How’d They Do That?

Andrew Klungness, an associate in the Los Angeles office of Bryan Cave LLP, says, “The biggest mistake people make usually involves some type of negligence in taking care of the physical items in which their personal information is stored.  People often forget to completely destroy old documents, old driver's licenses, etc., which all contain important information that can be used to steal an identity.”

In addition to the old-fashioned methods of stealing and scamming, most identity thefts stem from dumpster diving, phishing or skimming.

DUMPSTER DIVING
Thieves specializing in dumpster diving, get their hands dirty by rummaging through your trash and stealing bills and other papers containing your personal information.

PHISHING
Those who phish keep their hands clean by masquerading as a financial institution or well-known company and using Internet-based methods to trick you into divulging information. For example, you might receive an e-mail that appears to have come from an organization you are either familiar with or do business with. The e-mail contains the company logo, looks like it came from a company e-mail address, and contains links to pages that look like the company’s Web site. Only it’s not; it’s actually a very well made copy created to trick you out of your password or other account data.

SKIMMING
Skimming occurs when a dishonest employee of a legitimate merchant pinches your credit card number when processing your card. They might manually copy down your numbers (including your security code) or use an inexpensive electronic device to “skim” the card info, storing it for later use.

Defending Your Identity
As the saying goes, “the best defense is a good offense.” Below are some simple tips for preventing identity theft from happening to you:

GENERAL

• Stay on top of your credit by taking advantage of free annual credit reports being offered from each of the three nationwide consumer reporting companies -- Equifax, Experian, and TransUnion. Visit www.annualcreditreport.com.
• When you hand your credit card to somebody to ring something up, be sure that it’s YOUR card that you get back. Thieves have been known to switch cards, giving you back one that looks like yours, but it isn’t. Most people don’t even glance at their card before sticking it back in their wallet. In the meantime, the crooks are having a spending spree on your dime.
• Do not leave receipts at ATMs, teller windows, gasoline pumps or with a clerk.

AT HOME

• Don’t put your trash out the night before pickup. That gives thieves all night to nab it.
• Invest in a personal paper shredder and keep it wherever you open your mail. Before throwing away anything containing personal information, shred it.
• Disposing of an old credit card? Don’t just cut in half -- cut it into smithereens! Some of the more powerful shredders will actually shred a credit card.
• Sign a new credit card as soon as you get it, or you can also write "Check ID" on the card so that clerks, if they actually read the back, ask for ID for verification during a transaction.
• Always read through the charges on your monthly credit card statements. It’s the only way to make certain that nobody is making bogus charges on your credit card.

ONLINE

• PayPal and eBay are two companies that have been hit hard by phishing scams. If you receive an e-mail from PayPal and are not sure it’s genuine, forward it to This e-mail address is being protected from spam bots, you need JavaScript enabled to view it . For eBay, forward it to This e-mail address is being protected from spam bots, you need JavaScript enabled to view it . They will reply within 24 hours as to the legitimacy of the forwarded e-mail.
• If someone asks you for your account number in an e-mail, hit the Delete or Cancel button immediately. Legitimate businesses will never ask you to send detailed account information in an e-mail. They are very aware that criminals might intercept your e-mails. If you need to handle an issue that requires personal account information, visit the business in person, use its secure Web site, or place a phone call.
• Do not click on links in an unsolicited e-mail. Instead, type in a known Web address. For example, if you get an e-mail that looks like it’s from Amazon, instead of clicking on a link in the e-mail to go to the site (which may redirect you to a phishing site), manually type in the address or use your Favorites list to visit the site.
• Keep your firewalls, anti-spyware, and anti-virus software up-to-date.

While some of these tips may seem like “no brainers,” you would probably be astounded at the number of people who don’t take these simple precautions to ensure the safety of their own identity. So don’t just nod your head and agree with them -- put them into ACTION and protect your identity! After all, it’s the only one you’ve got.

• Karin Rex is a Lansdale-based freelance writer who believes the geek shall inherit the earth.