August 20th, 2008

Someone Found My Wallet! I Cancelled Everything Anyway.

Just heard this so I thought I’d share…If you ever lose your wallet or purse and someone calls you to let you know they’ve found your lost goods.  Cancel everything anyway!

The few hours before you actually can get your purse or wallet back is all the extra hours criminals need to steal even more.

June 19th, 2006

Free “Avoid ID Theft” Kit

Okay, this is interesting…I have no idea what this kit includes.

From the site:

FCIC is the help desk for everyday life–and we’d like to help you! Avoid ID theft with a FREE package of publications about credit and identity theft. The package includes publications on credit reports, credit scores, preventing identity theft, and more. 

To get your FREE ID theft package and a FREE Consumer Information Catalog listing more than 200 valuable consumer publications, just fill in your name and address below.

http://www.pueblo.gsa.gov/rc/specoffr.htm

I just signed up…will post more details when I receive it in 4 weeks. I never heard of a government agency with the acronym “GSA” actually.

June 1st, 2006

Your ID Is Stolen. That Sucks. Now What? 9.3 Million Victims.

Hope this never happens to anyone, but what if it does? How will you know? What do you look for? Who should I call if you think something is wrong?

Tons of articles advising you on what if your credit is stolen telling you to call your credit card companies, credit bureaus, banks, etc. But what if you think you’re just being too cautious? STOP. You can never be too cautious.

Here are the steps I take to prevent my ID from being stolen:
- I use the government’s gift of a free annual credit report. And take the time to look through your entire history to make sure nothing seems out of the ordinary. Your credit report will often contain numbers to the reporting financial company, so call them if you have any questions.
- I monitor my online account activity on a weekly basis. Credit cards, banks, investment, etc. I try not to let anything slip.
- Don’t submit your financial or personal information to any sites linked from emails if at all possible.
- Discard personal information securely. Shred, burn, destroy all personal information. I’ve debated just throwing things away, and I admit, I do sometimes. When I get lazy, I’ll rip a credit application in about 6 pieces and throw some of it in one trash can and the rest in another.
- Call my financial institution whenever there’s a question mark. Should I find something suspicious, I would immediately track down exactly when and where that happened, and then take the appropriate steps to stop it.

Here are some quotes taken from an article on msnbc.com:

Study results indicate that consumers who spot fraud online suffer an average theft of about $500. Consumers who wait for paper records and suffer ID theft suffer average losses of $4,500. 

So monitor your credit card and online account statements! So your ID is stolen…now what?

Also promising, she said, was a result showing average consumer time spent dealing with personal records cleanup from ID theft is now 28 hours, down from 33 last year. 

Do you have 28 hours, which probably doesn’t account for everything, to talk to someone over the phone explaining to them that you are, well, you? Remember,

“The fact is that nobody is more effective at preventing and protecting fraud than the individual,” he said. 

Here are some references in case ID Theft strikes you:

http://www.consumer.gov/idtheft/
http://www.complaints.com/directory/2004/april/18/11.htm
http://www.msnbc.msn.com/id/6866768/
http://www.ssa.gov/oig/hotline/when.htm
http://www.usdoj.gov/criminal/fraud/idtheft.html
http://www.ftc.gov/bcp/conline/pubs/credit/idtheft.htm

And you may be interested in Credit Monitoring services.

Also, check out this post by Frugal @ My 1st Million At 33.

April 12th, 2006

Financial Web Site Security. The Best Defense Is In the Details.

Larger corporations have been making strides in providing secure access beyond the primitive username password combination. At the same time, smaller financial institutions have not. At least that seems to be the case with financial institutions I use. Although, I will admit my credit card companies seem to be falling behind in that area as well. Bank of America seems to be the only one that has taken a few extra steps to protect me. I haven’t seen anything from Chase, Citi, American Express, and MBNA yet. Well, I thought it’d be interesting to take a look at a few of the systems in place.

ING (Security Page):
Three field security, using a customer number, PIN, and a personal question.

In my opinion this is the best security system. It’s a good combination of convenience and security. I do with they would increase the question pool though.

 

 

 

HSBCDirect (Security Page):
HSBC uses a 2 tier system, and combination of the username/password, but then a second password for bank to bank transfers that can only be entered using your mouse.

Convenient? NO. Secure? Not bad. I like this system, but it’s not really that secure. In essence the safe is locked tight, but the entrance to the bank is left wide open. Also, the buttons could be a little larger.

Bank of America (Security Page):
BofA uses a typical username/password combination with a twist known as a “Sitekey.” You enter your username, and then you are presented with a Sitekey. The Sitekey is an image that will be displayed if you are looking at the authentic BofA website. This image is one you choose. If you don’t see your sitekey, then that means you shouldn’t be entering your password.

I like the concept. However, I don’t like the implementation. It’s a little too clunky, and I think it’s acceptance is going to be harder because of it.

Summary:
Overall, I believe if they combined BofA’s Sitekey security with ING’s personal question system with multiple questions (the larger the pool, the better), the system would be highly secure. A system like BofA’s will help confirm to the user that you are at the right place, then the personal question will confirm your identity. The 2 tier system is an improvement from the username/password security system, but criminals could have access to your preliminary information, which is not good, so I would not support this system as the de facto standard.

The worst security scheme I can think of? Login with your account number and a simple password. WRITE YOUR BANK NOW! Seriously, tell them to fix it or take your banking somewhere else.

Action to take:
It’s always a good idea to be aware of the sites you are entering your personal information! Just take an extra second to glance at the bottom right corner for the little lockpad and the proper URL in the address box. These two steps alone can help prevent giving away valuable information.

Also, don’t enter personal information at public workstations, no matter how much you need to do so. Anyone and everyone can use the system, and you don’t know what sort of spy apps are running in the background. The security hack could even be as primitive as someone standing over your shoulder!

Finally, if your financial instituion does not have anything but the username/password security system, WRITE them and let them know you want something more secure. It’s way too easy to break in. Do you have any other interesting security measures you’ve seen? Of course there are biometrics, but I’m not a big fan of that either. I like security systems that depend on information stored in my brain, it seems like the most secure location to keep security info. :)

April 6th, 2006

Credit Monitoring Services, Are They Worth It?

Sure you can get a free credit report every year, but I’m not quite sure how effective it will be to find out something odd on your credit report up to a whole year after the fact. A lot of damage could already have been done.

So, I went through the process of trying to find some “credit monitoring” or “credit protectors.” Just to clarify, there are credit card protection services that will cover your debt should something happen, but have nothing to do with monitoring for fraud. Then there are credit card protect services that monitor for fraudulent activity.

Be aware that some credit monitoring services only monitor for changes weekly, while others check daily.

I looked some up:

Citi Credit Monitoring
9.95/mo
http://www.creditmonitoring.citi.com/index.asp?source=CMN00001

IdentityGuard
http://www.identityguard.com/se/landing_se_fam.asp

Amex CreditSecure
https://www124.americanexpress.com/cards/loyalty.do?page=creditsecure

You are in the best position to decide if credit monitoring services would be good for you. To learn more about the American Express Credit Aware Service, call our toll-free number 1-800-964-3594.

I may consider something like Citi Credit Monitoring, but I’m still not sure if it’s worth it. At almost $120/year, that’s not cheap for credit monitoring, but should someone happen to try and steal your identity you would find out very quickly, and that would make $120/year seem like a steal. :) Are you using a credit monitoring service?

March 14th, 2006

New Credit Scoring System…

In case you haven’t seen it already, there’s an article on usatoday.com about a new credit scoring system…I guess this is a good thing…Does that mean FICO score will be putting on the chopping block?

I thought this was interesting since it gives us a look into a snippet of the credit scoring algorithm. Yeah, a little obvious but hey…

The scores are important because they measure how much debt a consumer is carrying and how well the consumer keeps up with bills.

And here’s the credit scale:

In a separate statement, Experian said the scores will be grouped on “the familiar academic scale.” Experian gave these groupings:
A - 901-990
B - 801-900
C - 701-800
D - 601-700
F - 501-600
Experian said it hopes that “as consumers increase their awareness of the importance of credit scores and credit reporting, the consistency of VantageScore will provide the type of information they need to evaluate their credit standing and make sound financial decisions.”

February 27th, 2006

Free Social Security Report

The Social Security Statement is offered by the US government. If you haven’t requested it already, I would definitely recommend it. I do it maybe once a year. Pretty cool service if you ask me! Our tax dollars at work, at least US citizens tax dollars anyway. Let’s just hope it’s still there when we are eligible ;).

|