MyCRA Specialist Credit Repair Lawyers

Tag: Identity Theft

  • Banks, telcos to have access to better id theft prevention through document verification (DVS)

    Identity theft…what can we do to prevent it and in doing so protect our credit rating from misuse? We look at how it occurs, and what the Federal Government is doing to help minimise the instances of identity fraud through implementing a better system of verifying important personal information.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    How do identity thieves go about taking credit out in your name? If they have enough personal information about you, such as your full name, date of birth, and heaven forbid your mother’s maiden name – fraudsters can forge identity documents, or request new ones in your name, which then gives them access to funds via your clean credit rating. This credit is left owing and you are stuck with a mountain of debt, and a bad credit rating you probably don’t even know about until you go and apply for credit yourself and are refused because of defaults you didn’t initiate.

    This doesn’t occur as regularly as other types of personal fraud – but it occurs more than you might think. Current statistics from the Australian Bureau of Statistics 2010-11 Personal Fraud Survey estimates that a total of 1.2 million Australians, or 6.7% of the population aged 15 years and over, were a victim of at least one incident of personal fraud in the 12 months prior to interview. Within these figures, 0.3% of the population had been a victim of specific identity theft. This amounts to 44,700 Australians. These were the people who admitted to being duped. Identity theft is one of the most under-reported crimes, due mostly to embarrassment from the victims. It is also extremely difficult to Police, with it often being initiated from overseas crime syndicates. So prevention in this case is often better than the cure.

    For those of you who have been following our updates on identity theft prevention, you may remember the government’s introduction of The Document Verification Service – a national service which allowed government agencies which took it up to verify documents. In May the Attorney-General announced her plans to roll the DVS out into the private sector we blogged about this then in the article Identity theft prevention in budget 2012. She spoke yesterday of the intended service, and said it will be available for the private sector from 2013.

    Yesterday Computerworld published an article Identity crime in sights of Australian Attorney-General detailing the Attorney-General Nicola Roxon’s comments about the DVS during the Security 2012 conference in Sydney.

    She told delegates the move will save businesses money by reducing unnecessary manual processes, data collection and record keeping.

    “It will also help to support law enforcement agencies such as the Australian Federal Police [fusion_builder_container hundred_percent=”yes” overflow=”visible”][fusion_builder_row][fusion_builder_column type=”1_1″ background_position=”left top” background_color=”” border_size=”” border_color=”” border_style=”solid” spacing=”yes” background_image=”” background_repeat=”no-repeat” padding=”” margin_top=”0px” margin_bottom=”0px” class=”” id=”” animation_type=”” animation_speed=”0.3″ animation_direction=”left” hide_on_mobile=”no” center_content=”no” min_height=”none”][AFP] in their efforts against identity crime,” she said.

    The DVS was introduced as an electronic online system used by government agencies to check whether a proof-of-identity document that has been presented by a person applying for a benefit or service is authentic. If a document matches information held by the issuing agency, a positive response is returned. The service does not store personal information, but allows verification only.

    “Requests to verify a document are encrypted and sent via a secure communications pathway to the document issuing agency,” Ms Roxon says in a statement on the AG website.

    A spokesperson from the Attorney-General’s Department said that it expects to be able receive applications for private sector access to the DVS from the end of 2012.

    “This would allow the private sector to commence verifications of documents from September 2013, possibly earlier,” the spokesperson told Computerworld.

    The Federal Government set aside $7.5 million in this year’s Budget to extend the DVS to the private sector from 2013-14.

    “The DVS will provide a tool to help reduce the incidence of identity fraud and improve the integrity of consumer identification used by the banking and finance, telecommunications, aviation and maritime security industries,” read the Budget 2012-13 documents.

    Perhaps the introduction of the DVS into the private sector will encourage those government agencies which have failed to take up the service to implement it.

    Last year prior to the private sector introduction, the DVS was criticised for its inadequate take up amongst government identity issuer and user agencies. At the time we blogged about it (Can official documents be forged to commit identity fraud?), agencies such as Centrelink, the Department of Immigration, and state road authorities and birth and death registries, were not connected to DVS.

    Images: photostock/ www.FreeDigitalPhotos.net[/fusion_builder_column][/fusion_builder_row][/fusion_builder_container]

  • AFP and FBI sign agreement to pool resources on identity crime

    Police from Australia and the United States have joined forces to pool their resources to fight a number of crimes which cross international borders, including identity crime and cyber-crime. We watch these changes with interest as they apply to fighting the increasing instances of identity crime which can result in victims being stung with bad credit and being banned from borrowing for 5 to 7 years when frausters use their good name to take out credit.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    The Australian Federal Police (AFP) and the Federal Bureau of Investigation (FBI) signed a memorandum of understanding (MoU) in Washington on Friday to share intelligence in order to fight many types of crime, including identity crime and cyber crime, ninemsn reports in its story AFP, FBI pool resources against crime.

    The MoU, called Combatting Transnational Crime, Combatting Terrorism and Developing Law Enforcement Cooperation focused on collaboration between agencies in terrorism, illicit drugs, money laundering, illegal firearms trafficking, identity crime, cyber crime and transnational economic crime.

    It also consolidated AFP and FBI cooperation in the exchange of information, resources and technical and forensic capabilities.

    The Australian Government made changes to Australia’s laws in June last year, to allow for the international collaboration of information on cybercrime. The Cybercrime Legislation Amendment Bill 2011, amended several laws in order to comply with the only international treaty on cyber-crime.

    This was done in the hope of coming up to speed with other countries in the fight to tackle an international wave of cyber-attacks.

    Cyber-crime and identity crime are a global phenomenon, and potentially this relationship between Police forces could improve the chances of tracking fraudsters, and potentially lead to more arrests.

    Currently, identity crime and cyber- identity crime is often one of those largely ‘untrackable’ crimes  – especially if it originates overseas. It can lead to the victim having any number of credit accounts taken out in their name, which can result in the victim being stuck with wrong defaults on their credit rating, or a bad credit rating they didn’t initiate, and a whole heap of trouble recovering their good name. Often Police are unable to prosecute anyone, and it is up to the identity theft victim to go about proving they didn’t initiate the bad credit.

    It will be interesting to see whether more arrests can be made or whether the sharing of information could deter cyber-criminals in the future.

    If you have been a vicitm of identity crime or cyber-crime, we would be interested to hear from you, and the process you went through. Did you let Police know of the attack?

    If you need help with a bad credit rating you didn’t inititate which would point to identity theft, whether inititated on our shores or overseas, you may be able to get assistance in recovering your good name. You may be eligible for a Victims of Commonwealth Identity Crime Certificate, and/or you may be able to get help from a professional credit repairer to help with getting those wrong defaults removed from your credit file.

    Contact our credit repair team on 1300 667 218 to get advice.

    Image: Victor Habbick/ www.FreeDigitalPhotos.net

  • How an overseas trip can see you with bad credit

    Going overseas? We tell you why this makes you vulnerable to being lumbered with bad credit, and tell you 5 things you should know to protect your credit rating when going overseas.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    You’re on that plane – drink in one hand, a copy of Lonely Planet in the other. It’s the trip of a lifetime, you’ve scrimped and saved for ages to get to this point – so excited to be heading off on your round-the-world-trip – with an extended stopover in the U.K. for some work. So long suckers!!!!

    You’ll miss your family and friends, but it’s your right of passage to do what millions of young Australians do every day, jump on a plane and see the other side of the world.

    But you are planning on coming back some time, right?

    And watcha gonna do when you get back?

    Get sensible again? Maybe save for a house?

    Or save for another trip?

    But thousands of young people find that one little thing can stop them taking out a mortgage, buying a car, or buying another plane ticket after they have been o/s – BAD CREDIT! And this is often why…

    You come back home a little paler, a little chubbier, a bit wiser, but a hell of a lot poorer. You apply for a credit card – but you nearly fall off your chair – the application is declined. For some reason – you have a Telstra default on your credit rating.

    “This has got to be a mistake!” You say, “I’m good for it – I always make my payments on time.”

    But there it is – bad credit – and there’s nothing you can do about it.

    After contacting Telstra, you find out it was the mobile phone account you had before you went overseas. There was this one last bill that you didn’t know about. And that bill was sent to your old address – again, and again, and then they put a default on your credit file when you didn’t pay it after 60 days.

    You thought you had fixed everything up, but it seems you hadn’t.

    Now the bill has tripled in size, and when you complain about the mistake on your credit file, Telstra tell you all they can do is mark it as paid if you pay it. It will be on your credit file for 5 years.

    This is the scenario of many of our clients who contact us to help dispute their credit report. Time and time again we see people who have gone overseas or even just gone to the next suburb and think they have settled accounts prior to leaving, only to find those ‘final accounts’ haunting them in a big way for years to come.

    Other people have gone overseas, taken their mobile with them, only to find they are hundreds of dollars in debt with no way to pay due to their phone bill.

    Well, before you take off – here are 5 things you should know to protect your credit rating before going overseas:

    1. Completely finalise your accounts

    Contact every creditor to let them know you are going overseas, and provide them with new contact details for you if you are moving out of your home. If you are going for an extended period of time – rather than just paying your last bill, make sure you have finalised your account and requested a closing balance. Once you have paid the final amount, get it in writing to ensure it is the final bill for that account.

    2. Cancel direct debits

    If you have a direct debit set up, this can sometimes be with a separate company to the actual Creditor – particularly with things like gym memberships, so make sure you cancel any direct debits coming out of your account – finalise any outstanding amounts – and get the notification of the cancellation in writing.

    3. Beware phone charges while overseas

    Many phone companies charge you extra for calls you make and receive while you are o/s. Call your telco provider and make sure you know all the facts before you take your phone on a holiday with you. It might be better to get an overseas phone or SIM for your trip instead.

    4. Beware splurging on credit cards

    It can be hard to keep a tally on what you’re spending while you’re overseas. But do check your balance regularly to make sure you’re not blowing out your budget and sending yourself into debt when you get back. And while you’re there, you might want to check for this….

    5. Beware identity theft

    Just because you’re in holiday mode, doesn’t mean your privacy should be as well. Your personal information is a goldmine for fraudsters, and while you’re in transit, you can be vulnerable to identity theft. If identity theft leads to fraud, you can even have credit taken out in your name, and land in all sorts of trouble with your credit file with incorrect defaults and late payments against your name.

    Keep belongings and personal information (especially Facebook logins) secure, and check all ATM’s and credit card machines for skimmers. Check your credit card online when you can regularly and watch you are logging in through a secure site. When you get home, grab a free copy of your credit file straight away. If there are any suspicious entries you may have been a victim of identity theft.

    Checking your credit file

    If you have come home from an overseas trip, and want to check what your credit file says about you, you should know you are entitled to a free copy of your credit report once a year from Australia’s credit reporting agencies.

    It might be a good idea to order this copy of your credit report prior to applying for any new credit and it will be sent within 10 working days. It will tell you whether you have any bad credit, or whether there are any mistakes on your credit report.

    If you think a default on your credit file is wrong, or you want to dispute your credit report, contact a professional credit repairer to discuss your suitability for credit repair. If the listing is incorrect, contains errors or just shouldn’t be there, a credit repairer can help prepare your case and give you the best chance of having the default or other mistake on your credit file completely removed so you can apply for credit with a clean slate.

    Image: kangshutters/ www.FreeDigitalPhotos.net

  • Veda throws new light on identity theft and credit fraud: 1 in 5 affected

    Identity theft numbers continue to climb. How can this impact your credit file and possibly lead to a wrong default listing? And what action can you take if you are a victim of identity fraud?

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    Credit reporting agency Veda Advantage has revealed more results of their annual Australian Debt Study, of around 1,000 Australians that one in five have had their identities stolen or had their personal or financial data illegally accessed.

    The results, released on Thursday to the Sydney Morning Herald and published in the story Identity theft hits one in five: study, shows the figures have climbed higher than previous studies on identity theft. This includes the widely attributed study on identity theft commissioned by former Attorney-General Robert McLelland twelve months ago, which revealed one in six Australians had fallen victim to, or knew someone who was a victim of identity theft.

    It was reported that credit card crime such as skimming is one of the major problems plaguing consumers. Here is more from that story:

    Australians aged 35-49 are the most likely group to fall victim to identity fraud while 18-24 year olds are the least likely to report illegal access to their personal or financial data…

    …people earning more than $70,000 are much more likely to be targeted for bank account and credit card crime than those earning $40,000 a year or less and cases of identity theft and financial fraud are highest in Western Australia and NSW.

    Findings also show that almost one in three Australians suffered some form of credit crime and lost their wallet containing credit cards and identification.

    Matthew Strassberg, a Veda senior advisor said: “Identity crime is a thriving industry in Australia, with the Australian Bureau of Statistics estimating the cost of personal fraud to consumers at $1.4 billion dollars a year.

    “Whilst credit card fraud is a common form of identity crime, many people do not realise that with only a small amount of personal data, an identify thief could take out a second mortgage on a house, or open up a new line of personal credit and purchase items in their name or under a false identity.”

    Credit card fraud is the most common type of identity crime, but it is buffered by substantial bank insurance and good general knowledge of the steps to take should a person’s credit card be stolen – cancel cards, let the bank know etc etc – but the silent ‘killer’ if someone’s wallet is stolen or a home is broken into; or personal information accessed over the internet or through the various sophisticated computer viruses that are out there – could be the personal information that can be accessed and misused.

    We consider if someone is alerted to having money stolen from credit cards early, or perhaps is able to call their bank and stop fraud in its tracks – that they are the lucky ones.

    The unlucky identity theft victim is unaware of the fraud until their identity is misused, and their credit rating with it. When identity theft damages a person’s credit rating – it is because the fraudster has been able to overtake credit accounts, or has gained access to enough personally identifiable information about the victim to forge new identity documents.

    This gives the fraudster access to credit cards, loans, even mortgages which allows them to extract significant amounts of money without the victim realising it straight away.

    If credit accounts are not repaid – after 60 days the victim may be issued with written notification of non-payment and the intention for the creditor to list a default on their credit file. It is at this moment that some people who were previously unaware of any problems find out they have been victims of this more sophisticated type of identity theft.

    But often the credit file holder has also had their contact details changed – and this means it is not until they apply for credit in their own right and are refused that they find out about the identity fraud. This can be a significant time after the initial crime.

    It can often be difficult for Police to track down who was responsible for the fraud, and likewise, it can be difficult to prove to creditors the victim did not instigate the credit in the first place. People can be left not only owing thousands of dollars, but can also be left robbed of the ability to take out new credit. Major fraud such as this can completely debilitate a family for years after the crime took place. Bad credit sticks around for between 5 and 7 years, depending on how the unpaid credit is listed on the victim’s credit file.

    Knowing how to dispute a credit report which is damaged from identity theft is a science, as is all credit listing complaints. The onus is on the credit file holder to prove to the creditor they did not initiate the credit. This requires proof, including Police reports and documentary evidence.

    This is why many identity theft victims – and all victims of credit file mistakes – turn to professional credit repairers to repair their bad credit in these instances. Often there is only one shot at disputing a credit listing with a creditor. Seeing a professional can give people the best chance of correcting bad credit and having those mistakes (including mistakes from fraud) which appear on their credit report removed for good.

    If you are the one in five who has been a victim of identity theft, have you checked your credit file lately? Do you know whether you could be at risk of identity fraud and credit misuse?

    You can get a free copy of your credit file annually from one or more of the credit reporting agencies in Australia and you should do this to make sure your good name hasn’t been compromised.

    If there is something on your credit report that you don’t agree with, or you think you may have fallen victim to identity crime, contact Police and contact a credit repairer – don’t be embarrassed, and don’t put up with bad credit that shouldn’t be there.

    Image: scottchan/ www.FreeDigitalPhotos.net

    Image: vichie81/ www.FreeDigitalPhotos.net

  • Telstra’s security slip-up was a breach of the Privacy Act

    Back in December 2011 a customer discovered the identity details of 734,000 Telstra Australia customers had been exposed to possible identity theft and misuse by being easily accessible through a Google search. The Privacy Commissioner, Timothy Pilgrim immediately stepped in to investigate. After a 6 month-long investigation, Mr Pilgrim and the Australian Communications and Media Authority (ACMA) has found Telstra has breached both the Privacy Act, and the Telecommunications Consumer Protections Code. We look at how this occurred, and what the implications could be for Telstra, and for you and your credit file.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    In the New Year, we reported on this massive privacy issue, which affected more than 700,000 customers, including myself in our post Telstra’s at it again. And this time it may affect YOU. Here is an excerpt from the December 12 media release:

    The Sydney Morning Herald reported on Friday a user of the Whirlpool forum stumbled upon the “Telstra bundles request search” page after doing a Google search for a Telstra customer support phone number they were told to contact.

    SMH reported the information of any Telstra customer was searchable even by last name, bringing up the customer’s account number, what broadband plan they were on, what other Telstra services they were signed up to and notes associated with the customers’ accounts including in many cases their usernames and passwords.

    There were also other details about technician visits, SMS messages sent to private mobile numbers and credit check details.
    Telstra has reportedly reset approximately 60,000 customer passwords as a precaution (http://www.theaustralian.com.au/australian-it/telstra-customers-face-password-reset-after-privacy-breach/story-e6frgakx-1226219541766).

    Telstra bundle customer, Graham Doessel is one of those potentially at risk.

    He also happens to be the CEO of a company dealing in credit repair for people who have been unlawfully blacklisted from borrowing facilities. He says as much as 50% of his clientele who present with credit file errors and inconsistencies are Telco customers, and many of those are Telstra customers.

    “This data breach is a crucial example of how errors occur so easily in the Telco industry. Unfortunately they have the potential to severely damage someone’s financial future.”

    “Every day we deal with customers who can’t get a home loan, because their credit rating is damaged by improper execution of policies and procedures in the Telco industry,” Mr Doessel, of MyCRA Credit Repairs says.

    Mr Doessel is concerned he is amongst those Telstra customers whose personally identifiable information may have been viewed, and copied for purposes of fraud during the time the information was readily available on the internet.

    “The issue is about both our possible stolen passwords, and our possible stolen personal details – a huge commodity for fraudsters. What’s to say fraudsters haven’t jumped on the internet while this information has been available and copied it?”

    “Personal details are the building blocks for constructing a fake identity. Once someone has fake ID documents, they can take out significant amounts of credit in the victim’s name. Often people don’t find out about it straight away and that can result in defaults from creditors and massive long term credit issues,” he says.

    Outcome of the investigation

    Mr Pilgrim found in his investigation that a number of internal errors occurred in the lead up to the incident in December 2011.

    “I found the privacy breach occurred because of a series of errors revealing significant weaknesses in Telstra’s reporting, monitoring and accountability systems”, Mr Pilgrim said in a statement to the media.

    “Of particular concern is that a number of Telstra staff knew about the security issues with the database but did not raise them with management. This incident could have been easily avoided if appropriate planning was undertaken”.

    “The failure by Telstra to correctly categorise the database project in its design phase as one involving customer data meant that the database did not receive the appropriate level of protection from the very beginning”.

    The Commissioner found Telstra to be in breach of two National Privacy Principles under the Privacy Act 1988:
    •National Privacy Principle 2.1 (Use and disclosure)
    •National Privacy Principle 4.1 (Data security)

    Mr Pilgrim warned businesses of the importance of conducting a Privacy Impact Assessment (or PIA) when commencing new projects.

    “Build your privacy in at the beginning, don’t bolt it on as an afterthought. All businesses should conduct a PIA to make sure that potential privacy risks are considered at the start of any project and that risk mitigation strategies are put in place”.

    Implications for Telstra

    Telstra has committed to a remediation project to introduce significant measures to protect the security of the personal information it holds and prevent unauthorised access and disclosure in the future. The Commissioner closed the investigation after reviewing the remediation plans Telstra has in place.

    In ceasing his investigation into the matter, the Commissioner asked Telstra to provide him with a report on the progress of the remediation project by October 2012. He also asked Telstra to provide to him with a report on the completion of the remediation project by April 2013.

    No penalties enforced

    Mr Pilgrim said The Privacy Act does not give him the power to impose any penalties or seek enforceable undertakings from organisations he has investigated on his own initiative. However, he did say the privacy law reforms that are currently before Parliament – the Privacy Amendment (Enhancing Privacy Protection) Bill 2012 will provide him with additional powers and remedies when conducting such investigations in the future.

    The Sydney Morning Herald reported in its article Telstra’s 734,000 account privacy blunder breached multiple laws: regulators that Telstra appears to have escaped financial or other penalties for now, which has angered consumer groups.

    “We strongly believe the ACMA needs stronger enforcement powers for the Code to be effective,” said Elise Davidson of the Australian Communications Consumer Action Network.

    “The ACMA is currently considering a new draft of the TCP Code but – regardless of what’s in it – without effective enforcement, telecommunication providers can continue to seriously breach their obligations without fear of any fines or sanctions from the regulator.”

    And Yet Still More Data Exposed

    Even before the deliverance of the Privacy Commissioner’s finding on the account scandal, Telstra has also been embroiled in another data scandal involving the tracking of its customer’s internet data useage. The ABC reports in its article Telstra accused of tracking Next G internet use:

    Telstra has been accused of tracking the internet use of its Next G mobile phone users and sending their internet history to a company in the United States.

    One of the telco’s customers discovered that when he visited a website using his Next G network in Australia, a server in the United States would visit the same address almost instantly.

    Telstra says it is collecting the information for use in a new internet filter product, but internet users are outraged and are demanding the Australian Privacy Commissioner investigate.

    For an update to how this particular breach occurred, and what has been discovered so far, check out the IT News article Telstra: Oh what a tangled web we weave written yesterday.

     

    Perhaps not Telstra’s finest hour on Privacy Issues, nor Australia’s finest hour on Privacy Law.

    How To Protect Your Credit File After a Data Breach

    Whilst there have been no official reports of any identity theft cases from this particular security breach, we look at what you should if you find yourself in this situation in the future, with any company that holds your personal information.

    1. Change passwords. Even if Telstra hasn’t advised you otherwise, go in and change your password. If you have that same password for unrelated accounts, change that as well.
    2. Check your credit file. Obtain a free copy of your credit file and check there is nothing suspicious already present on your credit file.
    If you see suspicious activity on your credit file, or your credit accounts….
    3. Alert your Creditors you may be at risk of identity theft. This will allow them to ‘flag’ your accounts and halt any suspicious activity.
    4. Alert credit reporting agencies. They can put an alert on your credit file which informs you of any changes to contact details, or suspicious credit enquiries you may not have initiated.
    5. Consider making a complaint to the Privacy Commissioner. If you firmly believe you have been a victim of identity theft through a company data breach or breach of personal information, you should visit the Privacy Commissioner’s website to determine if you have a valid complaint to make, and how to go about making it. http://www.privacy.gov.au/complaints.
    6. If your credit file has been damaged, get help to repair it. If you have been exposed to identity theft, and you have credit listings which should not be there, contact a professional credit repairer, who can talk to you about clearing your bad credit and recovering your good name.

    Image: Stuart Miles / www.FreeDigitalPhotos.net

     

     

  • Company obligations on phishing scams

    What is the obligation or responsibility of companies to educate consumers on phishing scams? Yesterday, we blogged about the prevalence of phishing scams. Phishing scams are designed to extract personal details and financial data either directly from the user or by way of a computer virus. We look further into this issue and look at what companies are doing to educate their customers, and whether they should be obliged to do so and go further in preventing financial loss, identity theft and a damaged credit rating. This post was written for National Cyber Security Awareness Week 2012, of which MyCRA is a partner.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    After the blog post went up yesterday, a staff member read it and told me he had received such a phishing email just the day before. It was meant to be from one of the major banks, of which he is a customer. The email requested his bank account name, account number and PIN number to verify his online banking – as according to the email, the bank was having security issues.

    Working at MyCRA and dealing with these issues for our clients, my staff member, Luke was pretty hip to the scam. But we got to talking about how many people could potentially fall victim to this kind of email. After all, Luke did actually have an account with the bank, and the email looked quite legitimate.

    Luke called the bank in question and explained the email he had received.

    “Yeah of course that is a dodgy email,” the bank’s worker says, sounding a little surprised that someone would call to verify this.

    The customer service operator’s standard advice was that the bank would never request personal details via email. He said they have the details, but if they did need them, they would be requested during the general banking process, rather than emailing the customer.

    This is a good general rule to remember for most company emails. They will never ask for your details – they already have them.

    But what about the attitude that people need to just assume these days that they will have a phishing scam tried on them? That is dangerous ground for companies.

    I bet if you ask most older Australians if they know about phishing, they will say, “yep – but I don’t get to throw the rod in much these days.” Many people – and not just older Australians are left vulnerable to scams when using internet banking and all the other myriad of things that need to be done online in today’s society.

    When I looked at the bank’s website, there’s a pretty extensive section on banking security, as well as lots of information on scams. This is great stuff. But what could be even better, is some direct warnings to their customers about the prevalence of specific scams when they involve the company, and what to do should they come across them. This would go a long way to preventing their customers from falling for phishing scams in the first place.

    The Computerworld article I featured yesterday PayPal, Amex phishing: What you need to know also talked a bit about company obligations. Here is an excerpt from that story:

    IDC Australia senior market analyst ,Vern Hue, said that companies needed to be extra vigilant with security as the emails could prove to be an opportunity for cyber-criminals to deceive people into believing that emails and other communications came from a legitimate source…

    He recommended that organisations put in place formal business communication policies and guidelines around acceptable use of social media and financial services.

    “The onus is also on the organisation to better secure its perimeters by putting in place network and content management protection technology, such as the next generation intrusion prevention systems [fusion_builder_container hundred_percent=”yes” overflow=”visible”][fusion_builder_row][fusion_builder_column type=”1_1″ background_position=”left top” background_color=”” border_size=”” border_color=”” border_style=”solid” spacing=”yes” background_image=”” background_repeat=”no-repeat” padding=”” margin_top=”0px” margin_bottom=”0px” class=”” id=”” animation_type=”” animation_speed=”0.3″ animation_direction=”left” hide_on_mobile=”no” center_content=”no” min_height=”none”][IPS], which offer a better capability in detecting threats from social media.”

    PayPal, American Express lessons

    Credit card and financial institutions need to secure their weakest link–the human–according to Hue. Organisations should also begin to educate their users on the importance of being vigilant on the internet and educate them on the potential damages one could potentially face if they should fall victim to such attacks.

    “Financial institution need to spearhead the move to inform their users on the need of proper patching and upgrades in order to keep them safe from these attacks and to also educate them that if ever in doubt, users should call and notify the financial institution to verify the origin and authenticity of the communication,” Hue said.

    A blog post late last year by Dynamic Business writer Hamish Anderson titled Financial institutions, social responsibility & phishing scams pleads with big business whose identities are borrowed for the purposes of scams to take an active approach to educating consumers. Here is an excerpt:

    “Big organizations all decry their credential about social responsibility, or environmental sustainability, or corporate ethics, but how many of these social stances encompass combating phishing or alerting the public?

    As the saying goes, forewarned is to be forearmed. With the large purses that these companies have, surely there is a strong argument for these companies to inform people when they know there is a scam focusing on them as a brand. I recognize that many of these brands Tweet about scams as they become apparent, but it often appears that accounts from the Government (such as @SCAMWatch) are more aggressive, are dedicated to scams and more responsive.

    There thus exists a gap to for business to be more socially responsible and to help the public not fall prey to the various scams which exist,” Mr Anderson writes.

    Here here! With the former Attorney-General’s statistics of a staggering 1 in 6 Australians falling victim, or knowing someone who is a victim of identity theft – this ‘social responsibility’ towards informing customers of potential scams to befall their computers in the company’s name seems to be well overdue.

    The implications for identity theft and the difficulty a victim may face to not only recover their financial losses, but to remove bad credit history after full-blown identity theft does warrant a very active approach to stamp out the constant attempts fraudsters make to steal money and identities.

    Let’s promote cyber security awareness amongst all sections of the community, and stamp out phishing scams. If no one fell for these scams, they wouldn’t exist.

    Above image: noomhh/ www.FreeDigitalPhotos.net

    [/fusion_builder_column][/fusion_builder_row][/fusion_builder_container]

  • Experts say getting hooked by Australian Paypal or Amex phishing scams could result in identity theft

    Security experts warn of the potential severity of falling for phishing scams, claiming the data pilfered from these scams can not only result in financial loss, but in stolen personal information. This loss of financial data and or personal information can lead to identity theft and ultimately a whole heap of bad credit history for the victim. We have featured this topic in aid of National Cyber Security Awareness Week 2012.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    Tech publication, Computerworld warned readers this week of the growing threat of very clever phishing scams currently out there, threatening the personal information of PayPal Australia and American Express Australia customers. The four-month email phishing campaign has been targeting those customers with legitimate looking emails and one click could leave them vulnerable to identity theft. The article, PayPal, Amex phishing: What you need to know reveals some advice from top security experts on what this could mean for consumers. But before we delve into what the experts say, let’s look clarify how phishing scams work.

    The ins and outs of phishing scams

    Phishing scams are generally emails or text messages which impersonate genuine companies in the hope of tricking victims into giving out their personal and financial information. They can appear to come from banks, big companies and in the most recent cases, PayPal and Amex.

    The aim of phishing is to steal information like bank and credit account numbers, passwords, and other crucial personal data.

    The ACCC’s Scamwatch website warns that phishing emails are not easily distinguishable from genuine corporate communication:

    “Phishing emails often look genuine and use what look to be genuine internet addresses—in fact, they often copy an institution’s logo and message format, which is very easy to do. It is also common for phishing messages to contain links to websites that are convincing fakes of real companies’ home pages.

    The website that the scammer’s email links to will have an address (URL) that is similar to but not the same as a real bank’s or financial institution’s site. For example, if the genuine site is at ‘www.realbank.com.au’, the scammer may use an address like ‘www.realbank.com.au.log107.biz’ or ‘www.phoneybank.com/realbank.com.au/login’.”

    What happens if people fall for a phishing scam?

    In the Computerworld article, Doctor Jon Oliver, Trend Micro Australia global threat researcher warns that phishing scams were designed to infect computers through virus-containing links in the emails.

    “If a user gets infected then they may suffer direct economic loss because the malicious payload of these phishing-like schemes is to infect the user with financial Trojans and information stealers,”…

    Aside from potentially gaining access to credit card details, Oliver said the BlackHole exploit kit spam runs were infecting users with malware, leaving the users and companies open to ongoing damage until the systems were cleaned or re-imaged…

    “The types of damage can include stolen usernames / passwords, fake anti-virus attacks or data theft,” Mr Oliver said.

    The article also features warnings from IDC Australia senior market analyst , Vern Hue. He said that companies needed to be extra vigilant with security as the emails could prove to be an opportunity for cyber-criminals to deceive people into believing that emails and other communications came from a legitimate source.

    “However, once they click on a link, users will then be transported into a link that is hosted by malicious actors for the purpose of either stealing information, installing malware or duping users to part with their money,” Hue said.

    “We need to be cognisant of the fact that cyber-criminal are crafting very authentic looking email communications.”

    He recommended that organisations put in place formal business communication policies and guidelines around acceptable use of social media and financial services.

    So aside from potentially having credit card details stolen, these scams can invade all the personal data on a person’s computer. What would such a virus find on most computers? Probably a whole lot of personal and financial information – enough for a clever and determined cybercrook to go about stealing the victim’s identity. A fake identity means fraudsters have access to their victim’s good name through their credit rating, and it means the victim has a whole host of difficulties in recovering their ability to obtain credit.

    Vigilance against phishing scams

    The Scamwatch website provides these tips for steering clear of phishing scams:

    • NEVER send money or give credit card or online account details to anyone you do not know and trust.
    • Do not give out your personal, credit card or online account details over the phone unless you made the call and  know that the phone number came from a trusted source.
    • Do not open suspicious or unsolicited emails (spam)—ignore them. You can report spam to Australian  Communications and Media Authority. If you do not wish to report the message, delete it.
    • Do not click on any links in a spam email or open any files attached to them.
    • Never call a telephone number that you see in a spam email or SMS.
    • If you want to access an internet account website, use a bookmarked link or type the address in yourself—NEVER  follow a link in an email.
    • Check the website address carefully. Scammers often set up fake websites with very similar addresses.
    • Never enter your personal, credit card or online account information on a website if you are not certain it is genuine.
    • Never send your personal, credit card or online account details through an email

    For help with recovering a damaged credit rating following identity theft, contact MyCRA Credit Rating Repairs directly on 1300 667 218 or visit the main website www.mycra.com.au.

    Image above: David Castillo Dominici/ www.FreeDigitalPhotos.net

     

     

  • Smartphone users still not smartening up about cyber security

    MyCRA is a partner in Cyber Security Awareness Week 2012 running 12-15 June. The issue of smartphone security was put forward as a growing area of concern amongst information security experts. We look at the dangers of lax smartphone security – since reports show about 4000 smartphones are lost or stolen in Australia every week.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    Yesterday Inside Retail published research from PayPal Australia showing that smartphone users did not afford the same type of security for their smartphones that they may afford for their home computers. The article, titled Security fears over m-commerce reveals some worrying statistic on smartphone security, considering the increasing use of smartphones to perform functions normally reserved for personal computers.

    PayPal Australia’s research shows:

    One in six (16 per cent) of Australian smartphone users have lost, misplaced or had their phone stolen in the last year

    BUT only 30 per cent remotely wiped their data after losing their smartphone and less than half (43 per cent) changed their online passwords.

    AND half (49 per cent) of Australian smartphone users don’t use a passcode on their mobile device.

    Here is an excerpt from that article:

    In support of National Cyber Security Awareness Week (NCSAW), PayPal and the Centre for Internet Safety at the University of Canberra (CIS) have called for Australians to stay vigilant with their smartphones as they would their personal computers and wallets. Australians increasingly use smartphones to store a substantial amount of personal data, from bank statements to calendars to social networking profiles….

    Prashanth Ranganathan, director of mobile security and risk at PayPal is in Sydney this week in support of NCSAW, speaking to industry stakeholders about the need for consumer education as mobile payments becomes increasingly prevalent.

    “Australia is among one of the largest mobile markets in terms of smartphone penetration[fusion_builder_container hundred_percent=”yes” overflow=”visible”][fusion_builder_row][fusion_builder_column type=”1_1″ background_position=”left top” background_color=”” border_size=”” border_color=”” border_style=”solid” spacing=”yes” background_image=”” background_repeat=”no-repeat” padding=”” margin_top=”0px” margin_bottom=”0px” class=”” id=”” animation_type=”” animation_speed=”0.3″ animation_direction=”left” hide_on_mobile=”no” center_content=”no” min_height=”none”][3]. Australian consumers are increasingly using their smartphones to shop and pay while on the go but are unaware of the size of the digital footprint stored in their smartphones. By transacting through PayPal, consumers are provisioned with an additional layer of protection by ensuring their personal financial information is never stored on the physical device and never shared with businesses they are transacting with,” Ranganathan said.

    Australians are keen to take advantage of the mobile convenience of smartphone technology, but according to PayPal’s research are not protecting themselves beyond the home. Smartphone owners were three times more likely to be more mindful of the security of their wallets than of their smartphones and one in three (36 per cent) stay logged into mobile applications.

    Alastair MacGibbon, director at CIS said: “With over 12 million Australian smartphone users expected in 2012, criminals are now making moves to target mobile users. Australians must stay alert and ensure they protect themselves across all their devices. As the technology evolves and more Australians use their smartphone devices to fulfill a wider range of functions, consumers need to keep an eye out for fraudulent encounters and be educated about ways to safeguard their smartphones from cybercrime.”…

    PayPal and CIS have listed key tips to help consumers better protect themselves while transacting on their smartphones:

    • Set up your first line of defense – Enable a unique passcode so that your smartphone automatically locks when you’re not using it.
    • Know who you’re transacting with – Use reputable mobile sites and applications. Look out for trust cues like the padlock symbol before entering your financial information.
    • Watch out for duplicate applications – Cyber criminals take advantage of trusted brands by creating free applications that mimic the company’s official application. If you’re unsure, always download the application directly from the company’s website.
    • Know how you’re connected – Use a secure network to transact online and watch out for people looking over your shoulder while using free Wi-Fi networks.
    • Keep track of what you’re sharing – Be aware of the permissions your applications request from you. Review permission requests carefully and only share information that you are comfortable sharing.
    • Don’t store sensitive data on your device – never store sensitive financial data on your smartphone.
    If your smartphone is lost, stolen or misplaced, remember to:
    •Remotely wipe your data – Enable this feature at purchase so that you can use it to your benefit if you lose your device.
    • Immediately change your passwords – Change your online passwords for the mobile apps and websites that you automatically sign into, such as email, calendars, social networking sites, app stores, messengers, video sites.
    • Get help – Contact your provider or manufacturer and enquire about mobile tracking or whether they can disable your phone on your behalf.

    The rise in the use of smartphones, and mobile digital devices in general points to a need for users to be more cautious about the security of those devices, and aware of the potential for identity theft should they fall into the wrong hands.

    Smartphones, tablets and laptops give people their lives at the touch of a button – allowing access to email, bank accounts and social networking, but he says this access would be a goldmine for fraudsters.

    Research put out by AVG Security last year shows the number of mobile phones reported lost or stolen in Australia has doubled in the past five years to 200,000 annually — that’s 4000 a week, or one every three minutes.

    If people have their laptop or I-phone stolen, these days it can be the same as someone breaking into their home or stealing their PC. If the device is not secure, often there is enough information on there for a criminal to go about hacking into their bank accounts, or stealing someone’s identity and taking credit out in their name.

    Identity theft can hit twice, often with victims facing an uphill battle with their credit rating following it. Many times the identity theft victim is unaware their good name has been used until they apply for credit somewhere and are flatly refused. People may have credit applications as a minimum and possibly defaults, mortgages and mobile phones attributed to them incorrectly.

    Once an account remains unpaid past 60 days, the debt may be listed by the creditor as a default on a person’s credit file. Under current Australian legislation, defaults have to remain listed on the victim’s credit file for a 5 year period.

    What is not widely known is how difficult recovery from identity theft can be, due to defaults remaining on credit files for 5 years. Unfortunately there is no guarantee they can be removed from a person’s credit file. The onus is on the identity theft victim to prove their case to creditors.

    Security companies like AVG also have software such as ‘AVG Mobilisation’, which can help users track and locate a lost or stolen smartphone or tablet on Google Maps. They can also enable remote locking, and remote wiping allowing personal information to be removed if the device is lost or stolen. There are similar products with other security companies.

    People who suspect identity theft should report the matter immediately to Police, no matter how insignificant they think the fraud is.

    This crime is not very widely reported. But it is only through people reporting identity theft that any real statistics get collated on this issue. Likewise, if people want to try and repair their credit rating, the first thing I tell them is to make sure they have a Police report.

    For more information on identity theft risks and how people can repair their credit rating following identity theft, visit the MyCRA Credit Rating Repairs website www.mycra.com.au.

    Image above: Ambro/ www.FreeDigitalPhotos.net

    [/fusion_builder_column][/fusion_builder_row][/fusion_builder_container]

  • Cyber security is about protecting your credit rating.

    MyCRA is proud to be a partner for Cyber Security Awareness Week 2012, running this week from 12 to 15 June.  Awareness Week helps Australians understand cyber security risks as well as educating home and small business users on the simple steps they can take to protect their personal and financial information online. Today, we address the importance of cyber security for preventing bad credit history.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    Cyber Security Awareness Week 2012 is an Australian Government initiative, held annually in partnership with industry, community and consumer groups and state and territory governments. According to the Stay Smart Online website, cybersecurity awareness is more important than ever.

    “Australians are increasingly relying on the internet in their everyday lives for banking, shopping, education and communication. It is, therefore, important that they are able to use the internet in a secure and confident manner. The government has established a range of initiatives to raise the awareness of Australian internet users about the importance of cybersecurity and the simple steps they can take to protect their personal and financial information online.”

    One of the big risks for Australians is that their internet use will lead to fraudsters stealing their personal information for purposes of identity theft (now the fastest growing crime in Australia) and potentially fraud. The good credit rating of the victim could then be damaged.

    If cyber-crooks are able to get their hands on enough personal information they may be able to construct a fake identity, which can lead to some serious credit fraud. Fraudsters have been known to go so far as to take out personal loans, credit cards and even mortgage homes in their victim’s name.

    When the identity theft goes so far as to affect the credit file of the victim, the issues can be huge. Unfortunately fraudsters are never so kind as to pay this credit back, so the victim is often unaware of a stream of defaults run up against their name, until the apply for credit in their own right and are flat out refused.

    For between 5 and 7 years identity theft victims can be locked out of credit while their credit rating shows up someone else’s defaults.

    Unfortunately in the past it has not been easy for identity theft victims to prove they did not initiate the credit, particularly if they have no idea how they were duped in the first place.  Often this sophisticated type of fraud is instigated by overseas crime syndicates who don’t leave much of a trail, or even if they do, can’t be prosecuted easily.

    But the ability to obtain credit is so crucial to functioning well in today’s society, that if the identity theft victim has also been a victim of credit fraud, they should make their clear credit rating a point worth fighting for.

    Firstly, the victim should contact Police as soon as they are made aware of possible identity theft, they may even be able to prevent the credit fraud occurring. If it has already happened, a Police investigation and report will be a good starting point for proving the person did not initiate the credit in the first place.

    Credit file repair can be difficult for the individual, but if there is an error on a person’s credit file it is worth pursuing. It can be made easier with the help of a credit repairer. A credit repairer has extensive knowledge of credit reporting legislation and how to apply the letter of the law to the credit file holder’s circumstances to ensure the best chance of having the listing or listings completely removed from the credit file if it has been placed unlawfully, for instance if the listing contains an error, is unjust or just shouldn’t be there.

    The best thing people can do for themselves is to prevent that crime from happening in the first place. People can provide a safety buffer for themselves and their family around one of the main channels for fraudsters to enter our lives – the internet.

    To start, people can follow these top tips provided by Cyber Security Awareness Week 2012 on how to stay safe online:

    • Install and update your security software; set it to scan regularly.
    • Turn on automatic updates on all your software, particularly your operating system and applications.
    • Use strong passwords and different passwords for different uses.
    • Stop and think before you click on links and attachments.
    • Take care when transacting online – research the supplier and use a safe payment method.
    • Only download “apps” from reputable publishers and read all permission requests.
    • Regularly check your privacy settings on social networking sites.
    • Stop and think before you post any photos or financial information online.
    • Talk with your child about staying safe online, including on their smartphone or mobile device.
    • Report or talk to someone if you feel uncomfortable or threatened online – download the Government’s Cybersafety  Help Button.

    In addition, people can and should subscribe to the email notifications from Stay Smart Online Alert Service. The Stay Smart Online Alert Service is a free subscription based service that provides home users and small to medium enterprises with information on the latest computer network threats and vulnerabilities in simple, non-technical, easy to understand language. It also provides solutions to help manage these risks.

    Also, people can look at securing different sections of their internet use in more depth with the help of Stay Smart Online’s key factsheets for online security.

    They can also help raise awareness of the issue amongst their own group of family and friends and insist that anyone who has their personal information has a responsibility to keep it safe.

    People should also check their credit file regularly, and act quickly on any discrepancies there – which can often be the first sign of identity theft. Copies of consumer and business credit files can be ordered from one or more of Australia’s credit reporting agencies, and are free for the credit file holder once per year.

    Stay tuned for more information updates as Cyber Security Awareness Week unfolds.

    Image above: Victor Habbick: www.FreeDigitalPhotos.net.

     

     

     

  • Linkedin Hacked – Thousands of Australian CEO’s And Top Professionals At Serious Risk Of Identity Fraud As All Of Their Personal And Corporate Identity Information May Be Visable

    Talk about a risk !  Imagine that, this latest hacking could be massive!

    Linkedin has more than 150,000,000 user accounts and most of them are serious professionals who are extremely cautious.  Especially when it comes to leaked information.

    Picture This, Richard Branson (Virgin, Virgin Unite, Etc.), a Linkedin member, is chatting to one of colleagues about an upcoming project..(you get the picture..) That information could be extremely Valuable (and damaging) in the wrong hands…

    It’s easy to fix though, Jump online immediately and change your password.

    Too many people are today falling victim to identity theft and identity fraud as a result of having the same passwords across many different sites and applications.  If your Linkedin Password is the same as your password on other sites, it’d be a really good idea to change that password as well..

    What’s all the noise about anyway??

    Identity theft is one of the major causes of clients coming to FixMyBadCredit.com.au to have their credit rating repaired.

    After a consumers identity has been stolen, the identity thief can often apply for a drivers licence, get a medicare card, open a bank account and then we’re into borrowing..

    Before you know it, if it was your identity that was stolen, you could find tens of thousands of dollars in credit card debt has been ‘run up’ in your name and not only is your credit rating shot, but now you have debt collectors chasing YOU.

    That dream about buying your new car, or the family home is now out the door completely…  No lender is going to go anywhere near you with thousands of dollars in unpaid credit card debt…

    Change your passwords, DO IT NOW

  • 12 Quick Privacy Tips for Parents

    As we close off Privacy Awareness Week 2012, it’s important to take away some information that people can use in their daily lives to protect their personal information, to prevent identity theft and to protect the integrity of their credit file from credit fraud. If you are a parent who wants to get involved in what your child is doing online, or even if you feel overwhelmed by the online options open to young people today – this information could save you from the dangers that occur through internet use and allow both and your child to get on the same page about online safety.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    The Office of the Privacy Commissioner, Canada has put together some information for parents on 12 Quick Privacy Tips which show how to navigate a digital environment and how parents can lead their children in better Privacy practices.

    We have included this information sheet for you in its entirety:

    12 Quick Privacy Tips for Parents

    It can be tough raising kids in a digital environment. Many of them use the Internet effortlessly, and easily adapt to new devices that connect to it. For many of us, these tools have become a routine part of our children’s lives, as they use them to chat, surf, post, play and learn. The Internet has become one of the most powerful tools they have to connect with friends and make new ones.

    Many kids, however, don’t fully understand the impact that some online activities may have on their privacy. Below are 12 tips to help you limit the risks to your children’s personal information, while allowing them to make the most of their time online.

    •1. Talk to your kids.
    It’s important to know the Internet spaces your kids frequent and the devices they use to go online, to help you understand the nature of personal information they may be sharing. Technology changes rapidly and many children are ahead of adults in adapting to new options. Talk with them often about their online activities to keep up with what they are doing and interested in.

    •2. Try it out.
    It’s not enough to know what online spaces and devices your kids are using. To understand the nature of the personal information they are sharing, you should know how they are using and experiencing them. So, dive in. Try out the family web cam if you have one, play the online games they love, create a profile on the social networking sites they frequent, and download some music.

    •3. Keep up with the technology.
    Many mobile devices, like smart phones, tablets and gaming consoles, can connect to the web and have video cameras. The lines between devices are blurring, and it is important to know what kind of device your child has, so that you know whether they are merely playing a game, or if they are using the Internet and sharing personal information.

    •4. Make restricting privacy settings a habit.
    Most social networking sites have extensive privacy options that children should learn to use. For each site where your kids are posting information about themselves, their family and their friends, sit down with them and review that site’s privacy policy. Then modify the privacy settings of their account, and have them consider how the information they are posting could be used – or misused – by others.

    •5. Make password protection a priority.
    Children need to understand that their online information will be better protected if they use passwords. They should use different passwords for different sites and they should change them regularly. Encourage them to ensure their passwords are strong (eight characters or more and a variety of letters and/or numbers), to change them regularly, and to never share them with anyone.

    •6. Emphasize the importance of protecting mobile devices.
    The first thing anyone should do with a new mobile device is activate the password protection. Talk to your kids about this, and the importance of protecting the device itself – not just because it may be expensive, but because it may contain their personal information. A device that gets into the wrong hands could result in embarrassing or even malicious videos or pictures being posted online by someone else in your child’s name.

    •7. Remind your kids that what they post on the Internet is not always private.
    Your kids should understand that once they post content online, they no longer have control over it. It can be forwarded, copied and pasted, manipulated, printed out or saved – it can remain online, in some form, potentially forever. They should know that even password-protected pages are not totally secure, and that deleting information doesn’t mean that it’s gone forever.

    •8. Teach your kids to think before they click.
    It can take only seconds to snap a photo and post it to the Internet, or to post a comment. But it can be nearly impossible to permanently delete that comment or photo once it’s posted, as it can then be downloaded or archived by others. This is why it’s so important for kids to think twice about every piece of personal information before they post it to the Internet. They should only post things that they would be comfortable with the whole world seeing.

    •9. Stress the importance of knowing your real friends.
    Kids need to know that, online, they can’t be 100% sure of who they’re talking to, so they should never accept friend requests from people they don’t know in real life. Online friends can end up accessing online photo albums, reading personal comments, copying and pasting information, knowing what you’re doing and where you are. Remind your kids that a “friend” of a “friend” of a real-life friend is really just a stranger.

    •10. Teach your kids that their personal information is valuable.
    Kids need to know that many people and companies want their personal information to sell or market things to them in the future. New and exciting technologies are emerging daily, but often personal information is the cost of admission. Review the personal information they often need to surrender in order to play online games, fill out an online survey or quiz, join virtual worlds or even just shop online. Discuss potential ways to limit that information, for example, by completing only required fields, using pseudonyms, and using incomplete information.

    •11. Let your kids know that you are there if they make a privacy mistake.
    Stay calm if your child makes a mistake, like posting something they shouldn’t have. Help them remove the post, where possible, and talk with them about how they can avoid a similar mistake in the future. If you “freak out” or deny access to them, they may not come to you for help when they really need it in future.

    •12. Set a good example.
    Remember, those cute potty training or bathing photos of your own child that you are tempted to post can also be copied and shared, and remain online forever! Just as you would respect your friends when posting photos or other items that contain their personal information, respect your kids’ personal information too. Set a good example when you’re online so your kids have a good role model to look to if they’re wondering what kind of information is OK to post.

    Credit fraud: What can happen to your child if their personal information is extracted by fraudsters

    Superintendant Brian Hay from the Queensland Fraud Squad told Channel 7’s Sunrise Program in October last year, that criminals were targeting the personal information of our young Facebook users.

    Supt Hay said criminals had been known to be storing the personal information of children around the world in databases to be used when they turn 18 and are able to take out credit.

    “We know that the crooks have been data warehousing identity information, we know that they’ve been building search engines to profile and build identities,” he told Sunrise.

    “We need to tell our children if you surrender your soul, if you surrender your identity to the internet it could come back to bite you in a very savage way years down the track,” he says.

    Most identity theft victims have no idea they have given away personal information to fraudsters until it is too late. If identity fraud sees accounts in the victim’s name going undetected and unpaid past 60 days, the credit file holder can have their good name destroyed for 5-7 years due to defaults.

    It need not be major fraud to be a massive blow to the identity theft victim. Unpaid accounts for as little as $100 can have the same negative impact on someone’s ability to obtain credit as a missed mortgage payment. So any misuse of someone’s credit file can be extremely significant.

    For more education for parents about the risks of cyber-crime and tips for staying safe, the Government has put together the CyberSmart website, which has special sections for parents and children. You may also like to visit the government’s Stay Smart Online website, which provides information for Australian internet users on the simple steps they can take to protect their personal and financial information online. It also has an Alert system which you can subscribe to, which notifies you of the latest risks to your personal information or computer.

    Don’t get caught with credit rating defaults that should not be there. Don’t let fraudsters take over your good name. Educate yourself on what a valuable commodity your personal information is, and how you can protect what is your ticket to financial freedom in this modern world – your credit file – from fraud.

    Image above: Keerati/ FreeDigitalPhotos.net

    MyCRA Credit Rating Repairs is proud to be a Partner for Privacy Awareness Week 2012.

  • Are you at risk of identity theft?

    How much are you putting your life, your personal information and your credit file at risk of fraud? Test your awareness of identity theft, determine what you don’t know and take some steps to protect you and your family. This initiative is part of Privacy Awareness Week 2012, of which MyCRA Credit Rating Repairs is a partner.

    By Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and www.fixmybadcredit.com.au.

    Last year, as part of Privacy Awareness Week, the Asia-Pacific Privacy Authorities developed an Id Theft Self-Assessment Test in which you are asked 11 questions on various topics. At the end, you will receive an assessment of how at risk you are of identity theft.

    Here’s some things you may not know about identity crime…

    Identity crime is an area which is ever-growing and ever-changing.

    It is reported that 1 in 6 people in Australia is a victim or knows someone who has been a victim of identity theft or fraud in the past 6 months.

    Victims are not always ‘gullible’ as may be the impression in the wider community. Many experts say it is not a matter of if you experience an identity theft attempt, but when.

    It can originate from someone you know – for example an acquaintance obtains identity documents or credit card details to impersonate you. Or more increasingly it comes from professional fraudsters whose main occupation is to steal personal information and financial details in order to commit fraud.

    Fraudsters are after your personal information. The internet is a big source of personal information and its ever increasing use makes you more vulnerable to identity crime than ever.  This means identity crime can have very long arms – often it originates from overseas crime syndicates. Social networking, online banking, company databases and email scams can all be havens for today’s cyber- criminal.

    You can also fall victim to a number of rampant telephone scams, credit card skimming, or criminals can also take to going through your rubbish bin for anything they may be able to use to steal your identity.

    Identity theft is increasing because the pay-offs are huge for criminals. It is estimated identity crime costs Australians $1 billion a year (OECD Committee on Consumer Policy, Online Identity Theft, February 2009, p. 37).

    In cyber circles alone, world estimated costs for cybercrime are staggering.  Cyber-crime expert Mischa Glenny says that while there are no precise figures out there, the White House suggested in 2009 that cybercime and industrial espionage inflicts damage of around U.S. $1tn per year, which is almost 1.75% of GDP.

    “Traditional bank robbers must be absolutely gobsmacked when they hear sums like this being hoovered up by cyber- criminals week in, week out,” he says.

    How can I be affected?

    We consider if someone is alerted to having money stolen from credit cards early, or perhaps is able to call their bank and stop fraud in its tracks – that they are the lucky ones.

    The unlucky identity theft victim is unaware of the fraud until their identity is misused, and their credit rating with it. When identity theft damages your credit rating – it is because the fraudster has been able to overtake credit accounts, or has gained access to enough personally identifiable information about you to forge new identity documents.

    This gives the fraudster access to credit cards, loans, even mortgages which allows them to extract significant amounts of money without you realising it straight away.

    If credit accounts are not repaid – after 60 days you may be issued with written notification of non-payment and the intention for the creditor to list a default on your credit file. It is at this moment that some people who were previously unaware of any problems find out they have been victims of this more sophisticated type of identity theft.

    But often the credit file holder has also had their contact details changed – and this means it is not until they apply for credit in their own right and are refused that they find out about the identity fraud. This can be a significant time after the initial crime.

    Some signs to watch out for include:

    1. Strange unaccountable withdrawals on credit or personal bank accounts. It may not need to be a big amount to indicate fraud. Many criminals do ‘test’ amounts to begin with before extracting more significant amounts.
    2. Phone calls or emails from what often appear to be legitimate companies, asking for money or personal details. If you have given bank details or personal information in this way either online or on the phone there is a high chance it was a scam. Verify with the company in question.
    3. Can’t log in to social networking or bank accounts.
    4. Credit refusal
    5. Bills or letters of demand sent to you for accounts you don’t know about
    6. Missing mail – particularly credit card statements which could indicate someone has overtaken your accounts. In this case no news is not good news.

    What can I do if I suspect I am a victim of identity theft?

    Notify Police immediately. Many people do nothing due to embarrassment, or because they don’t believe the fraud was significant enough. But is only through this crime getting reported that statistics get collated, and we start to have any chance of catching the criminals.

    Notify creditors. You may need to cancel credit accounts.

    Obtain a credit report. This report is free once per year for every Australian who holds a credit file. It will indicate to you whether any of your contact details have changed, or whether there have been credit enquiries on your account. If you act quickly enough, you may be able to stop your credit rating from being affected by black marks which would come from fraudsters obtaining credit in your name.

    Notify credit reporting agencies of the possible fraud. They will be able to put an alert on your credit file.

    Police may assist you in obtaining a Victims of Commonwealth Identity Crime certificate, if they believe you are eligible. You can apply to a magistrate in your State for this certificate, which may help in recovering your credit rating or credit accounts. Victims need to have had a Commonwealth Indictable Offence committed against them. For more information, visit the Attorney-General’s website www.ag.gov.au.

    What steps can I take to prevent identity theft?

    1.Keep virus software up to date on your computer. Install automatic updates and perform regular virus scans.
    2.Keep your privacy settings secure on all social networking sites.
    3.Keep our passwords and PIN numbers secure. Don’t carry PIN numbers with your credit/debit cards, change passwords regularly and use a variety of passwords for different purposes.
    4.Check all your credit card and bank statements each time they come in.
    5.Cross-shred all personally identifiable information which you no longer need.
    6.Buy a safe for your personal information at home.
    7.Do not give any personal information or credit card details to anyone via phone or email unless you are sure the site is secure, and or you can verify the company details.
    8.Be aware of who gets our personal information and for what purposes. What can these people do with the information they are gathering? For instance, is it really necessary for the site you are registering on to have your date of birth?
    9.Keep up to date with the latest scams by subscribing to the government’s ‘SCAM watch’ website. For a list of ways your computer can put you at risk, visit the governments Stay Smart Online website www.staysmartonline.gov.au.
    10.Check your credit file.

    If you or someone you know needs help to remove bad credit history on their credit rating following identity theft, contact MyCRA Credit Repairs, www.mycra.com.au or call tollfree on 1300 667 218 for confidential advice and help restoring your good name.

    Image above: Chris Sharp/ FreeDigitalPhotos.net

    MyCRA Credit Rating Repairs is proud to be a partner for Privacy Awareness Week 2012.

  • Privacy Commissioner reports data breaches on the rise

    As part of Privacy Awareness Week 2012, over 180 business leaders met in Sydney this week to discuss the topic of data breaches. Data breaches can occur through lost or stolen laptops, portable storage devices and paper records, or through databases being ‘hacked’ into or organisations mistakenly providing information to the wrong person. The effects of data breaches can be theft of identity and potentially credit fraud leading to bad credit history for the victim. The Privacy Commissioner claims there is in effect one data breach a week in Australia – an increase of 27 per cent from last year.

    This is an excerpt from Privacy Commissioner Timothy Pilgrims statement to the media on Monday on data breaches in Australia:

    “The Office of the Australian Information Commissioner (OAIC) was notified of 56 data breaches in the last financial year, equivalent to a data breach a week. This is up from 44 in the previous year, an increase of 27 per cent,” Mr Pilgrim said.

    However, the Privacy Commissioner also noted that he opened a further 59 investigations into other breaches where he wasn’t notified of the incident.

    “Serious harm can befall people when the security of their personal information is compromised”, Mr Pilgrim said. “It is our view that whenever there is a real risk of serious harm, affected individuals should be notified.”

    …Data breach notification is not a mandatory obligation applying generally to government and business in Australia. However, there is increased pressure on the Government to introduce laws to make it a general legal requirement as it is elsewhere — data breach notification is already a mandatory requirement in Europe, the UK and the United States….

    The Privacy Commissioner warned that in some circumstances, it may be a breach of the Privacy Act not to notify as organisations covered by the Privacy Act must take reasonable steps to protect the information they hold.

    For businesses who would like a reference for guidelines on handling personal information security breaches, the OAIC has released this document:

    Data breach notification: A guide to handling personal information security breaches. It outlines four steps to consider when responding to a breach or suspected breach and also outlines preventative measures that should be taken as part of a comprehensive information security plan.

    Personal information has become a valuable commodity used to commit identity fraud and potentially ruin the victim’s financial future.

    We can’t take lightly the possibility that any company that keeps data on its customers could be exposed to data breaches. Identity theft is becoming more prevalent, and personal information is lucrative for fraudsters.

    Personal information in the wrong hands can lead not only to identity fraud, but the misuse of the victim’s credit file, which can have significant long term consequences.

    Data breaches are difficult for individuals to have any control over, and the only way people can ensure their details are safe are to demand that the companies they deal with have strong IT systems before disclosing that information.

    The Australian Crime Commission’s Identity Crime report advises consumers on ways they can protect their personal information. They advise all individuals to obtain a copy of their credit report annually in order to keep abreast with any changes to their credit file which may point to identity theft.

    This could detect suspicious entries such as new credit enquiries or changes in contact details which would point to an identity theft attempt, allowing steps to be taken before the fraud affects the person’s good credit rating.

    If a person may be vulnerable to identity theft through a data breach, they should check their credit file immediately, and also contact Police who will advise them on the best course of action to take to restore their accounts and potentially their good name. This could include applying for a Victims of Commonwealth Identity Crime Certificate – which covers particular Commonwealth Identity Crime and can aid in recovery.

    If people need help to prepare a case to creditors for default removal following identity theft, it may help to contact a reputable credit repair company.

    Image above: David Castillo Dominici/ FreeDigitalPhotos.net

    MyCRA Credit Rating Repairs is proud to be a partner for Privacy Awareness Week 2012.

  • TMI – 5 things all young people should know about privacy, social networking and credit.

    If you didn’t have Facebook or Twitter – you’d be lost right? It’s a great way to keep in touch with friends– and sometimes it’s more convenient and quicker than a phone call. But if you don’t keep your personal information secure from outsiders while you use it– you could be keeping in touch with all the wrong people. There’s weirdos out there trolling the internet looking for the stuff you openly post – even people looking to commit identity theft with your info. We show you how the mistakes you make with your privacy now could lead to being unable to get a phone, a home, a car in the future because of a surprise bad credit rating.

    This information was put together for Privacy Awareness Week 29 April to 5 May 2012 and is all about promoting awareness of privacy rights and responsibilities in the community. The theme this year is “How to Protect Personal Information While Engaging With Social Media”  with a focus on secondary school students, parents and teachers. If you are not a student but you know one, flick them this link or print this page. We want all young Australians to have the luxury of a clear credit rating when they turn 18 and beyond.

    By Graham Doessel Founder and CEO of MyCRA Credit Repairs and www.fixmybadcredit.com.au.

    1. Fraudsters are looking for your personal information.

    They are looking to take it and use it for purposes of constructing a fake identity. Identity theft victims are not always ‘gullible’ as people might imagine. They are ordinary people. Many experts say it is not a matter of if you experience an identity theft attempt, but when. It is estimated one in six Australians may have been a victim or know someone who is a victim of identity theft.

    It can happen to you when someone you know obtains identity documents or credit card details to impersonate you. Or more and more it comes from professional fraudsters whose main occupation is to steal personal information and financial details in order to commit fraud.

    The internet is a big source of personal information and its ever increasing use makes you more at risk of identity crime than ever.  This means identity crime can have very long arms – often it originates from overseas crime syndicates.  Identity theft is increasing because the pay-offs are huge for criminals. It is estimated identity crime costs Australians $1 billion a year.

    2. Criminals are after information they can use to steal your identity.

    Criminals are looking for anything they can use to piece together enough information in order to construct a fake identity. Much of the information people post on Facebook or other Social Networking sites can be very good building blocks for identity thieves. They are taking snippets here and there and building a profile on people. They may know your name and they may also know where you live, or where you go to school, your pet’s names, your birthday, even your other family name which could be identified as your mother’s maiden name.

    All this is very handy information that is not only used to identify you, but may be used in passwords. After a little while, they have enough information to go about asking for replacement copies of driver’s licences, photo identification – whatever type of identification they have suitable information for. Then they can attempt to take out credit in your name. Some people have even had houses purchased in their names. Often it’s not until you go and take out credit and the bank says: “NO WAY look at all these defaults against your name!” that you may realise you have been struck by identity theft. The thing is, they are using your name so you are the one that ends up with the bad credit rating, and it can be a nightmare to recover the good credit rating you once had.

    3. These Privacy risks apply even if you’re under 18

    You might ask – what’s the point of worrying about privacy if you are underage – without a credit rating – there is no danger of identity theft right? Well think again! The fact is – crooks are pretty clever. The information you post today, could come back to haunt you in a big way. There are reports of crooks scanning social networking sites purposely looking for young people for this reason, because they usually have the most open privacy settings. That information is not used right away, but is ‘warehoused’ until the young people turn 18. They can then go on a ‘spending spree’ with the young person’s fake identity and credit. Imagine that, you turn up to buy your first car, and lo and behold you have a mountain of defaults against your name and no idea how it happened.

    Besides all this, if you have enough information on your Social Networking right now about your parents you could be putting their credit rating in jeopardy as well.

    4. The effects of a bad credit rating from identity theft

    Negative listings stay on a person’s credit file for 5 to 7 years, depending on the listing. During the time your credit file is affected most lenders and other credit facilities will refuse you credit. Unless you are able to prove it wasn’t you who took out the credit, you may be stuck with a bad credit rating until you are at least 23 if not 25. You can’t borrow to travel, purchase a home, or even take out a credit card or a mobile phone plan while you credit file has these defaults.

    5. What you should do to make sure fraudsters don’t obtain your personal information

    One important change you can make right now, is to change the way you use the internet. Keep your passwords and social networking settings as strong as possible.

    Here is some information that Stay Smart Online has provided to help young people in Australia today take steps to use social networking safely:

    • set your online profile to private and be discerning about who you accept as your ‘friend’
    • protect your accounts with strong passwords
    • have a different password for each social networking site so that if one password is stolen, not all of your accounts will be at risk
    • think before you post – expect that people other than your friends can see the information you post online
    • don’t post information that would make you or your family vulnerable – such as your date of birth, address, information about your daily routine, holiday plans, or your children’s schools
    • don’t post photos of you or your family and friends that may be inappropriate – or that your family and friends haven’t agreed to being posted
    • never click on suspicious links – even if they are from your friends – they may have inadvertently sent them to you
    • be wary of strangers – people are not always who they say they are. It’s a good idea to limit the number of people you accept as friends
    • always type your social networking website address into your browser or use a bookmark.
    • If you suspect any fraudulent use of your identity you should report it to your social networking service provider and your local police.

    MyCRA Credit Rating Repairs is proud to be a Partner for Privacy Awareness Week 2012. For more youth resources visit the PAW Website http://www.privacyawarenessweek.org/youth.html.

     

    Image of boy: David Castillo Dominici/ FreeDigitalPhotos.net

  • Social Networking And Your Credit File: 5 Protection Tips

    Media Release

    5 Things You Need To Know About Social Networking to Protect Your Credit File

    27 April 2012

    A consumer advocate for accurate credit reporting is warning consumers ahead of Privacy Awareness Week (PAW) about the dangers for their credit file if they fell victim to identity theft through lax social networking settings.

    Graham Doessel, Founder and CEO of MyCRA Credit Rating Repairs and Partner for PAW says identity theft threats from people posting too much personal information on sites like Facebook and Twitter are rampant.

    “Fraudsters are out there looking for your personal information. They are building a profile, and one day if they have enough information you may be unfortunate enough to have credit taken out in your name. If this happens you could not only lose a lot of money, but your credit file is likely to be riddled with negative listings you have no knowledge of,” he says.

    Privacy Awareness Week runs from 29th April to 5th May. The theme of the week is “How to Protect Personal Information While Engaging with Social Media”. MyCRA Credit Rating Repairs is proud to be a Partner to this event. (1)

    Mr Doessel explains 5 important things to know about Social Networking to protect your good credit rating:

    1. Fraudsters are looking for your personal information.

    Identity theft victims are not always ‘gullible’. Identity theft attempts occur every day. Many experts say it is not a matter of if you experience an identity theft attempt, but when. It is estimated one in six Australians may have been a victim or know someone who is a victim of identity theft. (2)

    Increasingly the crime originates from professional fraudsters whose main occupation is to steal personal information and financial details in order to commit fraud. The internet is a big source of personal information and it means identity crime can have very long arms – often it originates from overseas crime syndicates who are scouting for information on sites like Facebook.

    Identity theft is increasing because the pay-offs are huge for criminals. It is estimated identity crime costs Australians $1 billion a year. (3)

    2. They are looking for information that they can build an identity on.

    Much of the information people post on Facebook or other Social Networking sites can be very good building blocks for identity thieves. They are taking snippets here and there and building a profile on people.

    They may know your name and they may also know where you live, where you went to school, your pet’s names, your birthday, even your other family name which could be identified as your mother’s maiden name. With features like ‘check-in’s’, they also know where you are most of the time, which could also come in handy for criminals – especially if they already know where you live.

    All this information crooks extract from Social Network sites may be used in passwords or used as identifying information. After a little while, they could have enough information to go about asking for replacement copies of driver’s licences, photo identification – whatever type of identification they have suitable information for.

    Then fraudsters can attempt to apply for credit in your name. Some people have even had houses purchased in their name. Often the fraud can go undetected until you apply for credit in your own right and you are refused because a credit check reveals a long list of strange default listings.

    3. Criminals don’t care how old the user is.

    Even teenagers are not immune to having their personal information stolen. Data on young people may be ‘warehoused’ until the victim turns 18. There are reports of crooks scrolling through thousands of social networking pages purposely looking for young people for this reason, because they usually have the most open privacy settings. That information is not used right away, but is stored until the young people turn 18. They can then go on a ‘spending spree’ with the young person’s fake identity and credit.

    Superintendant Brian Hay from the Queensland Fraud Squad told Channel 7’s Sunrise Program in October last year, that criminals were targeting the personal information of our young Facebook users. (4)

    “We know that the crooks have been data warehousing identity information, we know that they’ve been building search engines to profile and build identities,” he told Sunrise.

    “We need to tell our children if you surrender your soul, if you surrender your identity to the internet it could come back to bite you in a very savage way years down the track,” he says.
    4. If criminals take out credit in your name, they won’t be so kind as to make repayments for you.

    When credit goes unpaid past 60 days, the creditor issues a ‘default’ or ‘clearout’ listing on your credit file. This listing will remain on your credit file as record for 5 years for a default and 7 years for a clearout.

    Any negative listing can mean people are refused a home loan, a car loan or any type of credit and it doesn’t have to big amounts to make a big impact. Even listings with amounts of $300 can stop someone from getting a loan. So even if there was only one instance of identity theft, your credit rating is ruined for up to seven years.

    Unfortunately there is a hard road in recovering your good name. If the listing shouldn’t be there – it is still up to you as the consumer to prove you didn’t initiate the credit and this can be difficult – often people have no idea how someone got their personal information in the first place.

    5. Bump up your privacy NOW on Social Networking sites to make sure no one obtains your personal information.

    One important change you can make right now, is to change the way you use the internet. Keep your passwords and social networking settings as strong as possible. Here is some information that the Government has issued via their Stay Smart Online website to help people take steps to use social networking safely (5) :

    Top tips

    ·         Always type your social networking website address into your browser.

    ·         Never use the same password that you use for your bank or email accounts. Have a different password for each social networking site so that if one password is stolen, not all of your accounts will be at risk.

    ·         Don’t automatically click on links in ‘friend request’ emails you receive. Genuine friend requests will appear on your home page on your social networking site.

    ·         Be careful about how much personal information you post online. Use privacy settings to control who has access to your information.

    ·         Be careful about the amount of information that you reveal to people you don’t know. It is easy to create a fake profile online and people are not always who they say they are.

    ·         Stop and think before you write a message or post pictures. Ask yourself if the information you are sharing is something you want your future employers, friends or family to see. Even items you delete can remain on the Internet for years.

    If people find out their credit rating has been damaged through identity theft, Mr Doessel says the first step is to contact Police, and the second step is to ask Police if they are eligible for a Victims of Commonwealth Identity Crime Certificate – which is available from their local Magistrate’s Court. (6)

    “Identity theft recovery can be a lot of work – but if people have their credit rating damaged it’s a point worth fighting for. If people have neither the time nor the skill to prepare their own case for listing removal, they can always contact a reputable credit rating repairer to help,” he says.

    /ENDS.

    Please contact:

    Graham Doessel – Founder and CEO MyCRA       (07) 3124 7133

    Lisa Brewster – Media Relations  MyCRA    Mob: 0450 554 007 media@mycra.com.au
    http://www.mycra.com.au/ www.mycra.com.au.blog

    MyCRA Credit Rating Repairs is Australia’s leader in credit rating repairs. We permanently remove defaults from credit files.

    (1) http://www.privacyawarenessweek.org/oaic/2012_partners.html
    (2) http://www.attorneygeneral.gov.au/www/ministers/mcclelland.nsf/Page/MediaReleases_2011_ThirdQuarter_3July2011-Newresearchshowsidentitytheftaffectsoneinsixpeople
    (3) OECD Committee on Consumer Policy, Online Identity Theft, February 2009, p. 37
    (4) http://au.tv.yahoo.com/sunrise/video/-/watch/26825601/child-identity-theft/
    (5) http://www.staysmartonline.gov.au/home_internet_users/protect_yourself2/safe_social_networking (6) http://www.ag.gov.au/www/agd/agd.nsf/Page/Crimeprevention_CertificatesforVictimsofCommonwealthIdentityCrime?open&query=victims