companies Lock up documents at home and in your hotel Do not keep your PIN with your ATM card
Handling Information Responsibly Carefully review your statements monthly Shred all documents with sensitive info Find out how your bank safeguards your data and insist that paper and magnetic files be destroyed. Do the same for companies that issue loan or credit applications Store cancelled checks and other personal information in a safe place
What To Do If You’re a Victim Contact the fraud departments of one of the three major credit bureaus to place a fraud alert on your credit file Close the accounts that have been affected File a police report Send copies to your creditors and others that may require proof of the crime File your complaint with the FTC and Post Office
Identity Theft Contacts Contact the Identity Theft Resource Center at: 858-693-7935, or  www.idtheftcenter.org Contact Federal Trade Commission at: 800-IDTHEFT, or www.consumer.gov/idtheft Contact Fraud Units of Credit Reporting Bureaus at: EQUIFAX: 800-525-6285 EXPERIAN: 888-397-3742 TRANS UNION: 800-680-7289 For fraudulent use of checks, contact: Checkwrite: 800-766-2748 Chexsystems: 800-428-9623 Equifax Telecredit: 800-437-5120 National Processing Co.: 800-526-5380 SCAN: 800-262-7771
Identity Theft Procedures Buy a notebook to serve as a telephone log and file folders to keep notes on each contact; File a police report in each jurisdiction where the theft occurred; Close all accounts. Phone each company’s fraud division. Request copy of relevant fraud-dispute form. Complete and return immediately; Request a new driver’s license from the state motor vehicle agency and have a fraud report attached to your driving record; Send certified, return receipt requested letter to each person contacted, summarizing each conversation; Notify check-verification firms about any fraudulent checks (Int’l. Check Service @ 800-526-5380; Telecheck @ 800-927-0755; Certegy Check Services @ 800-437-5120); Order credit reports from:  www.annualcreditreport .com ,  or 1-877-322-8228. To do so in writing, get an Annual Credit Report Request Form from ftc.gov/credit, fill it out and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281 Have fraud alerts placed on all accounts and make sure new ones are not opened unless you are notified; Refuse to pay fraudulent charges. Documenting the above helps; Contact the Identity Theft Resource Center @ 858-693-7935 or at  www.idtheftcenter.org  for more tips.
Do-Not-Call Registry Register at  https://www.donotcall.gov   now, or call 888-382-1222 (call from the number you want to register) Will not stop political, charitable, newspaper and survey calls Violators can be fined up to $5,000per call Call 1-888-CALL-FCC and file a complaint with the FTC File a complaint with the MN Attorney General
Limiting Access FTC’s Do Not Call Registry Register at: https://www.donotcall.gov , or 888-382-1222 File a complaint at: 888-CALL-FCC To Stop Credit Card Offers 888-5-OPT-OUT Write to firms you do business with that you do not want info about you sold to others
Limiting Access To remove your name from national mailing lists,  www.the-dma.org , or write to: Mail Preference Service P.O. Box 643 Carmel, NY  10512 For problems with a mail order company, write to: Mail Order Action Line 1111 19 th  Street, N.W., Suite 1100 Washington, DC  20036
One-Stop Information www.ag.state.mn.us/consumer or call the MN Attorney General’s Office (651) 296-3353

Id Theft

  • 1.
    Identity Theft: Reducing the Risk of Fraud Minnesota Attorney General's Office 1400 Bremer Tower 445 Minnesota Street St. Paul, MN 55101 (651) 296-3353 1-800-657-3787 TTY: (651) 297-7206 TTY: 1-800-366-4812
  • 2.
    Agenda Whatis Identity Theft? What information is stolen? Types of identity theft How they obtain your information How you can protect yourself What to do if you are a victim
  • 3.
    What is IdentityTheft America’s fastest growing type of robbery Consumers lost $50 billion last year Estimated 9.9 million victims in America Thieves steal personal information about you Spend money as fast as they can Move on to impersonate someone else
  • 4.
    Personal Information Whatdo the thieves want? Your name, address and date of birth Social Security number Driver’s License number Credit Card numbers ATM cards Telephone calling cards
  • 5.
    HOW IS YOUR IDENTITY STOLEN?
  • 6.
  • 7.
  • 8.
    Dumpster Diving: Trashor Treasure What’s in Your Trash? Pre-approved credit card offers – they complete the application and have card sent to them at another address Loan applications – they complete the application and have money sent to a phony address Bank statements – they now have your bank account numbers. They create bogus checks Checks – They create duplicate bogus checks
  • 9.
    ATM Fraud SchemePlastic strip placed into card insert Machine cannot read the card Machine continuously asks for PIN Thief nearby watches PIN being entered over and over Victim thinks ATM is broken and has the card Thief removes card and enters PIN
  • 10.
    IRS Tax FormScam “ IRS form” received from your bank, requesting sensitive information SSN DOB Bank account numbers PIN numbers Form is similar to real IRS forms Created and sent by an identity thief Once faxed to the number provided, thief has info to clean out your bank accounts
  • 11.
  • 12.
  • 13.
    Department Store ScamPurchase made using a credit card Phone next to register rings Caller is “store security” – says you are a suspect in a credit card fraud Needs clerk to verify credit card information May ask clerk to get address and SSN Call came from thief on a cell phone watching nearby
  • 14.
    DON’T CASH THATCHECK Counterfeit bank checks Thief uses same tools - computer program and blank check stock to create fake bank checks Locates item being offered for sale - either online or in a publication Offers to buy, sends check for substantially more than agreed-upon price
  • 15.
    DON’T CASH THATCHECK Consumer deposits the fake check Bank can’t immediately tell if it’s fake on its face Bank which “issued” check will eventually identify the check as fake, and will not pay Consumer has to reimburse his/her bank the entire amount of the check
  • 16.
  • 17.
    Skimming Scam Waiterin a restaurant takes your credit or debit card at the end of the meal Uses a small hand-held electronic device (called a “skimmer”) to swipe your card Only takes a second Your card information is stored in the skimmer Thief makes counterfeit card, or makes purchases over the phone or Internet
  • 18.
    On-Line Fraud-ID TheftUnlike the frauds and thefts we have been discussing, these take place entirely via computer “Crackers,” viruses, spyware, “phishing,” “pharming”are threats All can result in identity theft
  • 19.
    CON ARTISTS INCYBER SPACE The top dollar loss complaint involved an auction fraud and totaled $30,340.00. E-mail is a simple and inexpensive way to perpetrate frauds.
  • 20.
    “Crackers” Other computerusers who try to gain access to your hard drive remotely over the internet Passwords, encryption, a firewall, use of a dynamic IP address can make their lives more difficult
  • 21.
    “Phishing” Scam Youget an email that looks like it comes from your bank, credit card company, etc. Asking you to “update their records” May be due to potential fraud, other reasons Provides a hyperlink to a web page where you enter your personal information The link takes you to a thief’s website that is disguised to look like the company’s.
  • 22.
  • 23.
  • 24.
    “Phishing” Email Received:from 195.251.193.179 ([195.251.193.179]) by NHAGEX1.doj.state.nh.us with Microsoft SMTPSVC(5.0.2195.6713); Wed, 26 Apr 2006 20:59:24 -0400 Received: from 68.80.170.80 by ; Wed, 26 Apr 2006 19:52:16 -0600 Message-ID: <@earthlink.net> From: &quot;service@paypal.com&quot; <service@paypal.com> Reply-To: &quot;service@paypal.com&quot; <service@paypal.com> To: richard.head@doj.nh.gov Subject: IMPORTANT Alert In Your PayPal® File Date: Wed, 26 Apr 2006 23:53:16 -0200 X-Mailer: Microsoft Outlook Express 6.00.2462.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=&quot;--348709423130884412442&quot; X-Priority: 1 X-MSMail-Priority: High Return-Path: service@paypal.com X-OriginalArrivalTime: 27 Apr 2006 00:59:24.0268 (UTC) FILETIME=[D34C62C0:01C66995]
  • 25.
    Email sent tome About Your Payment. I am Cindy Williams, a US citizen; I reside here in Norman, Oklahoma. My residential address is 1900 Renaissance Drive Apt 1307 Norman, Oklahoma 73071, USA. Phone (405)366-5674. My late father was one of those that executed a business contacts in Nigeria years ago but the paying bank refuse him the payment till his death, having paid over $70,000 trying to get his payment but to no avail. After his death, I decided to travel down to Nigeria with some of his documents, after spending several weeks in Nigeria I was privileged to meet with Rev. Jacob Etebom, who was a member of the payment award committee. I asked him to help me in getting my father's payment since he is a member of the payment committee. It was after going through the legal processes that I got to discover that those contacting my late father are fake and with no genuine intentions .Then he assisted me in processing my father's payment and took me to the paying bank were i received an ATM card for the said payment, and today I have received my father's funds of $1.2Million USD. Mr. Jacob Etebom showed me some information of those that have not received their payment; and I saw your contact details as one of those that the World Bank approved their Payment of $5.5MillionUSD, so i decided to notify you on what to do, You have to contact Rev. Jacob now on this information below if you still have interest in receiving your funds. His name: Rev. Dr. Jacob Etebom, Email: ( e.jacob@jmail.co.za ) Phone:234-01-4921649, Office address: 2 Awolowo, Ikeja Lagos Nigeria You really have to stop your dealings with those contacting you because they will dry you up until you have nothing to eat like they did my late father. The only money I paid was just the ATM card activation fee and a compensation of Mr. Jacob's services, which I think you should know Just in case you might not be able to make the trip down to Nigeria. Please do not tell Mr. Jacob that i gave you this info, just tell him that someone recommended you to him. Thanks for your Understanding. Ms. Cindy Williams
  • 26.
    Avoiding a PhishingScam DO NOT respond to the e-mail. DO NOT provide personal information.
  • 27.
    Avoiding a PhishingScam SPOOFSTICK
  • 28.
    Avoiding a PhishingScam SPOOFSTICK Download Spoofstick on www.spoofstick.com
  • 29.
    Pharming Scam Apharming scam is carried out through a copycat website Thief creates website that looks like a legitimate business’s website You enter the address of a legitimate business but are re-directed to a “spoofed” site. When you enter personal information, it is sent to the con artists – NOT the legitimate business.
  • 30.
    Pharming Warning SignsSite does not show security features (padlock, “https”). Text on page cannot be highlighted – the material is an image rather than words. If you enter information you will receive an “error” or “next page cannot be displayed” message.
  • 31.
  • 32.
    How You CanProtect Yourself Security Freeze – January 1, 2007 A security freeze means that your file cannot be shared with identity thieves. Lift freeze in order to take out new credit. Free to victims of ID Theft. If not a victim, $10.00 to place or lift the freeze. Go to: www.ag.state.mn.us/consumer/ylr/FreezeLaw.asp and the information will inform how to apply for this service.
  • 33.
    How You CanProtect Yourself General Prevention Tips Check your credit reports at least once a year Follow up if bills don’t arrive on time Purchase a shredder Use a secured mailbox Do not print your SSN on checks Do not carry your SSN in your wallet/purse Keep items that contain your personal information in a safe place Visit http://www.lookstoogoodtobetrue.com for recent developments
  • 34.
    Other Prevention TipsCarry only the credit/debit cards you need when shopping Remove your name from the marketing lists of the three credit reporting bureaus Sign up for the Do-Not-Call registry Opt out of sharing your financial information when given the opportunity When ordering new checks, pick them up at the bank Never toss credit card receipts in a public trash container When creating passwords and PINs, use a combination of letters and numbers – memorize them! Shield your hand when using a bank ATM or making long-distance phone calls with your phone card
  • 35.
    Prevention for ComputerUsers Password-protect your computer, and files that contain sensitive personal data. Install firewall and virus protection software. Encrypt files with personal information. When shopping on-line, be sure you are dealing with a reputable company. When disposing of your computer, use a strong “wipe” utility program to remove data, or physically destroy the hard drive.
  • 36.
    Protection When TravelingHave Post Office stop delivery of mail Carry only the checks and credit cards you will need. Make a list of items in your wallet/purse and store in a safe place where you are staying (do not include account numbers). Include phone numbers of the companies Lock up documents at home and in your hotel Do not keep your PIN with your ATM card
  • 37.
    Handling Information ResponsiblyCarefully review your statements monthly Shred all documents with sensitive info Find out how your bank safeguards your data and insist that paper and magnetic files be destroyed. Do the same for companies that issue loan or credit applications Store cancelled checks and other personal information in a safe place
  • 38.
    What To DoIf You’re a Victim Contact the fraud departments of one of the three major credit bureaus to place a fraud alert on your credit file Close the accounts that have been affected File a police report Send copies to your creditors and others that may require proof of the crime File your complaint with the FTC and Post Office
  • 39.
    Identity Theft ContactsContact the Identity Theft Resource Center at: 858-693-7935, or www.idtheftcenter.org Contact Federal Trade Commission at: 800-IDTHEFT, or www.consumer.gov/idtheft Contact Fraud Units of Credit Reporting Bureaus at: EQUIFAX: 800-525-6285 EXPERIAN: 888-397-3742 TRANS UNION: 800-680-7289 For fraudulent use of checks, contact: Checkwrite: 800-766-2748 Chexsystems: 800-428-9623 Equifax Telecredit: 800-437-5120 National Processing Co.: 800-526-5380 SCAN: 800-262-7771
  • 40.
    Identity Theft ProceduresBuy a notebook to serve as a telephone log and file folders to keep notes on each contact; File a police report in each jurisdiction where the theft occurred; Close all accounts. Phone each company’s fraud division. Request copy of relevant fraud-dispute form. Complete and return immediately; Request a new driver’s license from the state motor vehicle agency and have a fraud report attached to your driving record; Send certified, return receipt requested letter to each person contacted, summarizing each conversation; Notify check-verification firms about any fraudulent checks (Int’l. Check Service @ 800-526-5380; Telecheck @ 800-927-0755; Certegy Check Services @ 800-437-5120); Order credit reports from: www.annualcreditreport .com , or 1-877-322-8228. To do so in writing, get an Annual Credit Report Request Form from ftc.gov/credit, fill it out and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281 Have fraud alerts placed on all accounts and make sure new ones are not opened unless you are notified; Refuse to pay fraudulent charges. Documenting the above helps; Contact the Identity Theft Resource Center @ 858-693-7935 or at www.idtheftcenter.org for more tips.
  • 41.
    Do-Not-Call Registry Registerat https://www.donotcall.gov now, or call 888-382-1222 (call from the number you want to register) Will not stop political, charitable, newspaper and survey calls Violators can be fined up to $5,000per call Call 1-888-CALL-FCC and file a complaint with the FTC File a complaint with the MN Attorney General
  • 42.
    Limiting Access FTC’sDo Not Call Registry Register at: https://www.donotcall.gov , or 888-382-1222 File a complaint at: 888-CALL-FCC To Stop Credit Card Offers 888-5-OPT-OUT Write to firms you do business with that you do not want info about you sold to others
  • 43.
    Limiting Access Toremove your name from national mailing lists, www.the-dma.org , or write to: Mail Preference Service P.O. Box 643 Carmel, NY 10512 For problems with a mail order company, write to: Mail Order Action Line 1111 19 th Street, N.W., Suite 1100 Washington, DC 20036
  • 44.
    One-Stop Information www.ag.state.mn.us/consumeror call the MN Attorney General’s Office (651) 296-3353

Editor's Notes

  • #32 Let me show you the security features that most Internet browsers have. These images are from Microsoft Internet Explorer version 6. A truly secure site’s address will begin with httpS because of a special encoding format used by secure sites. In the lower right corner, a closed padlock will be displayed on a secure site. If the padlock does not appear, it’s not a secure site. If you double-click the padlock icon, the website owner’s Security Certificate will appear. You can check to make sure the certificate belongs to the same name as the website, or is not radically different. Now, if the website says it’s secure and is not, take a look at what your browser will look like. There is no “https” and no padlock appears. If that’s the case, be very suspicious of an unsecure website that claims to be secure.