Be wary: ID Theft is On the Rise Again

Unfortunately, ID theft appears to be on the rise again. According to Javelin, a leading research firm, in 2011, identity fraud increased by 13 percent. More than 11.6 million adults became victims of identity fraud in the United States, while the dollar amount stolen held steady. Their latest findings in a nutshell:

• Identity fraud incidents increased, amount stolen remained steady—The number of identity fraud incidents increased by 13 percent over the past year, but the dollar amount stolen remained steady. Additionally, consumer out-of-pocket costs have decreased by 44 percent since 2004, likely due to the improved prevention and detection tools that have come available as well as fraud alerts leading to reduced detection time.
• Social behaviors put consumers at risk—For the first time, Javelin examined social media and mobile phone behaviors and identified certain social and mobile behaviors that had higher incidence rates of fraud than all consumers. Despite warnings that social networks are a great resource for fraudsters, consumers are still sharing a significant amount of personal information frequently used to authenticate a consumer’s identity. Surprisingly those with public profiles (those visible to everyone) were more likely to expose this personal information. Specifically, 68 percent of people with public social media profiles shared their birthday information (with 45 percent sharing month, date and year); 63 percent shared their high school name; 18 percent shared their phone number; and 12 percent shared their pet’s name—¬all are prime examples of personal information a company would use to verify your identity.
• Smartphone owners experience greater incidence of fraud—The survey found seven percent of smartphone owners were victims of identity fraud. This is a 1/3rd higher incidence rate compared to the general public. Part of this increase may be attributable to consumer behavior: 32 percent of smartphone owners do not update to a new operating system when it becomes available; 62 percent do not use a password on their home screen—enabling anyone to access their information if the phone is lost; and 32 percent save login information on their device
• Data Breaches increasing and more damaging — One likely contributing factor to the fraud increase was the 67 percent increase in the number of Americans impacted by data breaches compared to 2010. Javelin Strategy & Research found victims of data breaches are 9.5 times more likely to be a victim of identity fraud than consumers who did not receive such a data breach letter.

We share this information to encourage all to be wary of vulnerable areas. For more information and resources, visit www.hvshred.com

ID Theft Still Top Complaint at FTC

The Federal Trade Commission recently released its list of the top consumer complaints received by the agency in 2011. For the 12th year in a row, identity theft complaints topped the list. Of more than 1.8 million complaints filed in 2011, 279,156 or 15 percent, were identity theft complaints. Nearly 25 percent of the identity theft complaints related to tax- or wage-related fraud.

The report breaks out complaint data on a state-by-state basis and also contains data about the 50 metropolitan areas reporting the highest per capita incidence of fraud and other complaints. In addition, the 50 metropolitan areas reporting the highest incidence of identity theft are noted.

The next nine complaint categories are Debt Collection; prizes, sweepstakes, and lotteries; shop at home and catalogue sales; bank and lenders; internet services; auto related complaints; imposter scams; telephone and mobile services; and advance-fee loans and credit protection/repair.

The FTC enters complaints into Consumer Sentinel, a secure, online database available to more than 2,000 civil and criminal law enforcement agencies in the United States and abroad. Enforcers search the database to research cases, track targets, and identify victims.

“The FTC’s Consumer Sentinel Network is an incredibly powerful tool for law enforcers who are working to protect consumers and go after the bad guys,” said David Vladeck, Director of the agency’s Bureau of Consumer Protection. “It’s used by agencies across the country and around the world to enhance their enforcement efforts.”

Other federal and state law enforcement agencies contribute complaints to the Consumer Sentinel Network, including the U. S. Postal Inspection Service, the Department of Justice’s Internet Crime Complaint Center, and the Offices of the Idaho, Michigan, Mississippi, North Carolina, Ohio, Oregon, Tennessee, and Washington Attorneys General. Private-sector organizations that contribute complaints include all U.S. and Canadian members of the Better Business Bureau, Western Union and Moneygram, and the Lawyers Committee for Civil Rights Under Law.

According to Richard Cordray, Director of the newly created Consumer Financial Protection Bureau, “The Consumer Sentinel Network is a treasure trove of information for law enforcers.”

The Federal Trade Commission works for consumers to prevent fraudulent, deceptive, and unfair business practices and to provide information to help spot, stop, and avoid them. To file a complaint in English or Spanish, visit the FTC’s online Complaint Assistant or call 1-877-FTC-HELP (1-877-382-4357). The FTC enters complaints into Consumer Sentinel, a secure, online database available to more than 2,000 civil and criminal law enforcement agencies in the U.S. and abroad.

Identity Theft is Still Largely Low Tech

Many people still feel protected from identity theft as long as they stay off the internet. This week’s post is a reminder that much of identity theft is still low tech. It’s dumpster diving and, in this case, capitalizing on low security in a health provider’s facility.

The message is we need to be vigilant of our paperwork at all times. We need to do things like keep and eye on the mail box, shred personally identifying information, and keep our fiduciaries on the ball as well. The latter is harder than the former since it involves a perhaps uncomfortable interaction with those we trust–still, we need to make sure our doctors, accountants, financial planners and everyone else we entrust with our personal information are also taking steps to protect us.

Here’s is the cautionary tale:
Chelsea Catherine Stewart of Birmingham, Alabama has been sentenced for 39 months for wrongfully obtaining individually identifiable health information. She also plead guilty to attempted bank fraud and aggravated identity theft.

This may seem like another story about a health care worker stealing patient information. But this one is a bit different. Chelsea was visiting a friend at Trinity Medical Center. When there was no one monitoring the patient files, she helped herself and copied the information of patients down.

This is what we call low tech hacking. It is the basic steps like locking files and shredding that must be taken to protect information.

For more information on how HV Shred can help please visit www.hvshred.com

Caller ID Spoofing-Be wary

At HV Shred, we use our blog to educate the community about the latest scams.  Caller ID Spoofing is far from being a “funny ha ha” spoof.  It could be a serious attack on your personal information.  How does it work?  A Caller ID Spoofer logs on to one of several websites that enable them to create an account by paying a small fee–the account allows them to enter a name and a number they want to pretend to be calling from–a bank–a credit union–some entity we are inclined to trust.

When we see the trusted name on our caller ID, we pick up the phone feeling as if we know with whom we are speaking–lulled into a false sense of confidence, we share personally identifying information. 

What to do?  Never give personal information over the phone on a call you don’t initiate.  If you are contacted by a financial institution or similar, hang up and call the number you know directly.  Better safe than sorry.

Be sure also to let you financial institution know if someone is spoofing them–they want to weed these hacks out even more than you–they are costing us all a lot of money and frustration.

For more on identity theft protection, please visit www.hvshred.com

Valentine’s Scams Threaten ID Theft

In this season of Valentine’s and budding romances, we just want to help make everyone aware of a scam found to be more and more prevalent by The Internet Crime Complaint Center (a private/public partnership established to deter/detect/and defend again identity theft.  The IC3 has warned the public to be wary of romance scams in which scammers target individuals who search for companionship or romance online. Scammers search chat rooms, dating sites, and social networking sites looking for victims. The principal group of victims is over 40 years old and divorced, widowed, elderly, or disabled, but all demographics are at risk.

Scammers use poetry, flowers, and other gifts to reel in victims, the entire time declaring their “undying love.” These criminals also use stories of severe life circumstances, tragedies, deaths in the family, injuries to themselves, or other hardships to keep their victims concerned and involved in their schemes. Scammers also ask victims to send money to help overcome a financial situation they claim to be experiencing. These are all lies intended to take money from unsuspecting victims.

Victims who have agreed to meet in person with an online love interest have been reported missing, or injured, or in one instance, deceased. IC3 complainants most often report the countries of Nigeria, Ghana, England, and Canada as the location of the scammers. If you are planning to meet someone in person that you have met online, the IC3 recommends using caution, especially if you plan to travel to a foreign country, and, at the very least:

  • Do not travel alone.
  • Read all travel advisories associated with the countries you will visit. Travel advisories are available at http://travel.state.gov/.
  • Contact the United States Embassy in the country you plan to visit.

Even though it seems to be contrary to the thought of starting a new romance, do not be afraid to check a new acquaintance’s story online. Remember, like most fraudulent schemes, scammers use whatever personal information you provide to quickly paint themselves as your perfect match. If your new friend’s story is repeated through numerous complaints and articles on the Internet, it is time to apply common sense over your feelings. To obtain more information on romance scams and other types of online schemes, visit www.LooksTooGoodToBeTrue.com. Anyone who believes they have been a victim of this type of scam should promptly report it to the IC3’s website at www.IC3.gov.

HV Shred, Inc is proud to be a resource, so please also check out www.hvshred.com for more information.

Keep Private Information Private

Every week, our goal is to use this space to help our community deter, detect, and defend again ID Theft.  Here a 3 more tips to keep private information private!

(1) Give Personal Information Over Encrypted Websites Only

If you’re shopping or banking online, stick to sites that use encryption to protect your information as it travels from your computer to their server.  To determine if a website is encrypted, look for https at the beginning of the web address (the “s” is for secure). 

Some websites use encryption only on the sign-in page, but if any part of your session isn’t encrypted, the entire account could be vulnerable. Look for https on every page of the site you’re on, not just where you sign in.

(2) Protect Your Passwords

Here are a few principles for creating strong passwords and keeping them safe:

  • The longer the password, the tougher it is to crack.  Use at least 10 characters; 12 is ideal for most home users.
  • Mix letters, numbers, and special characters.  Try to be unpredictable – don’t use your name, birthdate, or common words. 
  • Don’t use the same password for many accounts.  If it’s stolen from you – or from one of the companies with which you do business – it can be used to take over all your accounts.
  • Don’t share passwords on the phone, in texts or by email.  Legitimate companies will not send you messages asking for your password.  If you get such a message, it’s probably a scam.
  • Keep your passwords in a secure place, out of plain sight.

(3) Back up Your Files

No system is completely secure.  Copy important files onto a removable disc or an external hard drive, and store it in a safe place.  If your computer is compromised, you’ll still have access to your files.

If you have questions, please don’t hesitate to contact us (845) 705-7279.  For more on id theft protection, visit www.hvshred.com

Best practices to protect your identity

Keeping to our education theme, here are some more tips to protecting your identity-particularly as you operate on-line.
(1) Use Security Software That Updates Automatically The bad guys constantly develop new ways to attack your computer, so your security software must be up-to-date to protect against the latest threats. Most security software can update automatically; set yours to do so. You can find free security software from well-known companies. Also, set your operating system and web browser to update automatically.

Don’t buy security software in response to unexpected pop-up messages or emails, especially messages that claim to have scanned your computer and found malware. Scammers send messages like these to try to get you to buy worthless software, or worse, to “break and enter” your computer.

(2) Treat Your Personal Information Like Cash Don’t hand it out to just anyone. Your Social Security number, credit card numbers, and bank and utility account numbers can be used to steal your money or open new accounts in your name. So every time you are asked for your personal information – whether in a web form, an email, a text, or a phone message – think about whether you can really trust the request. In an effort to steal your information, scammers will do everything they can to appear trustworthy.
(3) Check Out Companies to Find out Who You’re Really Dealing With When you’re online, a little research can save you a lot of money. If you see an ad or an offer that looks good to you, take a moment to check out the company behind it. Type the company or product name into your favorite search engine with terms like “review,” “complaint,” or “scam.” If you find bad reviews, you’ll have to decide if the offer is worth the risk. If you can’t find contact information for the company, take your business elsewhere.

Don’t assume that an ad you see on a reputable site is trustworthy.

For more tips and information about securely destroying your confidential data, please visit www.hvshred.com

More guidance on safe practices from the IRS

Again, we can’t emphasize enough how important it is to stay vigilant during tax season. Thieves who steal taxpayers’ personal tax-related information can use it to steal identities as well. To help prevent these crimes, the IRS offers the following suggestions.

1. The IRS does not initiate contact with taxpayers by email to request personal or financial information or to announce an audit or refund. If you get a notice like this, it’s a fraud.
2. If you receive a scam e-mail claiming to be from the IRS, forward it to the IRS atphishing@irs.gov. IRS impersonation schemes flourish during tax season and can take the form of e-mail, phone, websites—even tweets. If you receive a paper letter or notice via mail claiming to be the IRS but you suspect it is a scam, contact the IRS.
3. Be aware of the ways identity thieves can get your personal information, such as by stealing your wallet or purse, posing as someone who needs information about you through a phone call or e-mail, looking through your trash, accessing information you provide to an unsecured Internet site.
4. If you discover a website that claims to be the IRS but does not begin with “www.irs.gov,” forward that link to the IRS at phishing@irs.gov.
5. If your Social Security number is stolen, another individual may use it to get a job. That person’s employer may report income earned by them to the IRS using your Social Security number, thus making it appear that you did not report all of your income. When this occurs, contact the IRS to show that the income is not yours. Your record will be updated to reflect only your information. You will also be asked to submit substantiating documentation to authenticate yourself, thus minimizing the chance this will occur again.
6. Show your Social Security card to your employer when you start a job or to your financial institution for tax reporting purposes, but do not routinely carry your card or other documents that display your Social Security number.
7. While preparing your tax return for electronic filing, make sure to use a strong password to protect the data file. Once your return has been e-filed, burn the file to a CD or flash drive and remove the personal information from your hard drive. Store the CD or flash drive in a lock box or safe. If working with an accountant, you should ask them what measures they take to protect your information.
9. If you have information about the identity thief that impacted your personal information negatively, file an online complaint with the Internet Crime Complaint Center (IC3). The IC3 gives victims of cyber crime a convenient and easy-to-use reporting mechanism that alerts authorities of suspected criminal or civil violations. IC3 sends every complaint to law enforcement or regulatory agencies that have jurisdiction over the matter.

For more information, view the IRS publications Protect Yourself from Identity Theft and Taxpayer Guide to Identity Theft all available at www.irs.gov

There is also plenty of information on best practices for identity theft prevention at hvshred.com

Tax Time is ID Theft Season

We are all vulnerable to ID theft 24 hours a day, 7 days a week. However, there are times of the year when we need to be more vigilant about our surroundings. Tax Time is one of them.

This is the time of year that all of your personal information is traveling through the mail. What makes it more tempting for identity thieves is that it is a target rich environment. Steal the mail out of all the mailboxes on a street this time of year and you are sure to get something worthwhile.

Then there is the problem of false tax returns in your name. The IRS is orking to set up systems for identifying fraud that are getting much more accurate at detecting fraud. They also have some tips to help protect yourself.

Here are some we suggest:
•The IRS doesn’t send emails. Don’t respond to them.
•Get your mail in a locked mailbox.
•Send your mail out in a locked mailbox.
•Never answer questions over the phone unless you called them.

For more information on best practices in ID Theft Protection, please visit www.hvshred.com

Why use a Professional Shredding Service?

As you review ways to streamline operations, outsourcing to a professional shredding service often makes a lot of sense for businesses large and small.

Here are some reasons why using a Professional Shredding Service makes sense, and why to choose HV Shred, Inc. in particular:

· First and foremost, if your office has a paper box or more of “to be shredded” material each week, outsourcing shredding saves time, money, and aggravation
· HV Shred is locally owned: we understand the community because we’ve lived here our entire lives.
· HV Shred is fast: our On-Site Shredding Equipment is among the fastest in the area.
· HV Shred is up front: No fuel fees or site fees; conservative estimates so clients stay within budget (no low-balling just to get in the door); going on 5 years in business we still have not raised our rates on current clients
· HV Shred is personalized: our service is personalized, because we take our service personally. We’ll go up or down stairs, shred folders and redwelds, minimal if any sorting required.
· HV is active in the Hudson Valley Community: We are members of the Mid Hudson Chapter of the NYSSCPA, Poughkeepsie-Arlington Rotary, Regional Chamber of Commerce, Council of Industry, and BNI.

For more details, visit www.hvshred.com