Fraud: Verification vs. Authentication

As we evolve to a virtual format, we are threatened by new forms of fraud. Providing confirmation that a consumer, customer, or organization  is who they say they are usually requires that they provide identity verification and authentication. These terms are not used interchangeably and not knowing the difference can make you vulnerable to fraud.

A verified identity proves that this identity exists, whereas an authentication proves that this user is who they claim to be. However, it is important to note that verifying an identity exists does not prove that it belongs to the person putting in the information.

When creating and securing an account online a combination of a name, address, phone number and email on a form can provide enough information for a company to verify a consumer’s identity to establish trust upon creation of an account. The information can be cross-checked among multiple data sources such as utilities or phone carriers, to ensure the name matches the data on file.

Fraudsters can illicitly obtain identifying information to apply for new accounts in their victims’ names. Some create synthetic identities and fabricate credentials that are not associated with a real person which can fool the verification process.

Some organizations recognized this type of identity theft and have shifted toward a better authentication process that require more than just simply verifying that an identity exists. Organization’s work to confirm that the person who created the new account provide some proof of identity by asking to provide a government photo ID for facial recognition.

Authentication is still an on-going identity-proofing process that checks both the identity of the digital user and ensures the integrity of the device they are using. The most notable system in place currently is the two-factor authentication and one-time passcode method that grant account access to the right person in real time.

A study from CMO Council in 2021 showed that authentication frustration caused 61% of consumers to abandon a transaction. Another report from TransUnions 2022 Global Digital Fraud Trends showed that approximately two-thirds of consumers would switch companies for a better digital experience.

T-Mobile Data Breach

T-Mobile - the cellar service provider - has confirmed that hackers stole sensitive personal data of more than 40 million former and prospective customers (those who gave the company personal information to run credit check) during a data breach on August 16th. An additional 7.8 million current T-mobile customer accounts were also hacked.  The stolen data included information such as Social Security numbers, driver’s license information, birth dates and more.  

The company stated that phone numbers and financial information, such as bank account numbers and credit card numbers were not included in the hack. 

Protecting Yourself After a Data Breach

Although T-Mobile claims payment information wasn’t obtained during the breach, it is in the best interest of customers to assume their information is out there.  When personal information falls into the hands of criminals, identity theft and fraud quickly become a major problem that is difficult to counter. Acting quickly can save you a lot of grief down the road. 

Steps To Take: 

Freeze your credit

Freezing your accounts is one of the most important steps you can take if you believe your data may be compromised. Freezing your credit blocks lenders from being able to review your credit report to approve a new line of credit. That means you won’t see any surprise credit cards or loans taken out in your name. 

To freeze your credit, you need to contact each of the major credit bureaus - Equifax, Experian, and TransUnion - directly. The bureaus will require information to verify your identity, such as SSN, a copy of your photo ID and proof of residence to approve the freeze. Some bureaus assign a PIN that is required to unfreeze your credit report. 

It will not cost you anything to freeze your credit report and doing so will not affect your credit score. A freeze can be temporarily or permanently lifted at any time. 

Check Your Credit Report

Even if you freeze your credit report, it is a good idea to request copies of your reports from each bureaus to check if any fraudulent activity has occurred. Due to the pandemic, all three bureaus are granting free access to credit reports weekly through April 2022 at www.annualcreditreport.com  This site works directly with the three bureaus to allow customers to pull their reports via a simple web portal. 

Your reports show a detailed history of your payments and balances for various credit products, including credit cards, mortgages, cars, personal and student loans. The reports will not show your credit score. 

When reviewing your reports, you may find fraudulent or inaccurate information. In that case, you want to work with the bureaus to dispute the information and have it removed. If you believe that you are a victim of fraud or identity theft, you may also want to report it to the Federal Trade Commission at identitytheft.gov 

Monitor Your Bank Accounts

T-Mobile states that credit and debit card information isn’t included in the data breach, but it is important to keep a close eye on your bank accounts for suspicious activity. If you see charges that you haven’t made, call your bank immediately to report the fraud. 

If you are still having trouble with disputing information and you are a victim or fraud or identity theft, let us know and we can help! 

Identity Theft By Family or Friends

Identity theft isn’t always committed by a stranger or a mystery hacker. Oftentimes, when your identity is stolen, it is taken by someone who know. In 2014, there were approximately 550,000 identity theft and fraud victims reported that was committed by someone they knew and the numbers have likely raised.

It is hard enough to deal with a stolen identity, let alone when it is perpetrated by someone you know.You may feel betrayed, violated, and your trust may be broke. It might be difficult to trust anyone again. These are valid feelings to have.

When the theft is by a family member or friend, you may have a hard time turning that person in or filing a police report because of the ramifications it will have for that person and the judgement by your other family members. They may even pressure you to let the matter go. It is even trickier when your spouse is the one who stole your identity. 

What is Identity Theft 

Identity theft happens when someone uses your identity for their own financial gain. It could be for making purchases, qualifying for a loan, or getting approved for a credit car, among other things. 

Parents may be under the impression that using their child’s information for financial gain is okay, but that is a form of identity theft. Some other examples include:

• A family member uses your name and SSN to qualify for a credit card or loan.

• A parent uses their child’s name and SSN to sign up for utilities or cable.

• A family member uses another family members name and SSN to qualify and sign for a lease.

• A spouse uses your name and income without your permission to open an account without you knowing.

Often, you may not know that it has happened until you have a delinquency on an account, an outstanding debt under your name, or an unfamiliar account on your credit report. It is still considered a crime that needs to be corrected even if it hasn’t gone into collections. 

What To Do

Once you realize that your information has been stolen you need to contact the creditor and business and explain that you are not responsible for the debt. You should also file a police report. This is the only way that you will be able to fix your credit report. You need to also place a fraud alert with the credit bureaus and report the theft to the Federal Trade Commission (FTC). It is difficult to file a police report on someone that you know, but it is a must if they have jeopardized your financial future. 

What if Friends or Family Do Not want you to File a Report?

If you are being pressured to let the situation go by friends or family members, you have to realize what is at stake if you do not report the theft. Your credit history is on the line, and you will ultimately be the one responsible for repaying the money owed unless you take the necessary steps to dispute the charges. If the person gets away with the theft, you might be putting others at risk as well. They may feel that they can get away with stealing someone else’s identity if they see it as an easy task. 

Other Ways to Protect Yourself

You will possibly need to change your bank account number as well as close all the accounts that you currently have open. You should take the time to set up alerts on your credit report. This will help protect you from identity theft in the future. 

If your credit card(s) are stolen, you are at an even greater risk of having your identity stolen. You will want to carefully monitor your statements. You should be requesting your credit report every few months to check over your information. Right now, credit reports are free weekly from www.annualcreditreport.com until April 2022. Many banks are now offering free credit report tracking as well. 

Dealing With Your Family After

You need to remind yourself that identity theft is not your fault, and you did not do anything wrong. You will likely be dealing with feelings of betrayal regarding the person who did this. You should take the time to seek advice on how to communicate with them, what boundaries you need to set up, and if it is possible to maintain the relationship.   You should always be cautious about how you share your information with friend and family members. 

Let us know if you have questions on dealing with this type of situation. 

COVID-19 Identity Crimes on the Rise

The number of COVID-19 identity crimes are expected to rise in 2021. The Identity Theft Resource Center (ITRC) has new data that shows an increase in identity crime victims being targeted multiple times. The rate was 21% in 2018 and increased to 28% in 2019 before the pandemic. 

With the stress of COVID, identity theft is not the top focus of people right now and victim resources are getting harder to research. The U.S. Department of Justice funds allocated for crime victim services has dropped from $3.7 billion to $1.9 billion since 2018. New fraud cases and identity crime victims are likely to increase with the pandemic-related benefits and stimulus payments due early this year. 

2020 was a difficult time for many people and it continues to affect them today. Some have lost their jobs and others had to close their businesses. There have been millions of state unemployment benefit-related identity theft cases that have been detected across the U.S. since March 2020. The ITRC receives less than 20 inquires regarding unemployment benefits in a year on average but in 2020 they received more than 700 unemployment benefits fraud victims inquiring for help. A sharp increases in scams was seen also. This has given criminals countless opportunities to trick people with phishing scams, charity scams, healthcare scams and work-from-home scams. 

What Will 2021 Bring?

Identity crimes are expected to impact victims well into 2021. Many victims may not even realize that their identity information was misused until they received their IRS Form 1099 for non-wage income. The research by the ITRC shows a significant increase in identity crime victims being victimized a second time, even before the rise of fraud, scams, and identity crimes in 2020. An analysis of the post-pandemic shows an even greater spike. 

The ITRC and other private-sector researchers show that cybercriminals looking for profit are using consumer’s and employee’s bad security habits, as well as the changing work environment, to attack businesses more often. Resources for cybersecurity training and education along with identity-related crime victim assistants are lessening. 

The U.S. Department of Justice (DOJ) funds allocated for all crime victim services has dropped from $3.7 billion in 2018 to $1.9 billion. Discredtionary DOJ grants awarded to victim services organizations has dropped from $311 million in 2019 to $144 million in 2020. Funding for programs that support victims of identity crimes, compromises, cybercrime, scams, and fraud have been reduce to $0. According to the cybersecurity firm Coveware, ransomware payments have grown on average from less than $10,000 per incident in 2018 to $233,000 as of the third quarter of 2020. Some large enterprises are reportedly paying ransoms over $1 million. The most common cause of ransomware attacks is stolen credentials to access a business system or network remotely. 

Research by the ITRC that will be published in May 2021 shows that there is an increase in identity crime victims being targeted multiple times. It could be even worse after the rise in crimes committed during COVID. 

Data shows that the COVID identity crimes will continue in 2021. More victims will suffer from trauma of a second, or even third crime. Getting the fraud resolved can be a daunting process and some victims will have trouble meeting their basic needs or find a job because they will not pass a background check until the fraud is resolved. Winning the battle to protect ourselves from cybercriminals will require us to devote more resources toward assisting victims and devote more time and attention to educating consumers and employees of their need to be cyber-aware and vigilant. 

If you believe that your information maybe have been compromised, contact us on our page for resources and help. We can direct you on how to solve this issue and guide you through a potential lawsuit.