Identity Theft

What Is Identity Theft?

Identity theft is a federal crime that occurs when an individual or group steals private data — such as a Social Security number, credit card, or financial account information — to commit fraud, typically for financial gain. Thieves may try to access this information in multiple ways, including by mail, email, phone calls, texts, and with fraudulent websites.

How Identity Theft Happens

• Phishing and Social Engineering: Scammers pose as legitimate companies or government agencies through emails, texts, or phone calls to trick you into revealing sensitive information, such as a one-time passcode. They often create a sense of fear and then urgency to pressure you into acting quickly.
• Oversharing on Social Media: Publicly sharing personal details can provide fraudsters with information to guess passwords or security questions.
• Fake Online Platforms: Fraudulent websites and apps can trick you into entering personal information or infect your devices with malware.
• Data Breaches: Cyberattacks on companies can result in large amounts of customer data being stolen and sold on the dark web, potentially leading to identity theft.
• Malware and Device Infection: Malicious software can infect your devices, record keystrokes, spy on your activity, and steal login credentials.
• Unsecured Networks: Using public Wi-Fi or fake hotspots can expose your data to hackers.

Red Flags of Identity Theft to Watch Out For

• Unexpected bills or statements
• Unusual activity on your Social Security or financial accounts
• Missing mail, phone calls, text messages
• Unsolicited calls, emails, or texts requesting personal information or claiming urgency, suspicious transactions, or mentioning a refund.

Tips to Reduce Identity Theft

Use these tips to better lock down your personal information and recognize signs of identity theft.

• Avoid sharing information with unknown parties. Never share one-time passcodes, PINs, passwords, Social Security number, date of birth, driver’s license number, or other confidential information with anyone you don’t know and trust.
• Be wary of requests for personal information. If you receive an unexpected text, email, or phone call with a request to call another number, click a link, or provide or confirm any personal information, end the communication immediately. You can confirm the legitimacy of the request by directly contacting that person or organization through a known phone number or channel.
• Sign on safely. Create strong passwords with 15 or more characters and use a mix of upper- and lower-case letters, numbers, and symbols. Don’t store your passwords on or near your computer and use multi-factor authentication whenever possible.
• Monitor your accounts. Make sure to review your monthly account statements, routinely check your account online for unauthorized transactions, and set up account alerts to be notified of certain account activities. You can also consider signing up for a credit monitoring service to track your credit report and alert you to any new accounts, high balances, or missed payments.
• Ensure your contact information is current. Verify that your bank has your correct phone number, mailing address, and email address, and immediately notify them of any updates to that information.
• Freeze your credit. You can freeze your credit with the three credit bureaus, Equifax, Experian, and TransUnion. It’s a free service that locks your credit report, preventing anyone from opening new accounts in your name. You can temporarily lift the freeze to apply for new credit.
• Update your technology. Install the latest security software on your computer, including firewalls, anti-spy, anti-virus, pop-up blocker, and spam filters. Scan your computer regularly to make sure it’s free of malicious software. Don’t forget to update to the most recent mobile phone operating system, too.
• Make your online sessions secure. Type website addresses directly into the browser window instead of using links or favorites. Sign out of any website as soon as you’re finished conducting business there and close that browser window. Consider disconnecting from the internet and powering down your computer at the end of each day.
• Keep your inbox and trash can clean. Delete emails from suspicious sources immediately. Shred paperwork with sensitive information, including unsolicited credit card offers, before recycling or disposing of it.

Responding to Identity Theft

Acting quickly can help limit the damage of identity theft. Know how to respond if your data has been compromised.

• Immediately contact any financial institution where you have an account. If you’re a KeyBank client, call the KeyBank Fraud Client Service Center at 1-800-433-0124, or dial 711 for TTY/TRS.
• Alert the three major credit bureaus to get a copy of your credit report and to place fraud alerts and a credit freeze on your account.

  Equifax: 1-800-685-1111
  Experian: 1-888-397-3742
  TransUnion: 1-800-909-9972

• File a report with the Federal Trade Commission (FTC) online at IdentityTheft.gov or call 1-877-438-4338.
• File an identity theft report with your local law enforcement agency. Mail copies of the report to all your creditors and financial institutions. You may also be required to file an additional police report in the location where the crime occurred.
• Change all your passwords and personal identification numbers (PINs).