• Follow us on Twitter @buckeyeplanet and @bp_recruiting, like us on Facebook! Enjoy a post or article, recommend it to others! BP is only as strong as its community, and we only promote by word of mouth, so share away!
  • Consider registering! Fewer and higher quality ads, no emails you don't want, access to all the forums, download game torrents, private messages, polls, Sportsbook, etc. Even if you just want to lurk, there are a lot of good reasons to register!

Identity theft - Credit Card Fraud Thread

I'm not really sure the value of Lifelock. I applied for a car loan and talked with a couple of different major banks and I got no notification from Lifelock. I also received a letter from a bank that I never applied to thanking me for an application. No Lifelock notifications. They claim that not everyone participates with them, so they can't get 100% of everything. Seriously, these were all major banks. Time to end that subscription.

When did you apply? It usually takes two to four weeks for hard inquiries to post to your credit file.

If you also allowed the dealer to pull your credit through their finance department that's usually going to throw up three or four hard inquiries too for each bank they use. I'm carrying five inquiries on my Equifax report right now from buying a new Jeep a few months ago.

Also recommend setting up a free account at creditkarma.com. The commercials are cheesy, but the site is as advertised. Free updates every week without counting against your once yearly free pull allowance with the credit bureaus.
 
Upvote 0
When did you apply? It usually takes two to four weeks for hard inquiries to post to your credit file.

If you also allowed the dealer to pull your credit through their finance department that's usually going to throw up three or four hard inquiries too for each bank they use. I'm carrying five inquiries on my Equifax report right now from buying a new Jeep a few months ago.

Also recommend setting up a free account at creditkarma.com. The commercials are cheesy, but the site is as advertised. Free updates every week without counting against your once yearly free pull allowance with the credit bureaus.
I applied last week and got letters from two banks. One bank was one I went to, the other was from; I am assuming, one of the dealer banks. I am in contact with the dealer to verify tha. Funny no letter from the bank that I actually went with.

The issue I have with Lifelock, is if they can't immediately detect these items as they lead one to believe, then what is the value? If it is one-two weeks before they have any information and notify you, well then it is too late.
 
Upvote 0
I don't personally believe there is any value to Lifelock, unless you need their legal services after the damage has already been done. As far a preventative measure goes, they do not have access to any secret/sensitive info about you that you cannot already access yourself for free.

- You can pull your credit bureau reports once per year for free. To maximize the utility of this, you should stagger those requests by four months instead of requesting all three at the same time.

- You can pull your consumer banking record from ChexSystems once per year. This file will have information on interest bearing accounts that can be reported to the IRS -- all those banking products that can be opened online or at a branch with no credit reference (checking, savings, cd, etc ...). This file is used to help guard against money laundering, check kiting, and ACH scams.

- You can view your consumer marketing profile for free at aboutthedata.com. This is a service provided by Acxiom, which is one of the largest data brokers in the US. This information about you is bought and sold by advertisers to determine how you are marketed to with direct mail. This data can be hit-or-miss. In particular, household income can be wildly inaccurate because it is culled from census figures. This information isn't "sacred" per se, but I point it out only because it is widely available and could be a point of entry into id theft/fraud profiling. (Disclosure: I work for one of the largest data brokers in the United States. No, not Acxiom.)

- You can get weekly/monthly credit monitoring features through most credit card issuers today, as well as a variety of Web sites such as Mint and Credit Karma. Experian now runs their own portal, and it's free as long as you decline the FICO score numbers. See: https://usa.experian.com/#/registration?offer=at_ecwd100&br=exp

- You can use a wealth management site/account aggregator to see all your charges and account balances on one screen. I like Personal Capital for this. I check it every morning while I have my first cup of coffee. It only takes a few minutes and I instantly know the real-time balance for everything, get bill pay reminders, can see how personal investment accounts and retirement accounts fared the day before, and know when dividend reinvestments from stock positions trigger.


Outside of proactive monitoring, which you can do yourself and entirely without fees/subscriptions to anything, practice good habits to mitigate risk and give you some latitude to spend through the damage should your identity be stolen and an account or two is drained.

- Have a 'feeder' account for payroll direct deposit with no debit card access on this account. Transfer an amount necessary to a second account which does offer debit card/check drafting access in the event you need it. The idea is to split your bank held cash reserves so you cannot be drained by a breech at one account. You might even split funds across three or four locations if you've got CDs or kids' savings account. Of course, you want an 'emergency fund' that: is liquid, can be withdrawn without penalty, is difficult enough to access for yourself or spouse that it is protected from impulse spending, and is relatively high yield (for whatever that's worth these days). But it also must be there when you need it. Period. All your other accounts being frozen because of ID theft is a prime example. This is an instance where a high yield online only savings account (like the 1.05% APY Barclays accounts) come in really handy for parking three months worth of emergency cash.

- Never, ever use a debit card backed by a cash based account for anything other than withdrawing the cash from your banks' in-network ATMs. This is probably the biggest one that people screw up. A debit/check card might be authorized to use a particular payment network, but the funds cannot be guaranteed by Visa, MasterCard or the issuing bank against fraud. If the card is compromised and your back-up account gets bled dry and overdrawn, you could very well be SOL. This doesn't even account for non-fraudulent, non-malicious activity that could freeze you out of your money when you need it, such as a computer network error at your bank that renders transaction authorization unavailable for a period of a few hours, or double-posts transactions (this particular bug hit Park National Banks a few years ago -- it was a fucking mess. My wife had no idea how much money she had in her checking account for nearly two weeks). In short, and reiterating the previous point, if you have a debit card and must use it, the balance of the account behind it should never, ever be more than you can afford to completely lose.

- Don't use paper checks unless it's absolutely necessary. It's 2016, there are better, more secure ways to get money to other people. You should never put a paper check in the mail. It has your name, address, bank routing number, and bank account number. There are crime rings now where people steal payment envelopes from mailboxes to gather routing/account information to reuse personally or resell.

- Have credit cards. Several. I know a lot of people are scared of credit cards. If you have the discipline, between the signup bonuses and the rewards, it's time people reconsider their use. I now use credit cards for EVERYTHING, and I currently carry seven (to maximize gas, grocery, and restaurant rewards, plus carrying cards that do 5% back in rotating categories on things like department stores, home improvement, online spend, etc...). I'll say it again, I now pay EVERYTHING on a credit card if it is an option, including my municipal utilities, phone, cable, Internet, and auto insurance. Those five things alone manufacture nearly $8000 of spend annually, which equates to hefty rewards when paid on a 1.5% or 2% cash back card. I pay off the credit cards every month in full four to five business days before the close of the billing cycle, so they report with a $0 balance and I never pay any interest. I always carry my cash back balances forward through the entire year, so I can redeem all of them as statement credits in January the following year, essentially making my Christmas shopping 100% comped.

I no longer put paper checks into circulation that carry my routing/account number. The only time I use my checking information is to pay my mortgage and my electric bill with AEP, because those are the two things that I cannot pay with credit, and even those are done via ACH transfer online, so no check and no stamp enters the postal system. I have written one paper check this entire calendar year, and that was $350 to a repairman that replaced the blower motor in my HVAC in July.

If your credit cards ever wind up compromised it's no big deal, you call the issuer and they flag the fraud, rollback the charges, and issue you a new card.

Lastly, sign up for paperless billing on everything where offered. Not only is it good environmental sense, but it eliminates from postal circulation mail that has any identifiable information about you. It also eliminates it from winding up in your trash.
 
Upvote 0
Equifax: Because you suffered a hardship eight years ago when you lost your job during the financial crisis, or maybe because your wife once used a sock drawered credit card to purchase a tank of gas three years ago and you missed the payment by 31 days, it'll cost you an extra $100,000 in interest over the lifetime of your $100,000/30 year mortgage.

Also Equifax: 143 million peoples' personal information, credit files, and SSNs were stolen, and our CFO sold $1.81 million dollars worth of stock in an unannounced, unscheduled sale three days after he knew about the breach. Our bad.
 
Upvote 0
Equifax: Because you suffered a hardship eight years ago when you lost your job during the financial crisis, or maybe because your wife once used a sock drawered credit card to purchase a tank of gas three years ago and you missed the payment by 31 days, it'll cost you an extra $100,000 in interest over the lifetime of your $100,000/30 year mortgage.

Also Equifax: 143 million peoples' personal information, credit files, and SSNs were stolen, and our CFO sold $18.1 million dollars worth of stock in an unannounced, unscheduled sale three days after he knew about the breach. Our bad.

There is some serious bullshit around credit ratings. One I've never understood is that your car insurance rates can be impacted by your credit rating. What the hell does how someone drives a car have to do with how they handle money? Do you suppose Kelsey Grammer or Mel Gibson had a fairly decent credit rating? Didn't help with their ability to safely operate a motor vehicle.
 
Upvote 0
Clown show.

https://arstechnica.com/information...ossibly-the-worst-leak-of-personal-info-ever/

...

What's more, the website www.equifaxsecurity2017.com/, which Equifax created to notify people of the breach, is highly problematic for a variety of reasons. It runs on a stock installation WordPress, a content management system that doesn't provide the enterprise-grade security required for a site that asks people to provide their last name and all but three digits of their Social Security number. The TLS certificate doesn't perform proper revocation checks. Worse still, the domain name isn't registered to Equifax, and its format looks like precisely the kind of thing a criminal operation might use to steal people's details. It's no surprise that Cisco-owned Open DNS was blocking access to the site and warning it was a suspected phishing threat.

Another indications of sloppiness: a username for administering the site has been left in a page that was hosted here. Here's what it looked like before it was taken down at about 8:50 am California time:

...
 
Upvote 0
Clown show.

https://arstechnica.com/information...ossibly-the-worst-leak-of-personal-info-ever/

...

What's more, the website www.equifaxsecurity2017.com/, which Equifax created to notify people of the breach, is highly problematic for a variety of reasons. It runs on a stock installation WordPress, a content management system that doesn't provide the enterprise-grade security required for a site that asks people to provide their last name and all but three digits of their Social Security number. The TLS certificate doesn't perform proper revocation checks. Worse still, the domain name isn't registered to Equifax, and its format looks like precisely the kind of thing a criminal operation might use to steal people's details. It's no surprise that Cisco-owned Open DNS was blocking access to the site and warning it was a suspected phishing threat.

Another indications of sloppiness: a username for administering the site has been left in a page that was hosted here. Here's what it looked like before it was taken down at about 8:50 am California time:

...
 
Upvote 0
There is some serious bull[Mark May] around credit ratings. One I've never understood is that your car insurance rates can be impacted by your credit rating. What the hell does how someone drives a car have to do with how they handle money? Do you suppose Kelsey Grammer or Mel Gibson had a fairly decent credit rating? Didn't help with their ability to safely operate a motor vehicle.
Credit scores are computed using stochastic models. People with bad credit scores are more likely to try to defraud car insurance providers.
 
Upvote 0
Took a look at the Equifax site where they're offering a free enrollment in some credit monitoring program. For a moment, I thought, sure, why not? Then, looking at the enrollment page asking for every bit of information about me, it dawned on me: This program is run by the same dumb fucks who allowed the breech in the first place. Why the hell should I supply them with even more information so they can screw that up too?

I am thinking about freezing my credit, even tho' it pisses me off to have to pay to address a situation that isn't my fault. Just opened one new charge account, and I don't foresee needing to apply for anything else for some time, so it shouldn't be necessary to go thru the rigamarole of unfreezing the account anytime soon.

Has anyone else looked into or actually gone through with the freeze? Wondering how that went for you.

Anyway, gleefully anticipating the inevitable notice of my inclusion in the class action lawsuit that is surely forthcoming. Should at least be able to recover* my freeze fees, minus interest, in five or ten years. :ohbrother:

Me or, more probable, my heirs.
 
Upvote 0
Back
Top