Preventing Fraud and Identity Theft

Use these tips to prevent fraud and identity theft, and protect your assets and property.

Telemarketing Fraud
Internet Fraud
Identity Theft
Wi-Fi Hacking
Bankruptcy Foreclosure Rescue
Free-Meal Seminars
Protecting Your Assets

Telemarketing Fraud

Callers claiming to represent everyone from police officers to the disabled take advantage of the public’s sympathy and generosity to the tune of billions of dollars each year. They also offer chances to earn enormous profits from no-risk, high-yield business and investment opportunities, miracle cures for everything from baldness to cancer, vacation homes, sweepstakes prizes, etc. Be suspicious of all solicitors, especially if the caller:

Says you have won a prize but asks you to send money first.
Says you have to act right away.
Fails to identify the sponsor, uses a variation of an official or nationally-recognized name, e.g., Salvation League instead of Salvation Army.
Offers to have someone pick up a cash payment from your home.
Says he or she is a law enforcement officer who will help you for a fee.
Requires you to attend a sales meeting.
Directs you to dial a pay-per-call 900 number.
Delays the delivery or a product or prize, etc.
Says he or she is calling from the Security and Fraud Department of your credit card company and asks you for the 3-digit security number on the back of your credit card to verify your possession of the card to aid it in a fraud investigation.

The following tips will help you resist these criminal appeals.

Never give your credit card, checking account, Social Security number, or any personal information to an unknown caller. Just say “no” and hang up on anyone who asks for personal information. Don’t ever assume a friendly voice belongs to a friend.
Ask a charity to send written information about its finances and programs before making any commitments.
Call the Better Business Bureau of San Diego County at (858) 496-2131 to check on any unsolicited offers. Or visit its website at www.sandiego.bbb.org for general consumer information and tips on avoiding various types of fraud.
For additional information contact the Federal Trade Commission Consumer Response Center at (877) 382-4357 and www.ftc.gov, Federal Communications Commission Consumer Center at (888) 225-5322 www.oispp.ca.gov/consumer_privacy/identitytheft.asp, and the California Department of Consumer Affairs Consumer Information Center at (800) 952-5210 and www.dca.ca.gov/consumer/cic .

And be sure to list your home or mobile phone number free on the National Do Not Call Registry to reduce pre-approved credit offers and telemarketing calls. Call (888) 567-8688 or register online at www.donotcall.gov.

In a relatively new scam criminals use Voice Over Internet Protocol (VOIP) technology to make telephone calls from anywhere in the world pretending to be a legitimate business, often using a fraudulent called ID matching the identity of the misrepresented company. This scam called “vishing” or “voice phishing,” directs recipients to call an illegitimate telephone number where they are tricked into giving up personal information. They might receive an urgent recorded message telling them that their credit card number has been compromised and directing them to call the following telephone number immediately and punch in their 16-digit account number to verify their identity. The best defense against vishing is to treat any unsolicited telephone message with suspicion and only give your personal information out when you have initiated the call and are sure the other party is legitimate.

Internet Fraud

In 2007 the Internet Crime Complaint Center (IC3), which acts in partnership with the National White Collar Crime Center and the FBI, received more than 206,000 complaints on its website and referred about 90,000 to law enforcement agencies for further consideration. The total loss from all of these cases was about $239 million. If you become a victim of Internet fraud or receive any suspicious e-mails you should file a complaint with the IC3 at www.ic3.gov. Its website also includes tips to assist you avoiding a variety of Internet frauds. Some of these are presented below.

Delete any suspicious e-mail without replying, especially the following:

Business opportunities to make money with little effort or cash outlay
Offers to sell lists of e-mail addresses or software
Chain letters involving money
Work-at-home schemes
Health and diet claims of scientific breakthroughs, miraculous cures, etc.
Get-rich-quick schemes
Free goods offered to fee-paying group members
Investments promising high rates of return with no risk
Kits to unscramble cable TV signals
Guaranteed loans or credit on easy terms
Credit repair schemes
Vacation prize promotions

Do not use a debit card when shopping online, especially on an unfamiliar website. When you use a credit card you have better fraud protection and you can dispute billing mistakes and unauthorized charges before you pay. With a debit card your account can be emptied quickly without your knowledge. This can result in overdrafts, fees, and an inability to pay your bills. Even if your bank offers a fraud guarantee it is not obligated to restore your funds for at least two weeks while it investigates. And the $50 maximum liability under Federal law only applies if you notify your bank within two business days of the discovery of the fraud. For additional information on this and other privacy issues visit the Privacy Rights Clearinghouse’s website at www.privacyrights.org.

In an e-mail scam known as “phishing” identity thieves fish for personal information by sending realistic-looking e-mail that asks recipients to go to a bogus website and provide personal information such as credit card and Personal Identification Numbers (PINs). Legitimate banks and financial institutions don’t send e-mails asking you to verify your account information. They already have it.

Each year during tax preparation time there is a surge in the number of frauds by criminals posing as IRS officials to obtain personal information for identity theft. The IRS never sends out unsolicited e-mails or asks for detailed personal and financial information. Any such e-mail is a fraud. So are telephone calls from someone stating they are from the IRS. Go to the IRS website at www.irs.gov for information on the latest scams and instructions on how to protect yourself from suspicious e-mails or phishing schemes. The IRS also recommends forwarding the suspicious e-mail to it at phishing@irs.gov.

Fraudulent e-mails have also been sent out by criminals posing as FBI agents and officials. They give the appearance of legitimacy by using the FBI seal, letterhead, and pictures of the FBI Director. They may also claim to come from the FBI’s domestic or overseas offices. Like the IRS, the FBI does not send out e-mails soliciting personal or financial information. For more information on this kind of fraud go to the FBI website at www.fbi.gov and click on New E-Scams and Warnings under Be Crime Smart.

Use the following tips to counter phishing:

Do not open any e-mail from an unknown sender.
Do not click on website addresses in e-mails you get even if they look real. Retype them into your browser.
Do not double click on an Internet pop-up offering a link or provide personal information in response to an e-mail or Internet pop-up offer.
Use the latest versions of Internet browsers, e.g., Microsoft Internet Explorer 7, which is designed to identify phishing attacks.
Make sure the website you are entering sensitive information in is secure. The address should begin with https:// rather than http://.
Keep your computer up to date with the latest firewalls, and anti-virus and anti-spyware software. The latter counters programs that secretly record what you type and send the information to the thieves. They are often installed when you visit websites from links in e-mail. Visit www.OnGuardOnline.gov for more information.
Contact your e-mail provider. Most keep track of scams. Send your provider the suspicious message header and complete text.

In another scam known as “whaling” fake e-mails have been sent to high-ranking executives to trick them into clicking on a link that takes them to a website that downloads software that secretly records keystrokes and sends data to a remote computer over the Internet. This lets the criminal capture passwords and other personal or corporate information, and gain control of the executive’s computer. In one case fake subpoenas have been sent to executives commanding them to appear before a grand jury in a civil case. The link that offers a copy of the entire subpoena downloads the malicious software.

In January 2007 The Office of the Comptroller of the Currency (OCC) sent out bulletin OCC 2007-2 to all national banks warning them of an increasing number of complaints relating to fraudulent cashier’s checks and advising both depositary and paying banks of actions to take to address risks to them. These fraudulent checks have often been received by bank customers who sell goods or services over the Internet. And in some cases they are asked to wire other funds to third parties. In all these case the customer believes the cashier’s check to be valid and deposits it in his or her account. When the bank makes the funds “available” the customer sends the goods or funds. Later the check is returned unpaid because it is discovered to be fraudulent. To avoid losses from this check fraud bank customers should wait until the check clears before sending goods or funds.

Identity Theft

Every person who willfully obtains personal identifying information, e.g., name, address, date of birth, Social Security number, mother’s maiden name, etc. as defined in Cal. Penal Code Sec. 530.5(b), and uses that information for any unlawful purpose is guilty of a public offense. Identity theft is the fastest growing crime in the United States. Every year about 15 million people become victims. Everyone is vulnerable. Skilled identity thieves use a variety of methods to steal your personal information. These include the following:

Dumpster diving. They rummage through trash looking for bills and other paper with your personal information on it.
Skimming. They steal credit/debit card numbers with a special storage device when processing your card.
Phishing and Whaling. See preceding tips on preventing Internet fraud.
Changing your address. They divert your billing statements to another location by completing a change-of-address form.
Stealing. They steal wallets, purses, mail (credit card statements, pre-approved credit offers, new checks, tax information, etc.), employee personnel records, etc.

Some of the things you can do to minimize your risk of identity theft are listed below.

Protecting personal information:

Give out credit card, bank account, or other personal information only when you have initiated the contact or know and trust the person you are dealing with. Beware of e-mail or telephone promotions designed to obtain personal information.
Put passwords on your credit card, bank, and other accounts. Avoid using easily remembered numbers or available information like mother’s maiden name, date of birth, phone number, or the last four digits of your Social Security number.
Memorize your passwords. Don’t carry them in your purse or wallet.
Keep personal information in a secure place at home, especially if you have roommates, employ outside help, or are having work done in your home.
Make sure that the copying machines used by you and others who have your personal data, e.g., tax preparers, have data security measures installed to prevent unauthorized access to data on the copier’s disk.
Protect you health insurance cards like you would your credit cards. If asked for your policy numbers or any other personal information in a doctor’s office make sure no one else is near enough to hear or see them.

Using credit cards:

Cancel accounts you don’t use or need. Carry only the cards and identification you need when you go out.
Never loan your card to anyone.
Pay attention to billing cycles. Check with the credit card company if you miss a bill to make sure that your address has not been changed without your knowledge.
Notify your credit card companies and financial institutions in advance of any address or phone number changes.
Save all credit card receipts and match them against your monthly statements. Look for charges you didn’t make.
Call the credit card company or bank involved if a new credit card you applied for hasn’t arrived in a timely manner.
Monitor the expiration dates of your credit cards and contact the card issuer if new cards are not received before your card expires.
Report all lost or stolen credit cards immediately. Contact the issuer if replacement cards are not received.
Sign and activate new credit cards promptly on receipt.
Never put your credit card number on a post card or on the outside of a mailing envelope.
Make sure only the last four digits of your credit care number show up on your receipts. A 2001 state law banned the use of full credit card numbers on electronically printed receipts and gave businesses three years to comply. (Note that the merchant copy can show the full credit card number.) Report non-complying businesses to the Methamphetamine Strike Force hotline at (877) 662-6384.
Cancel accounts you don’t use or need. Carry only the cards and identification you need when you go out.
Tear into small pieces or shred any pre-approved credit card offers. They can be used by thieves to order cards in your name.

Protecting your Social Security number:

Examine your Social Security Personal Earnings and Benefits Estimate Statement for possible fraud. You will receive it about three months before your birthday each year.
Provide your Social Security number only when it is required by a government agency, employer, or financial institution. Never use it for identification. Don’t carry your number or card in your purse or wallet. Don’t write it on a check.
Do not have your Social Security or drivers license number printed on your checks.

Managing your accounts:

Keep a record in a secure place of all your credit card, and bank and investment account and phone numbers for quick reference if identity theft occurs.
Review your bank statements carefully. Match your checkbook entries against paid checks. Look for checks you didn’t write.
Shred or tear up any financial documents before throwing them in the trash. Use a cross-cut shredder. Bring all credit card receipts home for disposition. Ask your credit card company to stop sending blank checks. Call (888) 567-8688, the Consumer Credit Reporting Industry Opt-In and Opt-Out toll-free number, to stop pre-approved credit offers.
Never leave transaction receipts at bank machines or counters, trashcans, gasoline pumps, etc.

Using the mail:

Deposit mail in boxes or slots inside a post office. Use an outside box only if there is another pickup that day. It is not safe to leave mail in a box overnight. Also, do not leave mail for pickups from personal curbside boxes or cluster box units.
Pick up your mail as soon as possible after it arrives in your personal curbside box or cluster box unit. If this is not possible, have a trusted friend or neighbor collect your mail, especially if you are expecting a check or credit card.
Consider having new checks mailed to your bank for collection to avoid possible theft from your mailbox.
Use a locked mailbox and make sure the lock works.
Investigate immediately if bills do not arrive when expected, you receive unexpected credit cards or account statements, you are denied credit for no apparent reason, and you receive call or letters about purchases you did not make.
Report the non-receipt of expected valuable mail by calling the sender and the Postal Inspection Service as soon as possible.

Checking for possible identity theft:

Obtain free copies of your credit reports from the three nationwide consumer reporting companies – Equifax, Experian, and TransUnion -- by visiting www.AnnualCreditReport.com or calling (877) 322-8228, a service created by these companies. Check them for fraudulent activities, e.g., additional accounts opened without your consent, unauthorized charges billed to your accounts, etc. You can get one free report annually from each company. Stagger your requests to obtain one every four months. That way you can monitor them during the year.
Before signing up with a company that promises to protect you against identity theft make sure you understand exactly what protection and services it will and will not provide. Some services you will pay for you can do yourself at no cost, e.g., ordering credit reports and placing fraud alerts.
Place a security freeze on your credit reports. This will protect you against fraud in new accounts by prohibiting the credit bureaus from releasing your credit reports to a potential creditor without your express permission. Go to their websites for the procedures and fees for placing and lifting freezes: www.equifax.com, www.experian.com, and www.transunion.com.
Check your medical bills and health insurance statements to make sure the dates and types of services match your records. Once a year request a list of all benefits paid in your name by your health insurer. If the thief has changed your billing address you would not be receiving any bills.

Protecting your child’s identity:

Provide your child’s Social Security number only when it is required by a government agency or financial institution. Never provide it for identification.
Carry your child’s Social Security number or card in your purse or wallet only when you know you will need it.
Teach your child never to give out personal information over the phone or on the Internet.
Check to see if your child has a credit report. There should not be one unless someone has applied for credit using your child’s Social Security number. No minor should have a credit report.
Watch you child’s mail for credit card applications, bills, or bank statements. They are signs that someone has started a credit history in your child’s name.
Request that banks in which your child has an account remove his or her name from marketing lists.
Report any suspected identity theft to the three nationwide consumer reporting companies and obtain copies of any credit reports in your child’s name and Social Security number. If your child does have a credit report ask to have all accounts, application inquiries, and collection notices removed immediately. Tell the credit issuer that the account is in the name of your minor child who by law isn’t permitted to enter into contracts.

If you become a victim of identity theft file a police report as soon as possible. Call the SDPD non-emergency number, (619) 531-2000 or (858) 484-3154. Then do the following:

Set up a folder where you can keep a log of all your contacts and documents.
Contact the Federal Trade Commission (FTC) to report the theft. Its Identity Theft Hotline is (877) 438-4338. Or visit its website at www.ftc.gov/idtheft. The FTC is the federal clearinghouse of complaints of victims of identity theft. It helps victims by providing information to resolve financial and other problems that could result from identity theft.
Report the theft to the fraud units of Equifax at (800) 525-6285, Experian at (888) 397-3742, and TransUnion at (800) 680-7289. Ask to have a fraud alert placed on your credit reports. It will tell creditors to follow certain procedures before they open new accounts in your name or make changes to you existing accounts. In placing a fraud alert you will be entitled to free copies of your credit reports. Review them carefully. Look for inquiries from companies you haven’t contacted, accounts you didn’t open, and debts on your accounts that you can’t explain. Fraud alerts are good for 90 days and can be renewed. They are free.
Alert your banks to close your accounts and open new accounts with new checks, ATM cards, PINs, and passwords. Also replace outstanding checks with new ones.
Contact all your creditors by phone and in writing to inform them of the theft.
Call the security or fraud departments of each company to close any accounts that have been tampered with or established fraudulently. Follow up the request in writing and ask for written verification that the accounts have been closed and any fraudulent debts discharged. Keep copies of all documents and records of all conversations about the theft.
Contact the Social Security Administration’s Fraud Hotline at (800) 269-0271 or by e-mail to the Office of the Inspector General at www.ssa.gov/oig.
Contact the California DMV at (800) 777-0133 or www.dmv.ca.gov to see if another driver’s license has been issued in your name.
Notify the U.S. Postal Inspector if your mail has been stolen or tampered with. Its number is (626) 405-1200.
In the case of medical identity theft request a copy of your current medical files from each health care provider, and request that all false information be removed from your medical and insurance files. Enclose a copy of the police report with your requests. For more information things to do if you are a victim of medical identity theft or concerned about it go the World Privacy Forum’s website at www.worldprivacyforum.org/medicalidentitytheft.html

Additional tips on avoiding and resolving identity theft problems are available on the State of California Office of Information & Privacy Protection website at www.oispp.ca.gov/consumer_privacy/identitytheft.asp. Legal Guide P-3 also explains your rights and liabilities under California law when your credit identity is stolen. Another useful website is that of the Identity Theft Resource Center (ITRC) at www.idtheftcenter.org. It contains information ranging from advice for people who have had a wallet stolen to tips for reducing the risks of identify theft. It also contains fact sheets, solutions to various identity theft problems, letter forms, and answers to frequently asked questions. You can also call ITRC at (858) 693-7935.

Wi-Fi Hacking

Using unprotected public Wi-Fi poses major security risks. An insecure laptop or iPhone makes it easier for a hacker to intercept information to and from the Web, including passwords and credit card numbers. It is also vulnerable to virus and spyware infections, and to having its contents stolen or destroyed. A hacked laptop or iPhone can also create a security risk for the user’s workplace if it contains a password to the corporate network. Wi-Fi users should take the following steps to reduce these risks:

Turn the Wi-Fi on your laptop, PDA, and smart phone off when you aren’t using the network. Otherwise your Wi-Fi card will broadcast your Service Set Identifier (SSID) looking for all networks it was previously connected to. This enables hackers to figure out the key that unscrambles the network password.
Use a known service instead of Free Public Wi-Fi or similar risky, unknown signals called ad hoc networks.
Check the Wi-Fi security policies of your service provider and install the protections they offer to ensure it’s a known network and not an “evil twin” hacker site pretending to be the legitimate one.
Pay attention to warnings that a Secure Sockets Layer (SSL) certificate is not valid. Never accept an invalid certificate on a public wireless network. Log off and look for a trustworthy network. Look for the padlock indicating an SSL connection. Keep your firewall on. And keep your operating system updated.
Find out if your company offers a Virtual Private Network (VPN) and learn how to use it. Encrypted VPN sessions offer the highest security for public wireless use.
Upgrade your Wi-Fi cards. The older Wired Equivalent Privacy (WEP) security is easily hacked. The new Wi-Fi Protected Access (WPA and WPA2) are much more resistant to attack.
Learn to connect securely. Even the vulnerable WEP offers more privacy and protection than an unsecured public connection. It’s not something the average hacker can crack.

Bankruptcy Foreclosure Rescue

Bankruptcy foreclosure scams target people whose home mortgages are in trouble. Scam operators advertise over the Internet and in local publications, distribute flyers, or contact people whose home are listed in foreclosure notices. They may promise to take care of your problems with your mortgage lender or to obtain refinancing for you. Sometimes they ask you to make your mortgage payments. But instead of contacting your lender or refinancing your load they pocket the money you paid and then file a bankruptcy case in your name, often without your knowledge. If this happens you could also lose your home. So proceed with care in dealing with an individual or company that:

Calls itself a mortgage consultant, foreclosure service, or similar name,
Contacts people whose homes are listed for foreclosure,
Asks for a fee before performing a service,
Asks you to make your home mortgage payments directly to them, or
Asks you transfer you property deed or title to them.

If you can’t pay your mortgage, call your lender or contact and attorney for help. If you suspect a scam call the Real Estate Fraud Subdivision of the San Diego County District Attorney’s Office at (619) 531-3552. If bankruptcy proceedings are involved, call the United States Trustee at (619) 557-5013. The Trustee is a U.S. Justice Department official who monitors the bankruptcy system.

Free-Meal Seminars

Many financial services firms sponsor sales seminars and offer a free meal to entice attendees. While these seminars are advertised as educational workshops at which “nothing will be sold,” they are actually held to get attendees to open accounts and buy investment products, if not at the seminar itself, then in follow-up contacts. In a 2006-2007 study of these seminars by the U.S. Security and Exchange Commission, the Financial Industry Regulatory Authority, and state securities regulators, it was found that about half featured exaggerated or misleading advertising claims and about one-quarter involved unsuitable investment recommendations. Attendees need to understand that these seminars are primarily sales events and that all claims and recommendations should be evaluated with great care before taking any actions.

Protecting Your Assets

The following tips will help keep you from becoming a victim of various frauds and confidence schemes.

Don’t discuss your assets or finances with strangers.
Don’t keep large sums of money at home. Keep stocks, bonds, expensive jewelry, coin collections, etc. in a bank safe deposit box.
Read contracts carefully and understand the terms before signing.
Don’t pay for work in your home in advance.
Call the Better Business Bureau of San Diego County at (858) 496-2131 if you have any doubts about the reliability of a person or company you are going to hire.
Never get involved with and provide or show money to strangers. Some common confidence schemes involve phony bank examiners who ask you to help trap a crooked teller, strangers who want to share found money, strangers who want to donate money to a charity of your choice, and strangers who want you to help prove that banks can be trusted. Note that all these schemes involve strangers and stories that sound too good to be true.