I am the Chief Privacy Officer at the City of Seattle, and it happened to me (here’s what to do if it happens to you….)
So, it happened to me, and I am in the business of data security! One day, I was sipping tea feeling like a responsible adult, and the next thing I knew, a fraudulent bank account, created with all my personal information (including my social security number and home address), was living its best life on the dark web. The first clue? A shiny ‘new account summary’ showed up in my mailbox. Yep, identity theft. It’s like finding out your cat has a secret Instagram account—except way less cute, a lot creepier, and potentially a lot more expensive.
The Surprise Account
Over the holidays, I just happened to open what I thought was a solicitation notice from a well-known bank specializing in instant credit, one that I don’t use. It was a bank statement that showed that someone had opened an account in my name and had run up almost $5,000 in overdrafts. Later investigation revealed that in the previous month, this nefarious person wrote fraudulent checks over two weeks from another country, relying on the processing delay before those checks bounced, to then withdraw the money and disappear, leaving me with a negative bank balance.
Lesson Learned:
Identity thieves don’t just stop at merely accessing your existing accounts, they can create new ones and wreak havoc. Always open your mail and check for anything that looks unfamiliar.
Here’s what else I learned (the hard way) and what you should do if this happens to you or if you would like to avoid the experience altogether:
- Act fast: Time is your best defense.
- Always monitor your accounts and credit reports.
- Freeze your credit to prevent new accounts being opened.
- Report your situation to the FBI and follow their guidance.
- Stay vigilant for mail or notifications about unfamiliar accounts.
Speed matters! Every hour counts when it comes to identity theft.
Step 1: Don’t Panic… Okay, Panic a Little, Then Call the Bank
- Freeze the account or card. (Note: This may include changing the password, or in my case, adding my email and contact information to the account.)
- If your own card has been compromised, request that they issue a new card.
- Work with them online and monitor any other suspicious transactions going forward.
- Pro tip #1: Be nice to the customer service rep—they didn’t invite your card to the dark web party. It’s not their fault, and it’s easier for them to help nice people.
- Pro tip #2: I asked (nicely) to speak with the bank’s fraud department and learned more from them about the investigation process and timing. It felt better to speak to the folks looking into and solving this as a fraud case.
Step 2: File a Report with the FBI
- The Feds can offer helpful advice. It is also important to have notified them if later you have a dispute or need police to investigate. Go to https://www.ic3.gov and submit a complaint.
- You’ll get a confirmation email with next steps, including monitoring accounts and reporting locally.
What the FBI Email Tells You
After filing your complaint at IC3, you’ll receive a confirmation email. Here’s what it usually includes:
- Monitor your financial accounts and credit reports regularly.
- If things get messy, loop in your local law enforcement, they’re here to help.
- Secure your devices and update passwords to prevent further compromise.
- Links to identity theft recovery resources and additional guidance.
Step 3: Lock Down Your Credit Like Fort Knox
- Go immediately to these links and freeze your credit. DO IT NOW. At this stage, with all the data leaks we have experienced worldwide, just assume your information is already on the dark web, and it is only a matter of time before someone uses it. It is easy to freeze and unfreeze your credit, which prevents unauthorized people (a.k.a. the bad guys) from opening credit in your name. Here are the links to the three credit bureaus – contact them ALL!
- Equifax: https://www.equifax.com
- Experian: https://www.experian.com
- TransUnion: https://www.transunion.com
- A credit freeze is the ultimate ‘Do Not Disturb’ sign for identity thieves.
Step 4: Monitor Everything
- Check your bank statements daily for a while.
- Use a credit monitoring service if possible.
- Change passwords (Yes, even the one you’ve had since college. Rename your dog of cat if you must – or better yet investigate using a password manager. Here is a starting place to find out more: Why You Need a Password Manager, and How to Choose the Right One | PCMag).
Step 5: Laugh So You Don’t Cry
- If this has happened to you, I get the emotions you may be feeling. Identity theft is invasive and stressful, but humor helps. You will survive this and have a great story to tell your family and friends at the next get-together! Please remember, you are NOT alone. Millions of people experience this issue every year. Act fast and stay vigilant.
Last Words
You are a confident and capable person. This is NOT your fault, and you can take steps NOW to either avoid this or survive it. You are welcome to contact me to commiserate – I’m still living through this and may have more to suggest before it’s all over.
For now, here is the Identity Theft Survival Action Item List:
Essential Steps
- Call the bank immediately to freeze the account and, if appropriate, get a new card.
- File a report at https://www.ic3.gov (FBI Internet Crime Complaint Center).
- Place a credit freeze with Equifax, Experian, and TransUnion.
- Monitor accounts daily and change passwords.
- Stay calm and keep records of all actions taken.
- Keep smiling, this too shall pass!