Identity Theft Red Flag & Address Discrepancies

Question 1

What are the identity theft red flags and address discrepancies regulations and guidelines?

Answer 1

ITPP and FACT Act

Any financial institution or creditor that offers accounts that may be at risk for identity theft must have in place an identity theft prevention program (ITPP).

The identity theft red flags and address discrepancies regulations and guidelines implement sections 114 and 315 of the fact act of 2003.

Compliance is mandatory as of November 1, 2008.

Question 2

What is identity theft?

Answer 2

It is when identity thieves use a variety of tactics to steal their victims’ names, Social Security numbers, credit card numbers or other financial account information.

Question 3

What are some of the methods used by identity thieves to obtain confidential information?

Answer 3

Dumpster diving

Phishing

Old-fashioned stealing

Skimming

Address change

Pre-texting

Question 4

What is dumpster diving?

Answer 4

When identity thieves go through the potential victims trash looking for bills or other papers that contain personal information.

Question 5

What is phishing?

Answer 5

Using the Internet, identity thieves will send a spam email message that appears to come from the victims’ financial institution. The email directs the recipient to a fraudulent website. Identity thieves may also use pop-up messages to get the victim to disclose personal information.

Question 6

What is old-fashioned stealing?

Answer 6

Target items include wallet, purses, and items found in the mail. Thieves look for financial institution and credit card statements, new checks, preapproved credit offers, or tax information. I did any thieves may also bribe employees who have access to the intended victim’s personal records. They may even still be information themselves.

Question 7

What is skimming?

Answer 7

While at a store, Identity thieves will use a special storage device when processing a potential victims card, to still credit or debit card numbers.

Question 8

How does changing an address turn into identity theft?

Answer 8

Identity thieves will complete a change of address form to divert the victims billing statements to another location.

Question 9

What is pre-texting?

Answer 9

Identity thieves will use false pretenses is to try to obtain a victim’s personal information from telephone companies, financial institutions, or other sources. For example, the identity thief might pretend to be a police officer who is investigating a crime.

Question 10

What policies and procedures must our identity theft prevention program include?

Answer 10

Identify
Incorporate
Obtain
Detect
Respond
Update

Question 11

Identify – how does it fit in ITPP?

Answer 11

Identify relevant patterns, practices, and specific forms of activity that are red flags signaling possible identity theft, and incorporate those red flags into the program.

Question 12

Incorporate – how does it fit in ITPP?

Answer 12

Incorporate existing policies and procedures.

Question 13

Obtain – how does it fit in ITPP?

Answer 13

Obtain board approval for the initial ITPP.

Question 14

Detect – how does it fit in ITPP?

Answer 14

Detect red flags that have been incorporated into the ITPP.

Question 15

Respond – how does it fit in ITPP?

Answer 15

Respond appropriately to any red flags that are detected to prevent and mitigate identity theft.

Question 16

Update – how does it fit in ITPP?

Answer 16

Update ITPP periodically to ensure it reflects changes and risks to customers and our institution.

Question 17

What are red flags?

Answer 17

Red flag refers to a pattern, practice, or specific activity that signals the possibility of identity theft.

Question 18

Red flags include consumer reporting agency alerts. Name some alerts, notifications, or warnings from a consumer reporting agency.

Answer 18

A fraud or active duty alert

A reported notice of a credit freeze

An address discrepancy

A consumer report that indicates a pattern of activity that is inconsistent with the history and usual pattern of activity of an applicant or customer

Question 19

Red flags include suspicious personal identifying information. Name some specific examples.

Answer 19

Address does not match any addresses in the consumer report

Address is fictitious, email drop, or a prison

Social Security number is the same as one submitted by another person

Question 20

Red flags include unusual use of, or suspicious activity related to, a consumer account or other account. Give some specific examples.

Answer 20

• Request for a new, additional, or replacement card shortly after the notice of a change of address has filed
• A new revolving credit account is used in a manner commonly associated with known from patterns
• Inactive card is suddenly used
• Mail is returned to the financial institution or creditor repeatedly
• Customer notifies bank of missing statements