free page hit counter
Click the banner for the site map  of NoticeBored.com, the information security awareness service
Identity theft resources

Further resources supporting this month’s NoticeBored module on phishing & identity theft

This page last updated on Thursday, August 28, 2008

The following phishing resources proved useful in our research for this month’s NoticeBored awareness module on phishing and identity theft. Hover over the New link blobs below to see when new links were added, and be sure to visit the pick of the bunch, the Recommended reading sites. Do let us know if your favorite resources are not yet listed here. Hit <F5> to refresh the page for recent updates and keep up with relevant entries on the NoticeBored blog.

 

Identity theft quote by Jay London

General identity theft resources

Added for June 1 Here’s a CERT Cyber Security Tip on preventing and responding to identity theft.

Added for June 1 Stay Safe Online points out that using a fake wifi access point is one way to disclose your login details to identity thieves.

Recommended resource The US Federal Trade Commission offers general consumer advice on avoiding scams and securing information part of the FTC identity theft site. If you need more detail, the FTC’s guide to identity theft is just the ticket.

Recommended resource CIFAS, a UK financial services industry body actively addressing identity theft through credit reporting and inter-bank fraud reporting, maintains a useful page of case studies and provides several resources on identity theft.

Recommended resource The Identity Theft Resource Center is a Californian-based non-profit group publishing a wealth of materials on identity theft e.g. a fact sheet on overcoming the emotional impact of identity theft that offers support for the victims, and information on federal identity theft laws. Many of their resources are also available in Spanish.

Recommended resource An [anti-] identity theft kit from the Australian Government’s National Crime Prevention Programme goes beyond the usual brief fact sheet approach. The 28 page goody-pack provides well-written guidance and includes pro forma victim reporting sheets and a checklist.

Recommended resource The US Treasury’s identity theft resource page offers a free DVD about identity theft including a piece from Howard Schmidt, and a whole stack of other papers and information on this topic.

Recommended resource Find out how vulnerable you are to identity theft by completing this automated identity fraud safety quiz by the Better Business Bureau. Practical advice on how to reduce your risk is given at the end.

Identity theft - don’t become a victim is a UK Government Home Office website on identity theft.

A UK Treasury policy/discussion paper on curbing financial crime and terrorism proposes more data sharing between the authorities, more funding for the Charities Commission to tackle terrorist abuse of charities and other anti-money-laundering measures.

The ultimate guide to identity theft prevention identifies the main ways in which identities are stolen: your mail, your computer, your trash. It’s a shame they missed your friends and family but still, it’s a worthwhile guide.

A UK Government-sponsored website on identity theft by the Home Office Identity Fraud Steering Committee, yet another well-meaning public security awareness initiative, estimated that around 100,000 people have suffered identity theft in the UK (~1 in 600 people or 0.17% of the population) with costs amounting to £1.7bn (~0.1% of GDP). What’s more, they ‘show their workings’ on the site, giving some confidence to the financial estimate. In contrast, the National Consumer League’s PhishingInfo.org site claims the (US?) victimization figure is one hundred times higher at an amazing 1 in 6 people (17%). 

“There are a few things that are different In Canada” says one of our correspondents, “for example the criminal code around ID theft in Canada is different. The report on identity theft by PSEPC Public Safety and Emergency Preparedness Canada (aussi en Français) covers who to contact, stats and a bit about the criminal code in Canada. While in Canada there is no Generalized offence called ‘identity theft’, there are a number of offences in the Criminal Code that criminalize activities integral to the criminal misuse of personal information.” Thanks for that - nice work!

SafeCanada.ca’s identity theft questions and answers has a stack of excellent resources on identity theft - how to avoid it, how to recognize if your identity has been stolen and what to do if you are a victim.

An identity theft fact sheet from the Office of the Privacy Commissioner of Canada offers solid information and straightforward advice. ABC’s of fraud is an online quiz, also from Canada, on various forms of fraud including identity theft. The Canadian government’s Safe Canada identity theft page provides some questions and answers.

Police forces such as the City of London Police (“Bobbies”), the Metropolitan Police (“the Met”) and the Royal Canadian Mounted Police (“Mounties”) offer advice to the general public and businesses on identity theft. So does the UK Home Office.

Expert Law offers pragmatic advice on recognizing and responding to identity theft.

Make IT Secure is a beautifully clear and succinct Irish website on identity theft. Ideal if you don’t have time to wade through reams of info.

Mari Frank in California has a great radio show on privacy and identity theft topics. She also has a great website with a ton of information about identity theft. Mari’s books are recommended for general consumption, perhaps provided to personnel as an awareness action not only to help them protect their own personal data but also making them more aware of the need to protect the personal data they handle during their own daily work activities.

The US Securities and Exchange Commission piece online brokerage accounts: what you can do to safeguard your money and tour personal information warns those trading their stocks and shares online to beware identity theft. It’s unusual to see the three main types of control laid out so clearly: eight tips on how to avoid being scammed (preventive controls) offer sound advice, as do the two on identifying that you have been scammed (detective controls) and three on how to resolve such issues (corrective controls).

The Identity Theft and Assumptions Deterrent Act made identity theft a specific crime in the US since at least 1998.

The US Office of Inspector General offers sound advice to students and prospective students about identity theft scams targeting them. A typical example is a phone call to a prospective student asking them for their banking information ‘in order to process an application fee’. Students seldom have much money but fraudsters can obtain credit in their names and rack up bigger bills quicker than even the most profligate party animals. The Stanford University newspaper picked up on a survey of students regarding their awareness of identity theft.

US victims of identity theft are encouraged to report the details to the Internet Crime Complaint Center, a collaboration between the FBI and National White Collar Crime Center.

A Better Business Bureau report noted that theft of sensitive (identity-related) paperwork is more likely to lead to identity theft than online data compromises. Often, the perpetrator turns out to be someone close to the victim - a family member or friend with access to the victim’s personal effects.

Access to a ‘free’ 135-page eBook on Identity Management paradoxically requires you to disclose personal data during the application process. Treat this as a small exercise in privacy management if you will: can you get the book without compromising your privacy?

Identity theft incidents

Added for June's module According to the Philadelphia Inquirer, identity theft losses fell from $51bn in 2006-7 to ‘just’ $45 bn in 2007-8. The article recounts a victim’s story in which the identity thief quietly opened a credit card in the victim’s name and charged her maternity bills to it, months after stealing her wallet. The article says “although identity theft can involve the Internet and computers, more often than not it involves physical methods such as a stolen or lost wallet, a burglarized mailbox or someone you know ripping you off.”  That’s a fair point: phishing is not the only means of identity theft and is probably not the greatest threat.

Added for June's module “When Kirsch and Edward K Anderton, 25, were arrested in December, photos found on a laptop in their US$3000-a-month apartment showed the couple smooching under the Eiffel Tower, riding horseback on a beach and flaunting skimpy red swimsuits by a swanky hotel pool. They stole credit card and bank account information from friends, co-workers and neighbours to finance lavish purchases and travel, prosecutors said.” Source: NZ Herald.

Added for June's module “A man posing as a drug enforcement agent cost one Missouri town more than half of its police officers . Gerald's police chief and two other officers have been fired. A Franklin County sheriff's deputy has also been suspended with pay. The man had been posing as a federal drug enforcement agent and working alongside Gerald police for weeks now.” Source: ksdk.com. More at STLtoday.


Related NoticeBored links collections

See also the phishing links page


NB: we do not necessarily endorse or agree with the third party websites accessible through the links. Use at your own risk. Please let us know about new or broken links.


NB homeLinks collection > Identity theft >

Copyright © 2008 IsecT Ltd.