New online ID fraud threat that will wreck your Christmas

Robert Powell
by Lovemoney Staff Robert Powell on 17 December 2011  |  Comments 24 comments

ID fraud is a big problem this time of year - especially when so many of us are looking online to pick up a Christmas bargain. Here's how to make sure you don't get stung...

New online ID fraud threat that will wreck your Christmas

I don't know about you, but I’m definitely in the mood for a thrifty Christmas. But however careful you are with your pennies this festive season it’s never worth compromising on security in the search for a good deal.

The last thing you want is the worry of cancelling all your credit cards and filing insurance claims because some toe-rag has swiped your identity and gone on a spending spree.

The facts

From pick-pocketing to bin raiding, identity theft has always been a problem in Britain. But the rise of online shopping and social networking has given those sneaky ID thieves yet another way to separate you from your hard-earned cash.

A recent study by Unisys shows that 85% of the public are worried about cyber security – with nearly one in ten Brits switching banks or retailers because of concerns over the way they protected their details.

What’s more, PayPal reckons that over 30 million people use internet shopping at Christmas, spending almost £9 billion online. But determination to bag an online bargain could be putting many shoppers security at risk: only one in seven people seeing buying from a trusted site as a priority when shopping online. Unisys also found that a majority (65%) of online shoppers fail to regularly use or update mobile passwords – putting them at risk even further.

Follow these top tips to protect yourself against ID fraud

Ways to stop cyber-crime

But fear not, here are ten ways to protect yourself from becoming a victim of online festive fraud.

1. Passwords

Use a variety of passwords. Using upper and lower case letters and several numbers is always best. But whatever you do, don’t write them all down on a piece of paper and pop them in your wallet! Be savvy and write down clues that will help you remember each password. If you’re struggling to think of anything you can now even download a random password generator for your iPhone.

2. Social networking

Be careful who you befriend on social networks, often your date of birth or post code is all any cyber-crook needs to gain access to a treasure trove of online accounts and personal data. Even if you remove your date of birth, a barrage of happy birthday Facebook wall posts could be all it takes to give away your PIN.

For some more information on safe and secure social networking check out how to avoid Facebook fraud.

3. Mobile phones

Smartphones now carry a wealth of data including e-mails, online banking and work documents. Make sure you protect yours with a password.

4. Legitimate websites

Don’t shop anywhere that doesn’t clearly state its name, physical address and telephone number. Keep an eye out for the padlock symbol in the bottom corner of the webpage and the official logos of credit and debit card providers and ensure the URL starts with https.

5. Internet settings

Make sure your internet browser is completely up-to-date. Yes, I know that window that keeps popping up urging you to upgrade to version 8 is annoying, but if you click ‘remind later’ for long enough then you’re putting yourself at risk! It’s also worth installing a secure firewall, chaging your security settings level to moderate or high and switching cookies off – these are devices that keep tabs on the websites you have visited and can send information to nasty third parties.

6. Anti-virus software

Make sure your anti-virus and anti-spyware software is fully up to date. Use this software to scan any e-mail attachments you receive or files you download from the web.

7. Examine bank and credit card statements

Most banks will allow you to check your statements online 24/7 nowadays – make sure you do, and report any unusual activity to the bank. If you’ve got several accounts you can use the lovemoney.com online banking tool which merges all your information from different providers and makes it available with a single log in.

8. Check your credit record

Credit reports list all credit commitments and recent applications, allowing you to find out if anyone has been trying to use your ID. Check yours here.

9. Avoid phishing e-mails

A classical fraudster method is to e-mail you pretending to be your bank and ask for personal details. If you ever get an e-mail like this, delete it! Banks will never ask for any personal details.

10. Common sense

If an online bargain seems too good to be true, it probably is! Be sensible when shopping online and try to balance getting a good deal with maintaining online security.

 Thanks to Unisys vice president Neil Fisher and PayPal for these tips.

Other important preventative measures

Of course, offline ID theft and fraud does still go on, so protecting yourself when out shopping is still essential. Have a look at 10 ways to avoid being a victim of ID fraud to find out more ways you can protect yourself before hitting the shops this Christmas.

And if you fancy finding out how susceptible you are to being scammed online, take a look at the brand new Threat Test which has been launched by knowthenet.org.uk. It assesses your ability to identify different types of scams and gives you an online safety score.

Your top tips on avoiding ID fraud

Use the comment boxes below to tell us about any ID theft nightmares you’ve experienced or give us your top tips on how to avoid them. We want to know what you think!

This article has been updated from an earlier version.

Enjoyed this? Show it some love

Twitter
General

Comments (24)

  • culluding-fool
    Love rating 49
    culluding-fool said

    Cookies need to be enabled for many shopping & banking sites, o turning them off could cause confusing to some of the less computer savvy.

    It would also be a good idea to install NoScript, which enables you to choose which sites can run scripts on your computer and block the scripts from the sites you don't know.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • easygoing
    Love rating 156
    easygoing said

    The padlock symbol is top right for my browsers and don't forget to look out for the https at the beginning of the web address.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • finnol49
    Love rating 22
    finnol49 said

    I have recently received a large number of emails purporting to come from Fed Ex etc. They always contain an address label attachment, which if opened, deposits a trojan on your hard drive. Do not open, & delete immedately.

    Report on 13 November 2010  |  Love thisLove  1 love
  • tilburyre
    Love rating 0
    tilburyre said

    I think they need a lot more than just d.o.b or post code to get any details that will be of use to them. Perhaps the author would be good enough to explain just how they can do this? Or, at the very leas,t point us to the websites they would use. Identity theft is infinitely more often paper based. Just shredding any documents containing confidential data is worth more than all the advice in this article when it comes to avoiding identity theft.

    culluding-fool is right: turning off cookies is not a sensible thing to do. It will make all your regularly accessed websites far less friendly. 

    Report on 13 November 2010  |  Love thisLove  0 loves
  • myrap
    Love rating 0
    myrap said

    Hi can someone/easygoing help with the padlock, top right, I think i have seen  one at some time, but there is not one to be seen today thanks.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • rfp2001
    Love rating 0
    rfp2001 said

    Chedck that the web site address at the top of your screen begins with https - the "s" is important (stands for "secure"). This "s" should start ANY web site address into which you need to add ANY personal details - no "s" don't enter any!!

    I use Internet Explorer and the padlock (for secure sites) appears on the lower right in my browser.

    The "s" after "http" and the padlock should appear on the same page on any secure web site.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • Vern54
    Love rating 12
    Vern54 said

    The article says not to keep passwords in your wallet. I had my wallet stolen and was glad I had written the codes down. WHY? Because they were seven four number sequences made to look like ATM codes (I had seven cards in there - not all money cards but all needing codes). The thief obligingly tried the codes in an ATM and the cards were all retained. Okay I lost £20 in cash, but the cards could not be used. So write down some random number to look like codes and keep them in your wallet.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • Ian329
    Love rating 5
    Ian329 said

    Does using Paypal help when buying purchases online? Only Paypal have your payment details and the seller does not have access to them. Another level of security. 

    Report on 13 November 2010  |  Love thisLove  0 loves
  • applemint
    Love rating 3
    applemint said

    If you are shopping at a website you have never heard of then always do a quick check at whois: http://whois.domaintools.com/ Copy and paste the domain name into whois to see who owns it. Anyone using Whois Domain Privacy to hide their details should raise a big red flag!

    Also always do a quick search for "company/website name" and complaints or "company/website name" and reviews to see what experience other shoppers have had.

    Takes an extra 5 or 10 minutes to do this, but trust me it's worth it - if I had simply done a google search for camerabox complaints I would never have ordered from their site and would have saved months of frustration, hassle and financial expense! :( 

    You can also use a website called Web of Trust (WOT) to check user ratings of online sites. 

    Report on 13 November 2010  |  Love thisLove  0 loves
  • old-git
    Love rating 5
    old-git said

    I liked Vern54's idea of writing down something that looks like your card PIN numbers to get your cards retained. I laugh at the advice to have 9 character passwords, using a mixture of alpha, numeric, lower and upper case, make all of your passwords different, change them regularly and don't write them down. I currently have well over 100 sites where I need a password. Any sensible sugestions for someone who can't remember the sequence of a pack of cards?

    Report on 13 November 2010  |  Love thisLove  0 loves
  • MK22
    Love rating 142
    MK22 said

    "Fed Ex" aren't the only ones sending fake delivery e-mails like the one finnol49 recevied. "DHL" are doing it too!

    Report on 13 November 2010  |  Love thisLove  0 loves
  • warbaby
    Love rating 0
    warbaby said

    re delivery e-m.s, I've had one from the a**holes as well, namely DHL. Coincidentally I was expecting a parcel, but still deleted the e-m- you can't be too careful!

    Report on 13 November 2010  |  Love thisLove  0 loves
  • Robjoy
    Love rating 17
    Robjoy said

    1. Don't use Internet Explorer if you can avoid it. Version 8 is by no means as riddled with security holes as previous versions, but, being the most commonly-used browser, it is the primary target for malware writers. Use Google Chrome, Firefox, Maxthon, Opera or Safari instead.

    2. Try Roboform (and/or RoboformToGo) - it can not only retain (securely) your login details but you can also create 'SafeNotes' of any other bits of vital information.

    3. Cookies: they're like kitchen knives - useful in the hands of the innocent, deadly in the hands of the criminal. Go to Internet Options - Privacy - Advanced - click Override Automatic Cookie Handling - accept first party cookies, block third party cookies, untick Always allow session cookies. That should mean that the innocent cookies that retain your options and things as you rummage around a web site are able to function, but the sneaky ones that came from somewhere else that you don't even recognise are kept out.

    Report on 13 November 2010  |  Love thisLove  1 love
  • myrap
    Love rating 0
    myrap said

    Hi rfp 2001, i was going to say help no s nor padlock on the love money. com site, when i click any link in their emails. BUT i have just logged in to send this comment and the https appeared and the padlock, however as soon as I signed in to comment all that security dissappeared??

    Report on 13 November 2010  |  Love thisLove  0 loves
  • Bushbaby
    Love rating 0
    Bushbaby said

    Thanks robjoy, have followed your advice re cookies.

    Report on 13 November 2010  |  Love thisLove  0 loves
  • applemint
    Love rating 3
    applemint said

    I agree re Internet Explorer - use another browser. 

    @old-git another option for passwords is Last Pass which is free and works with Chrome and Firefox (lastpass.com)

    Report on 13 November 2010  |  Love thisLove  0 loves
  • durhamlass
    Love rating 2
    durhamlass said

    I thought that the distance selling regulations meant that anyone who sells anything online had to make sure that there was a address visible on their web site.

    It is also a legal requirement for any business that includes the word company in its name and is registered with Companies House to include its registered address on virtually all communications with customers and suppliers. This cannot be a PO box but an actual bricks and mortar address whether it was their own or not. This includes web sites.

    This is why those who are thinking about registering a company need to think carefully about the address of their registered office. If they make it their home address then they have no choice but to put their home address on their web site so that anyone who wants to contact them can do so. If someone is trying to avoid a bully or abuser they will try and find another registeed address. That means that they will have to pay someone to store the store the documents that they are legally required to have accessible to anyone who asks for them at their registered address.

    In other words if there is no address on a web site then they are breaking the law and therefore you should not be buying from them.

    Report on 14 November 2010  |  Love thisLove  1 love
  • JessenSqueak
    Love rating 0
    JessenSqueak said

    In things like the DHL / FED EX email scam - think to yourself, how did they get my email address, did I give it to them - If the answer is NO then they are unlikely to be emailing you and it is quite clearly a phishing scam or an attempt to hit you with a trojan.

    I keep writing on these articles get File Hippo or Secunia PSI and learn to use it. Your computer is not as secure as you think it is until these programs say 100% secure and there is a lot more to patch than just windows - Adobe products are a favourite target now and have been for about 18 months.

    Just google either download it and learn how to use it. I use Secunia and there is an MSN Messenger like symbol to the right hand end - if you have a security problem you are struggling to solve then it takes you to a forum where the answer is usually available and to the topic / subject for that program / problem.

    Report on 14 November 2010  |  Love thisLove  0 loves
  • durhamlass
    Love rating 2
    durhamlass said

    I just put a new copy of Zone ALarm on my PC. It gave me quite a surprise when it flagged up one of my own domain names as suspicious. Ok it did have a paypal button on the home page but that is set up as an automatic download of a pdf file. Delivery of an email link should take seconds rather than hours.

    The reason why it is suspicious is that I only started using that domain name 3 weeks ago. The warning gave the date of registration and that was enough to make it suspicious. Strange being told that you are suspicious yourself.

    Report on 14 November 2010  |  Love thisLove  0 loves
  • Donna Ferguson
    Love rating 130
    Donna Ferguson said

    @myrap  As I understand it, certain parts of lovemoney.com are secure (where you are sending private data) and others (such as this page) are not.

    Report on 15 November 2010  |  Love thisLove  0 loves
  • elephant889
    Love rating 3
    elephant889 said

    anyone recommending safari as a secure browser is completely mad.

    Report on 15 November 2010  |  Love thisLove  0 loves
  • finnol49
    Love rating 22
    finnol49 said

    'Watchdog' on 4 November pinpointed a survey that will be sent to about a million recipients, sponsored by Talk Talk, energy companies etc. There are over 150 questions, some of a deeply personal nature. The instructions are 'to fill in the form, & leave outside in an open paper bag'. What an invitation to identity thieves! Even the Police are concerned, & have alerted householders & Neighbourhood Watch members. Not online, but worth avoiding.

    Report on 15 November 2010  |  Love thisLove  0 loves
  • billyboy121
    Love rating 18
    billyboy121 said

    tilburyre said 'I think they need a lot more than just d.o.b or post code to get any details that will be of use to them.' - these items on their own are usually not such a problem, but if the thief is lucky enough to get any further pieces of information that they could use in conjunction with this data, then it can be a problem. Like you say, destroy all correspondence containing any personal information and never give your DOB postcode or other information out to anyone unless you absolutely have to.

    Report on 18 November 2010  |  Love thisLove  0 loves
  • Kent
    Love rating 6
    Kent said

    You can set cookies to be blocked to all sites except those you give permission to. (Go to Tools/Internet options/Privacy/Advanced to block all cookies, and then copy/paste the urls of sites you want to accept cookies from, in Tools/Internet optiions/Privacy/Sites.)

    I do wonder why Microsoft made the procedure so long-winded.

    Also, some sites are a pain because they merely go back to the previous page, or inform you that the site is "undergoing maintenance" when your computer will not accept their cookies, instead of informing you that you need to allow their cookies.

    Report on 20 November 2010  |  Love thisLove  0 loves

Post a comment

Sign in or register to post a reply.

Our top deals

Credit card
company
Balance transfers rate and period Representative
APR
Apply
now

Barclaycard 27Mth Platinum Visa

0% for 27 months (3.5% fee) Representative 18.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 18.9% APR (variable). Purchase rate 18.9% PA (variable). BT fee is reduced from 3.9% to 3.5% (T&Cs apply).

Barclaycard 25Mth Platinum Visa

0% for 25 months (2.4% fee) Representative 18.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 18.9% APR (variable). Purchase rate 18.9% PA (variable). BT fee is reduced from 3.5% to 2.4% (T&Cs apply)

Halifax BT 25 Month MasterCard

0% for 25 months (2.5% fee) Representative 18.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 18.9% APR (variable). Purchase rate 19.0% PA (variable).
W3C  Thank you for using CGWEBLIV4