STOP IDENTITY THEFT
By Steven Biggs
April 2008
With just three pieces of information — a zip code, date of birth, and gender — U.S. computer scientist Latanya Sweeney thinks she can capture the identities of 87 per cent of the U.S. population. She doesn’t even need a name or street number.
Increasingly, Canadians are at equal risk, including farmers on gravel roads.
Are you listed in telephone or business directories? Do you shop on-line? Electronically or on paper, if you are, your postal code, date of birth, and gender are likely on file. Maybe you used your mother’s maiden name as a password — it’s there too.
Sweeney, based at Carnegie Mellon University in Pittsburgh, used mathematical modelling in her research. Fraud artists don’t. But they can still piece together your personal information — or trick you into giving it to them — and use it to make fraudulent purchases, take over financial accounts, transfer balances, even apply for loans. It’s called identity theft.
Keeping your wallet out of reach is no longer enough. Catalin Bobe, a Toronto-based information security specialist, says that in Canada there are 1.4 million more SIN cards in circulation than there are people, and he says those excess cards weren’t stolen from wallets.
While we must protect our personal information on many fronts, we can simplify our identity defence into two strategies. First, be able to recognize suspicious activities. Second, use enough technology to make yourself an unattractive target.
Begin by learning some psychology. According to Bobe, basic human nature helps fraudsters trick us.
We like people who are like us. Fraud artists know this better than anyone. A good one will talk like you, repeat your expressions, and even speak at your pace.
Also be aware that we are culturally trained to reciprocate, i.e. “I’ll tell you mine if you tell me yours.” A good fraud artist may offer personal information to warm you up.
Greed can make us let our guard down, especially if we think we’re onto something that other people won’t be able to get, i.e. “There aren’t many left — I need your credit card number now.”
Fraudsters know we’re vulnerable too because when we’re uncertain, we tend to follow the crowd: “I’ve just signed up 20 people for this offer...”
If you get a suspicious phone call, don’t be pressured. Fraudsters love to ratchet up the pressure, then feed on greed. Don’t let sure-sounding people trick you either. They can be very brazen.
An example that Bobe likes to cite is the assertive tele-fraudster who has called him a couple times to congratulate him on winning a trip. The hotel was free, the flight was free, and even the rental car was free. But... the rental agency required a credit card number in case of damage — immediately. He couldn’t call back later, nor was he permitted to give the number in person upon arrival. Sound suspicious?
Pressure tactics happen on the Internet too. E-mails purportedly from PayPal or banks instruct you to update account information so that services won’t be suspended. It’s called phishing. Bobe is very clear on this: Never, ever submit data after clicking on a link in an e-mail, no matter how real it appears.
Computer technologies such as anti-spyware and anti-virus programs are important. Like a burglar, Bobe says, identity thieves “find the easy way in. They go door to door until they find one that is unlocked.” Use technology to lock the door into your computer. Even so, Bobe warns, “technology alone does not do the job.” It may be the computer age, he says, but using your human instincts to perceive suspicious activity is critical to foiling fraudsters.
Personal checklist
Be secure: Consider a lockable mailbox to prevent mail interception. Secure your computer with antivirus and anti-spyware programs and, most importantly, take the time to configure them. Regularly install updates to your computer operating system.
- Be careful: Don’t carry unnecessary data (e.g. SIN, birth certificate cards). Cancel unused credit cards. Don’t download programs from the Internet unless you trust the source.
- Be diligent: Monitor bank and credit card statements. Check your credit rating annually (it’s free) to make certain nobody is using your information (Credit bureaus: TransUnion, and Equifax).
- Be suspicious: Never click on a link in an e-mail.
- Be alert for telephone fraud. Find out about recent scams from PhoneBusters.
- Be judicious: Do you really need to put your birth date on websites like Facebook? Think twice before giving away your mother’s maiden name for security questions. A fraudster might find it useful...
Business checklist
With a business you must also consider the safety of your client and vendor data, along with the added risk factor of travel.
- Do not use public computers or networks to conduct confidential business.
- Keep a minimum of personal data on laptop computers.
- Use passwords for laptops, PDAs, and cellphones.
- Create unique, alpha-numeric passwords with at least eight characters.
- Place laptops in the trunk of your car before arriving at a parking lot, where thieves may be watching.
- While on the road, retain paperwork with your personal information (e.g. boarding passes, hotel check-in slips). Shred these upon your return home.
Need a professional freelance writer?
Get clean copy. On time.