Information provided by Eons partner Liberty Mutual
Man counterfeiting an ID card.

The U.S. Department of Justice recently issued three simple recommendations that Internet users can follow when they see emails or Web sites that may be part of a phishing scheme: Stop, Look, and Call. A full report of the Justice Department's "Special Report of Phishing" can be found at: www.usdoj.gov/criminal/fraud/Phishing.pdf.

1. Stop

Phishers typically include upsetting or exciting (but false) statements in their e-mails with one purpose in mind. They want people to react immediately to that false information, by clicking on the link and inputting the requested data before they take time to think through what they are doing. Internet users need to resist that impulse to click immediately. No matter how upsetting or exciting the statements in the email may be, there is always enough time to check out the information more closely.

2. Look

Internet users should look more closely at the claims made in the e-mail, think about whether those claims make sense, and be highly suspicious if the e-mail asks for personal information such as account numbers, usernames or passwords. For example:

If the e-mail indicates that it comes from a bank or other financial institution where you have a bank or credit card account, but tells you that you have to enter your account information again, that makes no sense. Legitimate banks and financial institutions already have their customers' account numbers in their records. Even if the e-mail says a customer's account is being terminated, the real bank or financial institution will still have that customer's account number and identifying information.

If the e-mail says that you have won a prize or are entitled to receive some special "deal," but asks for financial or personal data, there is good reason to be highly suspicious. Legitimate companies that want to give you a real prize don't ask you for extensive amounts of personal and financial information before you're entitled to receive it.

3. Call

If the e-mail or Web site purports to be from a legitimate company or financial institution, Internet users should call or e-mail that company directly and ask whether the e-mail or website is really from that company. To be sure that they are contacting the real company or institution where they have accounts, credit card account holders can call the toll-free customer numbers on the backs of their cards, and bank customers can call the telephone numbers on their bank statements.

Avoiding online identity theft

Liberty Mutual recommends the following tips and resources to help prevent becoming a victim of online identity theft.

Take these important steps today to protect your name, credit and reputation:

  1. Review your credit report from each of the three credit agencies listed below twice a year. See if there are accounts or addresses you don't recognize. Is your social security number correct? Have there been more credit inquiries than normal? Any of these may be early signs of identity theft. If you find something suspicious on your credit report, call the agency's fraud hotline immediately. You also may want to add a consumer fraud alert, which asks creditors to telephone you each time a new account is opened in your name.

  2. Limit the use of your Social Security number. Provide your social security number only when necessary and never provide it in response to an unsolicited email. Don't carry the card in your wallet and never print it on your checks.

  3. Shred uneeded important papers -- especially credit card solicitations -- with a crosscut shredder. Some identity thieves try to piece cut papers back together.

  4. Don't use your mother's maiden name as a password on personal accounts; it's too easy to learn. Change it to another word with the creditors. When creating a password, include letters, numbers and symbols (for example: E$G%2Q) since they are more difficult for identity thieves to guess.

  5. Don't give out financial information online or on the phone unless you initiated the contact and you know the party you are dealing with.

  6. Protect your online log-ins and passwords. Don't share your passwords or login names and avoid leaving or writing them down near or around your computer. Protect them as you do your ATM and credit card numbers.

  7. Learn more about identity theft and how to protect yourself by visiting these sites:

Don't be a victim. If you suspect identity theft or online fraud, report it to your local police, the three credit agencies listed below and the Federal Trade Commission.

Resources

Federal Trade Commission
www.consumer.gov/idtheft

Internet Crime Complaint Center
www.ic3.gov

Equifax
To report fraud: 888-766-0008
To order your credit report: 800-685-1111
www.equifax.com

Transunion
To report fraud: 800-888-4213
To order your credit report: 800-888-4213
www.transunion.com

Experian
To report fraud: 888-397-3742
To order your credit report: 888-397-3742
www.experian.com