Crime Stoppers

Always Anonymous 1-800-222-TIPS (8477)

Crime Stoppers does not receive government funding.

A New Frontier in Crime...Identity Theft

Could it Happen to You?

Steps to Avoid Becoming a Victim

Presented by the Calgary Police Service Crime Prevention Unit

DISCLAIMER

The information provided is intended to assist with safe technology practices. It is not a guarantee that you will not be vulnerable to identity crime. Used in its entirety this information is designed as a basis for learning and for developing effective crime prevention for free non-commercial use.

How big of a Problem is Identity Theft?

2002 - Canada Total Loss $8,829,378.45
2002 - Alberta 635 incidents $593,599.25
2003 - Canada Total Loss 8,817 incidents $14,107,864.90
2003 - Alberta 724 incidents $806,745.84
Total loss in US in 2002 54 million dollars!! **PhoneBusters 09/03

What is Identity Theft?

Definition - FBI
"Theft or misuse of personal or financial identifiers to gain value and/or facilitate criminal activity."

Identity theft is a crime whereby the perpetrator acquires key pieces of personal information about an individual in order to impersonate them. The victim may be dead or living.

Key Information

Name, Address, Date of Birth
Social Insurance Number/Social Security Number
Mother's maiden name

Where do they get the information?

Thieves access personal information by:

Stealing your mail
Looking through your garbage "Dumpster Diving"
Stolen or lost wallet or purse
Careless information handling
Employee theft
Ex-Spouse uses family information
License Manufacturing
Data Sale or sharing
Guest or roommates
Internet Trolling
Spoof Sites on the Internet
Laptop Theft
Social Engineering - you give it to them
From Internet sites that are not secure
Completing a "Change of Address" form
Unprotected Servers
Skimming from magnetic strips
War-driving - Hacking
Tombstone Identities
Key Loggers
Wireless surveillance
"The inside" - a Grocery Clerk taking key information off a cheque that you have written
Internal Privileged Access -Disgruntled employees, Temporary workers

How does it Happen in your Office or Client's Business???

Breach of Confidentiality
Unauthorized access
Negligent Security unlocked cabinets/drawers
Outsourcing Data Entry
Improper Disposal of Information
Negligent Hiring and/or Supervision

What damage can they do?

Obtain a driver license
Obtain a SIN card
Obtain a phone or cell phone
Commit tax fraud
Obtain medical services
Commit crime using your good name
Steal money and credit from a personal portfolio

How do they assume my identity?

Once thieves have access to this information they can commit various forms of fraud by:

Having mail re-routed to a new address
Gaining access to victim's financial accounts
Opening new bank accounts
Acquiring utility & phone services
Applying for bank loans, credit cards and social security benefits
Purchasing vehicles or renting apartments

Hassle is the most difficult
part of this crime!
It can take years to recover

Who are the thieves?

Hackers
Privileged Access Employees
Opportunist
Organized criminals
Street Level Criminals
Tombstone Identity Rings
Terrorists
International Fugitives

Signs That I May Be A Victim

A creditor informs you that an application has been received or declined for credit received with your name.
Telephone calls or letters state that you have been approved/denied asking why there has been a change of address.
You receive statements/bills in your name that you did not apply. You no longer receive credit card statements or all of your mail is not being delivered.
A collection agency informs you they are collecting for a defaulted account that you never opened.

How Can I Prevent Becoming a Victim of Identity Crime...

Active Defense Identity Theft

Immediately remove mail delivered to your mailbox - cancel mail when away.
Do not place outgoing mail into unsecured mail receptacles - best to
make deposits at your local post office.
Buy a shredder to shred pre-approved credit applications, credit card receipts, bills and any sensitive financial information.

NEVER give personal information over the telephone, such as:

Social insurance number
Date of Birth
Mother's maiden name
Credit card number or
Bank PIN number

Don't put your telephone number on your cheques.
If someone asks for your Social Insurance Number ask... WHY!!
Keep track of credit cards at restaurants or locations where second party can take your card out of sight.
NEVER leave receipts at bank machines, bank counters, trash receptacles or unattended gas pumps.
Keep track of all your paperwork to avoid disputes over payments that you didn't authorize.
Memorize your social information number and all of your passwords.
Sign all new credit cards received immediately.
Save all credit card receipts and match them up against your monthly statements...learn your cycles.
Closely monitor expiration dates on your credit cards.
Contact credit card agency if replacement not received prior to the expiration date.
Report all lost or stolen credit cards immediately.
Photo copy the contents of your wallet to make it easier to report and keep track of the contents in your wallet at a given date.
Beware of mail or telephone solicitation disguised as promotions offering instant prizes designed to gain personal information or credit card numbers.
Teach your children not to give out personal information on the Internet or telephone.
Install a firewall on your computer to prevent personal or financial information stored on your computer to become accessible to thieves.
Install software patches immediately as they are presented.
NEVER disclose your credit card number or personal financial information on-line at any website without receiving confirmation of a secured authentication key from your provider.
NEVER disclose passwords or credit card account number to confirm subscription of an online service.
Don't put your address or license plate number on your key ring.
Be alert to "Shoulder Surfers."
Remove your computer hard drive prior to selling or disposing of your computer.
Don't carry extra credit cards and ID in your wallet - cancel identification you do not use.
Keep telephone numbers separate from credit card or social insurance numbers.
Order your credit report from the two credit bureaus once per year to check for fraudulent activity on your credit history.
Safeguard sensitive information on laptop computers using encryption programs.

Spoof Sites

Recently Internet sites like E-Bay, Verizon, PayPal have been used as spoof sites. Spoof sites are websites that look genuine but are actually created to deceive you into disclosing of personal or financial information. Other web sites attempt to deceive you into appearing trustworthy and genuine by using logos from the Better Business Bureau or VISA.

Remember check the URL's on websites that you enter financial information to ensure they match the site you visit. Remember financial institutions and legitimate corporations will never contact you asking for personal information, PIN numbers or verification on your credit card. Delete e-mails from spoofers and do not respond...they are fake!

SOCIAL ENGINEERING - Steps to Avoid Being a Victim

If contacted by a person saying they are an employee and need information, verify, verify, and verify, by placing the person on hold and calling the extension to make sure the call is genuine.
"Establish a Need to Know." Don't send sensitive information to anyone without checking it out first. Advise your children not to give up personal family information to anyone.
"Watch your Email." Hackers use email with friendly subject lines.
"Beware of Surveys," do not participate in phone surveys, on-line surveys or door-to-door surveys. This is an easy way to gather personal information from unsuspecting parties.

How can I prevent my business from becoming a victim?

Conduct background checks
Limit access to sensitive information
Limit Collection of Data
Stop Use of personal identifiers
Create anti-theft manuals
Train all temporary employees and contractors on an ongoing basis
Integrate laws and best practices
Conduct informal security audits
Establish strict privacy policies control of info and off-line

WHAT ACTION DO I TAKE AS A VICTIM OF IDENTITY THEFT?

File a report with your local police department and obtain a case number.
Notify all creditors by phone and in writing about the crime.
Keep a log of all your contacts.
Use a credit bureau sample dispute letter.
Look at the crime before & after the event how did it happen. This will often help to lead investigators to multiple crimes.
Prepare to complete an ID Theft Affidavit.
Learn as much as you can!!