EDMONDS – Mail Theft

Last week’s news reports that a US Postal Worker was robbed of several mailbox keys for several mail routes in Edmonds acts as a reminder that mail theft is still alive and well.

As noted last June, check washing through mail theft has been on the rise despite the migration to online shopping and payments. And according to some, mail theft has migrated from local individuals to organized groups stealing mail from homes, apartments/condominiums and even the Postal Services blue mail collection boxes. While check washing received much attention last year, you can assume that mail thieves are still on the lookout for opportunities for identity theft by stealing blank checks, credit cards, and bank/credit card statements with account numbers on them.

Check washing is where a criminal takes a check that someone has written, then erases the recipient in the “to” line and the amount, usually with nail polish remover, then fills in a new person as the recipient and a new amount, often more than the original amount.

Here are some tips to protect your outgoing checks and your other mail from theft,

 

·         Pay your bills online. This is the safest and quickest way to pay your bills.

·         Deliver your mail to a post office. Don’t leave your check in your own mailbox for pickup. Especially if you need to raise the red flag to let the letter carrier know you have outgoing mail. That flag is a sure sign to a mail thief to take your mail. Take your check directly to your local post office. Don’t leave it in the blue box outside but take it inside to the outgoing mail slot or box inside.

·         Use a pen with blue or black non-erasable gel ink. Gel ink is more difficult to remove than ball point ink.

·         Don’t let delivered mail sit in your mailbox. Collect the mail in your mailbox as soon as you can after delivery, at least once a day. If you are away, ask a trusted neighbor to pick up your mail or have the post office hold your mail until you return.

·         Monitor your bank account. Check your bank account online every few days.

·         Report incidents quickly. Contact your bank as soon as possible after suspicious activity; banks are generally required to replace funds stolen via fraudulent checks, but only if the scam is reported within 30 days of the date of your bank statement. Also, contact the U.S. Postal Inspection Service and credit reporting agencies.

 

 

 

 

FOX13:

https://www.fox13seattle.com/news/armed-suspect-robs-edmonds-postal-worker-steals-mailbox-keys

 

South Snohomish County Crime Watch:

https://ssnoccrimewatch.blogspot.com/2023/06/mail-theft-check-washing-is-on-rise.html

 

AARP Fraud Watch Network:

https://www.aarp.org/money/scams-fraud/info-2023/stop-check-washers.html

 

U.S. Postal Inspection Service:

https://www.uspis.gov/news/scam-article/check-washing

https://www.uspis.gov/report

 

SNOHOMISH COUNTY SHERIFF’S OFFICE- Protecting Your Devices from Theft

Protecting your PC, laptop, smartphone from theft is important, not only for the hardware, but also for the sensitive information that they contain. Check out the latest issue of the Sheriff Office’s crime prevention newsletter, “Partners in Crime Prevention,” for tips to protect your hardware.

 

 

SNOHOMISH COUNTY SHERIFF’S OFFICE:

https://www.snohomishcountywa.gov/ArchiveCenter/ViewFile/Item/7104

 

IDENTITY THEFT – Recovering Your Good Name

There has been a lot of emphasis by organizations such as the Federal Trade Commission (FTC) and AARP and others on preventing identity theft. But what can you do if you discover that someone has stolen your identity and is using it in a way that that harms you?

If you take the recommended measures to prevent identity theft you will have reduced your chances of being victimized by an identity thief. But there is still a chance that your personal information can be stolen. Identity thieves can purchase your information on the dark web from someone who has copied it in a computer breach from a company or organization.

In that case, an identity thief can use your name to apply for a credit card, take out a loan, or a number of other things that can negatively affect your credit. When you find out that someone is using your good name to do bad things, you need to act.

The FTC points out that having a copy of the records about the ID theft from the company where it happened and information about the thief who used your personal information would help straighten out the situation. And the FTC also points out that you have a right to that information according to the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq).

It recommends writing the company where the fraud took place for information about your case. With your request include the following,

·         Proof of your identity, such as a copy of your driver’s license or other valid form of government identification.

·         A completed FTC Identity Theft Report from https://www.identitytheft.gov/#/.

·         A police report about the identity theft from your local police department. When you file the police report, bring your ID, the FTC Identity Theft Report, and any information you have about the incident with you.

The IdentityTheft.gov web site can give you guidance on the steps that you need to take to recovery from your identity theft.

You may want to talk to someone for guidance. Two non-profit organizations offer free help,

·         The AARP Fraud Watch Network has a free helpline, (877) 908-3360, where you can report the ID theft or other scam and ask specific questions about your situation. The hotline is available Monday through Friday, 8am to 8pm ET. It also has a wealth of information about scams and fraud at its website- http://www.aarp.org/money/scams-fraud/fraud-watch-network/

·         Identity Theft Resource Center (ITRC) also has a free helpline, (888) 400-5530. The hotline is available Monday through Friday, 6am to 5pm PST. ITRC concentrates primarily on identity theft, but it also has a wealth of information on the subject at its website- https://www.idtheftcenter.org/.

Knowing where you can get help, should you be victimized by an identity thief, is as important as preventing the theft in the first place.

 

 

 

Debt.org:

https://www.debt.org/credit/your-consumer-rights/fair-credit-reporting-act/

 

Federal Trade Commission:

https://www.identitytheft.gov/#/

 

AARP:

http://www.aarp.org/money/scams-fraud/fraud-watch-network/

 

Identity Theft Resource Center:

https://www.idtheftcenter.org/

 

TAX SEASON SAFETY – Protect Yourself from Scams and ID Theft

As the deadline for filing income taxes rapidly approaches, there are things you can do to protect yourself from scams and ID theft.

Tax fraud can happen any time of the year, but the IRS reminds everyone that tax time is a period when it sees more phone scams than other times of the year.

If the IRS wants to contact you, it will initiate contact with a letter via the U.S. Postal Service, not via a phone call, email, or text message. Also, the IRS will not demand immediate payment and will not demand payment with gift cards, wire transfer, or crypto currency.

Some other red flags include,

·         Request for personal information such as bank account information, Social Security numbers, login credentials or mailing addresses.

·         Scare tactics- the IRS will not demand an immediate response or use scare tactics such as threatening to throw you in jail if you do not comply immediately.

·         Email with attachments- the IRS will not send you an email with attachments, especially in an initial email. If you receive an unexpected email claiming to be from the IRS with links or attachments, delete the email. DO NOT CLICK ON LINKS OR ATTACHMENTS!

One way you can protect yourself from identity theft is to get an Identity Protection PIN (IP PIN) as an extra layer of security to protect yourself from scammers or fraudsters from using your Social Security number to file an income tax return in your name. For more information about the IP PIN check out this IRS link- https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.

For more information on how you can protect yourself from tax related fraud see the following links,

 

National Cybersecurity Alliance:

https://staysafeonline.org/stay-safe-online/online-safety-basics/tax-time-safety/

 

Identity Theft Resource Center:

https://www.idtheftcenter.org/tax-identity-theft/

 

IRS:

https://www.irs.gov/newsroom/taxpayers-beware-tax-season-is-prime-time-for-phone-scams

 

https://www.irs.gov/newsroom/tax-scams-consumer-alerts

 

 

 

T-MOBILE BREACH – What You Can Do to Protect Yourself

You probably have heard about the most recent T-Mobile data breach in the press. Some estimates have as many as 40 million consumers affected by the breach while others claim as many as 100 million customers affected by it. This is the third data breach on T-Mobile since December 2020

Data that was exposed included customers’ names, dates of birth, Social Security numbers, driver’s license numbers, addresses, phone numbers and IMEI’s and IMSI’s. IMEI (International Mobile Equipment Identity) and IMSI (International Mobile Subscriber Identity) can be used to track your mobile device or in SIM swapping. Social Security numbers and driver’s license numbers can be use for fraudulent applications for loans, credit cards or bank accounts in your name.

T-Mobile customers, past, present, and potential (if you have applied for a T-Mobile account) should pay attention to this breach and take action to protect yourself. Here are some suggestions:

·         Freeze your credit. A credit freeze restricts access to your credit report to your existing creditors which helps prevent new lines of credit from being opened in your name.

·         Change your passwords and PIN numbers for your T-Mobile account. Make sure that you are NOT using the same passwords and PINs across multiple accounts.

·         Use multi-factor authentication (MFA or 2FA) on your accounts. With MFA, often you receive a text message with a code that you input when you are logging into your account. While considered an improvement in security, MFA with a text is not secure. For example, someone who has conducted a SIM swap, has access to your text messages. A better solution is to use a free authenticator app, like you can acquire from Microsoft and Google, which are more secure.

·         Monitor your financial accounts for fraudulent activity.

·         Be alert for breach notifications. Take actions as necessary recommended in those notifications.

·         Be alert for phishing emails that may be designed to look like they are from your provider that has been breached.

 

 

The Seattle Times:

https://www.seattletimes.com/business/t-mobile-says-hackers-stole-data-of-more-than-40-million-people/

https://www.seattletimes.com/business/heres-what-to-do-if-you-think-youre-affected-by-t-mobiles-big-data-breach/

 

Krebs on Security:

https://krebsonsecurity.com/2021/08/t-mobile-investigating-claims-of-massive-data-breach/

 

Identity Theft Resource Center:

https://www.idtheftcenter.org/t-mobile-data-breach-what-steps-to-take-now/

https://www.idtheftcenter.org/the-weekly-breach-breakdown-podcast-facts-are-stubborn-but-statistics-are-pliable-t-mobile-data-compromise-impacts-millions/

https://helpcenter.idtheftcenter.org/s/article/Place-a-Credit-Freeze

 

T-Mobile:

https://www.t-mobile.com/brand/data-breach-2021?icid=MGPO_TMO_P_21DTASECRT_8SZBD38SJT3BHWAY26101

 

 

 

IDENTITY THEFT – A Profound Effect on People’s Lives

All crime victimizes people. Burglaries deprive homeowners and businesses of possessions that can be essential to their livelihood or business. Car theft deprives a car owner of transportation that may be essential to go to work. Domestic violence can take away the freedom of a survivor or even endanger her life.

The Identity Theft Resource Center (ITRC) in a recent report on how identity crimes impact its victims points out that identity theft causes significant hardship for a substantial portion of identity theft victims.

ITRC is a non-profit organization that supports victims of identity theft and educates the public about identity theft, data breaches, cyber security, scams/fraud, and privacy issues.

In its 2021 Aftermath Report, ITRC concluded that:

1.      The number of repeat victims is increasing.

2.      Victims are struggling more to meet their financial obligations.

 

The report’s key findings include:

·         While most victims lost less than $500, 21% told ITRC that they lost more than $20,000 to identity theft.

·         Almost one third (29%) of victims contacting the ITRC have been victimized previously.

·         Very few identity theft victims can resolve their identity theft issues easily-

o   1% of victims who contacted the ITRC said that they could resolve their issues in one day.

o   Pre-pandemic, 37% of identity crime victims victimized in 2019 were not able to resolve those issues as of May 2020.

o   During the pandemic, 75% of victims victimized in 2020 said that their issues were still unresolved as of April 2021.

The unemployment fraud by thieves by stealing payments from state governments has had a tremendous effect on state budgets and on the privacy for individuals. The fraudsters typically would use stolen private information to impersonate people to direct unemployment and stimulus payments to the fraudster’s bank accounts.

People reporting to ITRC as victims of unemployment and stimulus fraud in 2020 had significant financial and emotional impacts,

·         A majority said that they had more stress than usual and that they felt being violated.

·         40% could not pay their routine bills.

·         33% did not have enough money to buy food or pay their utility bills.

·         14% were evicted for non-payment of rent or mortgage.

·         13% have not been able to get a temporary or permanent job as a result of identity theft.

 

By ITRC’s estimation, identity theft is the fastest growing crime in the U.S. The Federal Trade Commission reports a nearly 250% increase in the crime reported to between 2016 and 2020. As identity theft grows, so will its adverse effects on its victims. Even if many people will be able to recover many others will have a difficult time regaining their lives after someone has stolen their identity and stolen money, services, or products in their name.

 

 

Identity Theft Resource Center:

https://www.idtheftcenter.org/the-identity-theft-resource-centers-2021-consumer-aftermath-report-reveals-impacts-on-covid-19-identity-crime-victims/

Recovering from identity theft can be complicated and confusing. If you have a question about a potential identity theft situation or believe you are a victim of identity theft and need help you can contact ITRC, for free, online at  https://www.idtheftcenter.org/ or by calling (888) 400-5530.

 

 

AARP Fraud Watch Network:

Another organization that gives free help on identity theft or scams is AARP. Its Fraud Watch Network is available to anyone, not just AARP members. For information on scams go to https://www.aarp.org/money/scams-fraud/. You can call their helpline at (877) 908-3360 for specific help on a scam.

 

COVID-19 UNEMPLOYMENT INSURANCE FRAUD – Scammers Take Advantage of Unemployment Payments

While many people have been receiving unemployment checks since they have been laid off due to COVID-19, scammers have been taking advantage of the situation by using the personal information of identity theft victims to make their own state unemployment claims and receive payments.

The Federal Trade Commission (FTC) reports that in 2020 it has received 394,280 reports about government benefits fraud. In 2019 it received 12,900 benefits fraud reports. The U.S. Department of Labor Inspector General estimates that up to $26 billion pandemic-related unemployment benefits were obtained by fraud.

We all lose as taxpayers since this money is going to thieves who do not qualify for unemployment payments. But the identity theft victims are victimized a second time. Reports are starting to come into the press about citizens receiving IRS Form 1099-G from the State Employment Security Department (ESD) for unemployment payments that they did not receive. State unemployment offices issue the 1099-G’s because unemployment payments are considered to be taxable income. This may be the first alert that many people receive that they are victims of identity theft. Not only did they not receive this money, but the IRS thinks they owe taxes for money that was stolen from the unemployment system.

The IRS recommends that if you receive a 1099-G for funds that you did not receive to contact ESD and request a corrected 1099-G to show that you did not receive the payments. When ESD sends you the 1099-G it also sends a copy of that 1099-G to the IRS.

So, the state has reported income to you that you did not receive, and the IRS thinks you received that income and owe taxes for that “income.”

When it comes time to file your income tax return, accountants are recommending that you acknowledge that reported income on the appropriate line of your tax return then subtract that amount on the form with a note that the amount reported by the state was due to fraud.  

ESD still has a backlog of thousands of fraud investigations and when it can send corrected 1099-G’s to the IRS is unknown.

Check out the sources below for more information about the situation.

 

Internal Revenue Service:

https://www.irs.gov/newsroom/irs-offers-guidance-to-taxpayers-on-identity-theft-involving-unemployment-benefits

https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin

 

Federal Trade Commission:

https://www.consumer.ftc.gov/blog/2021/02/identity-theft-awareness-week-starts-today

 

Krebs on Security:

https://krebsonsecurity.com/2021/01/the-taxman-cometh-for-id-theft-victims/#more-53733

 

KIRO TV News:

https://www.kiro7.com/news/jesse-jones/tax-forms-latest-unpleasant-surprise-mail-victims-unemployment-impostor-fraud/XAAPIKDUNFFKNPHLMYMWPKH6DA/

 

 

COVID-19 IDENTITY THEFT- What To Do If You Are a Victim

With all of the reporting about scammers filing for unemployment, creating fake web sites mimicking the Employment Security Department web site, and posing as contact tracers, your identity could be at threat to be used to steal from the federal or state governments, or for many other nefarious purposes.

If you do become a victim of identity theft there are definitely things that you need to do to protect yourself. In case your identity has been used in unemployment theft take the following steps,

·         Get organized, keep a file. Have a file folder where you can keep notes about the incident, who you have contacted, reports that you have received, any police reports you have filed, emails, and any other documentation related to the incident.

·         Contact your employer’s human resources department.

·         Contact the Washington State Employment Security Department.

o  Phone- (800) 246-9763

o  Online- https://esd.wa.gov/unemployment/unemployment-benefits-fraud

·         File a police report with your local police department, online or with a non-emergency number.

o  Snohomish County Sheriff’s Office-

§  Online Crime Report- https://www.snohomishcountywa.gov/301/File-an-Online-Crime-Report (Note: the online reporting web page will ask you to call 911 if you are reporting that your identity was stolen)

§  Non-Emergency Number- (425) 407-3999

o  King County Sheriff’s Office-

§  Online Crime Report- https://www.kingcounty.gov/depts/sheriff/on-line-reporting/on-line-reporting.aspx

§  Non-Emergency Number- (206) 296-3311

·         Contact the three major credit bureaus. Tell the bureaus that a fraudulent unemployment claim was made with your identity. Have the case number of the police report ready to give them. Also, have one of the credit bureaus place a fraud alert on your identity.

o  Experian- (888) 397-3742

o  TransUnion- (800) 680-7289

o  Equifax- (888) 766-0008

o  Get free credit reports

§  https://www.annualcreditreport.com/index.action

§  Phone- (877) 322-8228

o  Consider a credit freeze- https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

·         File a report with the Federal Trade Commission (FTC).

o  This FTC web site let you report an identity theft and has checklists for recovering from ID theft-

ohttps://www.identitytheft.gov/

·         Consider setting up an IRS account.

o  https://www.irs.gov/payments/view-your-tax-account

For information on protecting your identity, check out the end of this article,

The Seattle Times:

https://www.seattletimes.com/seattle-news/what-to-do-if-your-name-is-used-by-unemployment-fraudsters-taking-advantage-of-coronavirus-crisis/

GIFT CARDS- A New Technique to Steal

KIRO TV recently reported a new technique used by identity thieves to steal your money at a grocery store. The King County Sheriff’s Office has noted thieves stealing credit cards in parking lots of Kroger stores (QFC or Fred Meyer) then going into the store, picking up some gift cards from the rack and then transferring funds from the stolen credit card to the gift cards at the self-checkout counter.

According to the KIRO report, the thieves have targeted stores with self-checkout counters such as QFC.

The King County Sheriff’s Office is encouraging Kroger to only allow purchase of gift cards at manned checkout counters where an employee can check ID for credit card purchases.

Whether or not Kroger makes this change, you can protect yourself from being victimized by keeping your purse or wallet on your person while in the parking lot, or in the store for that matter. Do not place a purse in a grocery cart then turn away or leave the cart, even for a short distance or a short time. A thief can take your wallet and its contents in a flash.

To view video of this operation in action, checkout this link,



KIRO TV:

https://www.kiro7.com/video/?id=4809297

ONLINE SHOPPING- Shopping Safely With A Growing Trend

We are now well into the holiday shopping season. Initial reports show robust shopping between Thanksgiving and Cyber Monday. In fact, news reports show a 20% increase in online shopping on Cyber Monday with $9.4 billion spent this year versus $7.9 billion spent last year. Clearly, more people are taking advantage of the convenience of online shopping.

With the publicity over the past few years of data breaches, phishing, malware, and other techniques used by criminals to steal identity and therefore steal funds from their victims, you might wonder if online shopping is safe.

Online shopping can be just as safe as shopping in a store. Or just as risky. Like shopping in a store, you need to take some practical steps to protect your money and property when shopping online. This posting gives a practical view of the risks of online shopping:

Ask Leo! By Leo Notenboom:

https://askleo.com/online_shopping_just_how_safe_is_it/



The lesson is that shopping online can be safe. You just need to get into the habit of acting safely. Here are some more thoughts about how to shop online safely:

Krebs on Security:

https://krebsonsecurity.com/2018/11/how-to-shop-online-like-a-security-pro/



Fraudsters are constantly experimenting with new ways to trick you as a consumer to give away your private personal information and trick businesses to give over your personal information. The reports you see about new techniques may seem overwhelming. Awareness of these techniques, however, is important to protecting yourself from harm. Police encourage us to be aware of our surroundings, on the streets, in stores, and in our neighborhoods. Being aware online is equally important.

With that, here are a couple of articles that talk about some new techniques. CBS talks about fraudulent websites luring online shoppers:  



CBS:

https://www.cbsnews.com/news/black-friday-2019-fraudulent-websites-targeting-holiday-shoppers-looking-for-a-bargain/



Consumer Reports talks about a variety of techniques including phishing, malicious apps, and hackers to legitimate web sites:

Consumer Reports:

https://www.consumerreports.org/digital-security/dont-let-online-shopping-threats-spoil-holiday-season/



This Seattle Times article talks about the initial shopping numbers for Black Friday through Cyber Monday:

The Seattle Times:

https://www.seattletimes.com/business/a-record-190-million-americans-shopped-thanksgiving-weekend-most-of-them-online/

IDENTITY THEFT- Identity Theft Can Happen Here

Over the past few days there has been talk over social media about local residents being victims to identity theft. While there was much speculation on how the identity theft occurred, many people reported that their credit card and bank accounts were illegally tapped for transactions at local retail establishments. Several people mentioned retail stores in the Lake Stevens and Snohomish areas, while others pointed out that many other illegal transactions also occurred in other areas of the county and the Puget Sound region.

So how could this happen? Specifics have yet to be released by local law enforcement or the local press. However, here are some likely scenarios of how this can happen with the current technology:

·         Skimmers. This is the likeliest culprit according to most people on social media. Skimmers have become very popular with locally based ID thieves. A skimmer is a thin piece of plastic with electronic circuitry that is inserted in or over the slot that you insert your credit or debit card into to make a payment. Skimmers have been found at ATM’s, gas pumps, and terminals at cashier stations in stores (yes, right under the nose of clerks. If the ID thieves are good, they can insert a skimmer with a clerk right there.).

·         Someone uses counterfeit credit cards to make transactions. They can buy the account information, from vendors who have obtained the information from data breaches, on the “dark web.” They can also buy the equipment and materials for making the cards on the web. Then they go around to ATM’s, and retail outlets withdrawing money or making purchases. Victims of the ID theft can be from anywhere. So, you can get an alert from your bank about a suspicious transaction that occurred on the Atlantic coast while you have not traveled 20 miles away from your home in Snohomish County.

·         Someone can make online purchases with the stolen account information in breaches. This may not always show up as a transaction from a local store, but it is an easy way for an ID thief to buy something on your dime.

·         RFID chips. RFID (Radio Frequency Identification) imbedded in your credit card, driver’s license, or passport could be read by a reader carried by a passerby.

Preventing Identity Theft is a difficult proposition. Several organizations need to take steps to prevent someone who is not authorized to access your personal information. Banks need to have strong, up to date security measures. Retail outlets, large and small, need to have security measures to protect your information. And you, as an individual, need to take steps to protect your information. If anyone in this chain do not take steps or have weak steps, the system will fail, and ID thieves will gain access to your information.

Here are some things you can do to protect yourself:

·         The most important action you can take is to closely and frequently monitor your bank card statement and then if you find any irregularities to promptly notify your bank card provider. This may be your only defense against ID thieves who have purchased your credit card account information on the dark web from using it with a counterfeit card or online.

·         Always use a credit card for transactions, including at the store and online. You have the most protection from fraud with a credit card. While many institutions who issue debit cards are very good with returning funds that may have been stolen, you still run the risk of a fraudster zeroing out the total amount of your debit account. While you may eventually get it back, you may be stuck without funds until the financial institution completes its investigation.

·         To guard against skimmers, check the terminal for any signs of tampering. At a gas station, some people suggest using a pump closest to the cashier on the theory that an ID thief will more likely add a skimmer to a pump that is farther away so that they will be less likely to be caught in the act.

·         To guard against someone reading your RFID chip you can purchase sleeves and wallets that block radio waves trying to read you chip.

If you are victimized with ID theft report it. Report it to the issuing credit card institution. Also, if the fraudulent transaction occurred in your local area, report it to your local police.

    





Krebs on Security (for information on skimmers, breaches, RFID readers):

https://krebsonsecurity.com/


Wikipedia (on RFID):

https://en.wikipedia.org/wiki/Radio-frequency_identification#Security_concerns













Steve Moller

South Snohomish County Crime Watch

Email: snohomishcrimewatch@outlook.com

Twitter: www.twitter.com/ssnoccrimewatch

Blog: https://ssnoccrimewatch.blogspot.com/



Crime Mapping for Snohomish County: http://communitycrimemap.com/



You can also report suspicious activity or information about past criminal activity by calling:



The Sheriff’s Tip Line at (425) 388-3845.



Or going to the Sheriff’s Office web page at:

http://www.snohomishcountywa.gov/303/Anonymous-Tips

E-SKIMMING– A New Cybercrime Technique

You no doubt have heard of skimming. This is where someone inserts a thin piece of plastic with an electronic circuit into a credit card reader at an ATM, gas pump, or retail card reader. The skimmer collects credit card information from the cards of users of the machines. With that information an identity thief can make purchases for him/herself or sell it to others who can use them for criminal activity. Skimmers can be difficult to detect for card reader users. Police often recommend that consumers check readers for tampering before using the reader.

In late October, the FBI issued a warning to small and medium-sized businesses and government agencies that take credit card payments online about a new skimming technique. Called E-skimming, a cyber criminal inserts malware into the checkout area of the business’ web site through a phishing attack or by exploiting a web site vulnerability.

As customers enter their card information, the malware sits in the background, collects the data then sends it to a server that the hacker has access to (see illustration).

The FBI has recommendations for businesses on how they can prevent e-skimming malware from infecting their computer systems; such as keeping their security software up to date, changing their default login credentials, and educating employees about how to detect phishing emails.

However, for consumers, detecting e-skimming on a web site is not possible. But there are things that you can do to prevent or at least limit any potential damage:

·         Set up a “Card not present” alert on your credit cards. The alert, sent by text or email from your card issuer, is used when your physical card is not present during a transaction. The notice gives you a timely opportunity to contact the issuer if the transaction was not initiated by you.

·         Consider using a low-limit credit card only for online purchases. The low limit helps limit any damage from the hacker stealing the card information. Never use a debit card for online transactions.

·         Consider using a virtual credit card for online purchases. Virtual credit cards, which are tied to your bank’s credit card, act as a buffer between your credit card account and the vendor. When you have an online transaction, you use the virtual credit card account number but your regular credit card will be charged. The number may be used on a one-time basis, or you can use it until you detect or suspect that your number has been exposed in a data breach. In that case, all you have to do is to cancel the virtual credit card but keep your regular credit card account.

·         Consider using a third party, such as PayPal or Venmo, to pay online. Like virtual credit cards, this is a way to protect your credit card information from ID thieves.

·         Be sure to monitor your credit card account closely for any unusual transactions.

FBI:

https://www.fbi.gov/contact-us/field-offices/portland/news/press-releases/oregon-fbi-tech-tuesday-building-a-digital-defense-agaist-e-skimming

Utah Department of Public Safety:

https://dpsnews.utah.gov/e-skimming/

CNBC:

https://www.cnbc.com/2019/10/29/how-to-protect-your-credit-card-info-from-e-skimmers.html

ZDNet:

https://www.zdnet.com/article/fbi-issues-warning-about-e-skimming-magecart-attacks/

Experian:

https://www.experian.com/blogs/ask-experian/what-is-a-virtual-credit-card/

MILL CREEK- Shredding Event

Shredding documents that contain sensitive information such as Social Security Numbers, bank account and credit card account numbers, and are no longer needed, is an important step to protecting your identity.

Some people may have a shredder that allows them to shred these documents throughout the year. However, if you do not, the City of Mill Creek, the Mill Creek Kiwanis Club and the company Shred-It are sponsoring a shredding event on Saturday, October 26 from 11:00am to 2:00pm at the Mill Creek City Hall North, 15720 Main St., Mill Creek, WA.

The City’s announcement of the event notes that the first box of documents is free. Any additional boxes can be shredded with a $5 suggested donation per box. Proceeds will help fund Mill Creek Kiwanis Club community projects.



City of Mill Creek:

https://www.cityofmillcreek.com/news/shred-it_event_2019

DATA BREACH UPDATE- News About 2 Recent Data Breaches

Equifax Breach. You probably have heard about the settlement between the Federal Trade Commission (FTC) and Equifax coming out of the September 2017 data breach at Equifax. Recently, the FTC announced that anyone wanting to make a claim should go to www.ftc.gov/Equifax. It also sent out a warning that that it has already seen scammers trying to divert you to their fake settlement web sites to steal your money. It encourages you to check that the web address that you are going to is www.ftc.gov/Equifax.  It also pointed out that you do not have to pay to file a claim and anyone who calls you trying to get you to file a claim is probably a scammer.

In another press release, the FTC recommended that people affected by the Equifax breach sign up for free credit monitoring as part of the settlement. Since the announcement of the settlement, the FTC says there has been very high interest by the public to the point that individuals may not received the expected $125 per claim.


Federal Trade Commission:

https://www.consumer.ftc.gov/blog/2019/07/equifax-data-breach-beware-fake-settlement-websites

https://www.ftc.gov/news-events/press-releases/2019/07/ftc-encourages-consumers-opt-free-credit-monitoring-part-equifax

https://www.ftc.gov/enforcement/cases-proceedings/refunds/equifax-data-breach-settlement





Capital One Breach. You no doubt have heard about the Capital One breach that has affected 106 American and Canadian consumers. The Identity Theft Resource Center (ITRC) recommends that you take proactive action to prevent becoming victimized by identity thieves. It recommends that you freeze your credit and keep checking your financial statements regularly. Also, be aware of scammers. They frequently take advantage of big news items like breaches to offer supposed help. All they want is to take your money or your personal information. While Capital One says that it will be notifying accounts that have been affected, it will not be doing notifications by phone. Finally, document your steps in pursuing your claim. This will help you with your claim.



Identity Theft Resource Center:
https://www.idtheftcenter.org/capital-one-data-breach-what-to-do-if-youre-impacted/#utm_source=web&utm_medium=social&utm_campaign=07302019_CapitalOneBreach

The Seattle Times:
https://www.seattletimes.com/nation-world/how-to-protect-yourself-after-the-capital-one-data-breach/

Better Business Bureau:
https://www.bbb.org/databreach/


Federal Trade Commission:

https://www.consumer.ftc.gov/blog/2019/07/capital-one-data-breach-time-check-your-credit-report

Krebs on Security:
https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/