How does account fraud work?

Woman using access window to log in entering password on laptop, Sign up username password Enter log in, Cyber protection, Information privacy. Protection Internet and technology Concept.
KT Stock photos / Shutterstock

Account takeovers are the fastest growing type of online fraud, says Al Pascual, Senior Vice President of Data Breach Solutions at Sontiq. The company owns IdentityForce, a leading provider of identity, privacy and credit monitoring services.

The types of accounts most commonly stolen or opened under a victim’s name include those for credit cards, loans, utilities, phones and banks.

That’s far from an exhaustive list; even things like tax refunds and pension funds are vulnerable. The day the first stimulus checks were released, some banks and credit unions saw account takeover attempts rise by 80%, Pascual says.

Despite the efforts of businesses and governments, seasoned fraudsters continue to find creative ways to bypass security checks. Although, with some less secured accounts, all it could take is a couple pieces of personally identifiable information — that could be your email, username and password, Social Security number or mailing address.

Even if you always keep that kind of info close to your chest, millions of consumers have seen their information exposed in data breaches through no fault of their own.

Earlier this year, about a billion records from Facebook and LinkedIn landed in the dark corners of the World Wide Web. Phone numbers, dates of birth and physical addresses were all available to any crook who cared to look.

What are the potential costs?

Unhappy mature wearing glasses reading bad news in letter, stressed grey haired female with open mouth looking at paper sheet, sitting at desk, shocked by negative message in correspondence
fizkes / Shutterstock

Identity fraud cost Americans about $56 billion last year, with the typical victim losing about $1,100, according to Javelin Strategy & Research.

This doesn’t take into account the hundreds of hours of recovery time, stress and time away from family and friends. Or, Pascual says, the fact that once your identity is compromised, your chances of repeat ID fraud increases three fold.

But unlike other forms of fraud, account takeovers allow scammers to really take their time and maximize the damage. By rerouting email and phone alerts, fraudsters ensure you won’t be informed of suspicious activity.

Your first indication that something has gone wrong could be a call from a collections agency, demanding you repay money you never borrowed. Or you might get denied for a mortgage or car loan.

And while people are very protective of their financial accounts, Pascual adds that many consumers don’t realize that thieves are just as interested in targeting their email and social media accounts.

“Whether it’s making purchases online or contacting your social media connections with a plea for financial help — from you! — the damage can hit both your wallet and your reputation hard,” he says.

How to keep your data away from fraudsters

At home, cheerful family sharing a funny video on a laptop. They are lying on the wooden floor of the living room.
Jack Frog / Shutterstock

IdentityForce recommends the following basic strategies to prevent account fraud:

  • Always monitor your accounts, even your old ones, and make sure to use two-factor authentication when available.
  • Regularly review your credit reports. Credit bureaus now allow for weekly access.
  • Safely dispose of paperwork with personally identifiable information.
  • Update your passwords on a regular basis.
  • Set up alerts on your financial accounts.
  • Be cautious of mail regarding new accounts.
  • Opt out of “pre-screened” or “pre-approved” credit offers.
  • Practice caution when providing personal info to medical, financial and credit entities.

If it all sounds a bit daunting, it certainly can be. Defending your accounts requires constant vigilance, which may not guarantee success.

To protect yourself further — and help restore your accounts quickly if a fraudster slips through — you may want to invest in a dedicated identity theft protection service.

IdentityForce promo image
Sontiq

IdentityForce monitors all of the important aspects of your online identity and provides real-time alerts when anything changes. You’ll also get an alert if the company finds your data for sale on any of the websites, chat rooms and other places frequented by hackers and cyberthieves.

Plus, IdentityForce’s anti-phishing software will warn you if you’re about to enter personal information into a phony website. And its anti-keylogging software will prevent viruses from watching you as you type your usernames, passwords and credit card numbers.

All of those layers of defense — plus $1 million in identity fraud insurance and access to a dedicated team of account-restoration specialists — starts at about $16 per month. That’s not a high price, when you consider the dozens of accounts that need protecting.

About the Author

Nancy Sarnoff

Nancy Sarnoff

Senior Reporter/Editor

Nancy Sarnoff is a senior reporter and editor at MoneyWise. Previously, she covered commercial and residential real estate for the Houston Chronicle where she also hosted Looped In, a podcast about the region’s growth, development and economy. Her work has been recognized by the National Association of Real Estate Editors and the Society of American Business Editors and Writers.

`

You May Also Like

5 Identity Threats You’ve Never Heard Of — And How to Defend Against Them

Scammers have developed some truly ingenious ways to steal your cash and data.

Title Fraud Can Mean the Loss of Your Home — Here’s How To Protect Yourself

Prevent scammers from stealing your biggest assets and demolishing your credit.

Do Big Stores Save You the Most? We Price-Check Our Shopping List

With one 30-second trick, we found $460 in savings beyond Walmart and Amazon.

Here's How to Pay for That Perfect Patio Escape This Year

Don’t settle — with one move, you can make your staycation sensational.

`