Home > Security News > FTC promotes ID theft awareness
Security News:
EMAIL THIS

FTC promotes ID theft awareness

By Sue Hildreth, Contributor
31 Jan 2006 | SearchSecurity.com

Security Wire Daily News
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

See if your end-users answer these questions about identity theft:

  • Does your social security number make a good password?
  • Where can you get a free credit report?
  • Is TransUnion the name of one of the three consumer reporting companies?

To learn the answers, users should take the U.S. government's new quiz on identity theft, called ID Theft FaceOff!, at www.onguardonline.gov. Created by the Federal Trade Commission, the eight-question quiz is designed both to educate people on the most important issues in identity theft and to raise awareness of the issue.

"People are aware [of ID theft], but I don't think they take all the steps that they could to minimize their risk," said Nat Wood, assistant director for consumer and business education at the FTC.

Identity theft -- in which a victim's personal information is used to do such things as take out credit cards or loans in the victim's name, commit crimes while masquerading as the victim, or access accounts -- has been on the rise in recent years. Thieves often obtain the information electronically by using malicious e-mails, instant messages or other types of worms or viruses to trick victims into granting them access their PCs, or through the hacking into databases of online retailers and consumer data aggregators.

At least 48 million people are estimated to have had their personal data lost or stolen in 2005. According to a recently released FTC report, Consumer Fraud and Identity Theft Complaint Data, more than 685,000 fraud and identity theft complaints were filed in the FTC's Consumer Sentinel database in 2005, which is made available to law enforcement agencies, and more than a third of which were identity theft complaints.

The most commonly reported identity theft complaint was credit card fraud, counting for 26% of all complaints last year. EFT or electronic fund transfer was the most frequently reported bank-fraud related identity theft in 2005, and earlier data shows that EFT fraud related to ID theft more than doubled between 2002 and 2004. An FTC survey done 2003 by Synovate, the market research arm of Aegis Group plc, found nearly ten million people had been victims of ID theft and/or credit card fraud.

The quiz takes the form of a game in which a character attempts to regain his or her stolen identity by correctly answering a series of eight questions. The questions cover topics such as appropriate passwords, key identity theft indicators, how to get a free credit report and which actions to take when identity theft is suspected.

San Francisco, Calif.-based Ferris Research Lead Analyst Richi Jennings, who covers e-mail topics such as malware and phishing attacks, said the quiz is a good way heighten ID theft awareness, but is too simplistic to be a good educational tool.

"But it's good in that it drives home the point for people that it is a complex issue," Jennings said, "and you're probably not as safe as you might think."

Jennings also pointed out that identity theft was not born with the Internet and e-mail; thieves frequently use old fashioned paper information as well.

"The most prosaic way [of stealing information] is by going through your trash," he notes. "Electronic ID theft is in the light at the moment, but the traditional stuff is still a big issue."

Wood said the FTC plans to publish more information on ID theft on its site in the spring, as part of a campaign to encourage organizations to educate customers and employees about the problem.

Organizations can link to the quiz, as well as accompanying articles, posters and other material at the FTC's site, www.ftc.gov/IDtheft.

Sue Hildreth is a freelance IT writer based in Waltham, Mass. She can be reached at Sue.Hildreth@comcast.net.

Tags: Identity Theft and Data Security BreachesPassword Management and PolicyEmail and Messaging Threats (spam, phishing, instant messaging)VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Identity Theft and Data Security Breaches
Chip and PIN adoption serves lesson for U.S. payment industry
Group to shed light on secure identity management threats
Heartland CIO is critical of First Data's credit card tokenization plan
Heartland CIO on end-to-end encryption, credit card tokenization
Heartland CIO on PCI, E3 project
Visa probes tokens, encryption for PCI card data protection
University data breach exposes 163,000 women to identity theft
TJX thrives following breach, bucks sour economy
Security expert's PCI analysis misguided, says PCI Council GM
External attacks start with unintentional mistakes, survey finds

Password Management and Policy
Two-factor authentication, vigilance foil password theft
Group to shed light on secure identity management threats
Brute force attacks target Yahoo email accounts
Best Identity and Access Management Products
Privileged account management critical to data security
Making the case for enterprise IAM centralized access control
How to prevent brute force webmail attacks
Best practices for a privileged access policy to secure user accounts
Mature SIMs do more than log aggregation and correlation
PCI compliance requirement 2: Defaults

Email and Messaging Threats (spam, phishing, instant messaging)
Messaging security risks have upper hand on solutions
Web-based attacks skyrocket, pirating sites surge, security firms say
Pushdo botnet uses Facebook to spread malicious email attachment
Scareware report highlights successful business model
How to prevent phishing attacks with social engineering tests
Phishing protection begins with training, antiphishing evangelist
Phishing attacks to remain a major problem, say security experts
Barracuda acquires Purewire expanding Web security reach
FBI raids phishing crime ring, nearly 100 arrested
Massive phishing scheme affects Microsoft Hotmail accounts
Email and Messaging Threats (spam, phishing, instant messaging) Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
bot worm  (SearchSecurity.com)
CISP-PCI  (SearchFinancialSecurity.com)
cookie poisoning  (SearchSecurity.com)
drive-by pharming  (SearchSecurity.com)
extrusion prevention  (SearchSecurity.com)
identity theft  (SearchSecurity.com)
parameter tampering  (SearchSecurity.com)
pretexting  (SearchCIO.com)
Rock Phish  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



More Tips to Secure Your Network
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts