Questions tagged [identity-theft]

Identity theft is the act of impersonating someone else on a computer system, for malicious purposes - i.e. without their knowledge or consent.

Filter by
Sorted by
Tagged with
1
vote
1answer
107 views

Protecting a website from being kidnapped

I have a MediaWiki website in Hebrew; As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible. I chose to give that website a Global TLD (a non ...
0
votes
1answer
72 views

Is there any reasonable argument against immediately validating a new customer's email address? [closed]

Would it not be useful for account providers that allow online/phone signup/ordering to immediately verify the email address supplied to them? I was forced to ponder this recently when I became the ...
0
votes
1answer
93 views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
1
vote
1answer
75 views

Samba and verifying server identity

Suppose that I have two Windows 10 (Professional edition) computers, one (PC) sharing a folder and second one (notebook) copying data to the shared folder automatically. I would like to prevent ...
0
votes
2answers
82 views

Can National Insurance number and Unique Taxpayer Reference be stored unencrypted in a database?

Should these details be stored encrypted, not at all or in plain text in a database? These are both UK terms, used to identify individuals to the tax authorities; the NI number is used more widely, ...
0
votes
1answer
121 views

BitFinex unauthorized login [closed]

A few minutes ago i got an email from the real Bitfinex, saying that a unauthorized login attempt was approved by Bitfinix. Is this the work of a new breach? The IP is located somewhere in Japan.
1
vote
4answers
262 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
1
vote
5answers
230 views

Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN

I'm currently building a web based membership application form that will require a user to enter an SSN and other identifiable information. Part of the requirements of the membership application is to ...
2
votes
1answer
4k views

Car registration paper stolen from glovebox, what kind of scams are possible?

I carelessly left my car unlocked, and it was searched by trespassers in the night. They only took the registration and insurance card (Ohio, United States). This seems strange to me, as these ...
5
votes
2answers
183 views

Is a company's dark web search really effective at proving my info is not there?

Prompted by this question. My take is that the security companies and banks that offer identity protection services use the phrase "dark web" as a scare tactic to get you to subscribe. And then when ...
1
vote
1answer
38k views

Bogus Instagram account using my email, never been verified, has over 1000 followers

This appears to be a phishing scam like I've never encountered before. I received an email from security@mail.instagram.com to an email address I rarely use, but I noticed it because messages get ...
21
votes
7answers
8k views

Unexpected email from Yorkshire Bank

I have started receiving unexpected emails from Yorkshire Bank. I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago. The ...
-1
votes
3answers
474 views

I entered my password in a possible scam website. What should I do?

A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads. So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
0
votes
1answer
64 views

Is there a security risk in using the same profile picture on different sites?

Well, the title basically says it. I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
0
votes
0answers
252 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
23
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
4
votes
4answers
142 views

What is a simple and secure method to transfer virtual assets?

Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob. One ...
1
vote
0answers
125 views

How dangerous is it to verify my account with a photo of my visa, passport, or ID card? [duplicate]

In order to play poker online on some accounts you have to verify your age and identity. And to do that, I need to email the site with a picture of my visa or passport or ID card. How dangerous is it ...
3
votes
1answer
158 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
1
vote
0answers
45 views

Security concerns in cookie exporting between browsers

I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
3
votes
2answers
141 views

Email/facebook account/internet protection service for private community

I apologize in advance for any inaccuracy. I am part of a yoga community which has no particular activity on the web or in the informatic sector. All we have that can be regarded as web-related is ...
149
votes
12answers
26k views

Do I need to encrypt connections inside a corporate network?

Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
19
votes
4answers
866 views

Help! My information has been stolen! What do I do now?

This is an attempt to ask a canonical question to expand upon another post with a similar name. The goal is to create something helpful that can be used as a duplicate when non experts ask about ...
-4
votes
1answer
149 views

what if someone has my wrong social security number? [closed]

If a thief gets ahold of my name and address, but has the wrong social security number, (say it's off by one digit) will this protect me? They may try to open an account in my name, and there's a ...
2
votes
0answers
74 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
5
votes
1answer
362 views

Why would a stranger keep signing up to trading sites with my email address?

I have read the answer below and understand that there is not much I can do about the basic problem of somebody signing up for newsletters and online services using my email address: Someone used my ...
26
votes
3answers
6k views

Another domain is using our web app's IP address. How to prevent it? [duplicate]

Our web application is being mimicked by another domain, https://www.djjpl.com.sg. On ping, it gives the same IP address as ours. Every git push to our server reflects on that domain. We want to stop ...
2
votes
3answers
244 views

Should it remain as a general advice to encrypt the whole HDD?

AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
4
votes
1answer
49k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
5
votes
2answers
369 views

Someone has registered my partner's recycled email account

My partner has a unique name, and while we can't truly be certain, we're almost 100% sure she is the only one in the world with it. Once upon a time she had a Hotmail account with her name as the ...
1
vote
2answers
209 views

What is the safest way to identify a device without human action please?

I want to allow users of our website to restrict access to their account from devices they have explicitly authorized. This will be checked at the connection and each time the IP address changes. To ...
0
votes
1answer
341 views

Does changing one's last name offer some protection against identity theft

With the recent hack at Equifax where names, addresses, SSNs, etc are now likely in the hands of criminals, would changing one's last name be protective from impersonation similar to how one would ...
5
votes
1answer
447 views

Can a Bitcoin Seller steal my Identity?

I was trying to buy some bitcoins on https://localbitcoins.com. However, the seller was looking for a copy of my ID and a photo of my debit card (long number covered). I'm curious as to how open ...
4
votes
2answers
176 views

How big a vulnerability is phone number theft and how to protect against this? [closed]

This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
-1
votes
3answers
83 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
2
votes
3answers
2k views

Can screen blue light filter applications on android steal passwords?Do these filter apps see everything that I type?

I have seen that android does not allow installation of any apk when screen filters are enabled.Do they cause any security risks?
3
votes
4answers
11k views

Is it dangerous for a scammer to know just your name and birthday? [closed]

Basically, this afternoon, I got a call that I had picked up. The caller asked for (my name) stating that they were from this company associated with my healthcare. The call seemed pretty legit, and ...
10
votes
1answer
863 views

Implications of prominent *secure messaging apps* requiring phone number identifiers

More specifically and also generally than this related question, I'm curious about the privacy implications of prominent secure messaging apps (marketing themselves as protecting users' privacy) ...
2
votes
0answers
83 views

Security implications of owning a German electronic ID card

I am German and about to renew my ID card. Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
0
votes
2answers
213 views

I can send an email from your email account without your permission. How is this possible? [duplicate]

Similar question with an amazing answer: How can PayPal spoof emails so easily to say it comes from someone else? I hope that the title to this question is actually a lie... but, to my knowleage, I ...
3
votes
2answers
458 views

Storing sensitive documents in a password manager

Like a lot of people, I use a password manager (Keypass). For convenience I have this stored on Dropbox and is a part of the various backups that I do (Both local and offsite). I am thinking of ...
0
votes
1answer
2k views

I used 10minutemail and my own phone number, is there a risk?

I created a twitter account and used 10minuteemail, then twitter said my account was having automated behaviour, so I searched a temporary fake number to use but for the sake of lazyness I just put my ...
11
votes
2answers
4k views

Is the image of the signature considered PII?

I wrote a pay app and as part of that, I have a HTML5 canvas where buyers can sign for credit card or goods received. I then ajax the base64 back to the server in a DB table (genius, I know). I also ...
0
votes
1answer
7k views

Could revealing your full name on the internet be dangerous? [duplicate]

Apparently I can't find an answer to this on the internet, maybe because it's an obvious answer but still. Is there a reason to keep your full name disclosed on the internet?
0
votes
1answer
1k views

Snapchat identity theft [closed]

Someone has created a fake Snapchat account using my exact name. They added several of my friends and sent them snapchats using pictures of me from my instagram account . How can I find the ...
1
vote
1answer
431 views

Is making e-mail addresses visible and impersonation possible by GitHub an acceptable practice? [closed]

I am under impression that protecting privacy of user is a "big deal" - even if only declaratively. Example: discussion on meta about e-mail addresses on SO. Whilst I do expect that sooner or later ...
5
votes
3answers
281 views

Find accounts that belong to an e-mail address

I would like to delete an old e-mail address of mine. However, I'm not exactly sure on which (popular or obscure) sites I signed up for an account using that address. If I delete the address, someone ...
9
votes
4answers
6k views

A company has requested scans of identity documents. What should I do?

A company that I do business with (e.g. Uber, Google) has requested scans of identity documents. How should I respond? For example: Should I provide the documents? What risks are associated with this?...
5
votes
5answers
17k views

Website asks for my identification card - Is it safe?

I want to register to a site (something like Steam that you can add money and buy later) and for the registration to be completed, it asks for a photo to be taken with my phone of my identification ...
3
votes
1answer
126 views

Making PII worthless [closed]

I've had a thought rolling around in my head for the past few years about Personally Identifiable Information or PII. Identity theft is a big business* for the bad guys. They make tons of money off ...