Skip to main content

Questions tagged [identity-theft]

Identity theft is the act of impersonating someone else on a computer system, for malicious purposes - i.e. without their knowledge or consent.

Filter by
Sorted by
Tagged with
1 vote
1 answer
64 views

Is electronic signature a proper/sufficient mean for identification/authentication?

We have received an electronically signed GDPR data request from a person who has only provided his name and surname. We wanted to be sure that this person is who he claims he is, so we have asked to ...
ZygD's user avatar
  • 279
1 vote
0 answers
25 views

Sending photo of debit card over email [duplicate]

I have seen/heard online stores (not necessarily within the U.S., maybe international) asking buyers to provide a picture of their debit cards via email (e.g., for verifying identity). My intuition ...
Beerus's user avatar
  • 111
0 votes
1 answer
117 views

sealed data from a stolen laptop

Is there a way to force google drive to erase all files + passwords contained on a computer at shutdown (as a proactive measure)? Or this could be accomplished by a standard script to delete all cache ...
gothicsurf's user avatar
0 votes
1 answer
653 views

Fraud Detection - 2FA Bypass Methods and SIM Cloning

I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
Hack-R's user avatar
  • 203
0 votes
0 answers
69 views

Is it safe to send my id photo for verification [duplicate]

Is it safe to send my ID photo and me holding my ID photo to a site(BitSkins). My intetions were to buy some skins for games, but they asked for verification so can they missuse my identity ?
Stefan's user avatar
  • 1
2 votes
1 answer
181 views

What should I do if my sensitive information is potentially leaked?

I sold an laptop recently, but didn’t care to do a secure erase to make sure there wasn’t any data left. After a long time, I suddenly realized that I shouldn’t have be so careless and began to worry ...
Rukord's user avatar
  • 23
0 votes
0 answers
197 views

Can a remote user (logged into my computer via LogMeIn) capture my password as I log into a website?

I work for a large company with IT support that uses LogMeIn to take control of our PCs when troubleshooting. Today while being assisted I was asked to log into an internal website during a LogMeIn ...
Michael In The Mountain's user avatar
1 vote
1 answer
583 views

Can Identity Theft Protection Services Get Hacked?

I recently was dumbfounded by a question whether identity theft protection services can get hacked. Me and my family we're T-Mobile customers in the US and after the recent T-Mobile hack we got free ...
jan's user avatar
  • 153
0 votes
1 answer
223 views

Is an owned domain + self hosted email the closest to owning one's online identity? Are there better alternatives?

Most online accounts identify users using email/phone & password; but since most all email/phone is handled by another service (e.g. Gmail), one's online identity only exists so long as these ...
user8187's user avatar
  • 141
2 votes
0 answers
379 views

Send a Picture of my ID and a selfie of me holding it to a Questionable Website

Some website asked for the verification of my identity to make a purchase of online goods. I didn't think twice and send them a picture of both sides of my country's ID (not USA) and a selfie holding ...
Figaro's user avatar
  • 21
1 vote
1 answer
352 views

Mitigating physical cookie theft

Threat model: Malicious user gaining physical access to browser cookies (e.g., 3rd party repair guy copying cookies to his own device or something like that). Let's say legit user did not clear ...
IMB's user avatar
  • 2,978
3 votes
1 answer
1k views

Nonprofit organizations asking me to email them a photo of my driver's license

Recently I've had two nonprofit organizations ask me to email them a photo of my driver's license. No money is changing hands, and both of these are legitimate and well-known nonprofits. Organization ...
user avatar
1 vote
2 answers
727 views

Can a fingerprint be reconstructed from a device that uses it for authentication?

I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days. Do these devices store information in such a way that your fingerprint could be reconstructed ...
user1833028's user avatar
5 votes
1 answer
517 views

Found fake Facebook profile with my name and education history, what to do?

A family member of mine called my attention to a Facebook profile with data significantly resembling mine: Matching first and last name Matching city Matching secondary school Matching university ...
alias for a single question's user avatar
1 vote
1 answer
199 views

Protecting a website from being kidnapped

I have a MediaWiki website in Hebrew; As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible. I chose to give that website a Global TLD (a non ...
George's user avatar
  • 11
0 votes
1 answer
148 views

Is there any reasonable argument against immediately validating a new customer's email address? [closed]

Would it not be useful for account providers that allow online/phone signup/ordering to immediately verify the email address supplied to them? I was forced to ponder this recently when I became the ...
ovirt's user avatar
  • 9
0 votes
1 answer
2k views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
yurnero's user avatar
  • 103
2 votes
1 answer
418 views

Samba and verifying server identity

Suppose that I have two Windows 10 (Professional edition) computers, one (PC) sharing a folder and second one (notebook) copying data to the shared folder automatically. I would like to prevent ...
oldium's user avatar
  • 23
0 votes
2 answers
266 views

Can National Insurance number and Unique Taxpayer Reference be stored unencrypted in a database?

Should these details be stored encrypted, not at all or in plain text in a database? These are both UK terms, used to identify individuals to the tax authorities; the NI number is used more widely, ...
Ian Warburton's user avatar
0 votes
1 answer
204 views

BitFinex unauthorized login [closed]

A few minutes ago i got an email from the real Bitfinex, saying that a unauthorized login attempt was approved by Bitfinix. Is this the work of a new breach? The IP is located somewhere in Japan.
radiation's user avatar
1 vote
4 answers
582 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
Gili's user avatar
  • 2,169
1 vote
5 answers
389 views

Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN

I'm currently building a web based membership application form that will require a user to enter an SSN and other identifiable information. Part of the requirements of the membership application is to ...
TroySteven's user avatar
  • 1,339
2 votes
1 answer
20k views

Car registration paper stolen from glovebox, what kind of scams are possible?

I carelessly left my car unlocked, and it was searched by trespassers in the night. They only took the registration and insurance card (Ohio, United States). This seems strange to me, as these ...
nexus_2006's user avatar
5 votes
2 answers
319 views

Is a company's dark web search really effective at proving my info is not there?

Prompted by this question. My take is that the security companies and banks that offer identity protection services use the phrase "dark web" as a scare tactic to get you to subscribe. And then when ...
Les's user avatar
  • 443
3 votes
1 answer
65k views

Bogus Instagram account using my email, never been verified, has over 1000 followers

This appears to be a phishing scam like I've never encountered before. I received an email from [email protected] to an email address I rarely use, but I noticed it because messages get ...
Encryptard's user avatar
20 votes
7 answers
8k views

Unexpected email from Yorkshire Bank

I have started receiving unexpected emails from Yorkshire Bank. I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago. The ...
Stewart's user avatar
  • 343
-1 votes
3 answers
3k views

I entered my password in a possible scam website. What should I do?

A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads. So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
Davy Jones's user avatar
0 votes
1 answer
307 views

Is there a security risk in using the same profile picture on different sites?

Well, the title basically says it. I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
tmh's user avatar
  • 1,109
0 votes
0 answers
723 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
user1447679's user avatar
23 votes
6 answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
Lino Velev's user avatar
4 votes
4 answers
234 views

What is a simple and secure method to transfer virtual assets?

Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob. One ...
fernacolo's user avatar
  • 254
1 vote
0 answers
498 views

How dangerous is it to verify my account with a photo of my visa, passport, or ID card? [duplicate]

In order to play poker online on some accounts you have to verify your age and identity. And to do that, I need to email the site with a picture of my visa or passport or ID card. How dangerous is it ...
Yeet's user avatar
  • 11
3 votes
1 answer
248 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
Erel Segal-Halevi's user avatar
1 vote
0 answers
125 views

Security concerns in cookie exporting between browsers

I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
Dush's user avatar
  • 11
3 votes
2 answers
212 views

Email/facebook account/internet protection service for private community

I apologize in advance for any inaccuracy. I am part of a yoga community which has no particular activity on the web or in the informatic sector. All we have that can be regarded as web-related is ...
Py-ser's user avatar
  • 133
150 votes
12 answers
29k views

Do I need to encrypt connections inside a corporate network?

Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
Robert Cutajar's user avatar
20 votes
4 answers
1k views

Help! My information has been stolen! What do I do now?

This is an attempt to ask a canonical question to expand upon another post with a similar name. The goal is to create something helpful that can be used as a duplicate when non experts ask about ...
CaffeineAddiction's user avatar
-4 votes
1 answer
229 views

what if someone has my wrong social security number? [closed]

If a thief gets ahold of my name and address, but has the wrong social security number, (say it's off by one digit) will this protect me? They may try to open an account in my name, and there's a ...
anotherguy's user avatar
2 votes
0 answers
131 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
user avatar
6 votes
1 answer
3k views

Why would a stranger keep signing up to trading sites with my email address?

I have read the answer below and understand that there is not much I can do about the basic problem of somebody signing up for newsletters and online services using my email address: Someone used my ...
JamesG's user avatar
  • 163
26 votes
3 answers
7k views

Another domain is using our web app's IP address. How to prevent it? [duplicate]

Our web application is being mimicked by another domain, https://www.djjpl.com.sg. On ping, it gives the same IP address as ours. Every git push to our server reflects on that domain. We want to stop ...
IamGhale's user avatar
  • 323
2 votes
3 answers
321 views

Should it remain as a general advice to encrypt the whole HDD?

AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
gaazkam's user avatar
  • 6,147
4 votes
1 answer
54k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
Nate D's user avatar
  • 191
5 votes
2 answers
554 views

Someone has registered my partner's recycled email account

My partner has a unique name, and while we can't truly be certain, we're almost 100% sure she is the only one in the world with it. Once upon a time she had a Hotmail account with her name as the ...
Bamboo's user avatar
  • 195
1 vote
2 answers
294 views

What is the safest way to identify a device without human action please?

I want to allow users of our website to restrict access to their account from devices they have explicitly authorized. This will be checked at the connection and each time the IP address changes. To ...
lakano's user avatar
  • 157
5 votes
1 answer
560 views

Can a Bitcoin Seller steal my Identity?

I was trying to buy some bitcoins on https://localbitcoins.com. However, the seller was looking for a copy of my ID and a photo of my debit card (long number covered). I'm curious as to how open ...
Rob's user avatar
  • 51
4 votes
2 answers
298 views

How big a vulnerability is phone number theft and how to protect against this? [closed]

This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
Chris Knight's user avatar
-1 votes
3 answers
191 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
Morgs's user avatar
  • 107
4 votes
3 answers
5k views

Can screen blue light filter applications on android steal passwords?Do these filter apps see everything that I type?

I have seen that android does not allow installation of any apk when screen filters are enabled.Do they cause any security risks?
user156145's user avatar
4 votes
4 answers
38k views

Is it dangerous for a scammer to know just your name and birthday? [closed]

Basically, this afternoon, I got a call that I had picked up. The caller asked for (my name) stating that they were from this company associated with my healthcare. The call seemed pretty legit, and ...
Echizan's user avatar
  • 41