What is Identity Theft?
Identity (ID) theft happens when someone steals your personal information to commit fraud or other crimes.
The identity thief may use your personal information to apply for credit cards, file taxes, or get medical services. These acts can damage your credit status, and cost you time and money to restore your good name.
Identity theft can also:
- Damage your reputation
- Impact your finances and damage your credit score
- Limit your ability to make financial decisions while fraud is being investigated
- Loss of time and energy investigating, resolving, and recovering from identity theft
How Does It Happen?
Criminals use to several techniques to obtain your personal information, like:
-
Recovering your lost or stolen wallet contents
-
Searching your trash or recycling for un-shredded documents containing your information
-
Emailing, texting, or using phone scams to steal your passwords or credentials
-
Watching you enter credentials (PIN at ATM, passwords on laptop, phone, etc.)
-
Sending phishing emails to get you to click on a suspicious link to install malicious software
-
Creating fake websites (link bank or shopping sites) to collect your personal data
-
Using “skimming devices” at cash registers, ATMs and credit card readers to record credentials
-
Gathering personal information from public profiles in social media, or real social media “quizzes” or surveys
-
Carrying out a data breach (intentionally stealing personal information from companies or organizations)
Types of Identity Theft
Financial Identity Theft
Financial Identity Theft is the use of another person’s financial assets. If you are a victim, it may hurt your chances for future loans and/or lower your credit score.
Examples include: Counterfeit credit card purchases, loan and credit card applications, filing for taxes/refunds, unemployment or benefits support, or bankruptcy, etc.
What to look for:Unfamiliar credit card purchases, odd/new entries on your credit report, debt collection calls, etc.
Medical Identity Theft
Medical Identity Theft is the use of another person’s information to receive medical services, drugs and/or insurance coverage. If you are a victim, it may prevent you from getting future insurance coverage or medical care.
Examples include:
Medical bills in your name for services you did not receive, corruption of your medical record with the record of the imposter.
What to look for:
Unusual or new insurance claims/charges or errors in your medical record.
Criminal Identity Theft
Criminal Identity Theft is the use of another individual’s identity (impersonation) when arrested or questioned by law enforcement. If you are the victim it may lead to criminal charges or a failed background check.
Examples include:
Criminal records or charges may be filed in your name (warrants, fines) rather than the actual perpetrator.
What to look for:
Unexpected court summons, suspension of driver’s license, issues with background checks.
Child Identity Theft
Child Identity Theft is the misuse of personal information associated with a minor (anyone under the age of 18). Children are vulnerable to ID theft as they may not notice it until they are adults. Victims may experience a credit history. Visit the FTC's page on Child ID Theftfor more information.
Examples Include:
Illegal use of the minor’s name and social security number obtain credit or a loan, receive an identification card or Driver’s License, open a financial account, etc.,
What to look for:
Unrecognized entries on a minor’s credit report or bill received in the minor’s name.
Social Identity Theft
Social Identify Theft is the use of an individual’s name and/or photos to create a fake social media account. If you are a victim your reputation or professional career may be damaged.
Examples include:
False statements, photos, or opinions shared under your name or misuse of platform communication (DMs) to phish or exploit others in your contacts list.
What to look for:
Social media accounts not created by you, but with your name/photos that look nefarious, notifications from friends/acquaintances of unexpected social media contact in your name.
Phone Number Port-Out Fraud:
Text messages are often used by banks, businesses and payment services to verify your identity when you request updates to your account. Scammers know that by hijacking your mobile number they can assume your identity, intercept security protocols sent to your phone, and gain access to your financial and social media accounts. Note: If you have a university-owned phone it is administered by Telecom directly with the provider.
What to look for:
Typically, loss of service on your device – your phone going dark or only allowing 911 calls – is the first sign this has happened. Or unauthorized access to your accounts.
Ways to Protect Yourself
-
Limit sharing of personal information (birthdate, passwords, financial account numbers, Social Security Number, driver license number, etc.,) in person, over the phone, on forms, or on social media. Do not share your Social Security Number or other unique identifiers unless mandatory.
-
Keep your Social Security Number and other unique identifiers (like your passport number or Driver’s License number) safe.
-
Shred receipts, credit offers, account statements, and expired credit cards. This can prevent “dumpster divers” from getting your personal information.
-
Avoid use of public wi-fi network where possible, or use a virtual private network (VPN) if you use public wi-fi.
-
Create complex passwords, use a password manager (UC Berkeley offers free LastPass Premium), secure passwords in a safe place.
- Create a PIN number for your telephone number to avoid Port Out Scams: FTC Port-Out Fraud Targets Your Private Accounts
- Monitor credit reports annually. See the Federal Trade Commission’s “Free Credit Reports” website for information on obtaining a free credit report from the nationwide credit reporting companies (Equifax, Experian, and TransUnion) once every 12 months.
-
Place a credit or security freeze on your credit. Freeze your credit files with Equifax, Experian, Innovis, TransUnion, and the National Consumer Telecommunications and Utilities Exchange for free. Credit freezes prevent someone from applying for and getting approved for a credit account or utility services in your name.
SSN Exposure Notice from Experian (or other credit monitoring service)
Receiving a message from a credit monitoring service about your Social Security number being found on the dark web can be unsettling. Continue to check your notifications and follow their instructions (for Experian you can call their customer care line 877-890-9332 for further assistance). For additional protection, we strongly encourage you to take these next steps:
-
Create a mySocial Security account with the Social Security Administration You are doing this to claim your Social Security number and ward off anyone else from creating an account in your name. Review your earnings on your Social Security Statement to ensure your information is correct. Note: if you have a freeze implemented on your credit, you need to lift it before creating a new mySocial Security account.
-
Get your free credit reports from annualcreditreport.com Check for any accounts or charges you don’t recognize. Continue to check your reports annually.
-
Check your bank and credit card accounts daily. Make sure you recognize all the transactions listed. Pay particular attention to small transactions or sign up for transaction monitoring alerts from your financial services institutions which can alert you to any suspicious activity in your bank, credit union or credit card accounts.
-
Consider placing a free credit freeze A credit freeze makes it harder for someone to open a new account in your name.
-
If you place a freeze, be ready to take a few extra steps the next time you apply for a new credit card or cell phone – or any service that requires a credit check.
-
If you decide not to place a credit freeze, at least consider placing a fraud alert.
-
Be aware that tax identity theft happens when someone uses your Social Security number to get a tax refund or a job. Report the theft of the Social Security number to the IRS or you can call 1-800-908-4490.
-
Don’t believe anyone who calls and says you’ll be arrested unless you pay for taxes or debt — even if they have part or all of your Social Security number, or they say they’re from the IRS.
In the meantime, if you receive any suspicious emails or telephone calls please report them to campus IT staff at phishing@berkeley.edu and do not click on any links or reply to the sender.
Reporting Identity Theft
If you believe you are a victim of identity theft, take the following actions as soon as possible:
- Promptly close unauthorized accounts: If you believe an account has been opened without your permission, contact the company immediately and inform them that you believe someone has fraudulently opened an account. Ask the company to close the account and confirm the closure with you once complete.
-
Contact the above-mentioned credit reporting agencies and request a current copy of your credit report and place a fraud alert. The agency you contact must notify the others and all will place an alert on their versions of your report. You may request a new fraud alert when a previous alert expires. For victims of identity theft, an extended fraud alert will protect your credit for a longer period of time and a fraud alert allows creditors to get a copy of your credit report as long as they take steps to verify your identity.
-
Request a security credit freeze with each agency. A credit freeze locks down your credit.
-
Contact banks, organizations, or companies where you believe identity theft has occurred and inform them of the fraudulent activity.
-
Report your suspected identity theft to the Federal Trade Commission (FTC) at identitytheft.gov
-
Report expected fraud to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov
-
Continue to monitor your credit reports, financial statements, and billing statements for additional fraudulent activity.
-
If you suspect you have been a victim of a porting-out scam, take immediate action:
- Contact your phone company
- Contact your bank and other financial institutions
- File a police report
- Place a fraud alert on your credit reports and get copies of your report
Recovering From and Repairing Identity Theft
-
Work to with banks, organization, or companies to close fraudulent accounts established in your name and remove fraudulent charges from your existing accounts
-
Work with credit monitoring agencies to remove fraudulent accounts from credit reports
-
Visit the Federal Trade Commission’s “Recovery Steps to Take” for a more extensive and targeted list of action steps
Helpful Resources:
- Identity Theft Recovery Steps: https://www.identitytheft.gov/databreach
- Contact the Attorney General’s office for the state you live in for more resources. For California, visit: https://oag.ca.gov/idtheft
- A recording of our Campus Town Hall on Identity Theft and Protection is available along with the presentation slide deck.
- Social Security Administration's pdf on Identity Theft and Your Social Security Number