Slashdot Mirror


The Ultimate Identity Theft Prevention Plan

Ben Rothke writes "It's a fallacy that our elected officials take forever to get things done. Two examples where Washington acted with speed are with the National Do Not Call Registry and the Sarbanes-Oxley Act. The National Do Not Call Registry was slated to take effect on October 1, 2003, but various marketing associations challenged its legitimacy and even if the FTC had the jurisdiction to enforce it. Notwithstanding, President Bush speedily signed the bill authorizing the no-call list to go into effect in September 2003 and the United State Court of Appeals upheld the constitutionality of the registry in February 2004. On June 25, 2002, WorldCom revealed it had overstated its earnings by more than $7 billion by improperly accounting for its operating costs. Senator Paul Sarbanes then introduced Senate Bill 2673 that same day where it passed 97-0 less than three weeks later. The House and Senate formed a Conference Committee to reconcile the differences between Sarbanes's bill and Representative Michael Oxley's bill (HR 3763) and on July 24, 2002, the Sarbanes-Oxley Act of 2002 was passed." Read on for the rest of Ben's review. Stealing Your Life: The Ultimate Identity Theft Prevention Plan author Frank W. Abagnale pages 256 publisher Broadway Books rating 8 reviewer Ben Rothke ISBN 0767925866 summary exposes the tactics of today's identity theft criminals and offers strategies to thwart them

The bottom line is that when politicians really want votes and PR, they can act swiftly. The frustration is exacerbated when politicians choose to do nothing when it comes to identity theft. In Stealing Your Life: The Ultimate Identity Theft Prevention Plan, Frank Abagnale details the frustration that consumers face (and will face in the years to come) when their identities are stolen, the ease at which the criminals carry out such crimes, and the months and often years of effort required to regain ones identity.

Abagnale's tenure on the criminal side long ago gives him the advantage that he knows firsthand how criminals think and such an outlook is pervasive throughout the book. Looking at the current state of identity protection, he states that he is personally horrified at how easy identity theft is. In fact, he calls it "a crook's dream come true". The book details incident after incident where criminals and criminal gangs obtained credit in someone else's name with ease.

What makes this worse is that the book shows how we haven't even scratched the surface of the identity theft problem. Everyone, including the FTC agrees that current identity theft figures are quite low, due to the fact that so many cases go unreported or undetected.

The book notes that lenders often miscategorize a good deal of identity theft because it looks like delinquent bills, as opposed to a crime. Only later does the victim realize what has been going on and complains, at which time it becomes apparent that fraud was involved. But by that time, the money has been written off as a credit loss and then appears as negative information on the victim's credit report.

Like many other books on the subject of identity theft, Stealing Your Life: The Ultimate Identity Theft Prevention Plan covers the main issues, and makes numerous suggestions on how to control your identity. What is interesting about the book is that Abagnale also focuses on why identity theft is so popular for today's criminals. One of the main reasons it that the person committing the crime has the odds significantly stacked in their favor. The book quotes a Gartner study that found that identity thieves have roughly a 1 in 700 chance of getting caught by law enforcement, which is a figure any criminal would jump at.

The books 13 chapters are written in an easy to read and compelling style. The early chapters detail the prime causes of what makes identity theft such a problem and astutely notes that a large part of the problem is that financial services companies are conducting business today by doling out credit like candy and do almost nothing to ascertain that people really are who they say they are when applying for credit. In addition, issuers of credit in their haste to rack up more business frequently accept a social security number from an applicant at face value, without demanding proof. The book lists many examples of where children and dead people have been given credit.

In chapter 6, the book lists 20 steps one can take in the hope of preventing identify theft. The author notes that since the punishment for identity theft, and the recovery of stolen goods from identity theft are so low, the only viable source of action is prevention by the individual. All 20 steps are fundamental, from protecting your social security number and examining your financial statements, to using a shredder and more.

Chapter 8 lists one of the more important points of the book, in which Abagnale writes that all credit and personal information should be opt-in based, as opposed to the prevalent opt-out requirement. Such an approach is what one would hope Congress would mandate, but does not have the tenacity to do. The problem is that if a consumer does not opt-out, they are giving the financial institution permission to share their personal information with the hundreds and often thousands of affiliates they share data with.

Companies obviously prefer opt-out, which shifts the burden to the consumer to take action to keep their information from being shared. With opt-in, the burden shifts and the financial services company has to prove that consumers granted their consent to have their personal information shared. National opt-in requirements would significant stem the flow of personal information, which is in part why identity theft is so easy to carry out.

Aside from a glaring error in chapter 12 where Abagnale erroneously writes that true authentication is impossible on the Internet and occasionally hawking companies he has financial dealings with, Stealing Your Life: The Ultimate Identity Theft Prevention Plan is an interesting and entertaining book on a subject of the fasting growing crime in the USA.

The book details what happens when an apathetic Congress and financial services industry do almost nothing to protect their constituents, and the thieves who have never had it easier. These identity thieves are able to acquire gigabytes of personal information without ever having to leave their workstations. When you factor in that the odds are in their favor of never being prosecuted, it leaves nearly every individual at risk for identity theft.

With Congress dropping the ball and doing nothing, Abagnale shows that it is up to each individual to take responsibility for protecting their own personal information. Stealing Your Life: The Ultimate Identity Theft Prevention Plan is indeed a great place to start such an approach.

Ben Rothke is a security consultant with BT INS and the author of Computer Security: 20 Things Every Employee Should Know

You can purchase Stealing Your Life: The Ultimate Identity Theft Prevention Plan from amazon.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

4 of 187 comments (clear)

  1. Opt-in is essential by fizzbin · · Score: 5, Insightful

    It is absolutely correct that in order to combat identity theft effectively, information sharing must be opt-in. In fact, even to report your information to a credit reporting agency, you should have to explicitly authorize such reporting.

    Of course, the credit bureaus and other data brokers who make money off your data would scream and holler. They would decry how "credit reporting is a benefit -- it lets you get credit easily and cheaply." Funny thing though -- you cannot refuse this "benefit".

    --
    Fizz
  2. Terrible Examples by loteck · · Score: 5, Insightful
    Sarb-Ox was indeed put together and passed very quickly, and it shows. The cost to implement compliance is so overwhelmingly high that small and midsize businesses simply cannot afford to do it, and Congress has recognized this and delayed enforcement. It seems all but sure at this point that Sox will never take effect on small and midsize public companies in its current form.

    The Do Not Call registry was timely? People have been complaining about unwanted phone solicitations for years and years. That is actually an excellent example of Congress showing that it is incapable of moving quickly enough.

    And, finally, lets not forget about the USA PATRIOT act. That passed in 1 night in response to 9/11, and I'm sure my fellow Slashdotters will agree that it was brimming with righteousness and justice. Thank christ Congress acted quickly on that one.

    No, I'm afraid kneejerk reactions by Congress are not the answer you seek. The elephant in the room that no one in Congress wants to recognize is that identify theft is so easy now only because we have tied ourselves to our Social Security numbers, something that was never supposed to happen and something that fundamentally undermines the idea of individual privacy and freedom. Do not look to the people who created this problem in the first place to fix it without continuing to divest you of your personal liberties.

  3. Frank Abagnale by necro81 · · Score: 5, Informative

    If the name of the author is familiar, it is because Frank Abagnale's exploits were popularized in the 2002 movie Catch Me If You Can. Leo DiCaprio played the Abagnale, with Tom Hanks as Carl Hanratty, the FBI agent tracking him down.

    Given Abagnale's extensive knowledge and experience in check (and other) fraud, he speaks with some authority on the sad state of how easy identity theft can be.

  4. Glaring error? by Frank+Abagnale · · Score: 5, Funny

    Aside from a glaring error in chapter 12 where Abagnale erroneously writes that true authentication is impossible on the Internet and occasionally hawking companies he has financial dealings with

    Look, man, I was really high when I wrote that chapter; you've got to give me a break.

    --
    This post brought to you by OnlyIAmMe(TM) ID Theft Prevention, Inc.
    Secure your identity today! Plans start at $1,995 for a limited time.