According to Bloomberg.com, credit card numbers sell for about $10-$20 on the dark web, the collection of Internet forums and fronts where cybercriminals hang out to trade tricks of the trade. And an underground hacker market is selling dossiers of identities -- social security numbers, addresses and other pertinent details -- beginning at $10. So what is the best identity theft protection for Equifax victims?
The fact that the Federal Trade Commission confirmed it is investigating the notorious Equifax breach, and that Congress is talking about placing tighter reigns on the credit bureaus beyond the Consumer Financial Protection Bureau doesn’t mean that lawmakers’ scrutiny will result in any further protection of personal information the bureaus hold. A recent bill actually proposes further deregulation of credit bureaus, according to the LA Times.
Equifax lawsuits may not either, though Massachusetts Attorney General Maura Healey became the first of the top state consumer protection officials to file suit against the credit firm. According the CNBC story, the Massachusetts filing claimed Equifax exposed half its population. Expect to see further lawsuits because it’s possible that 44 percent of Americans are now vulnerable to consumer identity theft, thanks to Equifax.
Equifax victims can however take action to protect themselves from the unsavory results of consumer identity theft. There are four key strategies, each with steps: pay for protection, avoid the spate of scams the Equifax breach has spawned, establish a personal credit monitoring plan and file your taxes as soon as possible each year.
Paying for Protection
At some point, the scrambling public affected by the breach are going to get official letters from Equifax informing them, but for now most identity theft experts are cautioning that every American should just behave as if their data was stolen and freeze their credit.
While Equifax is offering all those that may have been exposed their credit alert service free for a year along with foregoing its normal credit freeze fees, many are critical the company is using the exposure to profit:
Why should we have to pay Equifax for service to fix problem Equifax caused? I sent a formal letter but could @Equifax answer on twitter?
— Brian Schatz (@brianschatz) September 11, 2017
Also suspicious, according to Fortune, Equifax purchased ID theft protection company ID Watchdog in August, about two weeks after it discovered the breach and about a month before public disclosure.
Equifax is not paying for credit freezes over at TransUnion and Experian credit bureaus, so consumers that want to freeze their credit would have to pay the other credit bureau companies to do so. And, Equifax’s free credit alert monitoring is as of now only free for a year, so there could be monitoring costs incurred in the future in order to continue the service. It also does not offer identity theft liability protection -- those products propose additional costs to Equifax victims.
To most credit protection and financial experts, freezing credit offers the best identity theft protection, but the credit bureaus may try to offer you something else. Finance columnist Teresa Dixon Murray on Cleveland.com cautions consumers not to be bullied:
Don’t be scared into not freezing your credit. For example, TransUnion is working hard to discourage credit freezes. If you contact them online or by phone, TransUnion will try to convince you to ‘lock’ your credit instead of freezing it. They gush that it’s free and easy, while cautioning that freezes can be a hassle and cost money. I think all of the bureaus may start pushing some kind of “lock” instead of a freeze because freezes are regulated by law, locks aren’t. Plus, if you’re file is frozen, the bureaus won’t be able to sell your information to creditors and other companies for those pre-screened credit offers and other marketing purposes. If you want to freeze your credit, then do it. Don’t be talked out it by a pushy credit bureau.”
Equifax Victims Should Guard Against Scams
Equifax victims are not only wondering about the long-term effects and costs of protecting their personal information that may have been stolen, and could be sold at any point in the future, but they need to watch out for scam artists taking advantage of the confusion. It also doesn’t help that Equifax pushed out a spoof scam site via their own social media channels. Here are the types of scams consumers should to watch out for.
#1 Email Scams
Any links sent via email or social media that claim to help figure out whether your social security number was compromised in the Equifax breach is a hoax. It’s low hanging fruit for data theft rings, but people are trying it. MoneyWatch cautioned that the more information a thief has about you, the more sophisticated the email phishing scam becomes. If you download malware that copies the keystrokes you use to log into your retirement account, they could attempt to steal the funds.
#2 Telephone Calls from Equifax
Someone pretending to be from Equifax or a third-party could call to verify your information. Don’t verify it. They may also claim they are calling to fix a problem with your credit. Get a name and a case number, and call back the official Equifax or credit monitoring company offering assistance.
#3 Typo Scams
Typosquatting is when a Web address or telephone number is similar to the real McCoy, but it’s actually a scam. Look closely, is the URL spelled “Eq1fax,” or does it go to a country Web extension like, .uk, instead of .com? Don’t just judge by the website appearance -- identity thieves can recreate very official looking websites. Just ask Bank of America, it’s still dealing with a email phishing scam that brings their customers to a fake website log-in.
All Consumers Should Develop a Credit Monitoring Plan
The best identity theft protection for Equifax victims, and other security breach victims, might be the victims themselves. Consumers do have cost-effective resources -- the Federal government, their creditors and the credit bureaus themselves.
#1 Freeze Credit
Paying for credit protection to Experian, TransUnion and Equifax in the form of freezing your credit, as well as unfreezing and then refreezing it when you actually need your credit, discussed above, seems to be all the credit and security experts’ best identity theft protection method.
#2 Stagger Official Free Credit Reports Every 120 Days
Brian Krebs’, a journalist that investigates security issues, advice to anyone concerned about identity theft -- second to pursuing credit security freezes at all the major credit bureaus -- is to periodically order a free copy of your credit report only at Annualcreditreport.com. All big three credit bureaus are mandated by law to each offer one free credit report per year to consumers though this website.
The best way to take advantage of this right is to make a notation in your calendar to request a copy of your report every 120 days, to review the report and to report any inaccuracies or questionable entries when and if you spot them. Avoid other sites that offer ‘free’ credit reports and then try to trick you into signing up for something else.
By staggering requests to each of the three credit agencies, a consumer can perform a comprehensive review of all lines of credit associated with their social security number. If you find something foreign on a credit report or an alert, call the creditor listed right away to register a fraud claim and continue to follow up with the company until the fraudulent item no longer appears on your credit report.
Learn more about how to use the Annualcreditreport.com government website on NerdWallet.
Note that most credit and security experts say this is the only place to get your official credit report from the three bureaus safely -- never use a third party with a similar Web address advertising free credit reports, and never pay for a credit report.
#3 Review Free Credit Monitoring Opportunities
In between, credit monitoring programs can send alerts whenever your identity is used for credit that would trigger a credit check. It’s not just Equifax that is offering free credit monitoring, numerous other companies -- from clothing retailers to health insurers -- that have had data breaches are also offering free credit monitoring programs. Check the list on the California Attorney General’s website to see where else your identity might also have been stolen from.
#4 Opt Out of Consumer Credit & Insurance Offers
Krebs and other credit experts suggest opting out of credit and insurance offers. There are two options -- opt out for five years, or opt out permanently -- at Optoutprescreen.com. Without these offers, the chances of your credit being tainted with goes down.
Shred any portion of these mailed offer that contain your personal information.
#5 Check All Credit Card Statements Every Month
As part of the Equifax breach, more than 200,000 credit card numbers were also stolen, according to Brian Krebs. Call credit card companies right away to flag fraudulent purchases you find on monthly statements, reissue a credit card account number and file a fraud claim. Continue to follow up to make sure the fraudulent activity does not appear on your credit history.
Equifax Victims Should File Taxes Early
In the last two years, there has been a rise in the number of fraudulent tax returns filed. The person who uses your stolen identity to get a refund check from the Internal Revenue Service in your name may cash it before you have even made your annual appointment with a tax preparer.
All the experts, including CBSNews MoneyWatch, recommend filing early. If an identity thief already filed taxes in your name, IRS will tell you that more than one return was filed in your name, that you owe additional tax or that IRS records indicate you earned more than the amount of wage you reported.
If you are a victim of tax fraud, MoneyWatch advises file a police report, a fraud report with the FTC Identity Theft Hotline at 877-438-4338, and complete IRS form 14039, the Identity Theft Affidavit. Consumers can also call the IRS Identity Protection Specialized Unit at 800-908-4490.
