Document Security

How to be a paper tiger

Although the focus of this website is on cyber security, protecting your privacy is not only a concern online. In fact, recent trends indicate that many causes of identity thefts and data loss are “low-tech,” with human error still a more common culprit than hacking or computer flaws.

You should be just as cautious in the real world as you are online. Remember always to consider “Who’s Watching?”

What you need to know

Identity thieves use various means to steal your personal information on paper. Some common techniques they employ include:

• Dumpster Diving - Many people never consider that sensitive items they throw in the trash—files, letters, memos, photographs, IDs, passwords, checks, account statements, credit card offers, and more—can be recovered. Identity thieves rummage through garbage and recycling bins looking for bills or other paper with your personal information on it.
• Skimming - Scammers steal credit and debit card numbers by using a special storage device when processing your card. Skimming isn’t employed online; in cyberspace, identity thieves get your private information in other ways. But in the real world, the middle man—such as the waiter or cashier who processes your credit card payment—gets an opportunity to skim your card before handing it back to you. That’s why online shopping is technically no less safe than shopping in a store or by mail. In fact, as long as you are dealing with a reputable company, online transactions are actually far more secure than face-to-face transactions, since online purchasing eliminates that opportunity to skim.
• Address Changes - ID thieves fraudulently divert your billing statements to another location by completing a “change of address” form. That’s why watching your mailbox is just as important as watching your trash.
• Old-Fashioned Stealing - Criminals steal wallets and purses, or your mail—including bank and credit card statements, pre-approved credit offers, and new checks. Or, they steal personnel records from their employers, or bribe employees who have access.

How to detect suspicious activity

Routinely monitor your financial accounts and billing statements. Be alert to signs that require immediate attention:

• Bills or new checks that do not arrive as expected
• Unexpected credit cards, account statements, or charges to your accounts
• Denials of credit for no apparent reason
• Calls or letters regarding purchases you did not make

Combat fraud by checking your bank and credit card statements each month, and your credit report each year. Stay on the lookout for unauthorized charges. Find out what to look for in your monthly statements and how to get your free annual credit report.

Tips to protect your private info on paper

• Be careful what you throw away. What’s trash to you is treasure to an identity thief, so think twice before you discard.
  • Burn, shred, or tear up any sensitive documents before you throw them in the trash or the recycle bin. Sensitive documents include charge receipts, insurance forms, medical bills, physician statements, bank account statements, cancelled or unused checks, cash advance checks, expired charge cards, and those pesky credit offers you get in the mail.
• Invest in a good paper shredder. While we’re on the subject, shredding is a lot easier than tearing or burning your private documents. And it’s much safer than simply throwing a document, password, unused check, or expired credit card in the trash.
  • The most effective and foolproof shredders are the heavy duty “cross-cut” models, but even the basic $15–$20 strip-cut model is better than nothing. They are available at most office supply stores, and many can destroy plastic as well as paper.
  • Use your shredder to destroy unwanted credit card offers and expired charge cards, as well as anything else that has your personal information on it—including your Social Security number, birthdate, any passwords or PINs, your bank account number, or other financial information.
• Get rid of your paper trail. Make things easier on yourself by cutting back on unneeded paper. You’ll have a lot less to shred if less of your private information is on paper in the first place. Consider trying some of the techniques listed below. You’ll save some trees and protect your privacy!
  • Switch to online banking. You can choose not to receive your monthly bank and credit card statements in paper form in the mail. You should definitely still review your statements each month to check for unexpected or fraudulent charges. But if you are willing to do this regularly online, you’ll save yourself from needing to shred a lot of paper each month.
  • Opt out of receiving pre-approved credit offers in the mail. From an identity theft standpoint, they are ticking time bombs. Just call 1-888-5-OPTOUT (1-888-567-8688) to request such offers be stopped. Note that you will be asked to provide your Social Security number when you call.
  • If you don’t use convenience checks, ask your financial institution to stop sending them to you.
• Protect your mail. Many people don’t realize that the mailbox is a prime place for identity thieves.
  • Think before you put up the red flag. If you put it up so the mail carrier sees your outgoing mail, everyone else can see it too. It’s like an advertisement for an ID thief. It’s much safer to deposit your outgoing mail in post office collection boxes or at your local post office, rather than in your unsecured mailbox—especially if your mail contains checks and personal information.
  • Promptly remove mail from your personal mailbox. If you’re planning to be away from home and can’t pick up your mail, call the U.S. Postal Service at 1-800-275-8777 or visit www.usps.com to request a vacation hold. The Postal Service will hold your mail at your local post office until you can pick it up or are home to receive it. Don’t tell the world that you’re not home and invite criminals to peek at your mail.
  • Be particularly cautious with checks. When ordering new ones, pick them up from your bank instead of having them mailed to your home mailbox.
• Protect your Social Security number. It’s often used as a customer ID number, but resist such use whenever you can.
  • Don’t carry your Social Security card. Leave it in a secure place.
  • Give out your Social Security number only when absolutely necessary. Always ask if you can use other types of identifiers. Many companies and organizations will comply if you ask them. For example, if your state uses your Social Security Number as your driver’s license number, ask to substitute another number. Ask your insurance company to do the same if they use your SSN as your policy number. Most will accommodate your request if you ask.
• Protect your other personal information and valuables, too. It may go without saying, but guard your picture ID, credit and debit cards, contact information, and birthdate.
  • Carry only the identification information and the credit and debit cards that you’ll actually need when you go out.
  • Be cautious when responding to promotions, giveaways, and sweepstakes. Identity thieves may create phony promotional offers or steal your valid entry form to get your personal information.
  • Keep your purse or wallet in a safe place at work. Do the same with copies of administrative and medical forms that have your sensitive personal information.
  • Keep your personal information in a secure place at home, too—especially if you have roommates, employ outside help, or are having work done in your house.
  • Push back against companies that ask for personal information, such as your phone number, in the checkout line. Say that your number is unlisted, that you only have a cell phone, or that you simply would prefer not to say. The harder we make it on companies, the less they will be inclined to continue the practice.
• Evade telemarketers. They interrupt your mealtimes and invade your privacy.
  • Avoid giving away information to telemarketers. Identity thieves may call you posing as legitimate enterprises such as your bank or a civic organization. So use caller ID, and if all else fails, just hang up—particularly if they seem to be fishing for personal information, like your birthday.
  • You can register on the federal government’s “Do Not Call” list to block telemarketing calls in the future. If you then receive such a call, suspect it immediately.
• Check your credit report each year and your bank statements each month. By federal law, you’re entitled to one free credit report each year. Use it!
  • Check your bank account and credit card statements carefully each month. Stay on the lookout for unauthorized charges. A scammer may start with a small purchase, perhaps under $20, to see how closely you watch your account. If you don’t respond, they will then spend more. Catching it early will save you a lot of time, money, and heartache later.
  • Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free credit reports each year. Credit reports contain information about you, including what accounts you have and your bill paying history. The law requires the major nationwide consumer reporting companies —Equifax, Experian, and TransUnion—to give you a free copy of your credit report each year if you ask for it.
  • Once you get your credit report, review it carefully. Look for inquiries from companies you haven’t contacted, accounts you didn’t open, and debts on your accounts that you can’t explain. Check that personal information like your Social Security number, your address(es), your name or initials, and your employers, are all correct. If you find fraudulent or inaccurate information, get it removed.
  • Order a credit report a month or more before you make a big purchase or apply for credit, to be sure there are no surprises in your history. If there are, you’ll want to resolve them before you apply for major credit.