Consumer Reports Money Adviser Subscribe now to get more expert financial advice you can trust.
June 2006
What if your identity is stolen from you?
Here's the good news about identity theft: The number of incidents is dropping. In 2005 about 8.9 million people had personal
information stolen and fraudulently used to open credit accounts, make big-ticket purchases, borrow thousands of dollars from
banks, or commit other types of identity crimes, according to a survey by the Better Business Bureau and Javelin Strategy
& Research in Pleasanton, Calif. That number is slightly lower than the 9.3 million cases that were reported in 2004.
Even so, at the current rate, 1 in 25 U.S. adults will have to put their financial lives on hold this year while they deal
with delinquent accounts and loans illegally obtained in their names. That process can be long and aggravating. On average,
it took victims 40 hours, usually spread over many months, to resolve a case of identity theft in 2005, the survey found.
If significant time passes before you discover a theft, restoring your financial good name can take even longer. A common
scenario: You don't know that you've been victimized until you are turned down for credit, a job, a mortgage, or an apartment.
In a majority of cases, identity theft could have been avoided or, at least, its impact minimized with a few basic precautions.
Here's what you can do to keep your identity your own.
1. Protect yourself
Identity thieves often get personal information by lifting bills, bank statements, credit offers, and tax information from
mailboxes, garbage cans, and Dumpsters. They also steal wallets and impersonate businesses to offer you oh-so-attractive deals
in exchange for, say, your name, address, birth date, and Social Security number on a signed application. Here's how to foil
them.
• Deposit outgoing letters in a post-office collection box rather than your own mailbox.
• Before discarding, shred charge receipts, bank statements, and other financial documents. They may give identity thieves
clues about where you have accounts. On a pretext, thieves could call the retailers and obtain personal information.
• Remove your name from preapproved offers for credit or insurance by going to www.optoutprescreen.com or calling 888-5-OPT-OUT. And if you're willing to deny yourself unsolicited catalogs and junk mail, opt out at the Direct
Marketing Association site (www.the-dma.org/cgi/offmailinglist).
• Never give out financial information via phone, mail, or the Internet unless you're certain that the company is genuine.
• Provide your Social Security number only when absolutely necessary, such as when applying for government programs. Otherwise,
ask to use another ID.
2. Monitor your credit reports
The government requires each of the three major credit bureaus-Equifax, Experian, and TransUnion-to provide consumers a free
copy of their credit report every 12 months upon request. At www.annualcreditreport.com, you can obtain reports from all three. By spacing your three requests at four-month intervals, you can monitor your credit
picture throughout the year.
Examine your credit files for any information that appears suspicious. Is your Social Security number correct? Are there names,
addresses, or creditors you don't recognize? Have there been a lot of inquiries for new credit cards or loans that you did
not initiate? "Usually, identity thieves will make many attempts to get cards in your name and to get as many cards as possible,"
says Beth Givens, director of Privacy Rights Clearinghouse, a consumer advocacy group in San Diego, Calif.
Ask the credit bureaus in writing, with copies of any backup material, to explain and fix data that you find questionable.
They must investigate the claim within 30 days. When the investigation is complete, the company that provided inaccurate information
must notify all three credit bureaus so their reports can be corrected. Then you're entitled to another free report.
Keep a log of all your credit and loan accounts, including lender names, account numbers, contact information, credit-card
expiration dates, and the date that statements typically arrive. When a bill or a replacement credit card is late, it may
have been stolen or diverted to another address. Contact the creditor immediately to determine whether there is a problem.
If you're very concerned about identity theft, you can subscribe to a credit-monitoring plan, such as Citi Credit Monitoring
Service or Identity Guard, which provides ongoing credit tracking and sends out e-mail or phone alerts when, for instance,
new accounts, changes of address, or inquiries are found. But at $10 a month or more, that's an expensive form of insurance.
3. Report fraudulent activity
Many people learn they are victims of identity theft when they spot strange entries in credit files or unexplained charges
on account statements, or when they receive a call from a creditor who has noticed unusual use of a credit card. If that happens,
promptly file a complaint with the local police and keep a copy of the report (or at least its number). You can use the Federal
Trade Commission's model ID-theft affidavit (www.consumer.gov/idtheft/pdf/affidavit.pdf) to notify companies holding fraudulent accounts in your name.
By acting quickly, you will be responsible for at most $50 of unauthorized debts, but "virtually no credit-card company will
charge you the $50," says Beth Givens of Privacy Rights Clearinghouse. However, debit cards can be more of a problem, she
adds. While banks will usually reimburse you for fraudulent debit charges, they may take days or even weeks to do so.
4. Prevent further damage
To limit additional damage, place a fraud alert on your credit report by contacting one of the three major credit bureaus,
which will then automatically inform the other two. Once this warning has been filed, creditors must verify your identity
and may call you directly before opening any new accounts or making changes to your existing accounts. An initial alert will
stay on your credit report for at least 90 days.
Victims of full-scale identity theft should have an extended alert put on their credit reports. An extended alert will remain
on file for seven years. It will remove your name from marketing lists for prescreened credit offers for five years or until
you cancel that feature.
Consumers are entitled to one free credit report from each of the credit bureaus when they file an initial alert. Under the
extended alert, consumers receive two free credit reports from each bureau within 12 months.
5. Take data breaches seriously
When personal information is stolen from companies-or mislaid by them-identity crimes can follow within days or sometimes
months later In Spring 2006, 24 states had laws that require companies to notify consumers if the security of their confidential,
computerized files has been accidentally or maliciously breached and if the information has been acquired by an unauthorized
person.
If you receive a lost-data notice, track your credit accounts more closely than usual during the ensuing months for any information
you don't recognize. If possible, "freeze" your credit files so that companies contacted by identity thieves who are trying
to open accounts in your name will not be able to access your records. Sixteen states have such laws, but you may have to
pay a small fee to freeze or unfreeze your account. Some states limit account freezes to ID-theft victims.