Thursday, October 2, 2008

Identity Theft and Illegal Aliens

If you are a resident of the state of Arizona, you already are familiar with the E-Verify program. At the beginning of this year (2008), Arizona adopted a law requiring all employers to verify the employment eligibility of new employees. This goes beyond the mandatory (in all states) I-9 and now requires the use of E-Verify. Many other states are watching with interest to what is happening in Arizona in consequence of requiring the use of E-Verify.

One consequence is a significant drop in the number of ineligible workers applying for employment, as one might imagine.

Before the Form I-9 and E-Verify, illegal workers wanting to secure employment had been able to supply completely bogus information on employment application. After the introduction of the Form I-9, many began to respond to the challenge that the I-9 form represented by stealing the identities of legitimate workers (name, address, social security number, etc.).

The reason for the identity theft is that the federal government checked the I-9 forms and required employers to fire workers who were not authorized to work (name and social security numbers did not match the existing records). The solution for the illegal workers seemed to be to assume the identity (use the name and social security number of someone who would be authorized to work in the US). This frequently required the illegal worker to purchase forged identity documents so that they would be able to cash/deposit the payroll checks.

Now that Arizona has raised the bar with respect to verification of eligibility, the illegal workers have either moved to another state where employment is more easily obtained or have become more sophisticated in their identity theft / impersonation.

Arizona law enforcement has made several arrests of individuals involved in the production of counterfeit identity documents (U.S. Social Security cards, U.S. Permanent Resident cards, etc.). The Department of Homeland Security (DHS) has proposed a program (Real-ID) to improve the quality (and reduce the likelihood of forgery) of identity documents.

However, and quite curiously, Arizona and several other states have passed laws requiring non-compliance with the Real-ID program. It is not certain at this point what the final outcome will be for Real-ID (full adoption, partial adoption, or abandonment).

While the debate continues, illegal workers will continue to acquire forged documents and obtain employment. In order to do so, the identities of legitimate workers have been, and will continue to be stolen.

Wednesday, September 24, 2008

Hurricane Victims Beware

Sadly enough, hurricanes aren't the only force of nature that disaster victims need to be on the look out for. Apparently identity thieves are also interested in tearing your life apart and leaving you in shambles.

Today, MarketWatch picked up a piece the FTC has put out warning victims of hurricane Ike and those who would like to contribute to the relief for those victims to be on the look out for scam artists, home repair scams and fake charities, all wanting your money.

It certainly is admirable that the human side of us desires to contribute to relief funds intended to help victims of natural disasters. And those willing to do so should continue their efforts, and are to be commended. Identity theft is a devastating force in its own right. But targeting people trying to get their lives back in order, or those willing to help in such efforts is certainly demonstrative of subhuman behavior.

Don't be fooled by these creeps. Before you generously donate money to any charity or relief effort, do your homework. The article referenced from MarketWatch has links to a list of precautions that consumers should take when desiring to aid those in need. If you suspect that a charity is fake, or if you have become a victim of fraud or identity theft, contact the FTC and look immediately into getting identity theft protection, if you don't already have it. Even those who are already victims can get further protection and be eligible for recovery efforts. You don't have to do it alone.

Monday, September 15, 2008

FTC Mandating Identity Theft Programs

The Stanley News and Press is reporting today that the FTC is now requiring municipalities to implement identity theft programs. The reason? Apparently utility companies and other similar municipalities are ranked third in the list of identity theft targets. Read the full story here.

This really seems to be more of an attempt to enforce compliance with the Red Flag Rules then anything. From the Merchants Information Solutions Red Flag Rules web page we can learn that the red flag rules are an initiative put in place by the "Fair and Accurate Credit Transactions Act (FACTA), Section 114 which states that all financial institutions and creditors must have a written plan to prevent, detect, and mitigate identity theft in relation to its new and existing covered accounts by November 1st, 2008."

When you think about it, it really just makes sense that the municipalities also take the same initiatives as the financial institutions. After all, to open an account with your local power company they want your name, address, phone number, social security number and many other pieces of personal information. Is it any wonder they are the number 3 target? This really is good news for us all.

Merchants' SmartIDentity+ line of identity theft products will help support your company's efforts to comply with these rules. Take a look at how we can help your company today and beat the November 1st deadline.

Phishing for Job Seekers

These days, a lot more folks are paying attention to what jobs are appearing on job boards. Many are out of work and looking for their next job, while others are looking to improve their position. Whatever the reason, it is important to know with whom you are dealing.

finraI was reading a story from earlier this summer about some folks who did not pay close attention. The victims in this story were duped into believing that there were searching for jobs on Craigs List when, in fact, they were transacting instead with sophisticated identity thieves from Latvia.

The scam succeeded in getting the victims to divulge their Social Security numbers, dates of birth, and other personally identifying information. The victims were told that the hiring company required this information in order to perform background checks.

Once the scammers had the information, they then wired money from russian bank accounts into the personal accounts of the victims. The victims, once funds were received, were instructed to wire the funds into specific accounts (which corresponded to the brokerage accounts the scammers had established). The scammers then proceeded to manipulate the prices of some thinly traded securities and make a handsome profit.

This was a sophisticated attack in that the victim was not the target of the attack but rather a means to the end. The real goal was to manipulate the price of securities. The identity theft victims provided the mechanism of generating apparently legitimate securities transactions. In some cases, the victim was attacked directly as the victims identifying information was used to tap funds the victims had in existing brokerage accounts.

Finra suggests six things to help keep yourself safe. They are:
- Be suspicious of anyone asking for your personal information
- Know who you are doing business with
- Don't Respond to Emails Requesting Personal Information
- Ask questions
- Order a copy of your credit report
- Review your account statements

We support these suggestions as prudent and wise. We further suggest that you get your credit report copy from Merchants through our SmartIdentity program. Where you'll not only get a copy of your credit report, but also a credit score and monthly monitoring of your credit profile.

Tuesday, September 2, 2008

Feds Getting Tougher on Identity Thieves

It seems that the Federal government is taking more aggressive measures against identity thieves. A new law carries a mandatory two-year sentence for anyone convicted of identity theft. Of course this two-year term is mandatory, but is not the maximum. Identity thieves can still receive more jail time if convicted of identity crimes. But, this new law gets these villainous parasites off the streets no matter how insignificant the dollar amount.

I think this is a good call. Fines alone do not deter identity theft and do not make those who suffer from this type of crime feel as though justice is served. When someone ruins your good name and takes your hard earned money, you want justice. Just ask the innocent 96-year old victim in this story. Aside from getting her money back, I'm sure this poor lady would like to get a significant portion of this jerk's posterior. Let justice be served!

Credit and identity monitoring may have helped the victims of these stories identify problems earlier. Merchants Information Solutions can help provide you with this sort of coverage. We'll monitor your credit and identity and send you email alerts whenever any suspicious activities occur. Furthermore, a recovery advocate will work on your behalf to restore your good name to its pre-event status, no matter how long it takes. And, with up to $25,000 in reimbursement insurance coverage, you can rest easy knowing that your out-of-pocket expenses are covered throughout the recovery process. Learn more about our identity theft protection and recovery solutions today by clicking here.

Friday, August 29, 2008

2008 Research Report: Both Good and Bad News

Earlier this year, Javelin Strategy & Research published their fourth annual Identity Fraud Survey Report. The (2008) report contained a number of items. Some are positive, others disconcerting.

The most significant good news is that identity fraud actually declined slightly. The previous estimate of the cost of identity fraud was $51 Billion, the report identifies a decline to an estimate of $45 Billion. While somewhat encouraging in terms of overall losses, $45 Billion is still a pile of cash and no one should feel they have a reason to become complacent.

To underscore the need for continued vigilence, the fraudsters continue to test new tactics and try new approaches. Significantly among these new tactics is something called Vishing. Vishing is defined as combination of Internet Telephony (VoIP) and Social Engineering.

With Vishing (like its twin Phishing) the purpose is to get you to divulge useful details about your identity so that it may be stolen. A typical attack can involve Interactive Voice Response (IVR) systems controlled by the fraudster making a telephone call to your home phone, cell phone, or office phone. The system fraudulently identifies itself as a charity or other non-profit, a utility company, government, bank, or other billing or financial organization. The system then asks a number of questions and confirms a number of details designed to entice you into divulging your identity (Social Security number, account number, etc.).

These new vishing attacks now account for 40 percent of identity fraud in 2007. This is a stunning number given that the same attack accounted for only 3 percent in the prior year.

Identity theft is also becoming more costly each time it occurs. In 2006, the average cost was $554 per incident. In 2007, that figure grew to $691.

The report concludes with six recommendations for consumers to protect themselves from identity theft. At the very top of the list is credit monitoring. That is a service we provide here at Merchants. Not only can we watch your credit, we send you email alerts, and can act as your agent to resolve and ID theft event were to occur.

Our suite of services for identity theft protection is robust, comprehensive, and available. Stop by the website or give us a call (toll-free at 1.800.966.0576), see how we can help keep you safe.

Thursday, August 28, 2008

Teacher Fails Students

An article I read today on FOX 4 TV in Kansas City shows that at least one educational system is failing their students, but not in the way you would expect. You pay good money to get an education and you would think the school you attend should take every precaution to keep your personal information safe. Not so with one college teacher at least.

In Manhattan, Kansas, one teacher had his backpack stolen from his vehicle parked outside a home. No biggie, right? Well, it just so happens that he had the papers of 86 students and their Social Security numbers in that backpack. These were his students from Fall of 2007 to Summer of 2008. I can understand why a teacher would have papers with him if he were taking them home to grade. But papers from students a year ago? And if he was taking them home to grade, why didn't he take them in the house? And why did he have the students SSN's? Is that required to turn in a paper? Something is wrong with that.

This teacher deserves a failing grade for failing his students. Now they are all exposed to the possibility of identity theft and have to monitor their credit (which they should anyway) and identities for the next few years. Hopefully, the burden of expense will fall on the university and not the students.

Click here to read the full article.

This is similar to an incident that happened to me a few years ago. The financial institution handling my student loan had a server stolen from their facility. Just my luck, my personal information was on that server, and at least the bank knew that. In an effort to apologize, the bank was at least nice enough to foot the bill for credit and identity monitoring for the next year for myself and all the other thousands of students that had their information on that server.

Consider these two incidents for a moment. One occurred as theft from a car (a random smash and grab from the sounds of it), and the other occurred at a well-known financial institution. How exactly someone walks off with a server from a data center is beyond me. Where's the security? But to the point, both incidents bring to light the fact that your identity is at risk in many different ways, and unfortunately most often beyond your control. You can be as cautious as humanly possible about your personal information and do everything within your means to prevent someone from stealing your identity, yet some moron is allowed to walk off campus or out of a bank with your personal information in tow and you're put at risk.

Now, with an identity theft protection and recovery solution in place from Merchants Information Solutions, I feel a little more assured that at least if something like this should happen to me again and resulted in some devastating financial activities, I'd be able to clean it up. But I wonder what many other people are doing about this type of crisis? What kind of plan do you have in place for such incidents? Leave a comment and let me know.