1. Identity Thefts: Opinion of the Lithuanian Population Dr. Zita Čeponytė 1

2. Identity Thefts: Opinion of the Lithuanian Population Dr. Zita Čeponytė 2

3. In 2014 a representative sociological survey was carried out as commissioned by the Lithuanian Consumer Institute. 1005 respondents were questioned during the survey. 3 Research Methodology

4. Awarenesss of ID theft (%) What does an ID theft mean, in your opinion? 4 N=1005 56 per cent of the respondents replied that it would mean an unlawful use of data for criminal purposes. Unlawful use of personal data was more often mentioned the respondents aged 18-35, with the highest level of education and urban residents. Impersonating someone else for criminal purposes was more often noted by the survey participants aged 46-55 and people with the highest educational background. Fraud involving payment card data was identified by the respondents in the highest income group (above LTL 1 500). *several options are possible; sum above 100 per cent. 61 56 40 38 36 9 Impersonating you for criminal purposes Payment card fraud Fraudulent use of personal data (e.g. shopping online) Using a fake name in operations Scam e-mails and phone calls requesting computer access, login names, personal data Hacking into social network accounts or e-mails Don’t know

5. Awareness of personal data (%) Indicate which of the examples given below are your personal data: 5 N=1005 Name, surname, ID number were more often identified by the respondents with the highest educational background and residents of smaller towns and regional centres. Bank account data – by women, the respondents with the highest income (above LTL 1 500) and urban residents. User name and password – by the survey participants aged 18-25 and the respondents with the highest income (above LTL 1 500). Payment card number – by urban residents. *several options are possible; sum above 100 per cent. 83 52 49 45 30 24 17 11 10 1 5 Name, surname, persona ID Bank account data User name and password Payment card number Telephone number E-mail address Computer IP address Anti-virus Online store used for shopping Non of the above Don’t know

6. Awareness of ID theft methods on the electronic space (%) Indicate which of the following online ID theft methods are known to you: 6 N=1005 In general, awareness of identity theft methods online is higher among the survey participants who are between 18 and 35 years of age and people with the highest educational background. *several options are possible; sum above 100 per cent. 44 42 40 38 36 28 23 28 Phishing Skimming Spyware, malware. Hacking Pharming Spam Scam Dumpster diving None is known

7. Awareness of ID theft methods on the non-electronic space (%) Indicate which of the following methods of ID theft on the non-electronic space are known to you: 7 N=1005 Obtaining personal data by deceit was more often mentioned by the respondents of higher educational background, those with the highest income (above LTL 1 500) and urban residents. Thefts of personal documents, correspondence and throwing away of non-destroyed documents – by the residents of smaller towns and district centres. *several options are possible; sum above 100 per cent. 74 68 66 48 8 Personal data obtained by deceit (unlawfully) Release of login codes and passwords Thefts of personal documents, correspondence Disposing of unshreded documents None is known

8. Parties responsible for eduction on ID theft issues (%) Education on ID theft issues should be the responsibility of: 8 N=1005 State institutions were more often noted by the respondents in the highest income group (above LTL 1 500) and residents of major cities. Education institutions – by the respondents of the highest educational background. Parents and persons in the domestic environment – by the least educated persons, the respondents with the lowest income (up to LTL 500) and residents of smaller towns, district centres and rural areas. *several options are possible; sum above 100 per cent. 66 57 46 37 34 8 State authorities Parents and others from the domestic environment Mobile operators and internet service providers NGOs (e.g., consumer associations) N / N Educational institutions (schools, universities, etc.)

9. Opinion on the use of stolen personal data (%) How can your personal data be used by ID thieves, in your opinion: 9 N=1005 The likelihood that the thieves can use stolen personal data to get fast credits was more often noted by the residents of smaller towns, district centres and rural areas. Withdrawing money from bank accounts was more often mentioned by the residents of smaller towns and district centres. Impersonating someone else for purchasing purposes – by men, the respondents aged 18-25, those with the highest educational background, and the respondents with the highest income (above LTL 1 500). Blackmail was more often noted as an opinion by the youngest survey participants (aged 18-25). *several options are possible; sum above 100 per cent. 69 61 51 45 5 Withdrawing money from bank accounts of other persons Impersonating somebody else when buying goods and/or services Blackmailing or stalking Don’t know Fast credits in somebody else’s name

10. Incidence of ID thefts (%) Have you experienced or heard of ID theft in the past 12 months? 10 N=1005 ID thefts experienced by family members or friends was the answer more prevalent in men, the respondents with the highest income (above LTL 1 500) and urban residents. Yes, personally 3% Heard that my family and friends experienced it 16% No experience 77% Don’t know 4%

11. Use of stolen personal data (%) How have your stolen personal data been used: 11 N=25* *several options are possible; sum above 100 per cent. Answers provided only by the respondents who have experienced personal data theft *Statistically insignificant number of the respondents 28 24 16 8 20 32 Fast credit taken Personal documents stolen Personal data obtained by deceit (phone, e-mail) Goods and/or services purchased online in your name Money lost from bank accounts Other Failure by the offender to take advantage of the personal data

12. Ways to avoid ID theft online (%) How it would be possible to avoid ID theft online: 12 N=1005 More methods to protect from ID thefts online were mentioned by the respondents aged 18-45, people of highest education, and the respondents with the highest income (above LTL 1500). *several options are possible; sum above 100 per cent. 62 51 50 39 22 7 13 No disclosure or avoidance of disclosure of personal data online Data protection measures (e.g. changing of passwords, using anti-virus) Regular cleaning or changing of login data Not opening e-mails from unknown sources lai? No accounts in social networks (Facebook, Twiter, etc) Other Don’t know

13. Ways to avoid ID theft on the non-electronic space (%) How it would be possible to avoid ID theft on the non-electronic space: 13 N=1005 More methods to protect identity in general were indicated by residents of smaller towns and district centres. Disclosure of personal data only when one is sure such requests are legitimate was also more often noted by the respondents in the highest income group (above LTL 1 500). Careful use of PIN codes – by men and persons with the highest educational background. Avoid carrying unnecessary documents was more often suggested by the respondents with average income (LTL 501-1000). Necessity to destroy unnecessary documents was more often underlined by the respondents with the highest income (LTL 1500). *several options are possible; sum above 100 per cent. 71 65 61 51 5 5 Disclose personal data only when convinced they are requested legitimately No notes with passwords and PIN codes, no carrying of notes with passwords and PIN codes No carrying of unnecessary documents Careful shredding of unnecessary paper document copies (invoices, personal correspondence, etc.) Other Don’t know

14. Institutions the respondents would contact in case of personal data theft (%) Whom would you contact if your personal data were stolen: 14 N=1005 Law enforcement institutions are the preference of the least educated persons, the respondents with the lowest income (up to LTL 500) and residents of smaller towns, district centres and rural areas. *several options are possible; sum above 100 per cent. 75 15 12 8 7 4 3 2 9 Law enforcement institutions (police, Cyber police State Data Protection Inspectorate Court State Consumer Protection Service Communications Regulatory Authority CERT-LT - Public consumer associations Other Don’t know

15. 15 Most often ID thefts are perceived as impersonating someone else for criminal purposes (61 per cent). 56 per cent of the respondents believe that an identity theft is fraud involving payment card data and 56 per cent think that it means an unlawful use of personal data. 40 per cent believe that an ID theft also means activities when a person uses a fake name and surname. 38 per cent think that it is fraudulent e-mails or telephone calls requesting computer access and phishing out login data and personal data. 36 per cent – hacking into personal social network accounts or e-mails. Personal data are most often considered to consist of the name, surname and ID number (83 per cent). 52 per cent would also attribute bank account data to personal data. 49 per cent – a user name and password. 45 per cent – a payment card number. 30 per cent – telephone number. Most widely known online ID theft methods: phishing (44 per cent), skimming (42 per cent), spyware, malware (40 per cent), hacking (38 per cent) and pharming (36 per cent). Most widely known identity theft methods in the non-electronic space: obtaining personal data by deceit (74 per cent), disclosure of login codes and passwords (68 per cent), theft of personal documents and correspondence (66 per cent). Two thirds (66 per cent) of the survey participants believe that education on identity thefts should be the responsibility of state authorities. 57 per cent – educational institutions. 46 per cent would assign this responsibility to parents or other persons in the domestic environment. Summary

16. 16 The prevalent opinion is that identity thieves are likely to use another person's data in order to get fast credits (69 per cent). 61 per cent think that stolen personal data can be used to withdraw money from bank accounts. 51 per cent note that identity thieves are likely to pretend they are somebody else when they buy goods or services. 45 per cent mentioned the likelihood of blackmailing the victim. 19 per cent of the survey participants have encountered identity theft over the last 12 months: 3 per cent experienced it personally and 16 per cent heard about such cases from their friends and family or relatives. Most often the outcome of identity thefts was fast credits (7 respondents) or stolen personal data (7 respondents). In 6 cases, personal data were obtained by deceit. Three fourths (75 per cent) of the respondents would contact law enforcement institutions in case of personal data theft. 15 per cent would report to the State Data Protection Inspectorate. 12 per cent – to the court. The best way to avoid identity thefts online is not publish any personal data or refrain from disclosing them online (62 per cent). 51 per cent stated the use of the means of security. 50 per cent – regular clearing and changing of login data. The prevalent opinion is that it is possible to avoid identity thefts in the non-electronic space only when personal data is provided when the person is sure that they are requested lawfully (71 per cent). According to 65 per cent of the respondents, such thefts would be prevented by a more careful handling of PIN codes (65 per cent). In the opinion of 61 per cent, unnecessary documents should not be carried in order to protect oneself. 51 per cent think unnecessary paper copies of documents should be destroyed more attentively. Summary