Slashdot Mirror
Identity Thieves Drain Unemployment Benefit Funds
Makarand writes "According to a News.com.com article, the
defrauding of state government
unemployment benefit programs is the most underpublicized identity theft crime
and the states are not doing much about it. Identity thieves are using
stolen social security numbers to file false unemployment claims and collecting
benefits because the states have no systems in place to deter fraud. In fact,
it is easier to convert stolen identity data into money by filing
false unemployment claims than going after the credit card companies." From the article: "File a false unemployment claim and you can receive $400 per week for 26 weeks. Do it for 100 Social Security numbers and you've made a quick $1.04 million. It's tough to make crime pay much better than that."
From TFA:
With all the theft of personal information in the news lately, and considering that a large percentage of this stolen information was Social Security numbers, it might be easier to compile a national database of Social Security numbers that haven't been stolen. ^_^
Seriously, though, this is just yet another good argument to ditch the Social Security number system entirely...it's clearly not working. Essentially, with just one number, you have a system where the SSN is both the public and the private part of the ID, and as any security professional can tell you, that simply is not a workable model.
____
~ |rip/\/\aster /\/\onkey
To which extent do they actually check that the person is in fact unemployed? Certainly, a person-to-person talk should take place before they hand over money just like that? Perhaps this is a bigger problem in their system as identity theft appears to be one of many ways to exploit that system.
see a Text Widget
Life's not that simple. For every person ripping off the unemployment system there are 9 others who actually need it. Well, that is unless this new type the article talks about takes off...Maybe people will actually start to enforce proper management of the system?
"A truly wise man realizes he knows nothing."
When the author referred to the victims of this crime as being the government agencies and not the taxpayers, I stopped reading.
What?
No doubt lots of fraud going on but simply having the SSAN isn't all you need. You would also need at least some employment history data.
Instead of another central database which conveniently aggregates all your personal information in one place, ripe for the hacking, what we need is a law passed that requires companies to remove the SSAN from their databases. All of them. The company can replace it with a unique identifier if they want but there is no reason for them to have the SSAN in the first place. Yes, I know it's the one number everyone remembers when someone is trying to identify you, but that is a poor reason for every database on the planet to contain such an important identifier. Let's develop a better way to authenticate someone, why don't we?
The NSA: The only part of the US government that actually listens.
File a false unemployment claim and you can receive $400 per week for 26 weeks. Do it for 100 Social Security numbers and you've made a quick $1.04 million.
Quick? 26 weeks? Plus the start up overhead of several weeks?
Infuriate left and right
It seems like it would be trivial to scan a database for recurring addresses -- sure, there might be four people in a two-bedroom apartment collecting unemployment. But fifty? A hundred? Send an investigator out to talk to anyone living at an address with more than (e.g.) six registered names. If nothing else, he can interview all six of the people and see if there's a systemic problem keeping them from getting work in an area.
Two things bother me about the article, however:
1) The person calling our attention to this problem is a software vendor. He runs a payroll software firm, and probably has some financial interest in fraud-detection software. If nothing else, his byline contains an advertisement for his company.
2) He doesn't really present any evidence for the problem other than hearsay from an official in Washington State. Neither of them presents any real numbers.
I think it's wise to prevent this problem, and shore up any weakness to this exploit that may exist, but it's also important to be sure that a problem exists before demanding that the state take action.
So, in the very recent past, they WERE willing to accept a job and their skills WERE useful.Again, they were considered "useful" in the very recent past.
By your "logic", there would never be any unemployment because the only people who would be counted as "unemployed" would have skills currently needed by business and a willingness to work for those businesses. So why would they not be hired by those businesses?
And before you talk about demanding too much money, the businesses would only have to offer them more than they'd make on unemployment.
Which doesn't leave much rational for "unemployment".
Thats exactly how Ohio works too.
I would imagine that most states are the same way, and that the article is full of FUD.
To clear my less-than-perfect post a bit:
Stolen passwords or cards can be retired, while compromised biometric data will haunt you forever.