Equifax Update 9/14/17-- Cybersecurity Incident & Important Consumer Information

Cybersecurity Incident & Important Consumer Information

A Progress Update for Consumers

September 14, 2017

 

1) Additional information on credit freezes & troubleshooting issues.

We are experiencing a high volume of requests for security freezes, and have experienced some technical issues. We are working diligently to ensure an improved consumer experience. Here’s some updated information for consumers with questions about placing security freezes:

• If consumers request a security freeze online: Consumers may place, temporarily lift, or remove a security freeze to an Equifax Credit File by going to http://www.equifax.com/CreditReportAssistance/?/CreditReportAssistance.
  Equifax does not currently email or mail the individual 10-digit PIN to consumers. It is available on the screen, and the consumer is asked to print the PIN from the screen. Our technology team is aware of some limited situations in which consumers are unable to view their PINs. We have identified that this is caused by their browser settings. We are working on a fix for this issue. In the meantime, we are displaying a phone number that consumers may call to receive a PIN.

• If consumers request a security freeze over the phone or via U.S. Mail: Equifax will mail consumers their individual, 10-digit PIN at the address on file.

• Refunds for recently placed credit freezes: Equifax intends to automatically refund consumers who used credit cards to place a security freeze on their Equifax credit file starting at 5:00 PM EST on Thursday, Sept. 7, 2017. We are also planning to refund consumers who paid by check or money order, but we are still finalizing the details of executing those refunds.

Federal Trade Commission: Fraud alerts vs. credit freezes: FTC FAQs

Fraud alerts vs. credit freezes: FTC FAQs

By: Lesley Fair | Sep 14, 2017 10:51AM

Consumers are apprehensive about the security of their personal information and recent headlines about data breaches have moved the needle substantially on the -ometer that measures such things. As a business executive, your customers and employees may be coming to you with questions. Here are answers from the FTC about two topics on consumers’ minds: fraud alerts and credit freezes.
Fraud alerts and credit freezes can be very helpful tools for consumers. People don’t have to be a victim of identity theft to use them, but they should weigh their options in light of their personal circumstances. If they’re not sure what’s right for them, here are some points to ponder.

What do fraud alerts and credit freezes do? With a fraud alert, a business must try to verify a consumer’s identity before extending new credit. Usually that means calling to check if the person is actually at the particular store attempting to get credit. With a credit freeze, no one – including the consumer – can access the consumer’s credit report to open a new account. If consumers put a credit freeze in place, they’ll get a PIN number to use each time they want to freeze, unfreeze, and refreeze their account.

How long do fraud alerts and credit freezes last? A fraud alert lasts for 90 days. If the consumer doesn’t take the affirmative step of renewing the fraud alert, it automatically expires after that. Identity theft victims are entitled to an extended fraud alert, which last seven years. In almost all states, a credit freeze lasts until the consumer temporarily lifts it or permanently removes it. In a few states, it expires after seven years.

How much do fraud alerts and credit freezes cost? Fraud alerts are free. Depending on the state law, credit freezes may involve fees. In most states, they’re free for victims of identity theft victims. For others, they cost about $5 to $10 each time the consumer freezes or unfreezes their account with each credit reporting agency.

How can a consumer put a fraud alert or credit freeze in place? For a fraud alert, consumers can contact any one of the three major credit reporting agencies by phone or online. The law requires that the credit reporting agency notify the other two of the consumer’s fraud alert request. Identity theft victims who want an extended fraud alert must mail or upload their Identity Theft Report, which they can create at IdentityTheft.gov. To put a credit freeze in place, consumers must contact each of the three credit reporting agencies separately at the companies’ credit freeze portals.

Credit freezes are a powerful tool, but it’s not a one-size-fits-all thing. If consumers are about to apply for new credit – for example, a mortgage, car loan, or student loan – they should consider the cost and potential hassle of unfreezing and refreezing each time. But for people who won’t need new credit anytime soon, a credit freeze may be a good choice.

Equifax Cybersecurity Incident update: Sept. 13th, '17 - Information for consumers

Cybersecurity Incident & Important Consumer Informat

A Progress Update for Consumers

September 13, 2017

1) Updated information on U.S. website application vulnerability.
Equifax has been intensely investigating the scope of the intrusion with the assistance of a leading, independent cybersecurity firm to determine what information was accessed and who has been impacted. We know that criminals exploited a U.S. website application vulnerability. The vulnerability was Apache Struts CVE-2017-5638. We continue to work with law enforcement as part of our criminal investigation, and have shared indicators of compromise with law enforcement.

2) Temporary interruption to credit freeze sign-up link.
Due to the high volume of security freeze requests, we experienced temporary technical difficulties and our system was offline for approximately an hour at 5PM ET on September 13, 2017 to address this issue. We apologize for any inconvenience.

3) More details on consumer exemption from arbitration clause.
Questions continue to be raised about the arbitration clause and class action waiver language that was originally in the terms of use for the free credit file monitoring and identity theft protection products that we are offering called TrustedID Premier. We have removed that language from the TrustedID Premier Terms of Use and it will not apply to the free products offered in response to the cybersecurity incident or for claims related to the cybersecurity incident itself. The arbitration language will not apply to any consumer who signed up before the language was removed.

Equifax Website addressing data breach 2017

FTC Scam Alert: Equifax isn’t calling!

September 14, 2017

by Lisa Weintraub Schifferle               

Attorney, FTC, Division of Consumer and Business Education

Ring, ring. "This is Equifax calling to verify your account information." Stop. Don’t tell them anything. They’re not from Equifax. It’s a scam. Equifax will not call you out of the blue.
That’s just one scam you might see after Equifax’s recent data breach. Other calls might try to trick you into giving your personal information. Here are some tips for recognizing and preventing phone scams and imposter scams:

• Don’t give personal information. Don’t provide any personal or financial information unless you’ve initiated the call and it’s to a phone number you know is correct.
• Don’t trust caller ID. Scammers can spoof their numbers so it looks like they are calling from a particular company, even when they’re not.
• If you get a robocall, hang up. Don't press 1 to speak to a live operator or any other key to take your number off the list. If you respond by pressing any number, it will probably just lead to more robocalls.

If you’ve already received a call that you think is fake, report it to the FTC.

If you gave your personal information to an imposter, it’s time to change any compromised passwords, account numbers or security questions. And if you’re concerned about identity theft, visit IdentityTheft.gov to learn how you can protect yourself.

For more information about the Equifax breach, visit Equifax’s website, www.equifaxsecurity2017.com or contact their call center at 866-447-7559.

Equifax - Cybersecurity Incident & Important Consumer Information

A Progress Update for Consumers

September 11, 2017

We are committed to keeping consumers updated on the steps we are taking to provide them with the support they need and address any issues they are facing in response to this incident. We recognize that some consumers continue to face challenges and in response we have made the following updates:

1) Adjusted our PIN Generation for Security Freezes
We understand and appreciate that consumers have questions about how a PIN is currently generated for a consumer initiating an Equifax security freeze solution. All consumers placing a security freeze will be provided a randomly generated PIN.

2) Call Center Support
When we recognized that Hurricane Irma could impact some of our call center wait times, we arranged to ramp up agents quickly to replace agents impacted by the storm and updated our website to make consumers aware of the situation.

3) Clarification Regarding Automatic Sign-Up to TrustedID Premier
We are not requesting consumers’ credit card information when they sign up for the free credit file monitoring and identity theft protection we are offering to all U.S. consumers. Consumers who sign up for TrustedID Premier will not be automatically enrolled or charged after the conclusion of the complimentary year of TrustedID Premier.

4) Obvious Link from Equifax.com
To make it easier for consumers to find the website dedicated to providing information about this incident, we have reconfigured our website, www.equifax.com, to feature the link more prominently.

5) Adjusted the TrustedID Premier and Clarified Equifax.com
We’ve added an FAQ to our website to confirm that enrolling in the free credit file monitoring and identity theft protection that we are offering as part of this cybersecurity incident does not waive any rights to take legal action. We removed that language from the Terms of Use on the website, www.equifaxsecurity2017.com. The Terms of Use on www.equifax.com do not apply to the TrustedID Premier product being offered to consumers as a result of the cybersecurity incident.

We are listening to issues consumers have experienced and their suggestions. These are helping to further inform our actions, and we are now sharing regular updates on this website. Thank you for your continued patience and feedback as we continue to improve this process.

 

Call Center Update

 A Progress Update for Consumers

September 8, 2017

We understand that some consumers are experiencing difficulties getting the answers and support they need through our website and call center. Ramping up the website and call center to handle the anticipated volume is ongoing and we are focused on making improvements as quickly as possible. We apologize for any inconvenience this process has created.

Thus far today, we’ve made the following adjustments:

1) You Can Determine Your Status Immediately
Some consumers who visited the website soon after its launch failed to receive confirmation clarifying whether or not they were potentially impacted. That issue is now resolved, and we encourage those consumers to revisit the site to receive a response that clarifies their status.

2) No Waiver Of Rights For This Cyber Security Incident
In response to consumer inquiries, we have made it clear that the arbitration clause and class action waiver included in the Equifax and TrustedID Premier terms of use does not apply to this cybersecurity incident.

3) Expanded Our Call Center
We have tripled our call center team to over 2000 agents and continue to add agents.

Our goal is to make this process as convenient and consistent as possible. We will continue to identify steps to improve this process.

And we will continue as well to listen to your comments and suggestions.

Link to Equifax Data Breach response:

Equifax data breach update 9/11/17

Stay Safe Online - National Cyber Security Alliance Responds to Equifax Data Breach,

NEWS

National Cyber Security Alliance Responds to Equifax Breach

Washington, D.C., Sept. 8, 2017 – Equifax announced a major data breach yesterday affecting some 143 million Americans’ personal information. According to the company, the data breach left Social Security numbers, driver’s license numbers and other sensitive information at risk sometime between mid-May and July of this summer.

 

“Major breaches like this one remind us that it is critical for internet users to remain continually diligent about practicing good cybersecurity habits,” said Michael Kaiser, executive director of the National Cyber Security Alliance (NCSA). “As our connected world grows and vast amounts of information is collected and stored, the scale of data breaches is likely to grow. Businesses and organizations that accumulate data must operate with a deep understanding of the value of that data to cybercriminals and the other risks to their customers, employees and networks. It is essential they employ a comprehensive approach to cybersecurity and be prepared to respond if a breach occurs.” 

 

Fortunately, Equifax is reporting no evidence of unauthorized access to core consumer or commercial credit reporting databases at this time. Nevertheless, NCSA urges all Equifax users to take action now to secure their accounts. Equifax is offering complimentary identity theft protection and credit file monitoring. Information can be found at equifaxsecurity2017.com/enroll.

 

Following any breach, everyone can better protect their accounts by following these steps to stay safer and more secure online, including:

• Lock down your login. Use strong authentication — more than a username and password to access accounts — to protect your most valuable accounts, including email, social media and financial.
• Keep clean machines: Prevent infections by updating critical software as soon as patches or new operating system versions are available. This includes mobile and other internet-connected devices.
• Monitor activity on your financial and credit card accounts. If appropriate, implement a fraud alert or credit freeze with one of the three credit bureaus (this is free and may be included if credit monitoring is provided post breach). For more information, visit the Federal Trade Commission website identitytheft.gov.
• When in doubt, throw it out. Scammers and others have been known to use data breaches and other incidents to send out emails and posts related to the incident to lure people into providing their information. Delete any suspicious emails or posts, and get information only from legitimate sources.

This data breach happens as the nation prepares for National Cyber Security Awareness Month, an effort co-founded and co-led by NCSA and the U.S. Department of Homeland Security to educate businesses and all digital citizens about staying safer and more secure online. More information is available at staysafeonline.org/ncsam.

Media Contact:
Jessica Beffa
Thatcher+Co.
720-413-4938ncsa@thatcherandco.com

For more information on the National Cyber Security  Alliance  check the link below:
National Cyber Security Alliance

Federal Trade Commission Alert: The Equifax Data Breach: What to Do

*9/14, Updates on the Equifax Data Breach are being posted daily on  CPAM's website blog.  Equifax has changed the language from their initial posting for consumers and removed the arbitration clause language. Share this information and continue to get the updates. CPAM


September 8, 2017

by Seena Gressin , Attorney, Division of Consumer & Business Education, FTC              

If you have a credit report, there’s a good chance that you’re one of the 143 million American consumers whose sensitive personal information was exposed in a data breach at Equifax, one of the nation’s three major credit reporting agencies.
Here are the facts, according to Equifax. The breach lasted from mid-May through July. The hackers accessed people’s names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. They also stole credit card numbers for about 209,000 people and dispute documents with personal identifying information for about 182,000 people. And they grabbed personal information of people in the UK and Canada too.

There are steps to take to help protect your information from being misused. Visit Equifax’s website, www.equifaxsecurity2017.com.

• Find out if your information was exposed. Click on the “Potential Impact” tab and enter your last name and the last six digits of your Social Security number. Your Social Security number is sensitive information, so make sure you’re on a secure computer and an encrypted network connection any time you enter it. The site will tell you if you’ve been affected by this breach.
• Whether or not your information was exposed, U.S. consumers can get a year of free credit monitoring and other services. The site will give you a date when you can come back to enroll. Write down the date and come back to the site and click “Enroll” on that date. You have until November 21, 2017 to enroll.
• You also can access frequently asked questions at the site.

Here are some other steps to take to help protect yourself after a data breach:

• Check your credit reports from Equifax, Experian, and TransUnion — for free — by visiting annualcreditreport.com. Accounts or activity that you don’t recognize could indicate identity theft. Visit IdentityTheft.gov to find out what to do.
• Consider placing a credit freeze on your files. A credit freeze makes it harder for someone to open a new account in your name. Keep in mind that a credit freeze won’t prevent a thief from making charges to your existing accounts.
• Monitor your existing credit card and bank accounts closely for charges you don’t recognize.
• If you decide against a credit freeze, consider placing a fraud alert on your files. A fraud alert warns creditors that you may be an identity theft victim and that they should verify that anyone seeking credit in your name really is you.

• File your taxes early — as soon as you have the tax information you need, before a scammer can. Tax identity theft happens when someone uses your Social Security number to get a tax refund or a job. Respond right away to letters from the IRS.

Visit Identitytheft.gov/databreach to learn more about protecting yourself after a data breach.

Video : What to do if you are a victim of a data breach ( click the link below for the video)

FTC - What to do if you are a victim of a data breach

Federal Trade Commission Alert: Wise giving in the wake of Hurricane Harvey

August 28, 2017

by  Colleen Tressler  ,Consumer Education Specialist, FTC              

It’s heartbreaking to see people lose their lives, homes, and businesses to the ongoing flooding in Texas. But it’s despicable when scammers exploit such tragedies to appeal to your sense of generosity.

If you’re looking for a way to give, the FTC urges you to be cautious of potential charity scams. Do some research to ensure that your donation will go to a reputable organization that will use the money as promised.

Consider these tips when asked to give:

• Donate to charities you know and trust with a proven track record with dealing with disasters.
• Be alert for charities that seem to have sprung up overnight in connection with current events. Check out the charity with the Better Business Bureau's (BBB) Wise Giving Alliance, Charity Navigator, Charity Watch, or GuideStar.
• Designate the disaster so you can ensure your funds are going to disaster relief, rather than a general fund.
• Never click on links or open attachments in e-mails unless you know who sent it. You could unknowingly install malware on your computer.
• Don’t assume that charity messages posted on social media are legitimate. Research the organization yourself.
• When texting to donate, confirm the number with the source before you donate. The charge will show up on your mobile phone bill, but donations are not immediate.
• Find out if the charity or fundraiser must be registered in your state by contacting the National Association of State Charity Officials. If they should be registered, but they're not, consider donating through another charity.

To learn more, go to Charity Scams. For tips to help you prepare for, deal with, and recover from a severe weather event, visit Dealing with Weather Emergencies.

 

34th Annual National Night Out, Tuesday August 1st, 2017

WHAT IS NATIONAL NIGHT OUT?

National Night Out is an annual community-building campaign that promotes police-community partnerships and neighborhood camaraderie to make our neighborhoods safer, more caring places to live. National Night Out enhances the relationship between neighbors and law enforcement while bringing back a true sense of community. Furthermore, it provides a great opportunity to bring police and neighbors together under positive circumstances.

Millions of neighbors take part in National Night Out across thousands of communities from all fifty states, U.S. territories, Canadian cities, and military bases worldwide on the first Tuesday in August (Texas celebrates on the first Tuesday in October). Neighborhoods host block parties, festivals, parades, cookouts and various other community events with safety demonstrations, seminars, youth events, visits from emergency personnel, exhibits and much, much more.

*If your community isn't hosting an event on Aug. 1st, '17, Check with your local police, sheriff department about hosting an event, crime prevention promotion and participation can be on any night of the week!

Be safe , participate as the eyes and ears for your community and report crimes.

For more information on the National Association of Towns Watch and the sponsors, click on the link below.

National Assoc. of Town Watch, NNO

New FTC website helps small businesses

By: Tom Pahl, Acting Director, Bureau of Consumer Protection | May 9, 2017 11:24AM

Tom Pahl, Acting Director, Bureau of Consumer Protection
May 9, 2017

Tags:

• Bureau of Consumer Protection
• Consumer Protection
• Privacy and Security
• Data Security

When scammers and hackers attack small businesses, it hurts not only the businesses’ reputations and bottom line, but also the integrity of the marketplace. Today, FTC Acting Chairman Maureen Ohlhausen announced a new FTC website, FTC.gov/SmallBusiness, to help business owners avoid scams, protect their computers and networks, and keep their customers’ and employees’ data safe. If you own a business you’ll want to check it out.
At FTC.gov/SmallBusiness you’ll find:

• Tips on how to avoid scams that target businesses
• Advice to help you protect your customers’ and employees’ sensitive data
• Videos that show what you can do to secure your business’s networks

You can also find the FTC’s newest article Small Business Computer Security Basics, which has tips to help companies protect their files and devices, train employees to think twice before sharing account information, and keep their wireless network protected. The article also tells you what to do if a hacker gets into your computers or networks.
So go to FTC.gov/SmallBusiness, bookmark it, and visit it often. And subscribe to the FTC’s Business Blog to stay connected.


FTC- Website for Small businesses

 

Google Docs Scam - Emails being sent out from individuals in your contact list, "do not open the link"

5/4/17 : Alert - Google Docs Scam: See the information posted below from Google Twitter feed on how they are addressing the issue. Do not click on the links in emails from your contact list requesting to open.

RColeman, CPAM Rep.

Stop, Think, Connect -#lockdownURlogin

Friends Newsletter April 2017 Decluttering Your Digital Life Start fresh this spring – online and offline. In addition to the traditional tasks on your spring cleaning list like tidying the closet and washing the windows, take time to create a “digital spring cleaning” list as well. What exactly does a “digital spring cleaning” entail? A digital spring cleaning means taking control of your digital life and the information that you share online. Similar to regular cleaning or tidying one’s home, it might seem like a daunting task at first. In reality, just a few simple steps can make a big difference in helping protect yourself online. The Department of Homeland Security recommends that you incorporate these cyber tips into your spring cleaning routine this year. Clean your machine. Update the security software on all of your devices that connect to the Internet.  Keeping the software on your devices up to date will prevent attackers from taking advantage of known vulnerabilities. Also review the applications you have downloaded. If you no longer use a particular app, delete it. It’ll not only free up storage space on your device, but it will also remove permissions that app has to potentially gather your information.  Turn on multi-factor authentication. Enable stronger authentication on your online banking and email accounts. Turning on a two-factor authentication, such as a PIN sent to your mobile device, helps verify a user has authorized access to an account. For more information about authentication, visit the Lock Down Your Login Campaign at www.lockdownyourlogin.com. Decluttering Your Digital Life How Much Do You Know About the Basics of Cybersecurity? BGCA Conference Recap Cyber Quiz Take Your Child to Work Day Ready-to-Use Social Media Posts Office of Personnel Management’s (OPM) CyberCareers.gov  Cybercareers.gov is a new resource from OPM that helps hiring managers by providing recruiting and compensation resources, recruiting tools that help automate cyber position descriptions, and information on employing students as well as veterans. The website is also a great tool for individuals looking to find a job as a cybersecurity professional. Find out more at www.CyberCareers.gov.

Tidy your online reputation. Review your social media accounts and delete old photos or posts that may no longer represent who you are. As you go through your online posts, think about how they might influence others’ opinions of you. Also take the time to review the privacy settings on your online accounts. Take advantage of the privacy settings offered by major online apps and websites by limiting the amount of people who can see the information you share. Visit and download the National Cyber Security Alliance’s “Digital Spring Cleaning Checklist” for more steps to clean up your online life. For more tips on how to stay safe online, please visit the Department of Homeland Security’s Stop.Think.Connect. Campaign at www.dhs.gov/stopthinkconnect. Stoo,Think,Connect - Declutter your digital life

Business Watch Tip, "Stop Think Connect" - Ransomeware Facts & Tips

FTC: Scam - “I have an emergency and need money”

Federal Trade Commission:   “I have an emergency and need money”

April 13, 2017, by Jennifer Leach               

Assistant Director, Division of Consumer and Business Education

If you’ve ever gotten one of those calls, you know how alarming they can be. And that’s exactly what the scammers count on. They want you to act before you think – and acting always includes sending them money: by wiring it or by getting a prepaid card or gift card, and giving them the numbers on the card. Either way, your money’s gone.

Here’s the story of Pablo Colón from Bridgeport, Connecticut, and his family. When both his sister and his father got a call about a family “emergency,” Pablo spotted the scam. And, luckily for the good people of Bridgeport, Pablo’s family owns a radio station – so he put the story on the air and warned his community.

Talking about a scam is important – even if only one person is listening, instead of the thousands who heard Pablo’s story. So watch this video. And then pass it on. Today, tell someone about this scam, about Pablo’s story, about why we should all talk about the about the scams we see.

And, whenever you spot a scam, please tell the FTC.

FTC Video message

IRS, States and Tax Industry Renew Alert about Form W-2 Scam Targeting Payroll, Human Resource Departments

IR-2017-10, Jan. 25, 2017                                                                    Español


WASHINGTON – The Internal Revenue Service, state tax agencies and the tax industry today renewed their warning about an email scam that uses a corporate officer’s name to request employee Forms W-2 from company payroll or human resources departments.
This week, the IRS already has received new notifications that the email scam is making its way across the nation for a second time. The IRS urges company payroll officials to double check any executive-level or unusual requests for lists of Forms W-2 or Social Security number.
The W-2 scam first appeared last year. Cybercriminals tricked payroll and human resource officials into disclosing employee names, SSNs and income information. The thieves then attempted to file fraudulent tax returns for tax refunds.
This phishing variation is known as a “spoofing” e-mail. It will contain, for example, the actual name of the company chief executive officer. In this variation, the “CEO” sends an email to a company payroll office or human resource employee and requests a list of employees and information including SSNs.

The following are some of the details that may be contained in the emails:

• Kindly send me the individual 2016 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.
• Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary).
• I want you to send me the list of W-2 copy of employees wage and tax statement for 2016, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me asap.

Working together in the Security Summit, the IRS, states and tax industry have made progress in their fight against tax-related identity theft, cybercriminals are using more sophisticated tactics to try to steal even more data that will allow them to impersonate taxpayers.

IRS News Releases 2017

FTC Hosts Tax Identity Theft Awareness Week Jan. 30th - Feb. 3rd, 2017

 

1/25/17, Webinars, Social Media Events focus on helping consumers reduce their risk.

The Federal Trade Commission will mark Tax Identity Theft Week, January 30 - February 3, with a series of events to alert consumers and businesses to ways they can minimize their risk of tax identity theft, and recover if it happens.

What is tax identity theft? It’s when a scammer files a fraudulent tax return using someone else’s Social Security number (SSN) and steals the victim’s refund. Employment-related tax identity theft occurs when someone uses another person’s SSN to earn wages that are then reported as the victim’s income.

This year’s Tax Identity Theft Awareness Week will feature special events for consumers, tax professionals, small businesses and veterans. The FTC will join with the IRS, the Department of Veterans Affairs, the AARP Fraud Watch Network and others to discuss tax identity theft, IRS imposter scams, cybersecurity and identity theft recovery. Learn more – and join the discussion – at the following events (all times listed are Eastern):

Jan. 30, 2 p.m. The FTC, IRS, and the National Association of Tax Professionals offer a webinar for tax professionals – Tax Identity Theft: Tax Professionals on the Ramparts. Topics include scams targeting tax professionals, cybersecurity, protecting client data, and how tax professionals can help identity theft victims.

Jan. 31, 3 p.m. The FTC and the Identity Theft Resource Center invite consumers to join a Twitter chat focused on tax identity theft, how to protect yourself, and what to do if you become a victim.

Feb. 1, 11 a.m. The FTC and the Department of Veterans Affairs co-host a Twitter chat about tax identity theft for service members, veterans, and their families. Learn to minimize your risk and how to recover if tax identity theft happens to you.

Feb. 1, 1 p.m. The FTC, Department of Veterans Affairs, and the Treasury Inspector General for Tax Administration discuss tax identity theft, IRS imposter scams, how to lower your risk, and what to do if you become a victim, during a webinar for veterans, their families, and those who serve them.

Feb. 1, 4 p.m. The FTC and IRS offer a free webinar for small businesses: Protecting Sensitive Business and Customer Information. Learn about tax identity theft, imposter scams targeting businesses, data breach avoidance and response, and free resources to help you protect your business, employees and customers.

Feb. 2, 2 p.m. The FTC, AARP Fraud Watch Network, AARP Foundation’s Tax-Aide program, and the Treasury Inspector General for Tax Administration co-host a webinar about how tax identity theft and IRS imposter scams occur, and recovery steps for victims.

In addition to these events, the FTC has created a wide array of materials to help educate people about this growing issue, all of which can be found at ftc.gov/taxidtheft. The materials are available in English and Spanish, and feature ways that people can share information about tax identity theft with their friends and families.

The Federal Trade Commission works to promote competition, and protect and educate consumers. You can learn more about consumer topics and file a consumer complaint online or by calling 1-877-FTC-HELP (382-4357). 

Like the FTC on Facebook (link is external), follow us on Twitter (link is external), read our blogs and subscribe to press releases for the latest FTC news and resources.

 

 

 

FTC - "Pass It On" commuity outreach program / Video

"Pass it on in your community"

January 12, 2017 by  Carol Kando-Pineda               

Counsel, Consumer & Business Education, FTC

Pass it On is the FTC’s consumer education campaign designed to encourage older adults to talk to their friends, neighbors, and relatives about scams. Because we’ve learned that sharing what you know can help protect someone who you know from a scam.
Now, we’ve got a new video that highlights how some local organizations are getting in on the act and using Pass it On materials in their communities – all in different ways. For instance, a Massachusetts agency distributes fraud prevention materials at community centers serving older consumers. A Connecticut publisher and state consumer protection office use the Pass it On tips in a community newspaper published in several languages. And a group of older actors performs skits for their peers in Southern California, giving their audience a heads-up on the latest frauds and rip-offs.

What can you do? Well, you probably know someone who could use a few tips on spotting scams. The next time you’re at your local library, church, or temple, or even visiting a relative in a nursing home, take a stack of Pass it On materials with you. You can order them online for free, in bulk, in English and Spanish.

Do you have other ideas on sharing tips in your community? Let us know your take on passing it on.

 Click the link below to see the FTC video.

FTC - Pass it on , Video

 

FTC - Understanding Mobile Apps

If you have a smart phone or other mobile device, you probably use apps – to play games, get turn-by-turn directions, access news, books, weather, and more. Easy to download and often free, mobile apps can be so much fun and so convenient that you might download them without thinking about some key considerations: how they’re paid for, what information they may gather from your device, or who gets that information.

• Mobile App Basics
• Questions About Your Privacy
• Questions About Advertising
• Malware and Security Concerns
• Mobile App User Reviews
• Kids and Mobile Apps

Mobile App Basics

What’s a mobile app?

A mobile app is a software program you can download and access directly using your phone or another mobile device, like a tablet or music player.

What do I need to download and use an app?

You need a smart phone or another mobile device with internet access. Not all apps work on all mobile devices. Once you buy a device, you’re committed to using the operating system and the type of apps that go with it. The Android, Apple, Microsoft and BlackBerry mobile operating systems have app stores online where you can look for, download, and install apps. Some online retailers also offer app stores. You’ll have to use an app store that works with your device’s operating system. To set up an account, you may have to provide a credit card number, especially if you’re going to download an app that isn’t free.

Data Plans and Wi-Fi: Two ways to access the internet from your phone
You can access the internet using a data plan tied to your phone service, or through a Wi-Fi hotspot. Phone companies generally charge a monthly fee for a data plan that can connect you to the internet.
Wi-Fi connections usually are faster, but you have to be in range of a hotspot to use one. Most public Wi-Fi hotspots – like those in coffee shops, airports, and hotels – don't encrypt the information you send over the internet and are not secure. Get tips for using public Wi-Fi.
To set up a home wireless network, you'll need to pay for internet access and a wireless router, and you’ll want to take steps to secure the network.

Why are some apps free?

Some apps are distributed for free through app stores; the developers make money in a few ways:

• Some sell advertising space within the app. The app developers can earn money from the ads, so they distribute the app for free to reach as many users as possible.
• Some apps offer their basic versions for free. Their developers hope you’ll like the app enough to upgrade to a paid version with more features.
• Some apps allow you to buy more features within the app itself. Usually, you are billed for these in-app purchases through the app store. Many devices have settings that allow you to block in-app purchases.
• Some apps are offered free to interest you in a company’s other products. These apps are a form of advertising. 

Questions About Your Privacy

What types of data can apps access?

When you sign up with an app store or download individual apps, you may be asked for permission to let them access information on your device. Some apps may be able to access:

• your phone and email contacts
• call logs
• internet data
• calendar data
• data about the device’s location
• the device’s unique IDs
• information about how you use the app itself

Some apps access only the data they need to function; others access data that’s not related to the purpose of the app.
If you’re providing information when you’re using the device, someone may be collecting it – whether it’s the app developer, the app store, an advertiser, or an ad network. And if they’re collecting your data, they may share it with other companies.

How can I tell what information an app will access or share?

It’s not always easy to know what data a specific app will access, or how it will be used. Before you download an app, consider what you know about who created it and what it does. The app stores may include information about the company that developed the app, if the developer provides it. If the developer doesn’t provide contact information – like a website or an email address – the app may be less than trustworthy.
If you’re using an Android operating system, you will have an opportunity to read the “permissions” just before you install an app. Read them. It’s useful information that tells you what information the app will access on your device. Ask yourself whether the permissions make sense given the purpose of the app; for example, there’s no reason for an e-book or “wallpaper” app to read your text messages.

Why do some apps collect location data?

Some apps use specific location data to give you maps, coupons for nearby stores, or information about who you might know nearby. Some provide location data to ad networks, which may combine it with other information in their databases to target ads based on your interests and your location.
Once an app has your permission to access your location data, it can do so until you change the settings on your phone. If you don’t want to share your location with advertising networks, you can turn off location services in your phone’s settings. But if you do that, apps won’t be able to give you information based on your location unless you enter it yourself.
Your phone uses general data about its location so your phone carrier can efficiently route calls. Even if you turn off location services in your phone’s settings, it may not be possible to completely stop it from broadcasting your location data.

Questions About Advertising

Why does the app I downloaded have ads in it? 

Developers want to provide their apps as inexpensively as possible so lots of people will use them. If they sell advertising space in the app, they can offer the app for a lower cost than if it didn’t have ads. Some developers sell space in their apps to ad networks that, in turn, sell the space to advertisers.

Why do I see the ads I do?

Advertisers believe you’re more likely to click on an ad targeted to your specific interests. So ad networks gather the information apps collect, including your location data, and may combine it with the kind of information you provide when you register for a service or buy something online. The combined information allows the mobile ad network to send you targeted ads – ads that may be relevant to someone with your preferences and in your location.

Malware and Security Concerns

Should I update my apps?

Your phone may indicate when updates are available for your apps. It’s a good idea to update the apps you’ve installed on your device and the device’s operating system when new versions are available. Updates often have security patches that protect your information and your device from the latest malware.

Could an app infect my phone with malware?

Some hackers have created apps that can infect phones and mobile devices with malware. If your phone sends email or text messages that you didn’t write, or installs apps that you didn’t download, you could be looking at signs of malware.
If you think you have malware on your device, you have a few options: you can contact customer support for the company that made your device; you can contact your mobile phone carrier for help; or you can install a security app to scan and remove apps if it detects malware. Security apps for phones are relatively new; there are only a few on the market, including some with free versions.

Mobile App User Reviews

Can I trust all the user reviews I read about an app?

Most app stores include user reviews that can help you decide whether to download. But some app developers and their marketers have posed as consumers to post positive comments about their own products. In fact, the Federal Trade Commission recently sued a company for posting fake comments about the apps it was paid to promote.

Keeping Up With Kids'
Apps Infographic

Kids and Mobile Apps

What should I know before I download an app for my kids?

In a recent survey of mobile apps for kids, FTC staff found that kids’ apps might:

• collect and share personal information
• let your kids spend real money — even if the app is free
• include ads
• link to social media

What’s more, the apps might not tell you they’re doing it.
To learn more about an app before you download it, look at screen shots, read the description, content rating and any user reviews, and do some research on the developer. You also can look up outside reviews from sources you respect.

Are there ways to restrict how my kids use apps?

Before you pass the phone or tablet to your kids,  take a look at your settings. You may be able to restrict content to what’s right for your kid’s age, set a password so apps can’t be downloaded without it, and set a password so your kids can’t buy stuff without it. You also can turn off Wi-Fi and data services or put your phone on airplane mode so it can’t connect to the internet.
The best way to keep up with kids’ apps is try them out yourself and talk to your kids about your rules for using apps.