You are here: Information Center >> Consumer Protection >> Identity Theft

Identity Theft

Each and every day, Americans share personal information about themselves with others without even realizing it. We write checks at department and grocery stores, charge purchases online or over the phone, rent a car, book a hotel room, mail our tax returns, use our cell phones and apply for credit cards. Each of these transactions requires you to share personal information: your bank and credit card account numbers; your income; your Social Security number; or your name, address and phone numbers.

Unscrupulous individuals can use this personal information to commit identity theft. Identity theft is one of the fastest growing white-collar crimes in the United States. In fact, surveys show that there are 7 to 10 million victims of identity theft per year. If your identity is stolen, it can take months or years, not to mention thousands of dollars, to clear your name and your credit record. According to the FTC, the average victim of identity theft is unaware of the problem for 12 months. By the time it is detected, it is already too late. Victims of identity theft may be denied credit and refused loans, lose job opportunities or even be suspected of crimes they did not commit.

What is identity theft?

Using a variety of methods, criminals steal their victims' Social Security numbers, driver's license numbers, bank account numbers, credit card numbers, ATM cards, telephone calling cards and other pieces of individual's identities such as names, addresses, telephone numbers and dates of birth. They then use this information to impersonate their victims and apply for additional credit cards or bank loans, open new bank accounts, set up telephone services and purchase merchandise.

There are four kinds of identity theft:

How can my identity be stolen?

Thieves can get your personal information in the following ways:

If my identity is stolen, what can the imposter do with the information?

Given enough personal information, an imposter can literally take over your identity and commit an array of crimes-all in your name. They can:

Will I be held responsible if an imposter uses my identity to commit a crime?

From a financial perspective, if an imposter fraudulently uses your credit card, the Consumer Credit Protection Act limits your liability for unauthorized credit card charges to $50 per card.

The Electronic Fund Transfer Act provides protection for transactions involving an ATM or debit card or another electronic way to debit or credit an account. It also limits your liability for unauthorized electronic fund transfers.

It is important to note that the extent of your financial liability may depend on the length of time it takes you to report the fraud. However, VISAŽ and MasterCardŽ have voluntarily agreed to limit consumers' liability for unauthorized use of their debit cards in most instances to $50 per card, no matter how much time has elapsed since the discovery of the loss or theft of the card.

Although no federal law limits your liability if someone steals your checks and forges your signature, you may be protected under state law. However, while most states hold the bank responsible for losses from a forged check, they also require you to take reasonable care of your account. Therefore, you may be held responsible for the forgery if you fail to notify the bank in a timely manner that a check was lost or stolen.

What do I do if I believe I have been a victim of identity theft?

Contact your bank and all credit card companies by telephone immediately. Follow up with an e-mail and faxed letter summarizing your phone conversation. You will probably be asked to sign an affidavit attesting to the fact that purchases and account withdrawals were made without your consent.

Next, contact the FTC, the agency that enforces the Identity Theft and Assumption Deterrence Act, at 877.ID.THEFT/877.438.4338 and make an official complaint.

Report the theft by contacting the fraud sections of the three major credit-reporting agencies on the Internet, or call:

Lastly, where checking accounts and stolen checks are involved you must contact the major check verification companies, which retain data on unpaid checks, to report any fraudulent use of your checks. You will no longer be able to use checks for purchases if these companies are not made aware of your situation.

TIP: For more information, a comprehensive Web site that has been set up to aid victims of identity fraud is located at www.privacyrights.org.

How can I prevent identity theft?

While there is no definitive way to prevent identity theft, diligence in guarding your personal information minimizes the threat. Following are some steps you can take to keep your personal information secure:

Immediately report any inaccurate information. To review a copy of your credit report, contact the following credit bureaus:

What should I do if I discover that my identity has been stolen?

If you find that your credit cards, driver's license, Social Security number or any other type of identifying information is stolen, your identity may be stolen as well. As soon as you are aware of the theft, you should proceed as follows:

Contact the Federal Trade Commission: Call the FTC's Identity Theft Hotline toll-free at 877.ID.THEFT/877.438.4338 to report the theft. The FTC's counselors will take your complaint and give you advice on how to deal with credit-related problems that may result from the theft. The hotline also provides you with one place to report the theft to the federal government. Once notified, the FTC will put your information into a secure consumer fraud database where it can be used to help other law enforcement agencies and private entities in their investigations and victim assistance.

Create an Identity Theft Affidavit: Create an identity theft affidavit and have it notarized. The FTC has an official identity theft affidavit that you can use to alert different companies, including the major credit bureaus, your credit card companies, your banks and so on. You can use this form for each company. This affidavit can be found at www.consumer.gov/idtheft.

Contact the Credit Bureaus: Contact the fraud departments of any of the three major credit bureaus to place a fraud alert on your credit file. This alert requests creditors to contact you before opening any new accounts or making any changes to your existing accounts. When the credit bureau verifies your fraud alert, the other two credit bureaus will be notified to also place fraud alerts on your accounts, and all three credit reports will be sent to you free of charge. To report fraud, contact the credit bureaus at:

Once you receive your reports, review them carefully and pay close attention to inquiries you did not initiate, accounts you did not open and unexplained debts on your accounts. If you find anything out of order, notify the credit company immediately. It is important to note that credit issuers are not required by law to observe fraud alerts. Therefore, it is important to request copies of your credit report every few months so you can ensure no new fraudulent activity has occurred. The automated "one-call" fraud alert process only works for the initial placement of your fraud alert. Orders for additional credit reports or renewals of your fraud alerts must be made separately at each of the three credit bureaus.

File a Police Report: File a police report with your local police department or the police department in the location where the theft took place, and keep a copy of the report to submit to your creditors and other entities that may require proof of the identity theft. Know the telephone number of your investigator so that you can give it to creditors and others who require verification of your case.

When filing out a police report, provide as much documentation as possible. This may include debt collection letters, credit reports, your notarized Identity Theft Affidavit and any other evidence of fraudulent activity.

Do not take "no" for an answer. If the police department tells you that identity theft is not a crime in your state, ask to file a Miscellaneous Incident Report instead. Remind the police of the importance of a police report-many creditors may require one to resolve your dispute.

Cancel/Close Accounts: Cancel all of your credit cards, ATM cards and phone cards. Notify your utility company. Call your bank and have them close all existing bank accounts. Put stop payment orders on any outstanding check of which you are unsure. Open new accounts with new passwords. Do not use obvious passwords like your mother's maiden name, birthdays or anniversaries.

You have 60 days from the date your bank account statement is sent to you to report in writing any money withdrawn from your account without your permission. If your ATM or debit card is lost or stolen, report it immediately because the amount you can be held responsible for depends on how quickly you report the loss. If you report the loss or theft within 2 business days of discovery, your losses are limited to $50. If you report the loss or theft after 2 business days, but within 60 days after the unauthorized electronic fund transfer appears on your statement, you could lose up to $500. If you wait more than 60 days to report the loss or theft, you could lose all the money that was taken from your account.

Report Stolen Checks: Report stolen checks to your bank as well as the following agencies:

Notify the Post Office: If you have reason to believe that the thief has filed a change of address form in your name, notify the local Postal Inspector. Call the U. S. Postal Service at 800.275.8777 to get the phone number. The change of address form will be an important piece of evidence for the police to follow.

Find out where fraudulent credit cards were sent. Notify your local post office to forward all mail in your name to your address.

Contact the DMV: If your driver's license is stolen, call the state office of the Department of Motor Vehicles to see if another license has been issued in your name. If your state DMV provides a fraud alert process, place a fraud alert on your license. Be prepared to show proof of theft and damage. Go to your local DMV to request a new driver's license number. Fill out the DMV's complaint form to begin the investigation process. Send supporting documents with the completed form to the nearest DMV investigation office.

Debt Collection: Do not pay bills for which you are not responsible. If debt collectors attempt to force you to pay unpaid bills on fraudulent accounts, ask for the name of the company, the person contacting you, their telephone number and address. Request the name and contact information for the referring credit issuer, the amount of the debt, account number and the date of all charges.

Inform the collector that you are a victim of identity theft and are not responsible for the account. Ask the debt collector if their company has a specific fraud affidavit form or if you can use the form provided by the FTC.

Send the debt collector a follow-up letter explaining your situation, including copies of documents that support your claim and asking them to confirm in writing that you do not owe the debt and that the account has been closed.

Criminal Identity Theft: If a civil judgment is entered in your name for your identity thief's actions, contact the court where the judgment was entered and report that you are a victim of identity theft.

If you are wrongfully arrested or prosecuted for criminal charges, contact the police department and the court in the jurisdiction of the arrest, as well as the state Department of Justice and the FBI. File an impersonation report with the police department or the court and confirm your identity. Ask the police department to take your fingerprints, photograph you and make copies of your photo identification documents. To establish your innocence, ask the police to compare the prints and photographs with those of the identity thief. If the arrest warrant is from a state or county other than where you live, ask your local police department to send the impersonation report to the police department in the jurisdiction where the arrest warrant, traffic citation or criminal conviction originated.

This action should cause the police department to recall any warrants and issue a "clearance letter" or "certificate of release" (if you were arrested or booked). It is important that you keep this document with you at all times in case you are wrongfully accused again. Ask the police department to file the record of the follow-up investigation establishing your innocence with the district attorney's office and/or court where the crime took place. This will result in an amended complaint.

TIP: Once your name is recorded in a criminal database, it is unlikely that it will be completely removed from the official record. Therefore, request that the primary name in the database be changed from your name to the imposter's name, with your name listed as an alias.

Maintain Thorough Records: Keep records of all conversations and correspondence with everyone you notify regarding the identity theft, including dates, names and telephone numbers. Keep track of the time spent and expenses incurred in case you are able to seek restitution in a later judgment or conviction against the thief or if you itemize tax deductions for theft-related expenses (consult your accountant). Confirm conversations in writing. Send correspondence by certified mail, return receipt requested.

Are there any laws that prohibit identity theft?

Under the provisions of the Identity Theft and Assumption Deterrence Act (18 U.S.C.A Section 1028), using another person's identification with the intent to commit any unlawful activity is a federal crime. Federal agencies, including the U.S. Secret Service, the FBI and the U.S. Postal Inspection Service investigate suspected violations of the Act. Prosecutions are handled by the U.S. Department of Justice.

Identity theft may also involve violations of other statutes such as:

Each of these federal offenses is a felony and carries substantial penalties, which in some cases can be as high as 30 years imprisonment, fines and criminal forfeiture.

Many states have passed or are considering laws related to identity theft. If your state does not have an identity theft law, it is likely that the issue is covered under other state laws. Contact your state attorney general's office or local consumer protection agency for laws related to identity theft.