Author Topic: Identity Theft  (Read 17480 times)

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Identity Theft
« on: March 24, 2005, 05:12:51 PM »
Traveling exposes us to situations where criminals can acquire information that can lead to identity theft.

What is identity theft?

Identity theft occurs when someone steals your personal information and poses as you. They may open credit card accounts, apply for loans, rent apartments and establish cell phone service — all in your name. In many instances, they request address changes for you, so you never see the bills for their activity. These impersonators spend as much money as possible — in a very short time. Most people never know this is happening until they apply for a loan or receive a call from a collection agency. Clearing up the effects of identity theft can be a nightmare, and it takes time. You can spend months or even years re-establishing your creditworthiness.

How is personal financial information stolen?
 
Over the phone — by someone posing as your employer, bank or other service provider to confirm or update your information
From your mailbox — stealing items in your mailbox (incoming and outgoing) such as credit card offers, account statements & bill payments
Your garbage can — discarded bank statements, credit card offers, canceled checks
Internet sites — entering personal information on a site that is not secure
Where you shop — a clerk may copy personal information written on a check
Post Office — someone may initiate a change of address on your behalf
Fake Charity Collectors -- People posing as collectors for charity get your name, address, phone number and even your social security number for the "fake receipt" they give you.
Fake Email-- Email from crooks who ask you to confirm account information for your bank, ISP or other seemingly legitimate source
 

How can I help prevent identity theft?

Regularly review your credit reports. The credit bureaus offer services, such as Equifax Credit Watch, that can help you monitor any inquiries against your credit file.
Don't give out financial information on the phone unless you initiated the call. This means your Social Security number, credit card or checking account numbers. Your bank will never call you and ask you to provide that information.
Store all personal and financial information in a safe place, especially if you have outside workers in your home.
Report any lost or stolen checks immediately. Ask your bank to stop payment on any missing checks.
Review your new checks when delivered to make sure none are missing.
Store new checks and canceled checks in a safe place. Be sure to tear up or shred any checks that you are discarding.
Don't share any of your passwords or PINs. Be sure you enter them discreetly so no one can see. Also, properly store or dispose of your ATM receipts.
Tear up any financial solicitations or documents before throwing away. We recommend using a shredder when possible.
Outgoing mail should be placed in a secure mailbox, instead of being left in your own mailbox.
Pick up your mail promptly. If you're going to be on vacation, ask someone you trust to collect your mail for you while you are away, or ask the Post Office to hold your mail until you return. You can get an Authorization to Hold Mail form at your local post office
Keep an eye on your monthly bills. If they don't arrive as expected, contact the company to investigate. Look for any suspicious charges and report them immediately.
 

What do I do if I'm a victim?

If you find you have become a victim of identity theft, you should take action by communicating with the credit bureaus and any companies that may be involved.


Credit and charge card fraud costs cardholders and banks hundreds of millions of dollars every year. The theft of your credit cards is a common way to commit fraud, but someone can use your account number fraudulently while your card sits safely in your wallet.

The following tips will help you reduce the chances that you will become a victim of credit card fraud:

Sign your cards immediately once they arrive in the mail.
Memorize your PIN and don't write it on anything, especially something in your wallet.
Don't enter your card online unless you're on a secure site. Don't send your credit card number in an email.
Keep a record of all your account numbers, expiration dates, and contact information for each issuer. This will come in handy if your wallet is lost or stolen.
Report a lost or stolen card right away. Quick action will minimize potential loss and liability.
Save your receipts to compare against your billing statement. When discarding receipts, tear them up or shred them.
Monitor your statements monthly, making sure you recognize all charges. If you see any suspicious transactions, contact your bank immediately.
Carefully review receipts for voided transactions and be sure they do not post to your account.
Destroy your carbons. Do not leave them behind without tearing them up.
Don't leave your purse, wallet, cards or receipts unattended. Always keep them secure or in your sight.
Only carry cards that you need, leaving others in a safe place at home.
Don't give out your account number unless you know and trust the company.
Don't give out your account number to someone calling you.  Call them back to ensure the company is legit

Precautions to consider when using an ATM:

Be sure ATM and parking lot are well lit when using at night. Avoid going alone.
Don't use an ATM if you notice any suspicious activity.Be aware of your surroundings at all times. Find another ATM, or come back at a safer time. Report any suspicious activity to the police.
Don't count your money at the ATM. Wait until you are in your car or, even better, are safely at home.
When using Drive-up ATMs, keep your doors locked, other windows rolled up and the car running.
Prepare yourself by filling out all deposit slips ahead of time.
Report your lost or stolen card immediately. 


When traveling, here are some security precautions to consider:

Carry limited cash. Use traveler's checks or withdraw money with your ATM card as you need it. Keep your traveler's check receipts in a safe place that is separate from your traveler's checks.
Keep a spare credit card in a safe place like your emergency escape bag at the entry of your RV. Only carry the cards that you'll need. If your wallet gets stolen or lost, or if your RV burns,  you'll have another credit card you can use.
Know where you're going. It's a good idea to find out where the less safe parts of town are so you can avoid them, especially at night. Use GPS in your coach or car when possible.
Make a photocopy of your passport. Keeping a photocopy of your passport will help if yours is lost or stolen. In the event of loss or theft of your passport, visit the closest embassy or consulate.


Don't let your mail accumulate while you're away. If you're going to be on vacation, ask someone you trust to collect your mail for you while you are away, or ask the Post Office to hold your mail until you return.

If you're a victim of fraud, here are some important actions you should take:

File a report with your police department. Make sure to keep a copy for your files.
Contact the fraud departments of all three credit bureaus and let them know you are a victim of identity theft. They can place a "fraud alert" on your file. This informs any credit grantors that they should be especially careful when authenticating anyone who is applying for credit in your name. You should also request copies of your credit report from each bureau. This request must be in writing and they should be free if you mention you have experienced fraud. For further information, contact each bureau at the numbers listed below.

Equifax: 1-800-525-6285
Experian: 1-888-397-3742
Trans Union: 1-800-680-7289


Contact all lending institutions that issued a fraudulent account in your name. Close all the accounts immediately.

Report the incident to the Identity Theft Hotline at 1-877-438-4338. This hotline is operated by the federal government and is a central point for reporting identity theft. You can also report the incident via their Web site at www.consumer.gov/idtheft or by mail at:

Identity Theft Clearing House
Federal Trade Commission
600 Pennsylvania Ave NW
Washington, DC 20508

Contact your nearest postal inspection service if you believe your mail has been stolen. .
Close all your accounts that have had a fraudulent address change. When re-opening accounts, ask that a special password be required when making any changes to your account.

Contact the major check verification companies if you have had any checks stolen or used fraudulently. They can help you track your checks.
Equifax Check Systems: 1-800-437-5120
Cross Check: 1-707-586-0431
SCAN: 1-800-262-7771
TeleCheck: 1-800-710-9898

Contact your broker and the Securities Exchange Commission (SEC) if you suspect your investment accounts have been tampered with.

Have you been a victim of identity theft?  If so, how did you deal with it? 

What additional precautions can we take while traveling to protect ourselves?

Edit: Made the topic sticky - Tom.
« Last Edit: March 24, 2005, 06:15:42 PM by Tom »

Ron

  • Forum Staff
  • ---
  • *
  • Posts: 18126
    • RON'S SATELLITE INTERNET SOLUTIONS
Re: Identity Theft
« Reply #1 on: March 24, 2005, 10:46:37 PM »
Good information Steve. Identity theft can happen to anybody whether thet travel or not.  Best answer is to take the precautions you mentioned.

Ron & Sam-home is where we park it. Currently located   HERE   RON'S  SATELLITE INTERNET SOLUTIONS
Certified Hughesnet Satellite Installer

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #2 on: March 26, 2005, 03:35:36 PM »
While  at Wal Mart yesterday, the cashier asked my name when I handed her my credit card.  She said it was one way to detect a stolen credit card.  I commended her for taking that initiative, and she made one other suggestion for protecting one's credit card.

Using an indelible marker, write the letters CID on the signature strip.  This will prompt a sales person to ask for identification when presented with your credit card.

Not a bad idea I thought...at least for face to face transactions.

How can one protect fraudulent use of their credit card for online or telephone order purchases?

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #3 on: March 26, 2005, 03:50:03 PM »
We have written "Ask for photo id" on our credit cards for years.  Only once was I told I had to sign the card before they would honor it.  After a lengthy "discussion" with the clerk and the store manager, I walked out.  They lost a $200 sale.  They couldn't see the flaw in asking me to sign the card in front of them and then using that signature to verify the signature on the sale slip.

For online and telephone purchases, you are usually asked for the CVV/CVC code, a 3 or 4 digit code on the back of the card.  This proves that you have physical possession of the card.  See http://www.sti.nasa.gov/cvv.html for more information.
« Last Edit: March 26, 2005, 03:52:54 PM by Ned »
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #4 on: March 26, 2005, 04:01:24 PM »
OK, I've been asked for the three digit number on the back of the card, but if the bad guy in a restaurant for example copies my credit card number, he would also want to copy the CW/CVC code as well.   

Are there some credit card companies promoting their cards to be safer on the internet?  Does it have something to do with an additional password or some added step in authentication?

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #5 on: March 26, 2005, 04:20:03 PM »
The CVV/CVC code won't protect you from anyone you let have your card, but that's always been the case.  I don't understand why people are so afraid of using a credit card on the internet yet will hand it over to a perfect stranger in a store or restaurant.  There is caution and then there is paranoia.  And some of these same people feel perfectly comfortable using a debit card that takes the money directly from their checking account.  Now that's scary ;)

Most, if not all, credit cards have available software to generate one time card numbers for internet purchases.  Discover calls it DeskShop and my AT&T (now Chase) Mastercard calls it Virtual Account Numbers.

The credit card companies are on your side.  In the event of fraud, you notify them of the fraudulent charges and they credit you while they ask the vendor to furnish proof of your purchase.  Goods purchased with a stolen credit card have to be shipped somewhere, and if it isn't to your address of record, it's pretty obvious what happened.  In the case of services, it's a little more complicated, but, again, the card companies will take your side in all but the most unusual situations.

I have used my credit cards for online purchases for many years and don't worry any more than using them in stores.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #6 on: April 01, 2005, 11:28:48 AM »
The number of email phishing scams appears to be on the increase.  Learn more about this danger to losing your identity to criminals by taking the Phishing IQ Test

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #7 on: April 01, 2005, 03:53:57 PM »
Avoiding a phishing attack is very simple.  NEVER click on any links in the emails, go to the alleged web site via the normal URL and log into your account from there.  If there is any problem, you'll be notified at that time.  Most of the phishing emails will be for banks, etc. that you have no relationship with and those should be deleted without even opening.

It's really incredible how gullible so many people are.  If it doesn't look or sound right, it probably isn't.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #8 on: April 01, 2005, 04:06:24 PM »
It seems that some phishing emails appear to be legitimate even in the URL.   If the correct URL for the Bank of Florida is BOF.com, then the phishing email might be addressed to a URL like  ww.238563BOF8740.com   using some or all of the legitimate business's name to make itself appear real.

Your advice is well taken, Ned to never respond by using a link supplied in an email.  The problem occurs when late adopters to the internet are still naive and have not been schooled in the dangers that they might encounter.

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #9 on: April 15, 2005, 06:30:04 AM »
The U.S Federal Trade Commission has an IDENTITY THEFT HOME PAGE which offers advice on detecting and dealing with identity theft.  Also available on this site is the procedure to file a report in the event you have been a victim of ID theft.

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #10 on: April 15, 2005, 08:37:37 AM »
Your advice is well taken, Ned to never respond by using a link supplied in an email.  The problem occurs when late adopters to the internet are still naive and have not been schooled in the dangers that they might encounter.

Sometimes I think that there should be manadatory training and a test passed before some people are allowed to operate a computer.  Just like driving a vehicle :)
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #11 on: April 15, 2005, 11:30:34 AM »
For an interesting view on the misnamed "identity theft" see http://www.schneier.com/blog/archives/2005/04/mitigating_iden.html  Schneier puts the blame right where it belongs, and it's not on us.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Len and Jo

  • ---
  • Posts: 596
Re: Identity Theft
« Reply #12 on: May 15, 2005, 02:55:00 PM »
I really like our Costco American Express credit cards.  They have a colored photo of us on the back.  Jo's card has a picture of her and mine me.  Very easy to see that the person presenting the card matches the face on the back of the card.
Len & Jo
We B RVing
Berkley, Michigan

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #13 on: May 15, 2005, 03:08:39 PM »
A card with the photo on it is not as secure as a separate photo ID.  Any card can be forged, photo included, but a separate photo ID with a signature to match against is much more secure.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Bob McNabb

  • ---
  • Posts: 45
Re: Identity Theft
« Reply #14 on: May 26, 2005, 12:38:38 PM »
Our credit card was, in some way, copied and used in a 2 day spree of over $12,000 in local purchases. It had been out of our hands only 2 times in the week before the spree. In those instances, it was "out of sight" for annoying intervals. Simple restaurant for lunch, in one case....and a jewelry store in the other.

Our credit card company was very helpful and we didn't have a loss, but the inconvenience and time involved and the issuance of a new numbered credit card has made me extremely cautious. We've become aware that many, not just a few, of our friends have experienced various forms of identity theft.
Bob McNabb
2004 HR Scepter DP
1998 Saturn toad

San Diego, CA

Smoky

  • ---
  • Posts: 3261
Re: Identity Theft
« Reply #15 on: May 26, 2005, 12:58:05 PM »
I had a scare this week on my trip to Montana.  And I realized the potential for another way to get nailed.

I had a LOT of trouble getting Internet access.  When I got to Kalispell I found that I forgot my Samsung cell phone.  This was the perfect opportunity to upgrade, something I had planned to do in July when I got to MT.  I went ahead and upgraded to the LG VX6100.  Then found not a single store in Montana had the MOK.

So I figured I would use Compuserve dialup.

I discovered CS had no Kalispell numbers.

Then finally I learned that the hotel I was at provided free wireless service.  I jumped for joy and grabbed my Air2Data kit.  I had never heard of Air2Data, but my joy at getting on the Internet got in the way of checking things out.

It took several days to get the darn thing to work.  Really bizarre things went on with the laptop.  I had to deactivate Norton Internet Security to get things working.  I later discovered that Norton had been changed from my home setting to the away setting by Air2Data.  I found all kinds of other annoying changes.

When I got home and back on my Comcast broadband, I discovered i could not access either of my two banks, or any of my credit card sites nor my investment site.  But I could access any non financial site.  Really weird and now I was scared as I wanted to check balances in all my accounts.

It finally occurred to me I had exposed my laptop to a wireless network without knowing anything about the wireless company nor the independent hotel.  I will never make this mistake again.

As it turns out all my money is intact and it took me 4 hours of tinkering with settings to get my Comcast running again properly.  There is no doubt that Air2data wreaked havoc with my laptop.  But I do not believe I was hacked.  I could have been though, for all the checking I did.  Especially when I allowed my Norton firewall and my other securities to be deactivated, just to enjoy getting my mail.
Smoky S  Ham radio - W3PY

The magic of a campfire
where the fish get bigger
the mountains get higher
the hike was uphill both ways
and new friends become old friends

2005 KSDP3910 Newmar Kountry Star
Toad - Taurus wagon w/ axle lock
Boondocking solo at White Tank
QZ, AZ after weekend

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #16 on: May 26, 2005, 04:07:15 PM »
Smoky,

Are you using any Spyware protection program?  The Microsoft Anti Spyware (Beta) alerts you to any settings that are attempted to be changed in real time.

More info in  This Thread
« Last Edit: May 26, 2005, 04:10:48 PM by Steve, CDN »

Tom

  • Administrator
  • ---
  • *
  • Posts: 25172
    • RV Forum web site
Re: Identity Theft
« Reply #17 on: May 27, 2005, 06:38:32 AM »
Smoky

I always hover the cursor over the icons for NIS and NAV to make sure they are enabled every time I get online. Occasionally I'll find one or the other is not enabled and I'll enable it manually.
Tom.   Need help? Click the Help button in the toolbar above.

Smoky

  • ---
  • Posts: 3261
Re: Identity Theft
« Reply #18 on: May 27, 2005, 09:09:33 AM »
Yes Steve I do have the MSFT anti spy beta.  I also run ad aware, and spy bot once a week.  And I have Norton Internet security running all the time, even behind my router.  The gurus at CS keep telling everyone you don't need to run NIS if you are on dialup or behind a router.

That is pure bunk IMO.  NIS has picked up intrusions through the router, and if anyone hangs online on dialup, as I used to do, they are definitely susceptible to intrusion.  The only protection dialup gives are for those who only stay on line for a few minutes at a time.  I think a large part of the CS culture was embedded in this approach, using their OLNs.
Smoky S  Ham radio - W3PY

The magic of a campfire
where the fish get bigger
the mountains get higher
the hike was uphill both ways
and new friends become old friends

2005 KSDP3910 Newmar Kountry Star
Toad - Taurus wagon w/ axle lock
Boondocking solo at White Tank
QZ, AZ after weekend

Ron

  • Forum Staff
  • ---
  • *
  • Posts: 18126
    • RON'S SATELLITE INTERNET SOLUTIONS
Re: Identity Theft
« Reply #19 on: May 27, 2005, 06:37:17 PM »
Smoky,

Are you using any Spyware protection program?  The Microsoft Anti Spyware (Beta) alerts you to any settings that are attempted to be changed in real time.

More info in  This Thread

I have just recently started using Spy Sweeper by Webroot.  I has removed a few things that AdAware, MS spyware and spybot Search and distroy has missed.
Ron & Sam-home is where we park it. Currently located   HERE   RON'S  SATELLITE INTERNET SOLUTIONS
Certified Hughesnet Satellite Installer

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #20 on: May 28, 2005, 10:50:03 AM »
Where is Spysweeper available Ron?

Ron

  • Forum Staff
  • ---
  • *
  • Posts: 18126
    • RON'S SATELLITE INTERNET SOLUTIONS
Re: Identity Theft
« Reply #21 on: May 28, 2005, 06:54:51 PM »
Where is Spysweeper available Ron?

Spy Sweeper can be purchased at Best buy or Fry'e Electronics or you can download it [HERE]

« Last Edit: May 28, 2005, 06:57:31 PM by Ron »
Ron & Sam-home is where we park it. Currently located   HERE   RON'S  SATELLITE INTERNET SOLUTIONS
Certified Hughesnet Satellite Installer

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #22 on: June 12, 2005, 07:58:15 PM »
The Royal Canadian Mounted Police (RCMP) in Canada have a website devoted to prevention of identity theft.  The Phonebusters site describes the various scams on the internet, phishing, email scams and provides strategies to protect yourself and your computer.

Check out what the Mounties have to say CLICK HERE

Ron

  • Forum Staff
  • ---
  • *
  • Posts: 18126
    • RON'S SATELLITE INTERNET SOLUTIONS
Re: Identity Theft
« Reply #23 on: June 12, 2005, 08:52:16 PM »
Steve,

Looks like a very informative site with informations that is applicable everywhere.  Thanks for posting that.
Ron & Sam-home is where we park it. Currently located   HERE   RON'S  SATELLITE INTERNET SOLUTIONS
Certified Hughesnet Satellite Installer

fredethomas

  • Forum Staff
  • ---
  • *
  • Posts: 342
Re: Identity Theft
« Reply #24 on: October 04, 2006, 06:34:34 PM »
We are having one of our computers - a PC rebuilt and the retired Army Intelligence Corps signal electronic guys doing the work are suggesting we get away from ZoneAlarm, Norton and Windows spyware and anti-virus stuff.  They claim the "Crackers" have been working against those programs for so long now they have found ways to run junk in along side that is no longer detected.  It was like Apple being free of intrusions for a long time because there were not as many on the market as IBM style units and Windows.  They have some program that they can run on a test basis to see things that are in the system but not detected.  We are removing all the current long time anti-virus and spyware and going with a new one.  Think is is called "penguin?" One purchase is good for three computers.  Don't know much about it as the PC is still being rebuilt.  Two 80g hard drives runing in the mirror phase.  High grade CD/DVD + R RW.   No more Segate Tape nor PCMCiiA card readers and maybe no floppies.  Up graded vidio if they think it will help with Daisy's work in old, old family pictures and new scenic ones we take and we get from others.  Also a program that will let us use a laptop while on the road to work the home PC and other home laptops as if we were sitting in 
front of them.  They and I put in a system that allows us to control and watch TV programing and to control the TIVO from the road via the internet.  The remote is shown on the remote computer and is activiated by clicking on its buttons.  That is Slingbox from SlingMedia and can be seen using Google to find them.  Could add video cameras to the house and see how things look there from the remote but internet connected Wi-Fi places.

We found out last week that all of our "telephone" outlets throughout the house were wired with Cat 5 and are actually combined phone and ethernet outlets.  Put a switch in connecting all the ports to a four and an eight port router with a switch for a bridge.  With no home land line everything is now ethernet but with changing one wire can be converted back to land line usage if we - or our estate sell the house.

FRED E. THOMAS

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #25 on: October 04, 2006, 08:57:28 PM »
Fred, you're really getting high tech :)  SlingBox is a really neat device, but you do need a broadband connection at both ends to make use of it.  The old analog cell phone just won't cut it anymore.  You can do a show and tell when we get there in a few weeks.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

DonTom

  • ---
  • Posts: 1550
Re: Identity Theft
« Reply #26 on: November 20, 2006, 02:16:03 AM »
"For online and telephone purchases, you are usually asked for the CVV/CVC code, a 3 or 4 digit code on the back of the card.  This proves that you have physical possession of the card."

I am a recent victim of on-line credit card fraud. Those three digits didn't help at all. An employee of a place I was doing business with (on-line) must have sold all the information to somebody else, who was using it for expensive downloads  on line ($700.00 bucks worth).

The good news is I know which business ripped me off because the fraud was a few days after the one time I used this credit card in about a year. That made it quite obvious. A police report has been filed in this case.

This is the third time that I have been a victim of credit card fraud, but this was the only time from on-line. I noticed the $700.00 worth of charges no more than a day later after it was fraudulently used.

The time before this, somebody made an illegal copy of my credit card with a different name on it. I have reasons to believe this was done at a Chinese Restaurant in San Francisco. In this case, the credit card company discovered the problem before I did and called me.

The other time was when I charged  $200.00 worth of gasoline for $15.00 worth of gasoline into a small car.  I had the receipt with much different numbers than the bill.

Anyway, fixing all these problems went smooth at no cost to me.

                                                        -Don-

-Don-   AA6GA

2000 Fleetwood Tioga 24D, 7.4L

SSF, SF, CA or Reno, NV

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #27 on: November 20, 2006, 02:05:06 PM »
Don,

Thanks for sharing your experience.  Your stroy proves the necessity of closely following our credit card transactions and checking the transactions online, especially after dealing with an online vendor.

Though you may not want to identify the online vendor by name, would you share they general type of online vendor this was....electronics, RV supplies, music download etc?

DonTom

  • ---
  • Posts: 1550
Re: Identity Theft
« Reply #28 on: November 21, 2006, 08:14:15 AM »
Steve,

There is no reason for me to not mention the name were my credit card was illegally used. These two companies were nice enough to reverse the charges to make it faster and easier than dealing with the credit card company. However, the credit card company was notified of the fraud as well.

I am not sure what type of software these places are selling  even after I visit the websites, so perhaps somebody here can tell me.

The company names are :  Melissadata (for $99.00) and Joomlashack (for $595.90).

http://www.melissadata.com/

http://www.joomlashack.com/

The company where the employee is who I believe  ripped me off I will NOT mention here, because I cannot prove anything. But I did mention it on the police report that was filed (that this happened right after doing business with them and this was the first time this card was used in more than a year). But it is a company on the east coast that sells parts for small electric powered boats.

One thing was already discovered. The illegal download was made from Utah, far from the east coast. So it seems the credit card  information was sold to somebody in Utah.  I had a nice chat with the guy from Joomlashack from the police station. He also confirmed all the info he had on my credit card (phone numbers, etc) was the EXACT same info given to the boat parts place. He was very concerned with getting this guy busted, before the illegal downloaded $600.00  worth of  software spreads all over the internet.


                                                            -Don-
-Don-   AA6GA

2000 Fleetwood Tioga 24D, 7.4L

SSF, SF, CA or Reno, NV

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #29 on: November 21, 2006, 02:29:37 PM »
The bad guy may or may not be in Utah  :(  My understanding is that bad guys on the internet can appear to be on one place while actually operating from far away.

We can never be too vigilant!

DonTom

  • ---
  • Posts: 1550
Re: Identity Theft
« Reply #30 on: November 21, 2006, 08:55:46 PM »
"My understanding is that bad guys on the internet can appear to be on one place while actually operating from far away."

Yes, I was wondering about that too..

BTW,  just last Sunday a guy called me here at home pretending to be the fraud department of that same credit card. They were asking me for information in reference to my OLD account number, the same account number that was used fraudulently. They were asking me to confirm my birthday and stuff like that, but he wanted ME to tell him.  I wouldn't fall for it and reported this to the credit card company.

Perhaps I should have just given him false information and see what happens from there.

                                                                     -Don-
                                                           
-Don-   AA6GA

2000 Fleetwood Tioga 24D, 7.4L

SSF, SF, CA or Reno, NV

Shayne

  • ---
  • Posts: 4337
Re: Identity Theft
« Reply #31 on: November 21, 2006, 09:08:47 PM »
I had that happen to me once and just for the heck of it , I told him to send info to an old E mail account  and I would forward it.  Well he did and I did, but I sent the email with his info to the FBI friend of mine    They caught him.  Don't know what the results where but it satisfied me.  I save that email account for crap like that, nothing else.
Old, Stubborn, Opinionated, Set in my Ways, and Independent,  IMHO

DonTom

  • ---
  • Posts: 1550
Re: Identity Theft
« Reply #32 on: November 21, 2006, 11:40:18 PM »
The fraud was against my Altura Credit Union account. They have been having other fraud problems too. You can read about it on their home page at:

http://www.alturacu.com/home.cfm


Where their website page was redirected to a fake one!  This had nothing to do with my fraud case.

See here.

                                   -Don-
-Don-   AA6GA

2000 Fleetwood Tioga 24D, 7.4L

SSF, SF, CA or Reno, NV

steves patriot

  • ---
  • Posts: 45
    • Steve & Leslie's RV Adventures
Re: Identity Theft
« Reply #33 on: December 13, 2006, 11:39:21 PM »
I was a victim of the 'phishing' type of fraud last week, the information requested from me was supposedly from my bank about my on-line account and the questions they were asking appeared to be questions only my bank should know so I gave my ATM account number to them.  That was Wednesday, by Friday night a $650.00 on line ATM withdrawal was attempted through Western Union.  The 'crooks' were trying to wire money from my account to the Netherlands.  I called Western Union and was told that they would not accept the transfer at the last minute because certain security questions could not be answered, however, the funds were held out of my account until today since my bank did accept them until Western Union replaced them.  It was scary because these people were able to give Western Union my address and phone no.  I have since called Transunion and placed a Fraud alert on my credit. 
Apparently, there is an International ring and they do this type of thing a lot, and they are always trying to wire money out of the states.  I not only feel pretty dumb but very vulnerable at this time.
Steve & Leslie
Daisy the Pug
96 Beaver Patriot
2005 Jeep Wrangler

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #34 on: December 14, 2006, 08:00:49 AM »
No financial institution will ask for any account information in an email.  If you receive such an email, and you think it might be legitimate, call your bank using the number on your bank or credit card and ask them about it.  DO NOT reply to the email.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Karl

  • Former Staff
  • ---
  • *
  • Posts: 5172
  • No Brett; no sweat. A QB's not the whole team.
Re: Identity Theft
« Reply #35 on: December 14, 2006, 12:03:55 PM »
Also, do not reply to telephone inquiries for information. People may portray themselves as police officers (FBI, ATF, etc.) doing an investigation, bank personnel, and others that you would tend to trust. Ask them for a telephone number that you can return their call to, and first verify that it is valid. Better still, tell them that you would be happy to meet with them in their office.
Karl (Cheesehead) Kolbus   Life's journey is not to arrive at the grave safely in a well preserved body, but rather to skid in sideways, totally worn out, shouting "...holy cow ...what a ride!"

Bob Zambenini

  • ---
  • Posts: 270
    • Bob and Joyce's Homepage
Re: Identity Theft
« Reply #36 on: March 25, 2007, 07:48:51 PM »
Perhaps I am paranoid about this, but it seems that when I order refill meds from either of our online pharmacies, with secure connection, over the next few days I get several emails from various places pushing low cost meds.

Same when I look for golf clubs on Ebay, the I get lots of golf email junk about free golf, golf publications, etc.

Some out there seem to have a lot of time but with my Mailwasher I can delete them in a flash.

I don't find a reason why I get all the email junk about replica watches as I only wear a Timex and have never shopped for a watch!!! :) :)

Bob

John From Detroit

  • ---
  • Posts: 8189
  • ^My New Home^
    • I-fortuity VOIP Sales page
Re: Identity Theft
« Reply #37 on: March 25, 2007, 08:17:01 PM »
I get a few hundred spam on all issues every day, I can't say as ordering something increases the amount.

Though I have noticed winning an E=bay auction tends to bring out the Phish

(And I keep frying them)

Some businesses do sell E-dresses to spammers
Nothing adds excitement like something that is none of your business
If not in Detroit John is near: http://map.datastormusers.com/user1.cfm?user=3192
Want VOIP? Check http://www.ambervoip.i-fortuity.com

Karl

  • Former Staff
  • ---
  • *
  • Posts: 5172
  • No Brett; no sweat. A QB's not the whole team.
Re: Identity Theft
« Reply #38 on: March 25, 2007, 08:42:16 PM »
Bob,
I get ad's for med's all the time and I've never ordered any over the Internet. Just a fact of life. Curiously, most of them are for Cialis or Viagra - wonder what they know that I don't?  ;D
Karl (Cheesehead) Kolbus   Life's journey is not to arrive at the grave safely in a well preserved body, but rather to skid in sideways, totally worn out, shouting "...holy cow ...what a ride!"

Bob Zambenini

  • ---
  • Posts: 270
    • Bob and Joyce's Homepage
Re: Identity Theft
« Reply #39 on: March 25, 2007, 08:49:30 PM »
Bob,
I get ad's for med's all the time and I've never ordered any over the Internet. Just a fact of life. Curiously, most of them are for Cialis or Viagra - wonder what they know that I don't?  ;D


I won't 'touch' that at all! :)

John From Detroit

  • ---
  • Posts: 8189
  • ^My New Home^
    • I-fortuity VOIP Sales page
Re: Identity Theft
« Reply #40 on: March 26, 2007, 07:29:46 AM »
Bob,
I get ad's for med's all the time and I've never ordered any over the Internet. Just a fact of life. Curiously, most of them are for Cialis or Viagra - wonder what they know that I don't?  ;D

I don't know but I do know this... They don't know how to SPELL, and would you really want to buy your meds from someone who can not spell their name

(Yes, I know the incorrect spelling is used in the crazy hope that the spam filters, which are often keyed to the proper spelling, will let them by.. Don't work but it does make for the interesting question above)
Nothing adds excitement like something that is none of your business
If not in Detroit John is near: http://map.datastormusers.com/user1.cfm?user=3192
Want VOIP? Check http://www.ambervoip.i-fortuity.com

localnet

  • ---
  • Posts: 68
Re: Identity Theft
« Reply #41 on: April 24, 2007, 01:39:04 PM »
Have any of you looked at Life Lock?

I was listening to Rush Limbaugh, have been for years, and finally took the plunge and signed up with Life Lock who is a Rush sponsor.

I cannot say that I have been a victim of identy theft, but I don't want to be either. So I figured it might not be a bad idea to sign up the family, knowing full well the ease at which the bad guys can get our info.

I have been a member for a few weeks now, and I can say this, my junk mail has just about totally stopped! We would get those credit card offers by the hundreds! I got tired of emptying the shredder every week for all of this unsolicited junk. Junk that is dangerous in my mind, because if you know a few things about an individual, you could use these credit card offers to do some serious damage.

After hearing the founder of Life Lock on a few radio shows, I said screw it, sign me up! Just having the junk mail stop and the credit reports was worth it in my book. Let's just hope they do what they say, so far so good.

Mike

jucieandginny

  • Posts: 2
Re: Identity Theft
« Reply #42 on: August 23, 2007, 09:59:10 AM »
It can happen to anyone.

Clay L

  • ---
  • Posts: 455
Re: Identity Theft
« Reply #43 on: October 20, 2007, 09:37:11 AM »
SNIP
Are there some credit card companies promoting their cards to be safer on the internet?  Does it have something to do with an additional password or some added step in authentication?

I use a software service that is offered by my credit card company. It is called ShopSafe and it generates a new credit card number that can only be used once and only for the amount you set. You can also set it for multiple uses if you wish.
A record is kept of past numbers and the charges to the numbers.  There is some info here - http://www.bankofamerica.com/privacy/index.cfm?template=learn_about_shopsafe

Also you can stop pre-approved credit cards from being sent to you by visiting this site - http://www.creditsourceonline.com/opt-out.html
« Last Edit: October 20, 2007, 09:40:38 AM by Clay L »
Clay (WA5NMR), Lee (Wife), Codi & Brandi (Shelties), Damncat (damn cat)
Full timing in a 2004 Winnebago 35N Sightseer, Workhorse W 20 Chassis.

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #44 on: October 20, 2007, 10:00:21 AM »
All of the credit cards offer one time card numbers for online purchasing.  It involves a small client program that runs on your computer to generate the one time account number.  Since the liability for credit card fraud is a maximum of $50 and in most cases will be $0, I've not seen the necessity of such a program.  And they are of no use for card present transactions.  However, for the truly paranoid, they may make some sense :)
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

RLSharp

  • ---
  • Posts: 737
Re: Identity Theft
« Reply #45 on: October 20, 2007, 02:48:51 PM »
All of the credit cards offer one time card numbers for online purchasing.  It involves a small client program that runs on your computer to generate the one time account number.  Since the liability for credit card fraud is a maximum of $50 and in most cases will be $0, I've not seen the necessity of such a program.  And they are of no use for card present transactions.  However, for the truly paranoid, they may make some sense :)

I don't know where my message went.

Richard
« Last Edit: October 20, 2007, 03:08:20 PM by RLSharp »
Richard & Linda
Rochester, NY (summer)
Tucson, AZ (winter)

John From Detroit

  • ---
  • Posts: 8189
  • ^My New Home^
    • I-fortuity VOIP Sales page
Re: Identity Theft
« Reply #46 on: October 20, 2007, 06:28:11 PM »
People keep telling me I'm crazy running zone alarm behind a router.... Checked the log yesterday. Had over  a page of "incoming" intrusions stopped and the origin told me every one of those came in via the router and got stopped COLD by Zone alarm.

Plus... I'm not always behind this router

Now when it comes to Phish... My favorite was an E-mail claiming to be from Chase Bank... It said my Chase Bank Visa card account had been comprimised and ask me to click on the link so I could give the crooks all my personal info (On a page that looked like Chase Bank)

Well... I did click on a link all right... (In my bookmark file) and then on another link (Contact us) and then I did a cut and paste of the entire post, header and all.. To Chase Bank.

You see..  I don't HAVE a Chase bank Visa, so if that account gets compromised... It's gonna be some comprimise!!!!
Nothing adds excitement like something that is none of your business
If not in Detroit John is near: http://map.datastormusers.com/user1.cfm?user=3192
Want VOIP? Check http://www.ambervoip.i-fortuity.com

Shayne

  • ---
  • Posts: 4337
Re: Identity Theft
« Reply #47 on: October 20, 2007, 07:15:45 PM »
I agree with you John   I wouldn't run anything else until someone proves to me that there is something better.
Old, Stubborn, Opinionated, Set in my Ways, and Independent,  IMHO

KodiakRV

  • ---
  • Posts: 1492
Re: Identity Theft
« Reply #48 on: October 20, 2007, 07:30:21 PM »
I use a software service that is offered by my credit card company. It is called ShopSafe and it generates a new credit card number that can only be used once and only for the amount you set. You can also set it for multiple uses if you wish.
A record is kept of past numbers and the charges to the numbers.  There is some info here - http://www.bankofamerica.com/privacy/index.cfm?template=learn_about_shopsafe
...
I got two notices in the mail yesterday from FIA Card Services that my card information may have been compromised at a third party location.  The two cc ending numbers in the letters don't match my physical credit cards, so I'm thinking they must be some ShopSafe numbers that I used.  I tried to get onto ShopSafe yesterday and all day today to check it and it tells me "ShopSafe is temporarily unavailable from your desktop."  Does anyone know what is going on there?
Frank
Florida

Ron

  • Forum Staff
  • ---
  • *
  • Posts: 18126
    • RON'S SATELLITE INTERNET SOLUTIONS
Re: Identity Theft
« Reply #49 on: October 20, 2007, 07:36:43 PM »
Much of the identity theft as well as a lot of mail fraud would be stopped if the incompetents in Washington would just make it illegal for any company or person to share personal data that is not their own and to make telemarketing and sending of junk mailing illegal also.
Ron & Sam-home is where we park it. Currently located   HERE   RON'S  SATELLITE INTERNET SOLUTIONS
Certified Hughesnet Satellite Installer

Ray D

  • ---
  • Posts: 1554
  • Jasper
Re: Identity Theft
« Reply #50 on: October 20, 2007, 07:39:34 PM »
Frank, your description is similar to two times when my card actually had been  compromised. I called the 800 number on the back of my card and chose the number for fraud. The service rep, at that number, both times, confirmed that the card had been compromised and sent me new cards with new numbers. I still got the charge on my next bill but it was credited back on the following bill without me doing anything more.

The new cards took only 2 or 3 days to get here.

Try the 800 number and tell them what you have.

Ray D  ;D
Boise, Idaho. U.S.A.F. Vet. Damon Challenger, Workhorse/Vortec, 2005 towing a Suzuki XL-7, 2003.

KodiakRV

  • ---
  • Posts: 1492
Re: Identity Theft
« Reply #51 on: October 20, 2007, 07:45:06 PM »
Frank, your description is similar to two times when my card actually had been  compromised. I called the 800 number on the back of my card and chose the number for fraud. The service rep, at that number, both times, confirmed that the card had been compromised and sent me new cards with new numbers....
Ray D  ;D
The letters say the accounts will be closed and new account numbers and new cards will be issued to me in 5-7 business days.  But, if these cc numbers refer to ShopSafe vurtual cards, then there shouldn't be any point in doing that.  That's the whole point of using that system in the first place.
Frank
Florida

Ray D

  • ---
  • Posts: 1554
  • Jasper
Re: Identity Theft
« Reply #52 on: October 20, 2007, 07:47:47 PM »
Copy that!  ;D

I see your  point.

Ray D  ;D
Boise, Idaho. U.S.A.F. Vet. Damon Challenger, Workhorse/Vortec, 2005 towing a Suzuki XL-7, 2003.

JD & Mert

  • ---
  • Posts: 9
  • Karma
    • Jd & Mert on the road
Re: Identity Theft
« Reply #53 on: November 04, 2007, 09:51:19 AM »
I use only one card for any and all internet transactions, and it is not hooked to any bank accounts.  BOA sends an email each time I use the card to notify me of its use.  For resturants etc if not using cash which I don't carry alot of I use a card  that I can go online and check 24/7 and usually has any activity on the site within hours.  I try to look at these on a regular basis... And no one, no how gets information on me or my accounts via email.  If the bank / CU / CC agency needs the information they have other ways to contact me and I have their phone numbers to respond to their calls.   With all this I am still ever vigillant as the crooks out there are working harder at getting to me than the financial instutuions are working to protect me...
JD & Mert
Karma and the Poodle

"Come grow old with me - the best is yet to be"

utmtman

  • ---
  • Posts: 434
Re: Identity Theft
« Reply #54 on: November 18, 2007, 07:10:05 PM »
I too got the lifelock after checking them out with the better business bureau and finding them to be safe.  For the price its worth it to me just to stop the junk mailings as well as all the idiot companies accessing my credit bureau account to send me junk.  We heard them on a radio advertisement almost daily.
Lee
Holiday Rambler Vacationer
While traveling down lifes paths, stop to smell the flowers

Jake123

  • ---
  • Posts: 5
Re: Identity Theft
« Reply #55 on: December 13, 2007, 01:34:01 PM »
Just a couple for suggestions about protecting yourself from ID theft:
1) Shredding documents is good, but be careful with different color or weighted papers because it is possible to reconstruct the document like a jigsaw puzzle given time.  It is best to mix the shreds in different batches instead of just throwing all of it in one batch away when the bin gets full.  If you are getting rid of several documents which have the same form and letterhead such as from banks statements, don't do it all together; the lettering on the back page makes it very easy to piece them together.

2) If you are selling or trading in an old computer, be sure to use software design to actually "clean" the data off the harddisk because deleting files and re-formating the disk does not actually remove the data.  Whoever gets the harddisk next can use specialized software to read/scan the information on it even if you had deleted them.

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #56 on: December 13, 2007, 01:38:47 PM »
We don't shred, we burn.  Campfires are a good time to dispose of sensitive papers.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

TravelJunky

  • ---
  • Posts: 7
Re: Identity Theft
« Reply #57 on: December 23, 2007, 12:22:06 PM »
Those ATM tips really made me think how scary it can be.  Thanks for the great info!

Steve, CDN

  • Forum Staff
  • ---
  • *
  • Posts: 2168
  • VA3VH
    • The Pallys
Re: Identity Theft
« Reply #58 on: December 23, 2007, 03:48:39 PM »
Quote
be sure to use software design to actually "clean" the data off the harddisk


What would be an example of such a software?

Does formatting the hard drive erase everything for the purpose of selling the computer?

Alaskansnowbirds

  • Forum Staff
  • ---
  • *
  • Posts: 1823
Re: Identity Theft
« Reply #59 on: December 23, 2007, 05:38:18 PM »
What would be an example of such a software?

Does formatting the hard drive erase everything for the purpose of selling the computer?

No, formatting will NOT erase everything off a hard drive.

Darik's Boot and Nuke is a self-contained boot floppy that securely wipes the hard disks of most computers. DB&N is but one of many programs out there. Do a google search on "hard disk eraser".
Don, Peg & Jack
Alaska/Arizona
Currently located here.
Weather at Camp Verde, AZ.

Jim Godward

  • ---
  • Posts: 1918
Re: Identity Theft
« Reply #60 on: December 23, 2007, 10:44:24 PM »
Any of these programs will do a good job and stop all but the most serious and sophisticated searcher.  The only way to be absolutely sure is to destroy the disk.  That is what we had to do with disks that had classified data on them.
Jim
Jim & Pat Godward
2001 Dutch Star
AC7PO & KD7ZDM
Belgrade, MT

The Limey

  • ---
  • Posts: 62
Re: Identity Theft
« Reply #61 on: June 14, 2008, 09:48:27 PM »
Its a big problem here in the UK we even have  people going through our bins looking for bank details so everything has to be shredder

Local tax office sent a data disc by local post... it had the details of over 5,000 peoples bank accounts numbers ,  sort codes and address its never ever been found.


Paul



John From Detroit

  • ---
  • Posts: 8189
  • ^My New Home^
    • I-fortuity VOIP Sales page
Re: Identity Theft
« Reply #62 on: August 19, 2008, 01:35:00 PM »
In the Membership park I was just at (came back home today in fact) there is a "public" Wi-Fi node for members use, it's calle 1000Trails (Same as the park)

Of course it only works when you are in or near the member lounge/rec room/event room area, (only one Linksys router in the park manager's office in case anyone wants to know)

Strange thing was when I was on my camp site, quite a distance away, I had an "Excellent" signal on a router also called 1000trails, but it was computer-computer not computer-Internet (My software flagged it as different)

I fired up net-stumbler and found the mac address of the 2nd router.. DIFFERENT from the park's router

Reported to management.
Nothing adds excitement like something that is none of your business
If not in Detroit John is near: http://map.datastormusers.com/user1.cfm?user=3192
Want VOIP? Check http://www.ambervoip.i-fortuity.com

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #63 on: September 10, 2008, 04:22:23 AM »
It's recommended that PINs are memorised which is fine except that I have several which I need to use at various levels of frequency.  I have several other id numbers for bank accounts which I also have to memorise.  It's hard if not impossible to remember all of them reliably.

So, here's a question for you guys knowledgeable about such issues.  I use a 10x10 matrix.  10 columns, 10 rows in which I embed my PINs.  The remainder of the matrix is filled with random numbers.

I use a master PIN - which IS in my head - to unlock all the other PINs   

How secure/insecure is that?


Keith

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #64 on: September 10, 2008, 07:08:02 AM »
What are you securing from?  If you forget the master PIN then you've lost all your PINs.  You have to write the matrix down, so that's only as secure as your master PIN.  In other words, not any more secure, and actually less secure, than just remembering one PIN for all purposes with nothing written down.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

RV Roamer

  • Forum Staff
  • ---
  • *
  • Posts: 17791
  • RV Roamer [Gary]
    • Brinck's Home Page
Re: Identity Theft
« Reply #65 on: September 10, 2008, 09:27:25 AM »
We use an inexpensive program called Password Agent to record IDs, passwords, PINs and related account information. I also store my software license information (Key Codes) in that file. It encrypts the data and has a Master Password, so you still have to remember something. It's a simple program to use.
Gary
--------------
Gary Brinck
2004 American Tradition
2007 GMC Acadia
Homebase: Ocala National Forest, FL

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #66 on: September 10, 2008, 10:35:36 AM »
What are you securing from?  If you forget the master PIN then you've lost all your PINs.  You have to write the matrix down, so that's only as secure as your master PIN.  In other words, not any more secure, and actually less secure, than just remembering one PIN for all purposes with nothing written down.


I partly agree - I suppose I could have just a single PIN for every account I use and never write it down.  But access to all accounts could be had if that PIN were ever discovered (without needing the matrix)

I'm unlikely to forget my MASTER PIN because it's in frequent use to decode all the others. And that PIN needs the matrix - useless on its own.

So is that less insecure do you think?  I'm serious - I hope my logic isn't faulty.

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #67 on: September 10, 2008, 10:42:35 AM »
It's insecure in that you have to write down the matrix, and if the master PIN is compromised, then all the other PINs are as well.  The purpose of the PIN in the two factor authentication system is that it's never written down, thus can't be compromised.  Since a PIN is only 4 digits, it would not be difficult to attack the matrix and once one PIN was validated, all the others would be too.  It's the written record that makes your scheme insecure.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #68 on: September 10, 2008, 10:51:58 AM »
It's insecure in that you have to write down the matrix, and if the master PIN is compromised, then all the other PINs are as well.  The purpose of the PIN in the two factor authentication system is that it's never written down, thus can't be compromised.  Since a PIN is only 4 digits, it would not be difficult to attack the matrix and once one PIN was validated, all the others would be too.  It's the written record that makes your scheme insecure.


good points.  I'll have to re-think this....

papahog

  • ---
  • Posts: 301
Re: Identity Theft
« Reply #69 on: September 10, 2008, 07:10:03 PM »
I would guess  I am not nearly as worried about this as I should be.   I use one pin for most everything with a change for different accounts.  Easy to remember.  However I have a bunch to remember.  Passwords, pin numbers, account numbers etc etc.  So it is all wrote down on a pad in my safe for when I cannot remember.
Ken
06 F-150 4x4 pulling an 2008 27ft Cougar.
40,000 miles year ending June 2008
What a trip.

Lariat Trucker

  • ---
  • Posts: 23
  • UBet a Mustang GT is my chase car!
    • Ranch Rods of Texas
Re: Identity Theft
« Reply #70 on: October 06, 2008, 05:57:13 AM »
We had an unusual thing happen this past weekend. The Private Campground we stayed at had Wireless so I decided to link up and check e-mail.

For some unknown reason my laptop would not allow me to use Internet Explorer even though I was connected to the Wireless. I went in and looked at my security software and found that it had blocked the connection due to some security problem. My neighbor at the Campground was from Michigan and said it has become quite a problem at campgrounds close to interstates. Hackers go into the wireless systems and watch the activity of the users! Not just Campgrounds but Hotels and Truck Stops are being hacked into. I found several references to this problem on the internet. It has changed my use habits on open wireless systems.
Yeah, the kids are grown and we've worked our last days, but dammit we ain't old!

papahog

  • ---
  • Posts: 301
Re: Identity Theft
« Reply #71 on: October 06, 2008, 11:09:39 AM »
Wireless Card for my laptop.  Always on where cell service is possible, secure and its mine. $60 a month is cheap for the peace of mind I get.
Ken
06 F-150 4x4 pulling an 2008 27ft Cougar.
40,000 miles year ending June 2008
What a trip.

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #72 on: October 06, 2008, 11:48:54 AM »

good points.  I'll have to re-think this....



I have thought further about this but can't see how I can devise a simple system, which is any more secure and which I can keep at hand to deal with the many PINs I use.  (without needing a computer etc)

I need something which allows me to look up any of several PINs which I use for day to day financial activity.  I use them on a regular basis, those most often used I can remember more readily.  But my memory is simply not up to remembering all of them. 

If I write them down, and the list is compromised, the security of all the cards is compromised.

If I have them recorded as at present, a master PIN is needed to be able to read them.  I agree that if the Master PIN is found out all the rest become available, but it's one step less insecure than the above.

What do others do in a similar situation?

Tom

  • Administrator
  • ---
  • *
  • Posts: 25172
    • RV Forum web site
Re: Identity Theft
« Reply #73 on: October 06, 2008, 12:03:28 PM »
Keith,

Taking a cue from forum member Terry Brewer, I put all my passwords and PINs on a thumb drive (aka jump drive). They're encrypted and are accessed by software on my PC which requires a master password that is only in my head. If I lose the laptop, the passwords aren't on it. If I lose the thumb drive, the software isn't on it to access the passwords. If lose both together, the master password doesn't reside on either. IIRC Terry has his thumb drive on a chain around his neck.

If I need to access a secure site and can't recall the respective password, I pop the thumb drive into a USB port, fire up the application, and enter the master password. I can then either read the PW or copy it to the clipboard and paste into the login form. I define how long the password stays on the clipboard.
« Last Edit: October 06, 2008, 12:05:03 PM by Tom »
Tom.   Need help? Click the Help button in the toolbar above.

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #74 on: October 06, 2008, 12:39:40 PM »
Keith,

Taking a cue from forum member Terry Brewer, I put all my passwords and PINs on a thumb drive (aka jump drive). They're encrypted and are accessed by software on my PC which requires a master password that is only in my head. If I lose the laptop, the passwords aren't on it. If I lose the thumb drive, the software isn't on it to access the passwords. If lose both together, the master password doesn't reside on either. IIRC Terry has his thumb drive on a chain around his neck.

If I need to access a secure site and can't recall the respective password, I pop the thumb drive into a USB port, fire up the application, and enter the master password. I can then either read the PW or copy it to the clipboard and paste into the login form. I define how long the password stays on the clipboard.


Hi Tom

Yes that's a good idea for online use but no good if you're trying to use your card at a merchant's for example or if you're away from your computer.

For the life of me I can't see how I can do anything other than to have a written record as I presently have. 


Keith

papahog

  • ---
  • Posts: 301
Re: Identity Theft
« Reply #75 on: October 06, 2008, 12:58:23 PM »
One nice thing about being broke.  I can not get hurt very bad if the worse happens. :o :-\
Ken
06 F-150 4x4 pulling an 2008 27ft Cougar.
40,000 miles year ending June 2008
What a trip.

Tom

  • Administrator
  • ---
  • *
  • Posts: 25172
    • RV Forum web site
Re: Identity Theft
« Reply #76 on: October 06, 2008, 01:52:44 PM »
Good point Keith. Might have to limit yourself to internet shopping.

Used to be I could memorize a phone book, but that ability started slipping some time ago. Now I have a hard time remembering my neighbor's house number, and have no clue what the registration numbers of our cars are. OTOH I can still recall useless things like my NHS number and my BSC employee and clock numbers, which I haven't used in 30 and 40 years respectively. Maybe I should use them as PIN numbers.
Tom.   Need help? Click the Help button in the toolbar above.

Tim Lassen

  • ---
  • Posts: 220
Re: Identity Theft
« Reply #77 on: February 08, 2009, 07:21:59 PM »
Anything I do online or in person usually doesn't require that I provide a pin number unless I am transferring funds from one bank to another which is usually online.  I rarely use a bank card.  If I remember correctly bank cards are same as cash, so not necessarily protected by the card company.  I keep pin numbers and all other passwords, etc. on a thumb drive which I keep in a small fireproof safe that sets near my desk or when traveling in a smaller fireproof safe.  The info is on a spreadsheet with a password that some may be able to get around but Marsha can't so I am safe..tim
Allegro Bus
Full Time (Part Time) Still Married to Marsha

macmac

  • ---
  • Posts: 195
    • Brit View
Re: Identity Theft
« Reply #78 on: February 08, 2009, 09:07:21 PM »
Anything I do online or in person usually doesn't require that I provide a pin number unless I am transferring funds from one bank to another which is usually online.  I rarely use a bank card.  If I remember correctly bank cards are same as cash, so not necessarily protected by the card company.  I keep pin numbers and all other passwords, etc. on a thumb drive which I keep in a small fireproof safe that sets near my desk or when traveling in a smaller fireproof safe.  The info is on a spreadsheet with a password that some may be able to get around but Marsha can't so I am safe..tim

Be thankful that Chip and PIN, as used in our homeland UK, isn't in use in North America extensively.  But your time may well be coming ;)   We had to use a PIN when making transactions in Canada 2007 - they already have card readers in use - at least in the places we visited...

At home we routinely use PINs for all on-the-spot transactions, debit and credit alike - we don't use a signature any longer.  The next procedure will be having to use home mini-card readers online.  Ours is due to be delivered to our home late March so that will be one more thing we have to learn to use when accessing our bank accounts or buying goods.  How that will work when we're trying to access our UK accounts from the USA we just don't know. 

Watch this space.

Tim Lassen

  • ---
  • Posts: 220
Re: Identity Theft
« Reply #79 on: February 09, 2009, 01:24:10 AM »
Full body and eye scans are probably next..tim
Allegro Bus
Full Time (Part Time) Still Married to Marsha

Jeanne M

  • ---
  • Posts: 32
Re: Identity Theft
« Reply #80 on: April 24, 2009, 12:03:30 PM »
There is one thing I haven't seen mentioned here and it doesn't even involve a computer. A few years back we had our house tented for termites.  Having never been tented before, we didn't know they had to leave windows open. Consequently, while we were gone overnight, someone robbed our house. (We believe it was an inside job).  We found out from the police that this was a regular practice and these thieves know what equipment they need to be able to stay inside with all that poison, while taking their time ransacking homes.  The thieves actually broke into our locked file cabinet and stole our credit card statement files and began charging away. They only got $75 before Discover shut the card down. However, this is where we learned from our police force to NEVER discard anything with your name and address on it.  Since then we never have. We rip our names off of even the most insignificant piece of junk mail and shred our name. Apparently all they need is a valid name and address to begin ruining your life.

One more thing, sometimes it's who you'd least suspect to rip you off...I caught a city worker driving a city truck plundering our mailbox.  When he saw me he quickly walked back to his truck and took off like a bat outta...you know where....and by the time I realized what was up, he was gone and I didn't get his license number.  Now we have a locking mailbox.

It doesn't always have a computer involved...
Jean 'n Kenny
Itasca Horizon 36GD, 350 Cat, Freightliner Evolution Chassis
1992 worn out Honda Accord
WIT #130045
Bailey our furry traveling companion

Ned

  • Forum Staff
  • ---
  • *
  • Posts: 12373
  • Ned and Lorna are fulltime RVers travelling the US
    • Have you seen Rolling Stock?
Re: Identity Theft
« Reply #81 on: April 24, 2009, 12:21:20 PM »
If it were as simple as just having a name and address, there would be no phone books.  A thief doesn't need to steal a piece of paper with your name and address, he can do a search on Google on either your name or address and find out all he needs to know about you.
-- Ned -- Fulltimer since 1997
1997 Holiday Rambler Endeavor LE
2007 GMC Canyon

See where we are

Jeanne M

  • ---
  • Posts: 32
Re: Identity Theft
« Reply #82 on: April 24, 2009, 12:26:47 PM »
You're right...but I'm not making it easier for them by providing it to them in my own trash...and to do a search online for my 'exact' name they have to 'know' it.  Sure they can do a batch search...but no matter what, I am NOT handing it to them in a garbage bag!
Jean 'n Kenny
Itasca Horizon 36GD, 350 Cat, Freightliner Evolution Chassis
1992 worn out Honda Accord
WIT #130045
Bailey our furry traveling companion