Security Center

Signs of Identity Theft

• You see withdrawals from your bank account that you can't explain.
• You don't get your bills or other mail.
• Merchants refuse your checks.
• Debt collectors call you about debts that aren't yours.
• You find unfamiliar accounts or charges on your credit report.
• Medical providers bill you for services you didn't use.
• Your health plan rejects your legitimate medical claim because the records show you've reached your benefits limit.
• A health plan won't cover you because your medical records show a condition you don't have.
• The IRS notifies you that more than one tax return were filed in your name, or that you have income from an employer you don't work for.
• You get notice that your information was compromised by a data breach at a company where you do business or have an account.

A Cyber Security Checklist

1. Have computer security programs running and regularly updated to look for the latest threats. Install anti-virus software to protect against malware (malicious software) that can steal information such as account numbers and passwords, and use a firewall to prevent unauthorized access to your computer.
2. Be smart about where and how you connect to the Internet for banking or other communications involving sensitive personal information. Public Wi-Fi networks and computers at places such as libraries or hotel business centers can be risky if they don't have up-to-date security software.
3. Get to know standard Internet safety features. For example, when banking or shopping online, look for a padlock symbol on a page (that means it is secure) and "https://" at the beginning of the Web address (signifying that the website is authentic and encrypts data during transmission).
4. Ignore unsolicited emails asking you to open an attachment or click on a link if you're not sure it's who truly sent it and why. Cybercriminals are good at creating fake emails that look legitimate, but can install malware. Your best bet is to either ignore unsolicited requests to open attachments or files or to independently verify that the supposed source actually sent the email to you by making contact using a published email address or telephone number.
5. Be suspicious if someone contacts you unexpectedly online and asks for your personal information. A safe strategy is to ignore unsolicited requests for information, no matter how legitimate they appear, especially if they ask for information such as a Social Security number, bank account numbers and passwords.
6. Use the most secure process you can when logging into financial accounts. Create "strong" passwords that are hard to guess, change them regularly, and try not to use the same passwords or PINs (personal identification numbers) for several accounts.
7. Be discreet when using social networking sites. Criminals comb those sites looking for information such as someone's place of birth, mother's maiden name or a pet's name, in case those details can help them guess or reset passwords for online accounts.
8. Be careful when using smartphones and tablets. Don't leave your mobile device unattended and use a device password or other method to control access if it's stolen or lost.
9. Parents and caregivers should include children in their cybersecurity planning. Talk with your child about being safe online, including the risks of sharing personal information with people they don't know, and make sure the devices they use to connect to the Internet have up-to-date security.
10. Small business owners should have policies and training for their employees on topics similar to those provided in this checklist for customers, plus other issues that are specific to the business. For example, consider requiring more information beyond a password to gain access to your business's network, and additional safety measures, such as requiring confirmation calls with your financial institution before certain electronic transfers are authorized.

Fraud Against the Elderly:
How You Can Spot and Prevent Financial Abuse

• Beware of callers asking for money or information. If you'd like to reduce the number of telemarketing calls you receive, consider signing up for the national Do Not Call Registry (call 1-888-382-1222 or visit www.donotcall.gov). If you are on this list, be suspicious of calls from any company or organization that you have reason to believe is not eligible to contact you under the registry's rules.
• Don't comply with requests from strangers to deposit a check into your account (perhaps as part of an Internet sale) and wire some or all of it back. "If you send the money and the check is counterfeit, you may be held responsible by your financial institution for the losses," said Michael Benardo, Chief of the FDIC's Cyber-Fraud and Financial Crimes Section.
• If you use social media, many security experts advise against posting the names of relatives and anyone's home address, full date of birth and daily activities because those can be valuable to a thief. "A scam on the rise involves con artists who look for personal information on the Internet that they can use to call or e-mail an elderly person and pretend to be a relative in distress — such as a grandchild being injured, in jail or lost in a foreign country — and needing money sent fast, without telling anyone else in the family," added Benardo. "They may also represent themselves as a lawyer or law enforcement agent needing money to help your relative."

• FDIC Consumer News
• Federal Trade Commission
• Equifax Credit Freeze
• Experian Credit Freeze
• TransUnion Credit Freeze