Training for Bank Employees

Editor's Notes

• #5: In this video, what non-financial impacts did you note for victims of fraud of identity theft? What types of scams and id theft were mentioned in the video?
• #6: Consumer Sentinel Network Report to FTC in 2010
• #7: Consumer Sentinel Network Report to FTC in 2010
• #8: There are two main types of such financial frauds: 1) the use of the victim’s existing credit, bank, or other accounts; or 2) the opening of new accounts in the victim’s name. Many times victims experience both. According to FTC , about 75% of victims report that the thief misused only their existing accounts.Credit card accounts are the most commonly misused existing account. Done by skimming, theft of the cards, etc. 25% of victims report that thief opened new accounts or committed other types of fraud with the personal info.Phone accounts, usually wireless: most common type of new account opened by identity thieves. Thieves also open or raid bank accounts, internet payment accounts, & auto, personal, student loan accounts.Thief is using personal info of victim to create a new account (may even assume victim’s identity to do so).
• #10: Criminal Identity Theft: Criminal identity theft occurs when someone uses the victim’s name and information as his own during an investigation, issuance of a ticket, or arrest by law enforcement. This may lead to the issuance of warrants or the entrance of guilty pleas in the victim’s name. Medical Identity Theft: In cases of medical identity theft, thieves use a victim’s name, and possibly insurance information to obtain medical services or goods. The victim is then saddled with proving she is not responsible for costly medical bills, or may find that the thief has exhausted the victim’s insurance coverage. Even worse, medical identity theft can have serious health consequences if the thief’s real or fictitious medical information is added to the victim’s medical records. Governmental Fraud An imposter uses identity data of another person supplies such data as part of an interaction with governmental agencies and databases.Synthetic Identity Theft: Each of the types of identity theft listed above involves the thief impersonating the victim to obtain benefits. In some cases the thief does not steal the victim’s entire identity, but rather uses only the victim’s Social Security number, in combination with another person’s name and birth date, to create a new, fictitious identity. As a result, the victim may experience problems when the new identity tracks back to the victim’s credit or tax records. Because this type of fraud may not be reflected on a consumer’s credit report, it may not be discovered by the victim until many years later. ID Theft Assumption: The impersonation of another person on the Internet with the “intent to obtain a benefit or injure or defraud another.” Federal Laws Not specifically criminalized under federal lawState laws Only 2 states have laws against internet impersonation:CANYHowever, recently NJ court broadly defined state ID theft law to include internet impersonation with the intent to harm the victim
• #11: Elderly and ID Theft:While older adults are not the exclusive targets of identity theft, they can be especially susceptible to victimization. There are a number of reasons older adults can be more vulnerable. Older adults may be less aware of the risks of identity theft inherent in the use of the internet and credit cards. Their Medicare information may also be used to make fraudulent claims or to obtain medical care for other individuals. The impact of ID theft can be devastating for older adult victims who are unable to restore stolen funds through employment. Older people are often fearful of stepping forward when they discover they have been victimized because of the fear of being labeled incompetent. One of the goals of the ID Theft Coalition is to destigmatize victimization for older adults so that they can get the help they deserve and recover what has been taken from them.According to the Federal Trade Commission (FTC), identity theft against the elderly accounts for as much as 10% of all identity theft cases. One big reason, of course, is money. According to one report, people over the age of 50 control more than 70 percent of the nation's household wealth. That gives identity thieves reason enough to target them.Homeless and ID Theft: This is a particularly vulnerable population for misuse of personal information because many victims wont even be aware that there information is being used for fraudulent purposes (getting government benefits, jobs, etc.). This makes this population susceptible to scams that target them for giving up their personal identifying information. Battered Women and ID Theft: Identity theft is present in situations of domestic abuse. In a 2004 survey of identity theft victims, 15% reported that they were also victims of domestic harassment and abuse from the perpetrator. Identity theft is a form of economic abuse. Domestic violence is sometimes accompanied by economic abuse, such as controlling access to wealth or destruction of property. Identity theft can be lucrative to the abuser and have a long lasting and debilitating impact on the victim. Identity theft can also be used for surveillance. By impersonating someone entitled to have access to personal information, an abuser or someone hired by the abuser can gain more personal information on the victim. The common example is the pretexting of telephone records. Identity theft can be a form of stalking. Pretexting can be used for more than just surveillance. A pretexter is able to gain full access to accounts, and can do more than just reach telephone records. Thus a pretexter has the ability to cancel accounts, harassing their victim with cancelled electric, gas, and credit card accounts.Identity Theft and Children: Child Identity Theft occurs when a child’s identity is used by another person for the imposter’s personal gain. The perpetrator may be a family member or someone known by the family. It could also be a stranger who purposely targets children because of the lengthy time between the theft of the information and the discovery of the crime. Military and ID Theft: Unfortunately, identity thieves may use personal information to open new accounts while soldiers are deployed. However, an active duty alert, businesses must verify the identity before issuing credit in that name. This makes it harder for identity thieves to use the information.Active duty alerts last for one year, unless requested that the alert be removed sooner.
• #14: (Langton, L. & Planty, M. (2010). Bureau of Justice Statistics Special Report, National Crime Victim Victimization Survey Supplement, Victims of Identity Theft 2008. Washington, D.C.: U.S. Department of Justice, Office of Justice Programs, Bureau of Justice Statistics. Through http://bjs.ojp.usdoj.gov/index.cfm?ty=tp&tid=42.
• #15: Langton, L. & Planty, M. (2010). Bureau of Justice Statistics Special Report, National Crime Victim Victimization Survey Supplement, Victims of Identity Theft 2008. Washington, D.C.: U.S. Department of Justice, Office of Justice Programs, Bureau of Justice Statistics. Through http://bjs.ojp.usdoj.gov/index.cfm?ty=tp&tid=42.
• #17: Make sure your customers understand the importance of reviewing bank statements regularly. If a customer is enrolled in paperless statements, make sure to emphasize they still need to review at least monthly to ensure they catch any unusual activity as soon as possible. Explain to the customer how to differentiate authentic communications from their financial institution from phishing emails or phishing calls. Close compromised accounts and provide written documentation that the account is closedIf possible, give the customer information on how to contact their other creditors4) Give the customer information on how to order their free credit report and discuss how to review the report for fraudulent activity. Discuss requesting a Fraud Alert.5) Explain how to access and complete the FTC affidavit.6) Explain how to contact police and file a police report. Provide copies of any documents that will help the customer complete the affidavit and/or police report.7) Follow up with the customer periodically to ensure no new fraudulent activity on their account8) If they need additional assistance, use ICAIT’s Resource and Referral guide to become educated on who you can refer victims to
• #18: First Contact: Questions you can ask to help gather pertinent facts. What facts lead the caller to believe that her personal information has been misused? How and where did the identity thief misuse the information? When and how did the caller discover the misuse or fraud? What harm has the caller suffered as a result of the identity theft? Maintaining a Log: Whether the victim experienced new account fraud or existing account misuse, and whether she wishes to act alone or with your assistance, you should instruct her, from the outset, to keep a complete record of all calls and letters she generates or receives, and the amount of time she spends and expenses she incurs, in the course of her recovery. Documentation is critical for establishing the facts and providing a basis for damages should the matter go to litigation or criminal prosecution. Under a new law, victims may be able to recover the value of the time they spent recovering from the identity theft if the case is prosecuted in Federal court and the judge orders the defendant to pay restitution.
• #19: There are several tools that have been created to assist victims in recovering from Financial (Account Related Identity Theft) whether with existing or new accounts. We will discuss these tools in more detail and how victims can be assisted in using each tool when appropriate.
• #26: An Identity Theft Report is a police report with more than the usual amount of detail. ThisReport is the primary tool for removing inaccurate identity theft-related information from the victim’s credit report. When the victim provides a qualifying Identity Theft Report and request to a CRA, the CRA is required to block the reporting of information resulting from identity theft from appearing in her credit report within 4 business days. The CRA also must notify the furnishers of the identity theft-related information, who must cease reporting that information to the CRAs and cease selling the fraudulent debts for collection. As defined in the FCRA, the Identity Theft Report is a report: (A) that alleges an identity theft, (B) that is a copy of an official, valid report filed by a consumer with an appropriate Federal, State, or local law enforcement agency, and (C) the filing of which subjects the person filing the report to criminal penalties relating to the filing of false information if, in fact, the information in the report is false. If the victim has obtained a detailed report from law enforcement, that document could serve as an Identity Theft Report. However, normally, a law enforcement report doesn’t contain enough detail to be considered an Identity Theft Report. To help law enforcement develop more detailed reports, the FTC’s Identity Theft Affidavit can be used to add detail to a police report. This puts the job of gathering and organizing the information about the crime on the party in the best position to obtain it, the victim. An Affidavit that has been verified by the police and incorporated into or attached to the police report should contain sufficient detail to avert requests by CRAs or furnishers for additional information.
• #27: An Identity Theft Report offers five major benefits to identity theft victims: Blocking fraudulent information from appearing on a credit report: By submitting an Identity Theft Report to a CRA, a victim can stop the CRAs from reporting information resulting from the identity theft on the victim’s credit report. Preventing a company from refurnishing fraudulent information to a CRA: Once a CRA informs a furnisher that it has accepted a victim’s Identity Theft Report which states that the information the company furnished was caused by identity theft, the furnisher is prohibited from refurnishing that information to a CRA. Preventing a company from selling or placing for collection bad debts that result from identity theft: Once a CRA informs a furnisher that it has accepted a victim’s Identity Theft Report which states that the debts the furnisher reported in the victim’s name resulted from identity theft, the furnisher is prohibited from selling those debts to another company for collection. Placing an Extended Fraud Alert: Consumers need an Identity Theft Report to place an extended 7-year fraud alert on their credit reports. For purposes of obtaining an extended fraud alert, an Identity Theft Report with a simple allegation that identity theft occurred should be sufficient. Thus, victims can use police reports generated through automated systems, such as by telephone or computer, or the victim’s Identity Theft Affidavit filed with the FTC. Obtaining transaction documents from businesses: Victims may obtain documents related to fraudulent transactions resulting from identity theft if they submit a police report, an FTC Identity Theft Affidavit (or other affidavit provided by the company), and proper proof of identification to the company where the fraudulent transaction occurred.
• #28: A security freeze stops most access to your credit reporting file until you temporarily lift the freeze or you remove it. The freeze should prevent new account identity theft, because most businesses will not open credit accounts without first checking a consumer’s credit history. If your credit files are frozen, even someone who has your name and Social Security number probably will not be able to open new credit accounts in your name. In order to get a security freeze, you must contact each consumer reporting agency separately.The consumer reporting agency is not allowed to charge any fees to victims of identity theft for placing, removing or temporarily lifting a security freeze on a credit report. To prove you are a victim, you must also send a valid copy of a police report, investigative report, or a complaint to a law enforcement agency about unlawful use of your personal information by another person. (ID Theft Report).Each consumer reporting agency to whom you make a request must place the freeze no later than three (3) business days after receiving your request. Within five (5) business days from placing the freeze on your account, each consumer reporting agency from whom you requested a security freeze must send you a confirmation letter containing a unique PIN (personal identification number) or password. Keep this PIN or password in a safe place.
• #29: Free Credit Report: Look on credit report for indicators of identity theft:Accounts victim didn’t openActivity on accounts victim had closed or were dormantChanges to personal information, e.g., name, address, DOB, SSN, employerCredit inquiries from companies victim didn’t contactGuide on How to Read Credit Report available from Consumer Credit Counseling of Orange County at http://www.cccsoc.org/pages/credit_guide/credit_guide_05.phtml
• #32: This should stress the importance of immediately reporting lost ATM cards and of regularly reviewing account statements. The EFTA sets forth three tiers of liability for unauthorized ATM or debit card uses, as follows: 1) If the victim reports an ATM or debit card as lost or stolen within two business days after she realizes the card is missing, she will not be responsible for more than $50 total for unauthorized use. 12 C.F.R. § 205.6(b)(1). 2) If the victim fails to report the lost or stolen card within two business days after realizing the card is missing or stolen, but does report its loss within 60 days after her statement is mailed to her, she could lose as much as $500 based on unauthorized transfers. 12 C.F.R. § 205.6(b)(2). 3) If the victim fails to report an unauthorized transfer within 60 days after her statement is mailed, she risks unlimited loss and could lose all the money in her account and the unused portion of her maximum line of credit established for overdrafts. 12 C.F.R. § 205.6(b)(3). If extenuating circumstances, such as lengthy travel or illness, prevents victim from notifying the financial institution within time periods, the card-issuing financial institution must reasonably extend notification period. 12 C.F.R. § 205.6(b)(4).
• #33: Specifically, in order to preserve their rights under the FCBA victims must: Write to the creditor at the address given for “billing inquiries,” not the address for sending payments. Include name, address, account number, and a description of the billing error, including the amount and date of the error; and Ensure that the letter reaches the creditor within 60 days after the first bill containing the error was mailed. If an identity thief changed the address on the victim’s account and the victim did not receive the bill, the victim’s dispute letter still must reach the creditor within 60 days of when the creditor would have mailed the bill. This is one reason it is essential for victims to keep track of their billing statements, and follow up quickly if their bills do not arrive on time. Victims should send their letters by certified mail, and request return receipts. Victims also should include copies of their police report, Identity Theft Affidavit, or other documents that support their position, and keep copies of their dispute letters. The creditor must resolve the dispute within two billing cycles (but not more than 90 days) after receiving the victim’s letter. 12 C.F.R. § 226.13(c)(1).
• #34: Identity theft victims are entitled to copies of transaction records relating to the theft of their identity, such as applications for credit, under section 609(e) of the Fair Credit Reporting Act (FCRA). 15 U.S.C. § 1681g(e). Documents can help victim prove their innocence and can help law enforcement investigations The types of documents the business must provide include “applications and transaction records” that were maintained by the business, or by another entity acting on its behalf, that relate to any transaction alleged to be a result of identity theft. The records could include invoices, credit applications, or account statements, and may include electronic records. There are no recordkeeping procedures provided in the statute, so if the business disposes of certain records regularly, they may not be available to the victim or law enforcement. All requests under the provision by the victim or an authorized law enforcement officer on behalf of the victim. Before submitting such a request, the victim should contact the business to verify the address to which she should send the request. Credit Reporting Act (FCRA). 15 U.S.C. § 1681g(e).
• #36: Only have to contact 1 of the 3 CRAsAn extended fraud alert stays on a consumer’s credit report for 7 years. In addition, the CRAs must remove the consumer’s name from marketing lists for pre-screened credit offers for five years, unless the consumer requests otherwise. An extended fraud alert requires potential creditors to contact the consumer by phone (or in another manner requested by the consumer) or in person before they issue credit in the consumer’s name. When a consumer places an extended alert on her credit report, she is entitled to two free credit reports within twelve months from each of the three nationwide CRAs. With proper documentation, a consumer can request that the fraud alert be lifted from her file. Extended alerts are available to victims of identity theft that provide the CRA with an Identity Theft Report. Because the risk of fraud is low, for this purpose the Identity Theft Report does not have to be filed in person with a law enforcement officer. A report generated by the police through an automated system, or a printed copy of the complaint the victim filed with the FTC (the Identity Theft Affidavit), is sufficient to obtain an extended fraud alert. More information on Identity Theft Reports is provided below. To place either of these alerts on credit reports, or to have them removed, consumers must provide appropriate proof of their identity, which may include their Social Security number, name, address and other personal information requested by the CRA. The presence of a fraud alert on a consumer’s credit report may cause some delay if the consumer is trying to obtain credit. To limit possible delays, consumers may wish to include in their alert a cell phone number, where they can be reached easily. Consumers should be advised to keep all contact information in their alert current.
• #38: Online Training:Developed by the Office for Victims of Crime (OVC)Online training to provide advocates & other allied professionals with the tools they will need to better understand the rights and needs of victims and to help assist victims of identity theft in their financial and emotional recoveryIncludes case studies and exercises
• #40: You can get free brochures on identity theft prevention and recovery from the FTC, the BBB, the AG’s office, or from ICAITBe aware of the emotional impact and toll id theft takes on victims; if a customer seems overwhelmed and unable to navigate the steps they need to take to protect themselves, help connect them to resources in the community where they can get additional help.