Crime, Made Easy
But while it's proving difficult to find a legislative cure for
identity theft, the crime is remarkably easy to perpetrate.
"It's incredibly easy," says Vranesevich. "Even the most novice
user can get online and with a little bit of teaching could [commit
identity theft] in an hour."
All that is required is a Social Security number and the name,
address and phone number of its rightful owner, says Betsy Broder of
the FTC. In many cases, this information can be readily found online
via various data services like US SEARCH or Net Detective, or even
offline with the phone book.
Armed with such information, an identity thief can open a bank
account, take out a loan or order credit cards — all of which can
now be done from the anonymity of a personal computer.
Compounding the ease of the theft is growing demand for the
stolen data: There is a vast virtual black market on the Web, using
tools like Internet Relay Chat (IRC) and Instant Messenger (IM),
where individuals buy and sell stolen credit card and Social
Security numbers with the same ease they might hawk Pez Dispensers
on eBay.
And since the Internet is a global phenomenon, the traffic in
stolen identity flows effortlessly across borders.
"Today a hacker in Moscow can break into a system in Singapore,
steal credit card numbers and transfer them via the Internet to a
co-conspirator in Buenos Aires, where merchandise will be purchased
that is transshipped and sold on the streets of Miami," says
Townsend.
And the crimes are committed in the blink of an eye. "The time it
took for me to describe that to you," he notes, "is just about how
quickly a transaction like this could have been completed."
Townsend says the current identity theft hot spots are Eastern
Europe and Southeast Asia — where the level of education and
technical sophistication is high, and where tracking down and
prosecuting criminals can be very tricky.
Protect Yourself
Not everyone agrees on how the problems associated with identity
theft can be resolved. But most seem to agree that things could
improve dramatically if we ceased using Social Security numbers as
the primary means of identifying consumers.
"The Social Security number was never meant to be a universal
identifier," says Edward Wade, a Las Vegas-based security expert and
author of the book Identity Theft. "In fact, it is really
poorly suited to the task."
Privacy experts also say that people need more control over what
happens to their personal information. They argue for legal
requirements that people be made aware whenever information like
their Social Security number is being used.
"We need to put the person back in the driver's seat to control
their information, " says Andrew Shen, Senior Policy Analyst at the
Electronic Privacy Information Center.
Another possible solution is the adoption by banks and credit
card companies of new technologies such as retinal scans and voice
signatures that could help significantly reduce the level of fraud
by raising the bar on perpetrators.
For now, however, there are no such fundamental changes on the
horizon. The best thing a consumer can do is to take the necessary
steps to protect his or her personal information both online and off
and — in a world where information is currency — hope that thieves
don't set their sights on their identity.