Questions tagged [identity-theft]

Identity theft is the act of impersonating someone else on a computer system, for malicious purposes - i.e. without their knowledge or consent.

Filter by
Sorted by
Tagged with
2
votes
0answers
115 views

Send a Picture of my ID and a selfie of me holding it to a Questionable Website

Some website asked for the verification of my identity to make a purchase of online goods. I didn't think twice and send them a picture of both sides of my country's ID (not USA) and a selfie holding ...
1
vote
1answer
64 views

Mitigating physical cookie theft

Threat model: Malicious user gaining physical access to browser cookies (e.g., 3rd party repair guy copying cookies to his own device or something like that). Let's say legit user did not clear ...
3
votes
1answer
133 views

Nonprofit organizations asking me to email them a photo of my driver's license

Recently I've had two nonprofit organizations ask me to email them a photo of my driver's license. No money is changing hands, and both of these are legitimate and well-known nonprofits. Organization ...
1
vote
2answers
122 views

Can a fingerprint be reconstructed from a device that uses it for authentication?

I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days. Do these devices store information in such a way that your fingerprint could be reconstructed ...
7
votes
1answer
270 views

Found fake Facebook profile with my name and education history, what to do?

A family member of mine called my attention to a Facebook profile with data significantly resembling mine: Matching first and last name Matching city Matching secondary school Matching university ...
0
votes
0answers
81 views

Risks of Providing a Passport Number

Company A pays company B for enterprise software. Company A hosts it internally. An employee from company B needs access to servers at company A in order to manage said software Company A is ...
1
vote
1answer
116 views

Protecting a website from being kidnapped

I have a MediaWiki website in Hebrew; As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible. I chose to give that website a Global TLD (a non ...
0
votes
1answer
74 views

Is there any reasonable argument against immediately validating a new customer's email address? [closed]

Would it not be useful for account providers that allow online/phone signup/ordering to immediately verify the email address supplied to them? I was forced to ponder this recently when I became the ...
0
votes
1answer
122 views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
1
vote
1answer
137 views

Samba and verifying server identity

Suppose that I have two Windows 10 (Professional edition) computers, one (PC) sharing a folder and second one (notebook) copying data to the shared folder automatically. I would like to prevent ...
0
votes
2answers
87 views

Can National Insurance number and Unique Taxpayer Reference be stored unencrypted in a database?

Should these details be stored encrypted, not at all or in plain text in a database? These are both UK terms, used to identify individuals to the tax authorities; the NI number is used more widely, ...
0
votes
1answer
125 views

BitFinex unauthorized login [closed]

A few minutes ago i got an email from the real Bitfinex, saying that a unauthorized login attempt was approved by Bitfinix. Is this the work of a new breach? The IP is located somewhere in Japan.
1
vote
4answers
330 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
1
vote
5answers
236 views

Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN

I'm currently building a web based membership application form that will require a user to enter an SSN and other identifiable information. Part of the requirements of the membership application is to ...
2
votes
1answer
13k views

Car registration paper stolen from glovebox, what kind of scams are possible?

I carelessly left my car unlocked, and it was searched by trespassers in the night. They only took the registration and insurance card (Ohio, United States). This seems strange to me, as these ...
5
votes
2answers
192 views

Is a company's dark web search really effective at proving my info is not there?

Prompted by this question. My take is that the security companies and banks that offer identity protection services use the phrase "dark web" as a scare tactic to get you to subscribe. And then when ...
2
votes
1answer
58k views

Bogus Instagram account using my email, never been verified, has over 1000 followers

This appears to be a phishing scam like I've never encountered before. I received an email from security@mail.instagram.com to an email address I rarely use, but I noticed it because messages get ...
21
votes
7answers
8k views

Unexpected email from Yorkshire Bank

I have started receiving unexpected emails from Yorkshire Bank. I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago. The ...
-1
votes
3answers
905 views

I entered my password in a possible scam website. What should I do?

A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads. So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
0
votes
1answer
98 views

Is there a security risk in using the same profile picture on different sites?

Well, the title basically says it. I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
0
votes
0answers
362 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
23
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
4
votes
4answers
153 views

What is a simple and secure method to transfer virtual assets?

Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob. One ...
1
vote
0answers
226 views

How dangerous is it to verify my account with a photo of my visa, passport, or ID card? [duplicate]

In order to play poker online on some accounts you have to verify your age and identity. And to do that, I need to email the site with a picture of my visa or passport or ID card. How dangerous is it ...
3
votes
1answer
158 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
1
vote
0answers
45 views

Security concerns in cookie exporting between browsers

I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
3
votes
2answers
145 views

Email/facebook account/internet protection service for private community

I apologize in advance for any inaccuracy. I am part of a yoga community which has no particular activity on the web or in the informatic sector. All we have that can be regarded as web-related is ...
150
votes
12answers
27k views

Do I need to encrypt connections inside a corporate network?

Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
19
votes
4answers
915 views

Help! My information has been stolen! What do I do now?

This is an attempt to ask a canonical question to expand upon another post with a similar name. The goal is to create something helpful that can be used as a duplicate when non experts ask about ...
-4
votes
1answer
153 views

what if someone has my wrong social security number? [closed]

If a thief gets ahold of my name and address, but has the wrong social security number, (say it's off by one digit) will this protect me? They may try to open an account in my name, and there's a ...
2
votes
0answers
74 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
5
votes
1answer
801 views

Why would a stranger keep signing up to trading sites with my email address?

I have read the answer below and understand that there is not much I can do about the basic problem of somebody signing up for newsletters and online services using my email address: Someone used my ...
27
votes
3answers
6k views

Another domain is using our web app's IP address. How to prevent it? [duplicate]

Our web application is being mimicked by another domain, https://www.djjpl.com.sg. On ping, it gives the same IP address as ours. Every git push to our server reflects on that domain. We want to stop ...
2
votes
3answers
247 views

Should it remain as a general advice to encrypt the whole HDD?

AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
4
votes
1answer
52k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
5
votes
2answers
385 views

Someone has registered my partner's recycled email account

My partner has a unique name, and while we can't truly be certain, we're almost 100% sure she is the only one in the world with it. Once upon a time she had a Hotmail account with her name as the ...
1
vote
2answers
214 views

What is the safest way to identify a device without human action please?

I want to allow users of our website to restrict access to their account from devices they have explicitly authorized. This will be checked at the connection and each time the IP address changes. To ...
0
votes
1answer
369 views

Does changing one's last name offer some protection against identity theft

With the recent hack at Equifax where names, addresses, SSNs, etc are now likely in the hands of criminals, would changing one's last name be protective from impersonation similar to how one would ...
5
votes
1answer
460 views

Can a Bitcoin Seller steal my Identity?

I was trying to buy some bitcoins on https://localbitcoins.com. However, the seller was looking for a copy of my ID and a photo of my debit card (long number covered). I'm curious as to how open ...
4
votes
2answers
199 views

How big a vulnerability is phone number theft and how to protect against this? [closed]

This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
-1
votes
3answers
88 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
2
votes
3answers
3k views

Can screen blue light filter applications on android steal passwords?Do these filter apps see everything that I type?

I have seen that android does not allow installation of any apk when screen filters are enabled.Do they cause any security risks?
3
votes
4answers
18k views

Is it dangerous for a scammer to know just your name and birthday? [closed]

Basically, this afternoon, I got a call that I had picked up. The caller asked for (my name) stating that they were from this company associated with my healthcare. The call seemed pretty legit, and ...
10
votes
1answer
905 views

Implications of prominent *secure messaging apps* requiring phone number identifiers

More specifically and also generally than this related question, I'm curious about the privacy implications of prominent secure messaging apps (marketing themselves as protecting users' privacy) ...
2
votes
0answers
84 views

Security implications of owning a German electronic ID card

I am German and about to renew my ID card. Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
0
votes
2answers
217 views

I can send an email from your email account without your permission. How is this possible? [duplicate]

Similar question with an amazing answer: How can PayPal spoof emails so easily to say it comes from someone else? I hope that the title to this question is actually a lie... but, to my knowleage, I ...
3
votes
2answers
554 views

Storing sensitive documents in a password manager

Like a lot of people, I use a password manager (Keypass). For convenience I have this stored on Dropbox and is a part of the various backups that I do (Both local and offsite). I am thinking of ...
0
votes
1answer
2k views

I used 10minutemail and my own phone number, is there a risk?

I created a twitter account and used 10minuteemail, then twitter said my account was having automated behaviour, so I searched a temporary fake number to use but for the sake of lazyness I just put my ...
11
votes
2answers
5k views

Is the image of the signature considered PII?

I wrote a pay app and as part of that, I have a HTML5 canvas where buyers can sign for credit card or goods received. I then ajax the base64 back to the server in a DB table (genius, I know). I also ...
1
vote
1answer
9k views

Could revealing your full name on the internet be dangerous? [duplicate]

Apparently I can't find an answer to this on the internet, maybe because it's an obvious answer but still. Is there a reason to keep your full name disclosed on the internet?