logo

U.S. PIRG Consumer Blog

« Phishing for Job Seekers | Main | Worthwhile new online policy reform journal »

February 11, 2007

Identity theft--worse than ever? Synthetic identity theft?

Over at USA Today, Jon Swartz's recent story on the FTC's fraud complaint data dump and the industry-funded Javelin study claiming that identity theft is down (my blog) includes this zinger:

Meanwhile, a forthcoming Gartner report is expected to show a significant hike in ID theft. It found 14 million Americans were victims of ID theft in 2006, compared with 10 million cited by FTC in 2003.
And that's the opposite of Javelin's oh-too-rosy, "it's all good" results that seem more tailored to its industry funders' warped view of reality than to the facts. Over at Consumer Affairs, Martin Bosworth explains that the growing problem of synthetic identity theft may be what the banks don't want to talk about:
Synthetic identity theft occurs when thieves use pieces of data from different victims to create new identities, such as one person's name and another person's Social Security number, rather than stealing someone's information whole cloth and using it for fraud.
As privacy expert Chris Hoofnagle points out on his blog:

Since this synthetic identity is based on some real information, and sometimes upon artfully created credit histories, it can be used to apply for new credit accounts. This harms consumers because it creates subfiles at the CRAs, and the real owner of the SSN is sometimes targeted by collections efforts.

According to Mike Cook of ID Analytics (PDF), a company that specializes in reduction of fraud risk, synthetic fraud "is a larger problem than identity theft and is growing at a faster rate." Because "the combination of the name, address and Social Security number do not correspond to one particular consumer, the fraud is unreported and often goes undetect...financial losses stemming from synthetic identity fraud are difficult for organizations to label as fraud when the approved account becomes delinquent and eventually charges-off as a loss."

So, in synthetic identity theft, the bad guy doesn't merely create a new account in your name only, the bad guy establishes a new synthetic victim, with multiple personalities is created. This means it takes longer for you to find out you've been victimized, making it harder for you to clear your name. The solution is complex, but holding companies to higher standards for granting credit and protecting our information are certainly significant parts of the answer.

Posted by Ed Mierzwinski at February 11, 2007 10:30 AM


Comments

Post a comment




Remember Me?



218 D. Street, SE Washington, DC 20003
Phone (202) 546-9707

E-mail: