Facility takeover fraud increases

Promising, figures from CIFAS the UK's Fraud Prevention Service show a 4.5% decrease on last year in the number of identity fraud victims filed by CIFAS members.

However the CIFAS figures also show that facility takeover fraud (also known as account takeover fraud) that occurs when a fraudster hijacks an individual's account(s) in order to 'take over' and control one or more of them has increased by a staggering 174% from January to September 2008.

Fraudsters only need three key pieces of information to commit identity fraud and the increase seen in facility takeover fraud highlights that fraudsters must be finding more ways to access personal information and are becoming more sophisticated in how they do this. By being more aware of the methods used by fraudsters to obtain personal information, from phishing to shoulder surfing, the issue of personal data security needs to come much higher up the agenda for all individuals and UK organisations.

"The risk of more people becoming victim of facility takeovers is increased if people are not fully aware how best to look after their own personal details and those of others. In addition to this, in the current economic climate it is easier for fraudsters to commit this type of fraud rather than apply for new credit, advises Neil Munroe, External Affairs Director for Equifax.

"Human error is commonly the weakest link when it comes to data security and its very worrying that a recent survey we conducted with our customers revealed that of those who are responsible for the personal data of fellow staff or customers, more than one in ten hadn't had any formal training on how to keep it secure.

Equifax's survey also revealed that over 1 in 5 access bank accounts and credit card details at work and this could put them at serious risk of shoulder surfing. The survey findings show that workers can be lulled into a false sense of security when conducting personal transactions at work.

Munroe concludes "To ensure you don't become a victim to ID fraud or theft, it almost needs to be ‘de facto' to monitor your personal information on a daily basis. It's clear that both individuals and organisations need to do more to protect the data in their possession, whether it's their own or that of colleagues and customers."

Equifax tips to protect against ID fraud

Apply for a copy of your credit file to look out for any unauthorised activity

Be wary of emails that begin "Dear customer", rather than using your name or phone calls ‘phishing' for further personal information.

Your bank will never ask you to reveal your PIN or passwords in full. Don't reveal these to anyone

Do not use the same PIN number for all of your cards and never store your PIN on mobile phones, blackberrys or laptops

No matter how much you trust your friends, work colleagues, do not give out your PIN number under any circumstances

If you are disposing of an old phone or computer, make sure you destroy information on the hard drive

Be careful of what you carry around in your handbag or wallet. Credit Card receipts, payslips, driving licence, bank statement, utility bill...these all reveal a lot of information about you and a combination of these can be a fraudsters dream

Always check bank statements and credit card statements carefully against receipts

Shred statements bills and direct mail which contains personal information

Make sure you have the latest virus protection that ideally updates hourly and you have a Firewall

When using online banking, ensure people can't view your details and log out of the site, rather than just closing the window

Redirect mail if you move

If think you have been a victim, tell your bank or building society immediately. Unless you suspect something, there is no need to contact them

You can also notify CIFAS, which runs a Protective Registration service, and a notice will be placed on your credit file informing lenders that you may be at risk of identity fraud. Tel: 0870 010 2091.

Sign up for a service like Equifax Identity Watch to alert you of any potentially fraudulent activity