File: Foil Identity Theft.PPT 2 Yogi Schulz Foil Identity Theft Management Consultants Yogi Schulz Biography r President of Corvelle Management Consultants r Information technology related management consulting r Project management and systems development r Computing Canada & Microsoft columnist r PPDM Association board member r Industry presenter: –Project World - 4 years –CIPS Informatics - 7 years –PMI - Information Systems SIG –PPDM Association - several years
File: Foil Identity Theft.PPT 3 Yogi Schulz Foil Identity Theft Presentation Outline r Origin of skyrocketing identity theft r Consequences of identity theft r Behaviors that reduce risk of identity theft r Recognizing when we have become identity theft victims r Recommendations r Questions & Answers
File: Foil Identity Theft.PPT 4 Yogi Schulz Foil Identity Theft The Bottom Line r Buy a cross-cut shredder r Use it for all documents that contain your name, address and account information that you’re ready to discard Foil Dumpster Divers
File: Foil Identity Theft.PPT 7 Yogi Schulz Foil Identity Theft How Does Identity Theft Happen? r Dumpster Diving –Rummage through trash looking for personal information r Skimming –Steal credit/debit card numbers when processing your card r Phishing –Send spam or display pop-up windows r Changing Your Address –Divert your billing statements to another address r "Old-Fashioned" Stealing –Steal wallets and purses, mail, personnel records
File: Foil Identity Theft.PPT 8 Yogi Schulz Foil Identity Theft Summary Case Studies Change of Address r I moved apartments and submitted my change of address card at the Post Office branch nearest me. r Unfortunately, they did not forward my mail to my new apartment. r So when my mail was dropped at my old address, the people there just left it out in a common area where anyone walking by could take it. r Someone took my personal mail from my bank and then filled out credit card applications and sent them in my name. r When you move and fill out the change of address card, be sure to watch for a letter from the Post Office at your new address confirming that you've changed your address. r If you don't get such a letter within a couple weeks, be sure to check with the Post Office to make sure they indeed paid attention to your change of address card. r Send your own change-of-address letters to your bank, credit cards, magazines.
File: Foil Identity Theft.PPT 9 Yogi Schulz Foil Identity Theft Summary Case Studies Stolen Wallet r Recently, my wallet (including credit cards, driver's license, passport, and social insurance number) was stolen from my office. Within an hour, my credit cards were being used to buy pagers, car audio equipment, cigarettes, liquor, etc. r Within two days, a woman was opening bank accounts, buying cell phones and commencing cell phone service, and applying for credit in my name. The last two months have been a nightmare. r However, I am extremely fortunate, in that my identity thief was arrested by the California Highway Patrol (following an unrelated traffic stop), and is currently being prosecuted in ABC County for a number of identity-theft related crimes. I am one of the lucky ones: My identity thief was caught carrying all of my identification (in addition to the identification of a number of other people). She was also carrying checks she had attempted to write on the fraudulent accounts, ATM/check cards for the fraudulent accounts, and several other pieces of information linking her to the theft of my identity. Most disturbingly, when she was arrested, and later while in custody, she continued to insist that her name was "Kathleen Z." r Despite the fact that my thief was arrested a week and a half ago, I am still fighting to clear my name, and I still dread opening my mailbox or answering the phone. Just a few days ago I discovered that my identity thief used my name, driver's license, and a fraudulent ATM/Visa check card issued in my name to pay for a hotel stay. The issuer of the card had granted my thief a line of credit when she opened the fraudulent account, and persisted in honoring check card transactions despite a growing negative balance. r Just today I received another debt collection letter from Equifax Check Services, demanding payment of a bounced check written by my identity thief. r With two photo IDs and my social security number, this woman succeeded in completely disrupting my life, even though she looks nothing like me. I am only now beginning to put my life back together, although I am told that it will take years before I clear my credit reports of fraudulent inquiries and bounced check notices. r Just recently, I learned that there is a petty theft charge against me in the city of PQR, California, because my identity thief was caught shoplifting. My thief was not arrested at the time, but was instead issued a "ticket," in my name, with my driver's license number, my date of birth, but a different address. The police officer failed to notice that my thief misspelled my name when signing the ticket. If my thief had not been arrested later by the CHP, and if the PQR police had not run a check for my name in the course of executing a search warrant for a motel room the thief rented there in my name, I never would have learned that "I" have a date to appear in criminal court and answer to this charge, and a bench warrant would have been issued for me. (I still have not straightened all of this out, and as of now, I am still named as the defendant.) r One of the most disturbing aspects of all of this is that banks, credit card companies, and merchants facilitate identity theft through their policies and practices. r Cingular One approved my identity thief's application for credit and cell phone service despite the fact that I had placed fraud alerts with all three major credit reporting agencies. r Wells Fargo Bank permitted my identity thief to open an account in my name, using my photo IDs, and allowed her to withdraw $6,000 in cash, despite the fact that she had only deposited $100. r Washington Mutual Bank also opened an account for her in my name, using my photo IDs, without running a credit check other than with ChexSystems. Despite a deposit of only $20, and a negative balance which eventually grew to over $4,000, Washington Mutual continued to honor my identity thief’s transactions. r ChexSystems only provides banks with information regarding misuse of bank accounts (e.g., overdrafts). They do not inform inquiring banks of recent requests by other banks, or of fraudulent activity. Nor is it possible to add a "fraud alert" to one’s ChexSystems file. Consequently, when Washington Mutual Bank requested information about me, they were not told that Wells Fargo had requested information about me two weeks earlier. r Several stores approved credit card transactions despite the fact that my thief either didn't sign the credit card slips, spelled my name wrong, or signed in a manner that did not look anything like my signature on the back of my credit cards. r Still others allowed my thief to try credit card after credit card, until she found one that hadn't been reported stolen yet. r Several other merchants accepted checks from my thief despite the fact that the spelling of my name in the signature did not match the spelling printed on the fraudulent checks. r Numerous people accepted my photo ids without noting that this woman looks nothing like me, other than that we are both black and are both tall. Instant survey: Who has their social insurance number in their purse or wallet?
File: Foil Identity Theft.PPT 10 Yogi Schulz Foil Identity Theft Yes, Ma’am, I’m calling from your local utility to confirm some information, please... Could I have your date of birth, social security number and any credit card numbers or bank account numbers, please?
File: Foil Identity Theft.PPT 11 Yogi Schulz Foil Identity Theft Origin of skyrocketing identity theft r Ubiquitous computerization of personal data –Business, Government –School, Leisure r Replacement of cash by electronic payment –Debit cards, Interac –Gift cards, money transfer r Creation of many personal profiles at web sites PIPEDA to reduce identity theft risk Creates identity theft risk banks are managing Creates identity theft risk we need to manage
File: Foil Identity Theft.PPT 12 Yogi Schulz Foil Identity Theft Consequences of Identity Theft r Loss of assets r Loss of credit rating until corrected r Huge effort to: –Undo the damage –Correct the incorrect records Frustration; feeling of being violated Huge distracting hassle
File: Foil Identity Theft.PPT 13 Yogi Schulz Foil Identity Theft Real world behaviors that reduce identity theft risk r Shred paper with personal information r Give out your credit card number cautiously r Don’t sign up for “free” offers r Provide only the minimum information r Decline offers that are too good to be true Minimize spread of personal information
File: Foil Identity Theft.PPT 14 Yogi Schulz Foil Identity Theft Web behaviors that reduce identity theft risk r Share personal information only when browser lock is on r Don’t sign up for “free” offers r Delete suspicious r Manage your passwords r Proactively reduce snooping on your PC Practice cautious web surfing IE 6 IE 7
File: Foil Identity Theft.PPT 15 Yogi Schulz Foil Identity Theft Reduce Snooping on your PC - 1 Install a router/firewallDelete browsing history 50% of Cable/DSL customers do not have a router
File: Foil Identity Theft.PPT 16 Yogi Schulz Foil Identity Theft Reduce Snooping on your PC - 2 Remove spywareDelete/block viruses “Can’t you see, You need to do something here?”
File: Foil Identity Theft.PPT 17 Yogi Schulz Foil Identity Theft Detecting that we have become identity theft victims r Missing statements r Credit card company calls r Unexpected credit denial r Bank calls to ask an unexpected question r Businesses call
File: Foil Identity Theft.PPT 18 Yogi Schulz Foil Identity Theft Recovering from Identity Theft r Call the toll-free fraud number of a credit bureau –Place a fraud alert on your credit report –Help prevent an identity thief from opening additional accounts in your name r Contact creditors to close any accounts that have been tampered with or opened fraudulently –Ask to speak with someone in the security or fraud department of each creditor –Follow up in writing r File a report with your local police –Get a copy of the police report in case the creditors, credit bureaus or others need proof of the crime
File: Foil Identity Theft.PPT 19 Yogi Schulz Foil Identity Theft Conclusions Small behavior changes will foil identity theft You don’t have to become a victim of identity theft
File: Foil Identity Theft.PPT 20 Yogi Schulz Foil Identity Theft Recommendations r Buy a cross-cut shredder and use it r Be cautious on the Web and with your r Review your credit card statements r Buy your own credit history report and scrutinize it r Improve your PC defenses Simple precautions reduce risk dramatically
File: Foil Identity Theft.PPT 21 Yogi Schulz Foil Identity Theft Questions & Answers Dogbert will explain it to you
File: Foil Identity Theft.PPT 22 Yogi Schulz Foil Identity Theft 1800, th Ave. S.W. Calgary, Alberta Canada T2P 3H7 Phone: (403) Web: President of Corvelle Management Consultants Information technology related management consulting Project management and systems development Computing Canada & Microsoft columnist PPDM Association board member Foil Identity Theft Management Consultants
File: Foil Identity Theft.PPT 23 Yogi Schulz Foil Identity Theft Major Anti-Virus Software Vendors r McAfee –us.mcafee.comus.mcafee.com r Symantec –www.symantec.com/index.htmwww.symantec.com/index.htm r Trend Micro –www.trendmicro.comwww.trendmicro.com
File: Foil Identity Theft.PPT 24 Yogi Schulz Foil Identity Theft Major Spyware Removal Software Vendors r Lava Soft - Ad-aware –www.lavasoftusa.comwww.lavasoftusa.com r Spybot Search & Destroy –www.safer-networking.orgwww.safer-networking.org r Lava Soft - Ad-aware –www.lavasoftusa.comwww.lavasoftusa.com r Spybot Search & Destroy –www.safer-networking.orgwww.safer-networking.org
File: Foil Identity Theft.PPT 25 Yogi Schulz Foil Identity Theft Bibliography - 1 r Consumer Sentinel –www.consumer.gov/sentinel r Equifax Canada - Identity Theft Page –learn.equifax.com/cs/Satellite?c=DS_General_Cont_C&childpagename=D ecisionSimple%2FDS_General_Cont_C%2FDSSecurityTemplate&cid= &pagename=DecisionSimple%2FPage%2FDSLayoutTemplat e&ParentLinkID= &ParentArticleID= r Fighting Back Against Identity Theft –www.ftc.gov/bcp/edu/pubs/consumer/idtheft/idt01.htm r Fraud and Identity Theft –www.vaonline.org/fraud.html r FTC Identity Theft –www.ftc.gov/bcp/edu/microsites/idtheft r Help keep spam out of your inbox –Tips for Reducing and Managing Junk –www.microsoft.com/athome/security/ /fightspam.mspx
File: Foil Identity Theft.PPT 26 Yogi Schulz Foil Identity Theft Bibliography - 2 r Interac Association –en.wikipedia.org/wiki/Interac r Identity Theft Resource Center –www.idtheftcenter.org r Identity Theft – Alberta –www.servicealberta.gov.ab.ca/pdf/tipsheets/Identity%20theft.pdf r Identity Theft - What to do if it happens to you –www.gs.gov.nl.ca/cca/tpl/pdf/id-theft/id-theft-per-steps.pdf r Personal Information Protection and Electronic Documents Act (PIPEDA) –privacyforbusiness.ic.gc.ca/epic/internet/inpfb-cee.nsf/en/Home r PhoneBusters –www.phonebusters.com/english/index.html r Privacy Commissioner of Canada –www.privcom.gc.ca/fs-fi/02_05_d_10_e.asp
File: Foil Identity Theft.PPT 27 Yogi Schulz Foil Identity Theft Bibliography - 3 r Privacy Rights Clearinghouse –www.privacyrights.org r RCMP - Identity Theft –www.rcmp-grc.gc.ca//scams/identity_theft_e.htm r Recovering From Identity Theft –www.insideid.com/idtheft/article.php/ –www.simplejoe.com/article-recovering-from-identity-theft.htm r Stop Thieves from Stealing You –Consumer Reports, October 2003, p. 12 r What is Identity Theft? - Ontario –www.gov.on.ca/MGS/en/ConsProt/STEL02_ html