Blog article
See all stories »

An article relating to this blog post on Finextra:

ID fraud continues to climb - Javelin study

The number of people falling victim to identity fraud in the US last year increased by 22% to 9.9 million adults, according to an annual study by Javelin Strategy & Research.

See article

Identity Theft Rising; Hits Record 10M Americans in 2008


Robert Siciliano Identity Theft Speaker 2/9/09

Number of fraud victims rises in 2008, but average loss per theft falls, according to a recent study. Article Here It should come as no surprise that identity theft incidents are climbing. Over the past year we have seen hundreds of data breaches resulting in millions and millions of records ripped out of small business to large enterprise networks. Many companies breached were simply irresponsible with the information they were entrusted with. Others were found to be compliant under various standards.

Still, the bleeding continues and as I have said numerous times, it will continue to get worse, it won’t get better and change wont take place until consumer credit is frozen across the board and citizens are properly identified.

A “fulz” is a term used in the underground, defined as an asset of information obtained by a “carder” or criminal hacker, which includes name, address, social security number (US primary identifier), and in some cases account and credit card numbers. A fulz is usually traded online in internet relay chatrooms by criminal hackers who become information brokers. They used to sell a fulz for a few hundred dollars per record, now they are as low as 20 dollars. Why? Supply. There are millions of records for sale. It would take identity thieves multiple lifetimes to get through all the information and turn it into cash.

In 2008 the number of victims rose 22% to a record 9.9 million in 2008 from 8.1 million a year earlier, with about one in 23 U.S. adults becoming victims. Contributing to the problem is the global economy. Desperate people are resorting to desperate acts. Familiar identity theft is when family, friends or coworkers steal IDs from those closest to them. A father and son who share a same name are perfect examples. A son could easily adopt his father’s social security number and open various accounts under his dad’s name. What makes this so easy is the son already has IDs with dad’s name, which he shares.

The study further shows that losses to the victims have dropped. Don’t get too excited, its not what I wound consider significant. It’s enough to acknowledge that consumers are recognizing their identity compromised quicker. Which means a bit of due diligence for the consumer. Good for them. However most are still ripe for the picking due to the fact they don’t take many active steps to lock down their information. That’s where tools such as fraud alerts for free, but you have to renew every 90 days or pay a company to do it for you and its on-going hands off. Another option is a credit freezes which locks down your credit preventing even you from getting new credit until its thawed or unlocked.

The study further shows people who made more than $75,000 were more likely to be fraud victims. And the fraud rate was highest among people 35 to 44 years old, which makes sense. For most people, these are prime earning years.

It is important to point out the study was commissioned by 2 companies that benefit from the results. That said, I still believe in the results. I say this because I’m in the same space, and I receive calls and emails daily from victims. These are people that have been caned and waterboarded by identity thieves. Their lives have been abruptly invaded and they have an ongoing barrage of bill collectors and even law enforcement pursuing them because of the crimes of an impostor.

Here is an appearance discussing the same on Fox News




Comments: (1)

A Finextra member
A Finextra member 12 February, 2009, 16:49Be the first to give this comment the thumbs up 0 likes

Thanks for your summary of our study. Yes ID crimes are traumatic to victims, and with a dramatic increase in victimization rates and similarly dramatic increase in the quantity of hours each victim required to restore their personal affairs (from 26 in last year's study to 30 in this year's), total victim impact is getting worse. We'll be releasing more quantiatitive research on victim impact soon, with the next study focused on severely-impacted victims. As always, our information wil be the most factual available.

Just one correction: the comment about sponsor's benefits was a bit of an overgeneralization. With the average fraud amount now over $4,800 yet victims paying under $500 of that, banks (and merchants) largely absorb the difference of those two amounts, and therefore need the costs to go down rather than up. This study is an investment in an industry-wide problem which had a face value of $48 Billion dollars in the US alone last year, not counting mitigation efforts (technologies, call centers, etc) and the even larger amount of lost revenue. This study, with results that sponsors had no access to until it was finalized, is unique in that it is factual beyond comparison--now comprising over 24,000 interviews over five years-- so we can say that "the data is the data". Yet naturally any sponsor that invests in a societal benefit (such as reduction in the $48B fraud problem, improvements to the environment, even endowments to the arts) will strengthen their brand, so if that's what you were referring to I certainly agree!


Again, thanks for the comments, and please keep them coming...

Now hiring