Computer Help

General discussion

12/03/04 Protect yourself from identity theft and fraud

by Lee Koo (ADMIN) CNET staff/forum admin / November 29, 2004 7:41 AM PST

Thank you Gary and everyone who participated in this past week's Q&A!

Gloria, I hope this week's members' advice and recommendations give you some direction to your concern about online shopping and identity theft/fraud.

Members, if you have more questions, or additional advice on this topic, by all means feel free share them with us in this discussion thread below.

Thanks again everyone!
-Lee Koo
CNET Community


Question:

I am not comfortable submitting personal information online
when making a purchase. I know more and more people who are
victims of identity theft, and with the shopping season fast
approaching, I want to protect myself. Is there anything I
can do prevent identity theft?

Submitted by: Gloria S. of Vineland, New Jersey


Answer:

Hi, Gloria,

First of all, the term identity theft is often confused with identity fraud, and while you should protect yourself against both activities, I think your concern about using the Internet to make online purchases is mostly regarding identity fraud; that is, you are concerned that someone else will use your credit card or login information to make purchases on your credit card or to gain access to your financial accounts. This article titled Identity Theft and Fraud Debates Slow Financial Service Industry Response at was recently brought to my attention by www.merchant911.org, and it explains the differences between the two types of fraud.

There is a lot of advice on the Internet on how to protect your personal information. Here are three articles from reputable sources.

- U.S. Federal Trade Commission
- The U.S. Department of Justice
- Consumer Reports

They all pretty much say the same thing, that there are many ways thieves can steal your personal data; from your mailbox,from your employer?s records, from fraudulently obtained credit reports, or even by dumpster diving. While your computer can be a goldmine of personal information, there are many ways for a competent thief to steal that information, only one of which is to tap into your on-line transactions. For example, a hacker can steal personal information from your computer using a virus that lets him take control over your computer, or to send your personal information to him while you use your computer. This is why you should keep your antivirus software up to date and install a personal firewall like ZoneAlarm (www.zonealarm.com) to counteract these viruses. A new technique that puts you at risk when you use a public computer is a keystroke logger that can monitor everything that you type into the computer, including your login and passwords. Every now and then the hacker will replace the logger, an unobtrusive device between the keyboard and the computer, and use the information to log into your account. Yet another way you are at risk is if you don?t destroy (not just erase) information on your old computer before you dispose of it, which lets a hacker browse your private information at their leisure. Likewise, if someone steals your laptop the information that is stolen may be worth way more that the laptop itself. I am not saying you shouldn?t be diligent when shopping on line ? you should take the proper precautions. I just want to put into perspective that on-line shopping is just one way that you can become a victim of identity fraud.

It is easy to understand how a thief, for example a waiter in a restaurant, can copy your credit card by "skimming" the information on the card with a handheld magnetic reader that is easily obtained on the Internet. This is why more and more people are making a habit of walking to the pay station so they can observe their credit card being handled. It is also easy to understand how a thief can glean your PIN number by watching you use a bank machine through binoculars, or more simply, by looking over your shoulder. This is why you should cover your hand when entering any pin numbers. However, the general population has less understanding about how transactions flow from one computer to another, or the technical details about how financial information stored on computers can be protected. This, combined with the many sensational stories about the many computer-related viruses and other attacks, has given the risk of identity fraud resulting from on-line purchases a higher profile than it deserves.

That being said, here are some tips for protecting yourself when making on-line purchases:

? If you store financial information on your computer, use a program to encrypt and protect the information. A good program will force you to use a password to access your information on a recurring basis, say at least once a day.

? I don?t recommend using conveniences like Microsoft Wallet or Google?s AutoFill to enter credit card information for you. Because of their prevalence they represent an attractive target for hackers.

? Make sure that when entering sensitive information like your credit card that the information will be encrypted as you send it over the Internet. Don?t rely on assurances by the store that the transaction is secure. Your only guarantee is the little lock icon on the bottom of your browser that indicates a secure link. However, be aware that this is still no guarantee that the complete round trip for your transaction will be encrypted ? it only guarantees that the first step between you and the store will be encrypted. You are still relying on the integrity and technical skill of the store owner that they have secured the next step of the transaction between their store and the credit card processor, and that the credit card processor has secured the transaction between them and the credit card issuer.

? If you double click on the lock icon, it may be able to help you identify who the real website owner is by looking at the security certificate that is displayed. However, be aware that for about $100 anyone can purchase a security certificate with any information they want. You can only rely on a certificate if it is issued from a trusted source that is prepared to vouch that the owner of the certificate has proven their identity, and will back this up with a bond.

? Don?t put sensitive information into e-mails or into fields at a store other than the credit card field. E-mails are inherently insecure, and even a reputable store owner will not be trying to protect information entered into fields not intended for sensitive information.

? Don?t provide more information than seems reasonable for the type of transaction you are performing. For example, be wary if you are asked to supply your Social Security Number or any passwords or PIN numbers that are not related to the store you are dealing with.

? Be wary of sites that store your credit card information for future visits. The risk that this stored information can be stolen is much greater than the risk that a thief can decrypt your transaction. Only store your credit card information with companies that you trust have the resources to protect your information properly.

? More important than the technological safeguards is the integrity of the company you are dealing with. All the technology in the world won?t protect you from a corrupt employee who steals your information from their employer?s database. Nor will it protect you from an otherwise honest company that doesn?t have the technical expertise to protect your information, say from an unscrupulous employee at the company that hosts their on-line store. If you are dealing with a less known company, search the Internet with Google to see if anyone has posted a complaint. On the other hand, don?t overreact to isolated complaints ? there are always some customers who will complain even though you have bent over backwards to satisfy them. Also look for dated postings to help you identify if the company has been around for a while ? a good sign since unscrupulous companies do get shut down when enough people complain to the authorities.

? A technique known as phishing involves the creation of fake stores or imitations of legitimate companies to fool you into entering your financial information into a thief?s database. Be careful about using links in unsolicited e-mails to start your shopping or banking session, or you may be unwittingly supplying your financial information to a fraudster. Ensure your browser is up to date, since there was a bug that permitted a phisher to create a URL in an e-mail that would open a page on their illegitimate site, while displaying the URL of a legitimate site in the Address field. Some tip-offs that you are not on the legitimate site are that the little lock indicating a secure link is missing, links on the displayed page (other than the login link) don?t work, or pictures are missing ? however the phishers are getting better and better at duplicating the real thing. If you don?t know how to verify the validity of the web links in your e-mail (a good subject for another question), your best precaution is to open the website by typing he URL into the Address field of your browser, or by using a shortcut in your favorites.

Yours truly,
Gary B.
http://www.lblossom.com/

Submitted by: Gary B.

Post a reply
Discussion is locked
You are posting a reply to: 12/03/04 Protect yourself from identity theft and fraud
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: 12/03/04 Protect yourself from identity theft and fraud
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Honorable mentions
by Lee Koo (ADMIN) CNET staff/forum admin / November 29, 2004 7:41 AM PST

****** HONORABLE MENTIONS**********

Answer:

There is no one set answer regarding the issues of protecting one's personal information when making either an on-line or off-line purchase, but there are some basic important measures you can take to minimize the risks.

1. Only make on-line purchases at sites that use encryption. You'll see a lock icon in the lower right corner of the browser window if your're using IE Explorer.

2. Never transmit personal or credit card info via an unsecured on-line order form or via email.

3. Don't choose to have your credit card info stored on a merchant's site.
While all merchants who provide this convenience take great precautions, they cannot protect themselves completely. I trust myself more.

4. Use credit cards like that provided via Visa or Mastercard in conjunction with an on-line validated purchase procedure in which you log in via another window provided by Visa or MC to validate the purchase.

5. If possible, use complex passwords for logging into a site containig characters like ; # zz % or $. Store these passwords in a password protected document that only you can open.

6. Don't provide personal phone numbers, business addresses, personal email info, or anything else that is not absolutely required at an on-line purchase site.

7. Only shop at sites, if at all possible, that use security services such as Versign and the like.

8. NEVER provide your SS # or bank account numbers!!

9. Setup and use a free Internet email account for use when making purchases. You cannot possibly read all the small print in a site's terms and conditions and you will likely miss something important. Using the free email account protects your personal email account.

On-line purchasing is probably safer than making a purchase via ones telphone and it is certainly as safe when compared to making a purchase at a physical store. Many, many retail businesses transmit your credit card info for approval via the same type of connection you have, that is the Internet; albeit some via more secure lines than others.

Submitted by: Ronlad N.

**********************************************************************************

Answer:
While shopping online is a great convenience, it does not come without risk. Here are some useful tips to minimize the risk of identity theft when making purchases online.
1) Know the company you are dealing with. Check to ensure that the company is legitimate.They should have a posted phone number and physical address.
2) Check for an online privacy policy. If you are about to hand over personal information to a web site, they should disclose what information is being collected and how it is to be used. If they require acceptance of an online agreement before processing an order, make sure you print it out and actually read it.
3) Look for independent third party organizations "stamps-of-approval" that the web site uses good online business practices. These can include digital certificates (Verisign), privacy seals (TRUSTe) and reliability seals (BBBOnLine).
4) Check to see if their web transactions are secure using either SSL (Secure Socket Layer) or SET (Secure Electronic Transaction) to encrypt the personal information that you are sending to them. Generally you can tell if the transaction is secure by checking for the existence of an unbroken key, a lock or a padlock at the bottom of the browser window. Also, some sites use "https" instead of "http" at the beginning of the web address to indicate that the site is secure.
5) Always pay with some kind of a credit card. Federal law (the Fair Credit Billing Act) makes it much easier to resolve a conflict in which you do not get what you ordered, you never receive your merchandise, etc.
6) Keep a record of all of your online purchases. Check for confirming email messages from the online merchant. Match your printed invoices with your monthly billing statement when you receive it in the mail (or online).
7) Never respond to web links imbedded in email messages to you that promise fantastic deals. Many of these deals are scams and link back to phony web sites. Their sole purpose is to get you to enter personal information that they will use to steal your identity. Remember, if a deal looks to good to be true, it probably is!
Cool Here are some additional tips for using credit cards - both online and in person. Consider using a single credit card with a low credit limit for all online transactions. Or, use a service like PayPal instead. Put a password on your credit card. Put your photograph on your credit card. Sign your credit carad. Finally, avoid using a debit card online. It is usually directly tied to a savings or checking account and the funds are withdrawn almost immediately after a transaction is complete. Once someone has gotten your funds, it can be difficult to get them back.
There are also a number of great web sites that give much more information on identity theft. They are worth checking out.
Federal Trade Commission - www.ftc.gov
Identity Theft Resource Center - www.idtheftcenter.org
Privacy Rights Clearinghouse - www.privacyrights.org
Submitted by: Jerry B. of Manchester CT, US

**********************************************************************************

Answer:

Gloria S. asked "Is there anything I can do prevent identity theft?"
My answer YES, but...
If by "preventing identity theft" you mean preventing somebody from getting in your name a driving license, a mortgage, a car loan, or transferring all your money from your bank account to his/her bank account abroad, that requires much more than caution during your online experience, but I understand your concern is basically limited to shopping online.
In my opinion, you can pretty safely do shopping online (I do it both for my own needs and for my company) if you (1) do your homework, (2) exercise caution, and (3) abide by a self-imposed discipline.
1. - I would recommend you to read (and apply!) the basic rules, like those offered by the following:
http://www.nipc.gov/warnings/computertips.htm
http://www.bbb.org/alerts/article.asp?ID=153
http://iisw.cerias.purdue.edu/home_computing/topten.php
2. - Don't invite theft; when visiting New York (I see you live in New Jersey) you wouldn't leave your purse on the back seat of your car, even with the doors locked -- or would you?
Same thing with your personal data: purge your hard drive -- remove (or edit) any file containing your Social Security Number, driver licence number, date and place of birth, credit card numbers, etc. If you frequently need such files, better save them on removable storage medium (diskette, CD, etc.). Keep in mind also that your SSN is not intended for serving as an identity card, and it's not everybody's business.
3. - If (like most Americans) you have several credit cards, use only one of them for online shopping -- ideally, use it only for online shopping. This way you have better control on your charges, and in case of theft, you limit your exposure to $50.
- Never use a bank card linked to your bank account (those credit/debit/ATM cards).
- If your bank is serious about protecting your identity, it could probably offer you for free a special service -- Virtual Account Number.
- Stay away from offers coming through unsolicited e-mail -- the more appealing they are, the more suspicious and risky. Keep in mind that nobody offers something for nothing. Preferably, it's you who should initiate the search and select the vendor.

I could go on and on, but I'm sure you understand that security is not only a matter of technical means, it's of good judgement too, and I wish you a pleasant online shopping experience.

Submitted by: Stefan

**********************************************************************************

Answer:

You're wise to be concerned about identity theft! There are many different ways your information can be compromised, but there are some steps you can take, both online and offline.

Online

1) If you shop online, only reputable sites and companies. There are several ways you can verify this:
a) http://www.Bizrate.com allows you to search for various online stores and see how other shoppers have rated them on timely delivery, customer service, products meeting expectations, and whether they would shop there again. Click on 'Store Ratings' at the top of the screen, and you can either search by category or search all stores. You can sort the results by store name or by customer satisfaction.
b) Look at the website (often at the bottom of the page) for a yellow circle that indicates the site is a VeriSign secure site. Click on the circle, and you should get a pop-up with a URL that begins with http://digitalid.verisign.com. Verify the information on this page matches the website you are visiting. This designation indicates that the site belongs to a legitimate company and that your information will be encrypted to prevent other parties from intercepting and using it.
c) Visit http://www.bbbonline.org/consumer/index.aspx to search for sites registered with the online Better Business Bureau. I've found it easiest to browse the list alphabetically because some businesses may not be listed as I type them.
d) Keep in mind that a business may still be legit, even if it is not registered on any of these websites.

2) Check the URL. If it starts with https:// instead of the normal http:// this means encryption is used to keep your information more secure.

3) If you use Internet Explorer, you should see a picture of a closed padlock along the bottom edge of the screen, close to the right corner. This means the information you send is secure.

While it is still possible for your information to be misused, following these steps makes shopping online relatively secure.

Other Tips

So much has been written about protecting information, so I'll just go over some of the basics here.

1) Never give out more information than required. Be especially careful with your Social Security number. If you think the company is trying to learn more than they need to, do not be afraid to ask for an explanation. Do not be afraid to take your business elsewhere if you feel uncomfortable.

2) Keep your official and personal documents hidden in a safe place when you do not intend to use them. Don't carry your Social Security card and extra credit cards unless you know you will be using them, and put them away when you're done.

3) Photocopy both sides of your credit cards, and keep this copy in a safe place. This will make it easy to find your account numbers and contact phone numbers if the cards are stolen. Call customer service and the police IMMEDIATELY if this happens.

4) If your information is stolen, contact the three major credit reporting agencies (Equifax, TransUnion, and Experian) right away so a fraud alert can be placed on your account. This requires that you be contacted if anyone applies for credit with your information, and it can stop identity thieves with minimal damage to you and your credit. Here are the numbers:

Equifax: Customer Assistance 800-759-5979 http://www.equifax.com
Fraud Division 888-766-0008
TransUnion: Customer Assistance 800-916-8800 http://www.TransUnion.com
Fraud Victim Assistance 800-680-7289
Experian: 888-397-3742 http://www.experian.com

I could go on with more information, but these basic steps should protect you. However, if you would like to learn more, the websites for the credit reporting agencies listed above are excellent resources. You may also obtain more information from http://www.bbbonline.org/idtheft/protect.asp.

Happy shopping!

Submitted by: Kim B. in Louisville, KY

**********************************************************************************

Answer:

I would be more concerned with prevention and the vendors records than doing a transaction online. Going to the physical store, using your credit card and taking your merchandise is a pretty comfortable process these days. Most people are not aware that bank records have been compromised and this is where credit cards come from. Then we have merchants like BJ's Whole Warehouse. They had a 1/2 million records plus stolen from their data center from unsuspecting customers. When we heard this, we cancelled and requested all new credit cards since we shop there. Here is a few things you can do to reduce risk and make things safer :

On your computer:

Make sure your host record on your computer is not filled with IP addresses pointing to fake web sites like a pretend "Ebay". Your computer looks there first for an address before anywhere else.

Run anti adware and spyware on your computer on a regular basis to remove spying eyes.

Do not let your browser save your password or user name on websites as this can be compromised.

Never answer an email with a link to a web site in it. It might be fake. Always go to your browser and type the address in.

Verify your vendor before doing business with them. If its too good to be true, it most likely is.

Print off any pages and records so you can trace things back with the vendor if needed. When all done with them take the next few steps below:

In your home or office "The key word is SHRED!"

Receipts and invoices- shred if there is no need to save

Shred any credit card offers rather than throw them in the trash. People can steal your identity

Bank statements and credit card statements and used checks - Either keep them filed away or shred before throwing out

Beware of hand operated credit card machines and always get the carbons.

Without doing the things above, you are opening your front door for thieves. Bottom line, there is far more risk not taking preventive measures than doing a transaction online.

Kind Regards,
Submitted by: Bob A.

**********************************************************************************

Answer:

Dear Gloria,
I can understand your trepidation. However, incorporating some simple practices into your shopping routine, you'll find that shopping online can be just as secure, if not more so, than any other form of shopping.

I would suggest first of all, if you are using Internet Explorer, switch to an alternative browser, such as Mozilla's Firefox or Opera. And do it now. IE is world famous for it's security vulnerabilities.

Your computer's security from hackers who might steal your personal information starts with making sure you have up-to-date virus protection and a solid firewall. I use Sygate Personal Firewall. (It's free for personal use). However, there are plenty of good ones out there. A helpful place to check the security performance of your firewall is Steve Gibson's website, http://grc.com/default.htm. This is an excellent place to test most of the avenues of intrusion into your computer.

Next, check that email...make sure you never respond to one of those bogus emails from "your" bank, that is really a phishing attempt. (I'm sure as a CNET reader you know this already, but others may not).

Fourth, buy from REPUTABLE online retailers who utilize the highest security and privacy practices. You want to read those privacy notices...how do they handle your information once they obtain it? Look
for the various seals...BBB online, Veri-Sign, eTrust, etc. You can
click on those seals to verify the company's good standing with each of those issuing organizations. Read the feedback from other customers (if offered). Although not always a safeguard, and not necessarily an indicator of web security, it is an extra comfort shopping with a company for whom you have a "brick-and-mortar" address.

Many online retailers will offer a profile service for you to make shopping easier the next time. I recommend developing a strong password (letters AND numbers...no dictionary words) if you intend to use this service.

Lastly, when making that purchase, check your browser for indication of Secure-Socket Layer (SSL) encryption. Check the little lock at the bottom of your browser...is it closed or open? If it's closed, then some measure of encryption is offered. You can also check the address bar of your browser. Does the address start with http:// or https://?
The https:// ("s" for secure) is the only one safe to enter your personal information in. If you use Mozilla, you can also check the security status of the site. Click on the lock at the bottom of the browser for information about the company's security certificate, when it was issued, when it expires, and the level of encryption employed.
128-bit encryption is the industry standard for personal information traveling the web. If a retailer wants your business, they will make the necessary investments to secure your personal information.

One other thing...most credit card companies and banks offer you online access to your account information. I recommend utilizing this service to keep a check on your daily account activity. In this way, you will be immediately aware of any inconsistencies associated with your account. The above-mentioned security principles apply to this online activity as well.

Combine these efforts with vigilance in protecting your personal information outside the Internet world and you'll have a better measure of peace about shopping online.

I hope you'll benefit from my advice...although, once you've experienced online shopping in all it's glory, you run the risk of becoming addicted to it! (Like me!)

Best wishes,

Submitted by: Monica E. of Middle-of-nowhere Ohio

**********************************************************************************

Answer:

Identity theft can never be truly prevented, whether it is online or off-line. While online shopping is generally a safe experience that is likely no more or less dangerous that not shredding important documents before you discard them or persons coming into contact with your credit card (e.g. waiters, salespersons, etc) writing somehow recording the details, there are a few solutions, technical and non-technical, that you can take.

Actions that Involve Technology:
1. Single-use credit card. Discover Card (and I believe Mastercard and Visa) have developed "single use credit cards numbers" which are generated and available for use only one time. That way, if the money can still come from your account, but if someone were to get a hold of your credit card, the number doesn't exist in your credit records or other places.
2. Only shop at "Secure HTTP" sites. These sites, beginning with "https:" mean that a secure link has been established between your browser and the website. If the website is asking for payment or personal information from a non-https website, I personally would not provide it.
3. Install a browser with 128-bit encryption. Internet browsers such as microsoft explorer probably already have this encryption level installed (called Cipher Strength in Internet Explorer. You can check this for yourself by going to Help > About Internet Explorer)

Actions that You Can Take:
1. Browse on-line, pay by phone/fax/etc - most companies - especially the reputable ones, usually allow you to place an order on online, but contact them with the payment. Most online retailers will explain the different ways you can pay.
2. Only shop at stores that we well-established, use a certification authority such as TRUSTe, or have a certification by the Better Business Bureau.
3. Limit your online shopping to one credit card. Many people use this option. By using one credit card to shop online, you have the receipts in hand and will know more quickly if there are irregular charges.
4. Buy a credit monitoring service. Companies like Equifax offer such services that show you your credit scores as well as alert you to any new accounts or credit reviews, often on a monthly basis.
5. Understand the privacy policy for the company you are buying from if you complete a purchase or provide personal information online. Understand whether or not you have to opt-in (explicitly agree) or opt-out (explicitly disagree) to have your personal information shared. Generally speaking, the more information that passes through multple computers and companies, then bigger the opportunity for theft.

Basically, by taking the same care in the off-line shopping world as you would in the on-line shopping work, it should be a relatively safe experience. Good luck!

Submitted by: Rodney C.

**********************************************************************************

Answer:

Preventing identity theft when online-

FIRST- make sure that your computer is clean! Viruses, Trojans, keyloggers (especially), spyware, and other malware will compromise your security! ALL of this garbage must go, and be prevented from returning.

SECOND- Implement and use a strong layered security approach on your computer! At a minimum, you need a mechanism to keep your OS patched and updated, an antivirus solution- which also must be kept updated, a strong firewall (Win XP?s firewall is NOT adequate! I recommend Zone Alarm, as it not only blocks outgoing traffic from suspect applications, it also ?fingerprints? all apps on the computer with CRC checksums to prevent malware from spoofing the firewall), and a good anti-adware program.

The more security layers you have, the better- NAT routers and hardware firewalls are inexpensive, and well worth the investment.

THIRD- Now that your local machine is secure, you can be confident that it?s not leaking your private data. But what about the web site you wish to do business with? There are a few general rules here that insure your safety. First and foremost, you must be sure that the web site you see on the screen does indeed belong to the merchant you think it does! NEVER follow a link from an email! It is too easy to spoof URL?s with HTML, and you can easily wind up on a counterfeit website that looks exactly like the merchant you think it is, but is really owned by a criminal out to rob you! Manually type the URL of the merchant?s web site into your browser- this eliminates that threat. (There is one consideration here, and it is why you MUST have a good anti-spyware solution installed: it is possible to modify the HOSTS file in Windows to redirect your browser to anywhere on the Internet. You type in one URL, and due to a malicious entry in the HOSTS file, this URL is redirected to wherever the bad guys choose. Good anti-spyware applications lock down the HOSTS file, preventing this exploit.)

Once you are where you want to shop, and have made your selections and are ready to pay, then you must double check the security BEFORE entering any personal info. Make sure that the URL begins with ?https:// ,? indicating that you are using an encrypted link through SSL. This way, no one in the middle can read the data as it goes by. Secondly, ALWAYS check the security certificate! Don?t trust your browser here, do it yourself. In IE, on the right-hand side of the status bar, you will see a padlock icon- it should be locked when you are using a secure link. Double click the padlock icon to open the security window, and check the following: The web address that the certificate is issued to MUST match the address you see in the address bar of your browser, the certificate must not be expired or not yet valid (check the dates), and lastly, insure that the certification path traces to a reliable certification authority. Some of the more popular CA?s are Verisign, RSA, and Thawte, but there are others. An additional step, which is overkill, in my opinion, is to manually validate the certificate at the CA?s web site. However, if the certificate was bogus, your browser would detect this immediately. It is more important to insure that the addresses on the web page and certificate match, the certificate dates are valid, and that the certificate is traceable to a trustworthy authority.

If all this checks out OK, you may be confident that you are indeed dealing with who you think you are, and that your data will be encrypted as it travels over the Internet. You are safe from prying eyes, and only the merchant you are dealing with can read your data.

If, however, there is any question, just don?t do it! Better safe than sorry.

And, of course, always deal with reputable merchants!

Best regards,


Submitted by: Mike B.

**********************************************************************************

Answer:

Gloria-

If you really are concerned about identity theft (paranoid might be more the word), then your only choice is to destroy all your credit cards, close all your bank accounts, stop using the internet, and get rid of your telephone. Maybe quitting work and moving to a desert island would help, but you'd have to purchase an airplane ticket to do that.

Since none of that is really practical or possible, and while you are gone on the desert island your identity can still be stolen and used to collect Social Security, the approach is really quite simple: use your head. First, be careful where you shop online, if you are going to shop online at all. Just as you wouldn't head down into the heart of the city and spend your time shopping around for bargains in a seedy part of the city, you shouldn't do the same thing online without expecting to get mugged. Places like online auction sites where individuals rather than businesses are doing the selling are a prime example. Would you give your credit card to a guy on the street offering $12 Rolexes? Second, make sure that any online store you use has a secure shoppping cart, and read their privacy policy. Look for an indication that they take care to keep your information secure and private. Third, never shop online using a computer which is available to others or a laptop.

Then there are some things which can protect you while shopping online.
Choose a credit card which is designed for online use. Some cards limit any online liability for stolen cards to $50 or even $0. Some cards have an available feature where you are given a onetime-use only card number from their website to use to purchase online. Thus your actual card number is never given out. American Express offers this, among others.
Cards with a Smart chip embedded like Blue from Amex can make this process easier. In addition, even if used conventionally, when the card information is sent from a card reader, a keystroke logger can't pick up the number. You do have to give a billing address which matches your credit card's billing address when ordering online (to protect against card fraud). But using your home address for billing means you are sending your home address around the internet. A Post Office box for billing address can get around that, but it also means you have to be able to receive your packages somewhere other than at home, like at work. There are other payment methods like PayPal which can insulate your bank or credit card accounts by another layer of anonymity as well.

When shopping offline, you need to be careful as well. Traditional mail order allows for much easier theft of credit card numbers than online since your card number is actually being recorded on a piece of paper.
As of January 1, 2005, it is illegal to give customers a receipt on which more than the last 4 digits of a credit card number are printed, but until then, you need to be careful where such receipts end up. Never give your credit card to someone who takes it out of your sight to process the charge. This would mean not using the card at most restaurants. Never give anyone else your PIN number for ATM cards, and be careful nobody else can see you when entering it on a keypad.

Identity theft does exist, perhaps not to the degree sometimes made out on TV, but enough that if it really happens to you it can be a real problem. The more common problem is not identity theft, but just credit card theft. There are things you can do to protect yourself from that such as never leaving your credit card in gloveboxes, unattended purses, coat pockets, etc. Likewise, while online, don't leave your card number littered around unnecessarily. As I said above, use your head, and just be careful.


Submitted by: Steve S. of Osage Beach, MO

**********************************************************************************

Answer:

Hi,

In answer to your question about how to prevent identity theft, here are just a few suggestions I've learned while working for an Internet Web Hosting company:

1) Buy a paper shredder. Many times people think that identity theft only occurs on the internet, but fail to realize that by throwing away old receipts, credit card statements, etc., they also leave the door open for identity theft. Shredders are available at economical prices today, so there really isn't a reason not to have one. You can shred those old receipts, billing statements, etc. and keep a copy of them in a safe, or a safety deposit box. Most financial documents are now being kept electronically, such as in .pdf files, and you can also keep those documents in disk media such as CD ROM, floppy disk, zip disks, etc. with relative ease if you have a computer at home.

2) Firewall, firewall, firewall!!! With spyware on the rise, you'll need to get a trusty firewall software for your computer while surfing the internet. With broadband internet access, many people fail to realize that although they may not be actually surfing the internet, if there computer is on...they are connected to the internet! This means that a hacker can get access to their computer via the internet and, if there is any information, such as financial information in the form of account statements, etc., they can be retrieved and ultimately be used in identity theft. A trusty firewall, and not just a firewall that may come with your operating system, such as Zone Alarm or Nortons Personal Firewall from Symantec (to name a few), can deter this type of activity.

3) Secure sites only please! When ordering online, make sure that the site on which you're entering your credit card information is a secure site. You'll notice that the site you're on is secure when your browser shows a "https://.." as part of the URL in the address bar and a little "lock" in the lower right hand corner. What this means is that the site you're surfing on is on a server with a Secure Certificate installed, or SSL certificate, which ensures that the information you're entering is encrypted and not viewable by others for which it isn't intended. If the site requesting said information doesn't have this, DON'T TRUST IT, since said information won't be encrypted and can easily fall in the wrong hands.

Many credit cards today are working towards detecting identity theft since this type of criminal activity becomes very costly for them. Keeping a clear track of your expenses with credit card statements, receipts, etc., will allow you to detect any fraudulent activity early and stop any future damage to your credit. Also, you can run a credit report to verify your credit history periodically to ensure that it is accurate.

Submitted by: Nelson F.

**********************************************************************************

Answer:

About ID theft during online purchases:

This is a very serious concern by all PC users. There is no single way to "make it safe" but a combination of solutions are needed since there are several ways to obtain personal data from a PC. A holistic approach is really best. First make sure that your version of Windows is up-to-date by running Windows Update. Do so by using the Update icon on your computer. Don't use any received emails claiming to be from Microsoft to "patch" your system, etc, due to the fact that these are usually not from Microsoft but from sources of viruses. Or you can go directly to Microsoft's site and get to Update from there. Downloading the latest security patches and version of Internet Explorer will enable your browser to be the most secure version with encryption. This makes a big step to your online purchase security. But it's not complete yet.

Various spyware can contain keyboard loggers that send packets of information back to it's source while you're online. Information such as passwords, user names, credit card numbers and other personal information will be gotten by others through these. So you should keep the popular anti-spyware programs on your system and scan your system with them before you make purchases online. The two most popular ones are Adaware SE and Spybot Search and Destroy. I recommend supporting their developers.

A firewall is important as well to block intruders from getting into your system. A hardware firewall is best but software based ones are available too. Zone Alarm has a free one as well as a Pro version that you can purchase. XP has a built in one. Using both will make your system more secure. Using one is not near as secure. A firewall can detect things coming as well as going, actions that you don't know that's happening in the background. Several are also recommending Microsoft's Service Pack 2 for system security. This can be found in your Windows Update process as well.

Even though not directly related to ID theft, you should always keep your antivirus software up-to-date and manually scan your system at least once a week after updating. I even recommend using an online scanner such as House Call or Panda antivirus from time to time. Some viruses can actually disable your antivirus software and you can't tell until it's too late. An online scanner will confirm a clean system. Viruses, trojans & variants can be designed to do a variety of things to your system, so such things should not be left out when discussing security of your system.

This seems like a lot to do to keep your system safe, but once in place, it's not as bad as you might think. The spyware scans don't take long on most systems, firewall works in the background as well as antivirus. I do my manual scans for viruses at night when I go to sleep, but the average system can usually be scanned while you go to lunch.

To check your system's security you can go to a site called Shieldsup and it can detect the level of security and any openings your system might have.

Be cautious of ad sites received in your email. It's possible that they are not genuine. If the ad looks appealing and appears to be from a well known company. Don't use the links in the ad. Go to the site's address directly using your browser manually. If the offer is legit, then the offer will be on their site for you to find. There is a recent method called "Phishing" where ID thieves try to get users to click on links of their fake emails that appear as the "real deal" of well known banks, credit card companies, etc. They've designed such pages to look like the real thing but link you to them instead and trick you into varifying your personal information thus giving it to them on a silver platter. If you find such a thing, you might want to call your bank, etc to report or confirm the posting.

Submitted by: Stuart G.


**********************************************************************************

Answer:

I think a lot of this fear stems from what we hear on TV and read on the web. I'm not saying it doesn't happen, but what is the usual outcome? How many people end up like Sandra Bullok in the thriller "The Net"?

I would suggest you contact your credit card company or bank and find out what they will do for you if you are a victim. How long will it take to get your money back? Check with the BBB on-line and see if the company you plan to buy from has a good rating. Finally, be sensible about who you share information with. I've gotten hundreds of e-mails from someone posing as Citibank asking for my credit card number and PIN. I would be a real moron if I fell for that one. Pay attention and listen to your gut before you make a purchase on the web and you should be fine.

If you are really worried about your information, you can pay a number of sites to monitor your credit file for you. For a fee, they will send you alerts and updates when anything changes. I don't subscribe to any of these services as my credit card company and bank do the same thing for free. I do order my 3-in-1 credit report about every 4-5 months just to make sure everything is as it should be. It sets me at ease to see it with my own eyes. I have yet to be surprised by anything I find.

Happy Holidays,


Submitted by: Todd S.

**********************************************************************************

Answer:

don't think any precautions are 100% foolproof. But this doesn't stop me shopping online, as there are many dangers when you shop in person too (if you use anything other than cash).

Here are the rules I follow:

1. Only shop online where there is also a bricks and mortar address and telephone number.
2. Try to verify that the site has existed for a year or more.
3. Do a google search to see if there are any complaints about the shop.
4. Never, never, never provide my details unless the page uses a secure protocol (ie https:// in the address bar) and a locked lock in the status bar.
5. Clear all temporary (cache) files from my browser after every transaction.

I also use Spybot Search and Destroy and Ad-aware, to keep my machine free of spyware (keyloggers are of particular concern), and a good firewall (currently Norton Internet Security 2005) to make sure my computer doesn't send out any information where I don't want it to go - the firewall in XP SP2 will still only stop baddies from getting in, but it won't check what your computer sends out.

Of course, I also use anti-virus software, regularly updated.

Although Internet Security has a facility to type in your personal details so it can advise you if any attempt is made to send them over the internet, I don't use this facility because I think it's best never to store such information (particularly credit card information) anywhere on your PC.

These rules have served me well so far - hope they help you too.

Submitted by: Francine M. of Canberra, Australian Capital Territory. Australia


**********************************************************************************

Answer:

Hi:

Well, I understand why Gloria is not comfortable with e-commerce and e-information of her personal information. Among the reasons are: ID Theft, Credit and Banking Information, and how to contact the person (physical or mail address, e-mail, telephone, and so on).

Unfortunately, she is right. Give any personal information over the Net is not 100% secure and invulnerable. Anyway, I will give her and anyone interested on this the following advice:

1 ? If you decide to make shopping online, verify the following items on the site you are going to give information:
- The address of the website you are going to use begins with HTTPS:// (not HTTP://).
- A padlock ?locked? anywhere on the screen.
- Sometimes, it either also shows ?SSL-Secured Page? or ?SSL-128 Encrypted?.

If you see one or more of the items above on a website, it means you are on a Secured Website. The HTTPS:// on the address; the padlock; and the ?SSL? phrase tell you are Secured to make transactions using credit/debit cards.

2 ? Make purchases on recognized and trusted companies (Recognized stores, banks and credit card companies)
3 ? Make transactions on a seldom basis. Actually the credit card companies have a ?temporary credit card? for certain number of transactions. After the transactions allowed are completed, the card expires.
4 ? If a field is required, and you do not want to give that information, fill it with N/A. If the N/A doesn?t work in numeric fields, fill with zeros (i.e. telephone # 000-000-0000). If this doesn?t work either, cancel the transaction closing the browser.
5 ? Be careful with e-mails that you receive. For example, last year I received and e-mail from Best Buy telling me that I have ordered two DVD players for $800. As I continued to read it, it told me to contact the company with a NYC address and a telephone from? Seattle, WA!! (I recognized that immediately because I knew NYC area codes and the area code they gave me was 206).
6 ? As you advance from page to page clicking the ?Continue? button, make sure that the padlock is visible on screen.

Some Don?ts:

1 ? Do not give your SS for any reason
2 ? If you do not see one of the items listed for Secured Transactions, don?t make any transaction

I hope this will help you to understand and decide to make some online transactions.

If after this advice you are unsure or still uncomfortable to make transactions, simply do not use it.

Submitted by: Luis A.

Collapse -
Re: Honorable mentions
by sgtsilk / December 12, 2004 1:14 PM PST
In reply to: Honorable mentions

Well Thanks to Congress and the New LAWS which help the Banks. Where the banks say there Identity Theft Program will help you get your money back if someone still your Identity. But they forgot to tell you if you don't report your Identity as been stolen. Then shame on! I have been with Pre Paid Legal Service and Kroll Service for sometime now. Kroll company offers consumers up-to-date credit reports, continuous credit monitoring, identity restoration. Thank you Pre Paid and Kroll.

Thank You

Jeff Wilkes Independent Associate
www.prepaidlegal.com/hub/jeffrey_b_wilkes

Collapse -
Other great advice from our members
by Lee Koo (ADMIN) CNET staff/forum admin / December 1, 2004 2:55 PM PST
Answer:

Your browser should indicate a secure site with small closed
lock in the status bar of the browser. If the page you are ordering
from does not have one, it is not secure. That does not mean you
will automatically be nabbed but you are more vulnerable.

There are really two issues the question poses. One, purely about
identity theft, the other about secure online transactions during the
holidays.

Firstly Here is an article on identity theft:
http://www.technewsworld.com/story/32622.html#related

Secondly here are some articles (one by yours truly) about eBay Security.
This will give you insight into shopping online and some of the problems
and why they happen.

http://news.com.com/2100-1017-870959.html

http://www.looksmart.com/cgi-bin/go/t=LSSitelist:1-26-2-US;g=strak;ref=1/http://news.com.com/2100-1017-966835.html

http://ca.prweb.com/releases/2004/10/prweb172457.htm

So the issue really boils down to this. Is the website you are buying from secure
and is your pc secure. You will need to educate yourself a little bit about online
security. Once you do, you will see that it simply a matter of being informed
and not being unduly afraid due to lack of information.

"The first thing you've got to learn is not to be afraid of it."


Submitted by: Dan M.

**********************************************************************************

Answer:

Here are my suggestions:
1. Do NOT carry SSN in a wallet or purse.
2. Do not carry credit cards in a wallet or purse.
3. Do not ever carry a PIN no. in a wallet or purse
4. Set up a separate container for credit cards and only carry it when you intend to use it at a certain time. Otherwise, leave it home.
5. Make a list of all credit cards (& nos.), debit cards, and a list of ALL agencies to contact, i.e. Soc. Sec Admin,; Dept. of Motor Vehicles,; Federal Trade Commission,; Credit Bureaus (3),; banks that you have accounts with,; Commercial creditors that you normally do business with, etc. Besure to have their tel. numbers on these lists.
Also, it might be a good idea to have
local Police numbers handy to make a report (depending on local procedures).

Hope that this is some help. I have been thru it and it took me 6 hours to put fraud alert on all !

Submitted by: Bob A. of Oakhurst, CA

**********************************************************************************

Answer:
In answer to Gloria's question, rather concerns, I have a few suggestion that may put her mind at ease. Knowledge is key.

One of the reasons identity theft occurs is when you use the same password for every site you frequent. What I have learned (the hard way) is to have a special note book handy so whenever you log on to your favorite sites, (emails, banking, bill payment sites, ebay, yahoo, any site) or purchase anything where you have to enter a User Name & Password to log on, you can look up the necessary information quickly; website address, email address you logged on with, if you have more than one, any contact info about the company without having to memorize them all. I always keep the same user name for everything, that doesn't seem to matter.

Secondly, change your passwords, yes all of them, every 30 days, it's a pain but it has to be done. Write the changes in your note book. (Make sure this is done through the company's website, not through an email request.) You should use capitol letters, small letters, numbers, all different for each password so a hacker cannot figure it out.

Thirdly, whenever making a purchase, make sure the site is secure. Meaning, at your address box in your task bar, the address of a secure site will always start with https://------. A secure site means all transactions are encrypted.

I pay everything I can through PayPal. There are other sites to handle your personal banking on line, and I belong to a couple, but my favorite is PayPal. PayPal goes through an extensive process to sign you up to assure you are you and they will never give out any personal information to a seller when you make a purchase using their services. When the process of this sign up is over, you then can shop at any site, with a couple of clicks, you are done and all purchases are debited from you checking account, or credit card and you have a permanent record of each transaction, just the same as your personal home banking statement.

When I have to give credit card information to a company that does not use PayPal, ClickBank, StormPay, etc. again, make sure the address box states https://, never give anyone your social security number or personal PIN# to your home bank account under any circumstances (no one needs to know that information) they only need your exact billing address, shipping address, credit card #, expiration, and the three code #s" on the back of your card. PayPal will ask for your checking account number only during their sign up and it is alright to give it to them so they can continue the process of enrolling you in their account. (There is no fee to use PayPal.)

If you ever receive an email requesting an update to your account from anyone you have purchased from in the past, from you notebook with website and password info, click out of your email, and go directly to their site, don't click on the site through the email site given. This way you know any info requested is truly from that company. They should never request your credit card information because they already have it. What they may ask is if this credit card is still active or up to date and they will give you only the last four digits, never the entire number; maybe confirm your other personal information as well but you should never have to give any of that information to them again they should give it to you, remember to only confirm this info from their direct website. Don't forget to check the address box for the https to make sure it is a secure site.

I have been taught all of this by PayPal, EBay, and my personal home town bank because hackers have tried to access my account information through emails and web sites I have visited. Knowing the security they taught me early on, I contact them with a suspicious email as they have requested, and the email I sent them were, in fact, were all bogus.

So, if you go about this the right way, you should have no problems at all. Have fun shopping, as I do, with confidence.

Janet Woods

P.S. Below I have copied one of the security alerts from PayPal.

Protect Yourself from Fraudulent Emails
________________________________________
At PayPal, protecting your account's security is our top priority. Recently, PayPal members have reported suspicious-looking emails and fake websites. These emails are not from PayPal and responding to them may put your account at risk. Please protect your PayPal account by paying close attention to the emails you receive and the websites you visit.

Please use the following tips to stay safe with PayPal:
? Safe Log In: To log in to your PayPal account or access the PayPal website, open a new web browser (e.g., Internet Explorer or Netscape) and type in the following: https://www.paypal.com/
? Greeting: Emails from PayPal will address you by your first and last name or the business name associated with your PayPal account. Fraudulent emails often include the salutation "Dear PayPal User" or "Dear PayPal Member".
? Email Attachments: PayPal emails will never ask you to download an attachment or a software program. Attachments contained in fraudulent emails often contain viruses that may harm your computer or compromise your PayPal account.
? Request for Personal Information: If we require information from you, we will notify you in an email and request that you enter the information only after you have safely and securely logged in to your PayPal account.

Often, fraudulent emails will request details such as your full name, account password, credit card number, bank account, PIN number, Social Security Number, or mother's maiden name.
If you think that you have received a fraudulent email (or fake website), please forward the email (or URL address) to spoof@paypal.com and then delete the email from your mailbox. Never click any links or attachments in a suspicious email.

To learn more about protecting your PayPal account, please review our Security Tips.

Submitted by Janet W.
**********************************************************************************

Answer:

One item I have Seen But not tried yet is a loadable debit/ credit card.
I cannot recall the company name but it is essentially a mastercard issued for a fee with each deposit ($ 5.00 for the one I've seen) You deposit the amount you plan to spend so if the card no. is stolen you are at least limmited in the possible amount of loss.

They are available at some telephone and utility payment centers and business shipping/ support outlets

Submitted by: David M.

**********************************************************************************

Answer:

There are several things that you can do to prevent identity theft, starting with a good firewall program and a couple of spyware applications. I like Zone Alarm Pro, it is an excellent program with a simple interface and a lot of good qualities. For spyware applications you can look at Lavasoft's Ad-aware and Webroot's Spy Sweeper, these programs will help you avoid pop-ups and multiple types of malicious Trojans, worms and tracking applications that may want to steal the information stored in your computer, but remember, these applications are only as good as the file definitions that they use to recognize treats, so it is necessary to update them frequently. One good thing is that you can set them up to automatically look for updates when a connection to the internet is in use and this way you will not forget to do it.

As for personal identity theft, I will suggest to shop online only in websites that provide secure transactions and that are well known and reputable. Also, look for site that will allow you to create some type of personal account that you can use to store your information so you do not have to enter it every time you want to purchase an item.

When you go into these sites or for that matter into any other site that you wish to browse or shop into, use your browser and type the address yourself, do not use links provided in other web pages on emails you receive, because you do not know if the links are actually taking you to the real website you are trying to access or if you are being redirected to some other server that may be displaying a page or site similar to the one you are trying to access, this is called "phishing".

Last but not least, never and I mean never provide your personal information or any other information like bank accounts or credit card numbers to any site that you feel it is not legitimate. A lot of scams going on the internet are from people that send emails with links to pages or information that looks like the original websites, requesting information or account updates. If you have created account on these websites, look for telephone numbers and contact their account department to see if such updates are required.

You can also type the website address in your browser and look for a "Contact Us" link or button and email a request for confirmation of the email you have received, try attaching the original email you received so it can be reviewed by them and see if it was original.

I hope this will help you.

Submitted by: Jaime L.

**********************************************************************************

Answer:

I don't have any specific suggestions for entering information at shopping websites, but do have a suggestion for testing out a suspected "phishing" email, or at a website you suspect may be a scam. At such a suspect website where you are asked to enter your username and password, deliberately enter false information -- a False username and password. If the website accepts the username and password, you should probably not continue, since these scam websites will accept whatever information you enter. A real website would reject the false information.

Submitted by: Timothy L.

**********************************************************************************

Answer:

for Gloria S. New Jersey
The best way that I can think of protecting your identity while shopping online
is to set up a free account with paypal.com and clickbank.com once your set up
you don't have to fill out any information for credit cards. There are over 40,000
thousand stores and other vendors that use these two systems for payment. Once the account is setup all you have to give is your user name and password they
handle the payments usually in a matter of seconds. Good Luck.

Submitted by: Merle D. of Mesa, AZ

**********************************************************************************

Answer:

I would suggest a layered approach to protecting yourself against identity fraud, which would follow these basic steps:

1. Never submit your sensitive personal information onto any webpage via a publicly-accessable computer, i.e. In a library, from a company computer, at an airport terminal etc. As you information could be accessable by the next person who logs onto that computer.

2. Be sensible. Don't go typing in sensitive information into any website you find on the internet, make sure it's from a respectable company, and into a Secure (SSL) Website - these "secure" websites can be identified by a small gold padlock appearing in the address bar, or bottom right hand corner depending on what browser you are using.

3. Use good, updated anti-virus as viruses and trojans can often monitor what you are typing into a website, completing avoiding the websites secure protection altogether.

4. Use good spyware/adware protection (Lavasofts' Ad Aware, and
Spybot: Search and Destroy are among the best) as spyware can also often track what is input into websites, and send it back to a third party.

5. And last of all, if you're really paranoid, the latest version of Zonealarm Pro (5.5.062.000) has an inbuilt ID Fraud Prevention function, to help protect your personal information when it's input into a website.

Submitted by: Tiran D. of
From a tiny, tiny village called Dollar, Scotland UK


**********************************************************************************

Answer:

I do a lot of shopping online. I use a two way method of shopping online.

First, like Gloria, I am wary of giving personal information. What has worked for me is to establish a limited debit account for shopping online. I only maintain sufficient funds in it for the shopping I do. It's easy to transfer money in to cover purchases.
The credit card company guarantees fraud protection but it can still be a mess to straighten out. If my account is ever compromised, only the limited funds in it are in danger.

Second, If I feel uncomfortable with an online order, I call the customer service number. Usually, you can place your order through them. That way your information is not being transmitted over the net. It may still be maintained on their computer database so check first and make sure you are comfortable with that. You may not want to use a company that keeps your numbers in a database.

There is a big increase in fake companies that advertise great buys on the internet. All they are really looking for is your credit information. These companies are "phishing" or just trying to steal from you. Be intelligent and limit everyone elses access to your accounts with a limited debit card. They can't run up a bill on money that is not available.

Submitted by: Phil H. of Maryland

**********************************************************************************

Answer:

Citi master cards has a great solution for this. I have been using it for over a year. It is called a virtual credit card. It has several different version but the basic purpose is to limit exposure of your real credit card information.
The basic virtual credit card works like this.
You go to a web site that requires credit info.
Instead of putting in your real credit card information. You create a virtual credit card. This can be done on the Citi web site or from an icon on your task bar.(which by the way pops up when you need the info on a webpage and has autofill) After putting your citi user name and password a virtual credit card is created. This card number is linked to your real card at citi.

The basic virtual card is only good for one time use. Once your purchase is made the number can not be use for anything else. If someone tries citi refuses the card.
There are options for the cards like limiting the amount of money on the card vice single use. This is good for when you want to use the card for monthly payments on the web. Set it up with a limit to cover the number of months you want to pay at a time.
For example you have a monthly fee of $9.75 a month, and you want to pay it for a year. You set the card for $120. After a year the amount is used up, you give them another number if you want to continue. If someone gets the card number it has less than $120 limit.

Virtual cards can be tracked through your Citi web cite or an app installed on your computer.


Submitted by: Gary N.
Collapse -
Re: Other great advice from our members
by andpow / December 2, 2004 10:32 PM PST

Use a designated credit card for internet shopping with a credit limit of say

Collapse -
Re: Other great advice from our members
by cpgrichard / December 2, 2004 11:06 PM PST

I put together a free resource called, "Stop Identity Theft" a few months ago after several people that I know became victims. One person now owes a ton on money after someone took out a loan in their name. I too was a victim when someone attmepted to use my info to make a $700 auction purchase. I found ot that there was a Key-Logger on my system (spy application that stores keypresses and sends info to thief) It, the guide, was downloaded by hundreds of people and covers topics like:

-Preventive and Counter Measures to protect yourself against hidden SpyWare

-Keyword loggers and Trojan Viruses that are probably sitting on your computer even as you read this.

-Quick tips and advice to detect and avoid threats

-Online and real world examples of how this crime is commited

-Links to free downloadable security and privacy software

-Tells you what to do if you have become a victim

-Helps you to identify hidden dangers of the Internet

It is by no means the ultimate guide, since this is an ever changing battle field, but it does expose some sneaky ways that Identity Theft/Fraud can be done.

Please visit: http://www.clientbydesign.com/danger

I will keep it updated from time to time.


Rich

Collapse -
Re: Other great advice from our members
by skimps / December 3, 2004 12:11 AM PST

I agree with all of the advice here, except for recommendations regarding online banking services. I would add the following: unless the user is willing and able to secure and maintain security, online banking is a bad idea. As a person who repairs computers, both home and business, I am continually dismayed by the number of people participating in online banking and using other financial programs on insufficiently secured computers, computers that they thought were secure. Additionally, if the computer being used for online banking or other financial programs is also being used by children, especially teens, or connected to an in-home network which includes children's computers, extra vigilance and security measures are required. If an individual user cannot, for whatever reasons, maintain security, I think it best to minimize potential damage to just one financial instrument, preferrably a credit card with limits or fraud protection.

Most credit cards and checking accounts have fraudulent use protection built in. You can check with your card issuer or bank regarding their policy. And by following the advice mentioned by other forum participants for safe online shopping, you will most likely never have a problem.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by nightmare4x4 / December 2, 2004 8:46 PM PST

Well first i have to say i was also worried about people stealing my info when i first started net shopping but ya know what......i should have been watching my mail and my credit report because i was the victim of identity fraud and not that long ago either.Apparently someone got a hold of one of my credit card bills before i got it and had a replacement card and every thing sent. They charged over $3000.00 on this credit card both on-line and off,strange thing is they were actually making payments til this past july.I basically had to do the hoop dance to straighten it out which took about a month so best suggestion is to keep track of your credit history and as soon as you notice something wrong start making calls to get it straightened out. most sites i goto have encryption as well as most browsers so to be honest i feel safer shopping online.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by Ira / December 2, 2004 10:13 PM PST

Some good logical advice, Gary. I have yet to use a program by Broderbund, Identity Theft Protector, since it required me to enter my personal information in one place, supposedly to be protected from identity theft (or identity fraud). My concern was having this information in one place could make it easy for a hacker to find and abuse. I maintain quite a bit of protection (anti-virus, firewall, spyware) already. Thus, if you or any others have experience with Identity Theft Protector (or other such programs), please advise. Thank you, Ira

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by guidfarr / December 2, 2004 10:22 PM PST

Lee if you're really concerned about revealing your personal card details to shop online you should use a virtual credit card service such as www.entropay.com

This is how it works: You register for an account with www.entropay.com, register your personal card details with them and start making use of their virtual credit card services. Essentially what their service allows you to do is to create unlimited virtual visa cards and load just enough funds on the card as required. The big advantage of this is you never have to reveal your card details to any third party merchants, can use a separate card to pay different merchants and there's no possibility of credit card theft or 'accidental overcharging'

Of course, there's a fee for the service but to my opinion this service is great and I've been using them for more than 6 months now. More details available on their help section: http://www.entropay.com/userfaq.html

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by ecojackie / December 2, 2004 11:40 PM PST

Hello,

The forum guidelines say "It is permissible for members to mention services or products that are provided by them or the companies with which they are affiliated, as long as the information is germane to the topic, is not a blatant advertisement, and the members mention their affiliation with the company in the content of the message."

With that in mind, I thought it would be germain to mention that there is a well known and respected service created specifically to protect an individual or company against identify theft and fraud and to restore identity in the event of a problem.

It is called Identity Theft Shield (http://tinyurl.com/3nvmv) and I am a provider of the service. The service provides you with credit reports, continuously monitors your credit reports, and works with you to restore your identity in the event your identy is stolen.

Jackie G., Seattle, WA

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by Robert K / December 2, 2004 11:48 PM PST

No one should ever use any e-mail link to go directly to any financial institution. Any message from a bank that has a link to connect is very likely a fraud. Any time you see a message telling you of a problem or special service, you should go directly to the known site from your browser. NEVER sign into a site using an email link!

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by fve / December 3, 2004 12:48 AM PST

Twice I got frauded. The first time, someone stole two creditcards from my locker while I was at a fancy gym-spa. They charged $900 at a nearby restuarant immediately, and then took an around the world trip on America Airlines. The total in 24 hours was approximately $12,000. The credit card companies did not penalize me, just issued new cards. They said they would not prosecute because they did not loose money, they would just hold the merchants responsible for the fraudulent charges. That was CREDIT CARD FRAUD.

The second time was identity theft. This was worse by far. It took me two years to clear up my identity. No government agencies were willing to help including Postmaster General, Police, Secret Service, none tried to help. The three credit agencies were OK because they put a warning on my listing that I had been frauded. The thieves changed my mailing address so that all my mail including bills and bank and brokerage statements were sent to their clutching hands. All in all a horrible experience, and costly in terms of my time to correct and worried nights.

Now I don't use my credit card on line, I use a shredder for every piece of paper that has any financial or identity information on it, including new credut card offers that come every day. If I want to buy on line, I usually can do that by calling the vendor and providing my credit card over the phone. Sometimes they will send me a fax to return to them with the credit card info and signature thereon.

My advice, don't believe the security statements given by the web vendors because one of their employees with access to the data bank can sell out thousands of confidential names in a keystroke.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by ROMANIAN / December 3, 2004 1:31 AM PST

I am afraid of identity theft and fraud.
I want to present what it happened to me.
I received an e-mail from a "spanish bank" that inform me I won a lot of money. To send me the money they need my personal acccount and bank.They insisted to send my personal information, but no information about them.
I did not know and I had no contact with that bank. I thought it was an attempt to use my personal information to steal money from my account.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by sitnpritee / December 3, 2004 3:29 AM PST

Discover Card has an excellent program that can be downloaded at their site...www.discovecard.com. It's called Discover Deskshop. When using it online it gives a single usage charge # each time so your regular account # is not used. I love it and use it all the time.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by cyclenut / December 3, 2004 6:12 AM PST

I am in the IT industry, and 90% of my work is digging spyware/thiefware out of home and small business computers. There is no "anti virus" of the sypware world, that is no one program gets all of it. I use two spyware finders and removers, these are Spybot ver.1.3 (spybot.de)and Ad-AwareSE (from lavasoft.de and lavasoftusa.com) I also use zonealarm (from zonelabs.com). These are free, but I suggest you purchase them, and keep them updated (any form of protection is only as good as the last update). Don't rely on the firewall that comes with XP (even the SP2 one). Don't keep any passwords on your computer (I have a little utility that finds them in about 5 seconds, and any hacker can do the same).


Inspite of my precautions I had a keylogger installed on my machine and was hacked, this resulted in my e-bay sellers account being taken over. The problem with spyware is it missuses the OS to do it's dirty work and is sometimes very hard to work out how this is done. There is some spyware that is unremovable from XP machines once installed and the machine rebooted.

If you don't have a spyware blocker installed, run your spyware checks BEFORE you shut down your machine.

Don't download any "free" toolbars or "internet boosters", these are some rather nasty bits of spyware as a rule.

Finally if you should lob onto a porn site disconnect from the net immediatly (if your modem is external, turn it off as that is the quickest way) and then clean your machine before shutdown.
Jim Forayter

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by keyhoti / December 3, 2004 7:14 AM PST

I haven't read all of the responses, so maybe I will repeat something, but on the subject of "free toolbars" I'd like to specifically mention "MyWeb" as one to stay clear of.

Collapse -
identity theft
by jaw444 / January 15, 2005 7:01 AM PST

Jim, or anyone
About storing passwords on the computer--Is it safe to have them on the computer if they are encrypted and can only be opened with a password that is not stored on the computer?
thanks

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by Earl / December 4, 2004 9:33 AM PST

Thank's for such imfomation! It's nice to have someone thatknow's more than you on a subject.
Thank's Again!

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by Lo Fu / December 5, 2004 1:39 AM PST

Citi Cards has a program that generates a one time use CC number. expirations date, and the 3 digit number you find on the back of your cards. These number can not be used again.

Pay Pal is another way to generate one time payments for items for those companies that use Pay Pal.

Bank of America Credit Cards offers a login prior to authorizing online use of their Credit Cards.

Of the 3 I perfer using my Citi Card. I like the one time use number which supposedly can't be back traced.

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by tnystuen / December 5, 2004 4:38 AM PST

Thanks Gary, you are absolutely right.
let me go one step farther. Many credit card companies are letting you view your charges online. Of course viewing it with encryption. We (consumer) need to get into the habit of viewing these charges online at least once every week or two weeks.

this was how I was able to see that someone had stolen my credit card number not my card and was making charges. Luckily it was only two weeks worth.

Tracie

Collapse -
Re: 12/03/04 Protect yourself from identity theft and fraud
by Ira / December 9, 2004 11:07 PM PST

I use almost everything mentioned in this discussion string, including checking my accounts regularly on secure sites for fraudulent charges plus having multiple spyware, firewall & virus programs. My original question, though, specifically addresses a program called Identity Theft Protector by Broderbund. Has anyone had any experience with this program? Is it safe to use & reliable or will I just be wasting my time and exposing myself to more fraud? Thanks to everyone who has contributed to this discussion & I'll appreciate a specific reponse to my Identity Theft Protector querie, if possible.

Collapse -
Identity Theft and Fraud
by ghonor / December 25, 2004 4:55 AM PST

Recently my Visa card holder made a "Virtual Number" available for a one time use. After signing in a web site, I select the Visa icon, in turn they provide a usable one time number and fill in the sites requested form info. Never have to use your real Credit Card number.Seem's safe to me.

Collapse -
identity theft and fraud
by jaw444 / January 15, 2005 10:37 AM PST

Gary, thanks for all that information.
I read the article about the difference between identity theft and identity fraud. I was surprised to read that the writer believes identity fraud to be "well handled" by the financial industry. I think that it is a growing epidemic, spreading rapidly. I have recently been experiencing such attacks, and it seems that whenever I mention it to someone, either they or somone they know has been through it to one degree or another.

I don't know what the article means when saying that identity fraud is being well handled by the industry.

I just read a synopsis of the Fair Credit Reporting Act yesterday. There really seems to be nothing in the way of enforcement provisions to protect the consumer against the failure to protect their personal information by the financial industry and the credit bureaus.

While at least in theory, consumers have zero liability for fraudulent purchases on their credit and debit cards, when my debit card was used to make about $400 worth of purchases in a two week period, my bank first issued a temporary credit to me pending the outcome of their investigation, and then sent me a letter saying they concluded their investigation and determined the charges were authorized by me, and so they were going to reverse the temporary credit and remove the $400 from my bank account.

They never interviewed me. I had no access to commuicate with my investigator. I was only permitted to speak to representatives who would then email what I said to the investigator. I was able to fax a response to the investigator, but not to receive any feedback from the investigator. It was a one way communication. The card that was used for this theft is called a platinum debit card, and on my bank's website, is advertised as coming with zero liability for unautorized use if reported promptly. This is false and misleading advertizing. When my bank concluded that the charges were authorized by me, the reason given to me for that was that I had done business with the two merchants involved. This, i was told, according to the rules governing such things, meant that by definition, those charges made by someone unknown to me and without my permission, were NOT fraudulent, and i was liable for the $400 spent by the thief.

Their advertisement should say "Our cards come with zero liability for unauthorized use, unless you have done business with the merchants before the unauthorized use, in which case the unauthorized use will be considered authorized."

I could give many more examples, and every person who goes through this kind of identity fraud/theft can give many such examples.

When you are a victim of identity theft or fraud, you are supposed to contact the credit bureaus and have them place a fraud alert on your file so that when creditors look at your report when considering extending credit, they will contact you first to make sure you are the person applying for credit.

Transunion did this accurately and responsibly, and timely. Experian on the other hand, put the fraud statement on my report with NO PHONE NUMBER! How could a creditor contact me if they don't have contact information? I called Experian and asked them to add a phone number. Later, I saw my revised report. They had put my phone number, but WITHOUT THE AREA CODE! I am surprised that our legal system allows an agency that handles such important information to use such incompetent people. I called and asked that my area code be added. Later, I saw my new report and an area code was added, but IT WAS THE WRONG AREA CODE. I dont' know if it was a real area code at all. Months went by while i was under attack by thieves and this Bureau placed no priority on playing its role in the effort to protect my credit and the creditors who would be defrauded. I called Experian to ask them to correct the wrong area code, and i was told that I had put the request in writing and mail it to them, attach my phone bill and give them 30 days to decide whether to correct the wrong area code they placed on my file. This began in September and at this writing, is still not corrected, despite my efforts.

This bureau has NO accountability. Each time I talked to them, I wrote down the name of the person I was talking to, the date and time of the call. The people refused to give last names. They refused to give any employee number. Later when I was told that they "never" change fraud statements over the phone and only do it in writing, when I told them I spoke to Cassandra at their fraud number on such and such a date, and she told me she was making the phone number change on the computer, I was told only that this does not happen. When I asked to speak to Cassandra, I was asked for her last name! I was told they have a lot of employees and the person I was talking to does not know any Cassandra. I asked speak to a supervisor. I was told that they would have a supervisor call me back. I asked the name of the supervisor. I was told "Ms Johnson." I said "What is her first name?" I was told "We don't give out that information." I said that Johnson was a very common name and how would anyone know who I meant if i called back and asked for her. I was told that they would know.

I was told I could not have the name of Ms Johnson's supervisor.

When the writer of the article says that the financial industry is managing identity fraud well, they are not speaking from the perspective of a victim. I don't really know what they mean. The financial industry is in need of strong government regulation, based on my experience. They are totally unaccountable and whether or not they behave responsibly is up to them. It is not required of them. A consumer has no real recourse, thanks to the new laws that just went into effect, signed by President Bush, which took away the right of the states to pass stronger laws with real enforcement that could really protect consumers. The right to sue financial agencies that abuse consumers was taken away.

yes, the financial industry is handling identity fraud very well, for the industry, allowing them to be unaccountable, incompetent and it's no wonder that identity fraud is a rapidly spreading epidemic. The article seemed to blame the consumer for this increase, saying that consumers often unwittingly create the problem by giving their credit cards to waiter or not shredding financial documents before putting them in the trash. These are long term practices that have always been relatively safe in the past. Consumers haven't developed any new negligent behaviors that can explain the explosion of identity theft and fraud in recent months and years. What's new is that creditors are overly eager to grant credit to a degree in which they negligently ignore signs that the applicant is fraudulent, and they are negligent in this way because they know they can't be sued and there are no sanctions, no motivation to be more careful. They write off their losses and pass the costs on to the consumer. It's a win/win situation for them.

Meanwhile, the victims endure terrible ordeals, and only part of the ordeal is caused by the criminal. Many who go through this will tell you that the treatment by the financial industry is at least as painful, and that is what takes the time which costs we victims so much, the time we miss from work, from our families, from our chores and responsibilities, the stress this lack of time causes--trying to repair and stop ongoing attacks of identity theft/fraud is a full time job. You find yourself wishing you could hire someone to do it, while you continue at your regular full time job that you have to work at in order to pay your bills. but you can't afford to hire a full time employee to work on your identity theft. And again, it's not the criminal who takes all your time. It's the financial industry and the system ostensibly set up to help you clear up the problems that costs you your life. The hours you spend on hold waiting to talk to the person you need to talk to at a bank or credit bureau or government agency is somehting youwould not believe or be able to conceive of until you have gone through this. The letters you have to write, the trips to the post office, the toll calls, the follow ups the fielding new attacks, the affidavits, the faxes, and the knowledge that if you leave it to chance, if you don't follow up, you will end up paying the price, hanging over you, draining you, exhausting you, the frustration, the loneliness, the sadness and the anger.

I don't think identity fraud is well handled at all. If legislators and the president really cared about the victims, we would have a different system than what we have.

I don't think there is much difference between identity theft and identity fraud. Identity theft, as the article defines it, is one kind of identity fraud, where someone impersonates you for financial and other purposes, for illegal gain. Identity fraud is where one or more people use your personal information so that they can pretend to be you for the purpose of illegal gain. I don't really see any meaningful difference.

Collapse -
WHY did 2 Counties in IL let a convicted felon off of 8 NEW
by IDTheftvictim / February 25, 2005 3:20 AM PST

Why 2 Counties Will & Dupage Let A Convicted Felon off of 8 NEW Charges?

I am a victim of Identity Theft committed by a convicted felon who has done this to me several times. She was let off because of claims of medical conditions?? Like she can't be treated in Prison? What is wrong here? So she can rob and steal from people and alls she has to do when the Court system catches up with her is to just claim she has cancer, MS or some other staged up claim and she is FREE? That is what she used in both Counties below to get off! Just think how much money these thieves can get away with! Like Probation is going to do a darn thing? ONLY IN AMERICA! She is no different from someone that robs a bank! I am OUTRAGED AT THE JUSTICE SYSTEM PERIOD! What exactly will stop her from doing this to me again? In 95 she stole my Identity and there were NO laws to prosecute her. NOW here we are in 2005 and have laws and alls they do is give her probation? PLUS she is a prior convicted FELON with a Criminal Background that does NOT stop!


The felon now has 8 Current Identity Theft Charges/Check Deception Charges in 2 Counties, Will and Dupage. Six charges in Will and 2 charges in Dupage. She also did prison time in 95 For Embezzelling and Employee Theft in Dupage County.

Here are the 6 charges in Will County:

12 15 4 405 930 02CF000723 0 FINANCIAL ID 2 Sentencing
12 15 4 405 930 02CF000724 0 FORGERY/ISSUE/DELIVER 1 Sentencing
12 15 4 405 930 02CF000724 0 FINANCIAL ID THEFT 2 Sentencing
12 15 4 405 930 02CF000723 0 FORGERY/ISSUE/DELIVER 1 Sentencing

I cannot believe the Judge gave her probation???

2 Charges In DUPAGE COUNTY Dupage County Case Numbers:

04 CF 2875
04 CF 1193

February 2, 2005 she faced sentencing of the above cases. 1 Identity Theft and 1 Check Deception.
I was the Identity Theft Victim. The Judge AGAIN gave her probation because Will County did and Also she is claiming to have a Medical Condition? I don't care she can be treated in PRISON! ALSO why is she given the ROYAL treatment of being on Probation ?? SHE has a very LONG criminal background with drug conviction charges, Identity Theft charges and many more. PLEASE ... I want these cases thoroughly investigated by Internal Affairs and I WANT Justice so she is PUNISHED and PROPERLY SENTENCED AND PUT BEHIND BARS PERIOD! I thought Identity Theft was a Federal Crime???

Collapse -
Security
by Sara King / March 17, 2005 9:22 PM PST

I need to know, for total security, what one must have to protect security all around: Firewall, adware/spyware software, anti-keylogger software? Some antispyware has antikeylogging - but the anti keylogging software advertises that it does not use "signature bases" which will prevent even new keyloggers from accessing your information. I currently have a firewall and antispyware. Do I also need anti-keylogger software as well for identity theft protection? Thanks, SK

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Tech for the holiday

Find recipes for July 4 with these foodie apps

The Fourth of July means fireworks, fun and food. If you're planning on a barbecue this weekend, we've got the apps to help you find holiday-inspired recipes.