Further resources supporting this month’s NoticeBored module on phishing & identity theft
This page last updated on Thursday, August 28, 2008
The following phishing resources proved useful in our research for this month’s NoticeBored awareness module
on phishing and identity theft. Hover over the blobs below to see when new links were added,
and be sure to visit the pick of the bunch, the sites. Do let us know if your favorite resources are not
yet listed here. Hit <F5> to refresh the page for recent updates and keep up with relevant entries on the NoticeBored blog.
General identity theft resources
Here’s a CERT Cyber Security Tip on preventing and responding to identity theft.
Stay Safe Online points out that using a fake wifi access point is one way to disclose your login details to identity thieves.
The US Federal Trade Commission offers general consumer advice on avoiding scams and securing information part of the FTC identity theft site. If you need more detail, the FTC’s guide to identity theft is just the ticket.
CIFAS, a UK financial services industry body actively addressing identity theft through credit reporting
and inter-bank fraud reporting, maintains a useful page of case studies and provides several resources on identity theft.
The Identity Theft Resource Center is a Californian-based non-profit group publishing a wealth of materials on identity theft e.g. a fact sheet on overcoming the emotional impact of identity theft that offers support for the victims, and information on federal identity theft laws. Many of their resources are also available in Spanish.
An [anti-] identity theft kit from the Australian Government’s National Crime Prevention Programme
goes beyond the usual brief fact sheet approach. The 28 page goody-pack provides well-written guidance and includes pro forma victim reporting sheets and a checklist.
The US Treasury’s identity theft resource page offers a free DVD about identity theft including a piece
from Howard Schmidt, and a whole stack of other papers and information on this topic.
Find out how vulnerable you are to identity theft by completing this automated identity fraud safety quiz by the Better Business Bureau. Practical advice on how to reduce your risk is given at the end.
Identity theft - don’t become a victim is a UK Government Home Office website on identity theft.
A UK Treasury policy/discussion paper on curbing financial crime and terrorism proposes more data sharing
between the authorities, more funding for the Charities Commission to tackle terrorist abuse of charities and other anti-money-laundering measures.
The ultimate guide to identity theft prevention identifies the main ways in which identities are stolen: your
mail, your computer, your trash. It’s a shame they missed your friends and family but still, it’s a worthwhile guide.
A UK Government-sponsored website on identity theft by the Home Office Identity Fraud Steering
Committee, yet another well-meaning public security awareness initiative, estimated that around 100,000 people have suffered identity theft in the UK (~1 in 600 people or 0.17% of the population) with costs
amounting to £1.7bn (~0.1% of GDP). What’s more, they ‘show their workings’ on the site, giving some
confidence to the financial estimate. In contrast, the National Consumer League’s PhishingInfo.org site
claims the (US?) victimization figure is one hundred times higher at an amazing 1 in 6 people (17%).
“There are a few things that are different In Canada” says one of our correspondents, “for example the criminal code around ID theft in Canada is different. The report on identity theft by PSEPC Public Safety and Emergency Preparedness Canada (aussi en Français) covers who to contact, stats and a bit about the
criminal code in Canada. While in Canada there is no Generalized offence called ‘identity theft’, there are a
number of offences in the Criminal Code that criminalize activities integral to the criminal misuse of personal information.” Thanks for that - nice work!
SafeCanada.ca’s identity theft questions and answers has a stack of excellent resources on identity theft -
how to avoid it, how to recognize if your identity has been stolen and what to do if you are a victim.
An identity theft fact sheet from the Office of the Privacy Commissioner of Canada offers solid information
and straightforward advice. ABC’s of fraud is an online quiz, also from Canada, on various forms of fraud
including identity theft. The Canadian government’s Safe Canada identity theft page provides some questions and answers.
Police forces such as the City of London Police (“Bobbies”), the Metropolitan Police (“the Met”) and the Royal Canadian Mounted Police (“Mounties”) offer advice to the general public and businesses on identity theft. So does the UK Home Office.
Expert Law offers pragmatic advice on recognizing and responding to identity theft.
Make IT Secure is a beautifully clear and succinct Irish website on identity theft. Ideal if you don’t have time
to wade through reams of info.
Mari Frank in California has a great radio show on privacy and identity theft topics. She also has a great website with a ton of information about identity theft. Mari’s books are recommended for general
consumption, perhaps provided to personnel as an awareness action not only to help them protect their own personal data but also making them more aware of the need to protect the personal data they handle
during their own daily work activities.
The US Securities and Exchange Commission piece online brokerage accounts: what you can do to
safeguard your money and tour personal information warns those trading their stocks and shares online to
beware identity theft. It’s unusual to see the three main types of control laid out so clearly: eight tips on
how to avoid being scammed (preventive controls) offer sound advice, as do the two on identifying that you have been scammed (detective controls) and three on how to resolve such issues (corrective controls).
The Identity Theft and Assumptions Deterrent Act made identity theft a specific crime in the US since at least 1998.
The US Office of Inspector General offers sound advice to students and prospective students about identity
theft scams targeting them. A typical example is a phone call to a prospective student asking them for their
banking information ‘in order to process an application fee’. Students seldom have much money but
fraudsters can obtain credit in their names and rack up bigger bills quicker than even the most profligate party animals. The Stanford University newspaper picked up on a survey of students regarding their awareness of identity theft.
US victims of identity theft are encouraged to report the details to the Internet Crime Complaint Center, a
collaboration between the FBI and National White Collar Crime Center.
A Better Business Bureau report noted that theft of sensitive (identity-related) paperwork is more likely to lead to identity theft than online data compromises. Often, the perpetrator turns out to be someone close
to the victim - a family member or friend with access to the victim’s personal effects.
Access to a ‘free’ 135-page eBook on Identity Management paradoxically requires you to disclose personal
data during the application process. Treat this as a small exercise in privacy management if you will: can you get the book without compromising your privacy?
Identity theft incidents
According to the Philadelphia Inquirer, identity theft losses fell from $51bn in 2006-7 to ‘just’ $45 bn in
2007-8. The article recounts a victim’s story in which the identity thief quietly opened a credit card in the
victim’s name and charged her maternity bills to it, months after stealing her wallet. The article says
“although identity theft can involve the Internet and computers, more often than not it involves physical
methods such as a stolen or lost wallet, a burglarized mailbox or someone you know ripping you off.”
That’s a fair point: phishing is not the only means of identity theft and is probably not the greatest threat.
“When Kirsch and Edward K Anderton, 25, were arrested in December, photos found on a laptop in their
US$3000-a-month apartment showed the couple smooching under the Eiffel Tower, riding horseback on a beach and flaunting skimpy red swimsuits by a swanky hotel pool. They stole credit card and bank account
information from friends, co-workers and neighbours to finance lavish purchases and travel, prosecutors said.” Source: NZ Herald.
“A man posing as a drug enforcement agent cost one Missouri town more than half of its police officers
. Gerald's police chief and two other officers have been fired. A Franklin County sheriff's deputy has also
been suspended with pay. The man had been posing as a federal drug enforcement agent and working alongside Gerald police for weeks now.” Source: ksdk.com. More at STLtoday.
Related NoticeBored links collections
See also the phishing links page
NB: we do not necessarily endorse or agree with the third party websites accessible through the links. Use at your own risk. Please let us know about new or broken links.
|