Online identity data protection

[YetiXing]

Best way to protect identity data online. From scams, hackers etc…

A couple years ago after a few data beaches in the news I froze our credit..
So far we haven’t had any issues.

Question
Wondering if it’s worth paying or one of these data removal services to remove your information from data brokers. Although it seems a little like playing whack a mole!
DeleteMe, etc…

Also, is there additional value in paying for credit monitoring…
My though is that I’m good with my credit frozen..

Thanks for any advice.

 

[marinauser]

Not for me. Other than using 3 credit cards between the two of us, we don't use credit for any purpose so we just keep it frozen. I do check our social security accounts from time to time to make sure no one has claimed our benefits. We had a friend that filed for SS only to find out someone had been collecting on his account for a couple of years.

 

[YetiXing]

Not for me. Other than using 3 credit cards between the two of us, we don't use credit for any purpose so we just keep it frozen. I do check our social security accounts from time to time to make sure no one has claimed our benefits. We had a friend that filed for SS only to find out someone had been collecting on his account for a couple of years.

Yikes!

 

[rk911]

Our credit is also frozen at the big 3 credit reporting agencies but we also have identity theft insurance. I look at it as a layered approach. It can't hurt. We use credit cards for just about everything. Cash only for tips and my barber.

 

[badatmath]

You can remove yourself from some of the data brokers for free - I did. Most have a place to request it.

 

[pacergal]

We also have our cc frozen an all three reporting agencies. I log into SS yearly, we get our annual credit reports to review, sometimes all three at once, sometimes one every 4 months and rotate. I have two factor ID on as many accounts as possible. I don't keep cc info stored on any websites anymore, except Amazon. I have the tightest controls possible on our financial websites, with notifications for any debit, credit, online usage, etc.
A couple of times, we have received notice of a breach, and I always sign up for the year of free data watch services that is usually offered. So far, nothing has ever cropped up in the year of monitoring.

 

[GrayHare]

You can remove yourself from some of the data brokers for free - I did. Most have a place to request it.

I'd guess you have to give them personal information so that you can hope they remove what they might have. A Catch-22.

 

[badatmath]

I'd guess you have to give them personal information so that you can hope they remove what they might have. A Catch-22.

IIRC most just filled out out a form but it has been a long time.

I searched on myself about a month ago and I didn't seem to have really reappeared.

I have a quiet life no and no FB, Insta, etc.

 

[engineernerd]

Best way to protect identity data online. From scams, hackers etc…

A couple years ago after a few data beaches in the news I froze our credit..
So far we haven’t had any issues.

This doesn't answer your question but I thought I'd warn you: I discovered the hard way when I froze my credit that insurance companies often use an "insurance score," provided to them by their chosen credit reporting agency, to set your premium, and that if your credit is frozen they set your credit quality to the lowest possible tranche, giving you a poor score (and a high premium).

In my state they are supposed to mail you a letter telling you when your insurance premiums are negatively affected by your credit information, but even though I never received such a letter there was no way for me to prove they didn't send one. After several years I found out about all this when getting a quote from another insurance company. The agent suggested I could improve his quote by unfreezing my credit.

 

[imnontrad]

The nutshell answer is no use paying for credit monitoring.

But there is more that you can do in the case of possible identity theft.

1. Go to each credit reporting agency and verify there are no unknown accounts/loans set up in your name. Then freeze the accounts. They can be quickly be unfrozen (and refrozen again) if necessary. Although there are three "big" credit reporting agencies, there are smaller ones too (clark(dot)com/credit/smaller-credit-bureaus-credit-freeze). (You already did the big three but there are more)
   
   
2. For all bank/finance accounts that are accessed online, verify all information, change the password to something unique and at least 16 characters long. Also change all password recovery questions/answers AND make them nonsense as in "Your mother's maiden name" - CatDog. Setup two factor identification, if possible where a text is sent to your phone or to an email with a special code. Plus change all access PINs. Ones that are easy to remember are things like the 4 digit house number of a friends years ago.
   
   
3. Never use a debit card except to withdraw money at an ATM at a well known bank. And do not do this on a weekend after the bank closes or on a holiday.

1. Change passwords on all email accounts and social media accounts (16 characters) plus security questions. Consider setting up a new email address that is NEVER used to send email and has not only an unusual name but a 16+ character password. Switch all finance/bill related accounts to send any correspondence to that email. This way, if any "bank" send something to any other email, you know immediately that it is fake.
   
   
2. Use a password manager to store all your unique passwords AND to generate passwords. Start changing all passwords to16 characters or more (Why? All password combinations up to at least 14 years were hacked years ago (research "rainbow tables").

1. Set up an alert on checking, credit cards and all other financial accounts to send a text or email for any charge/withdrawal over $0.01.

1. Verify your information at ssa(dot)gov and medicare(dot) gov and change your passwords. Set up two factor authentication if you have not done so already.
   
   
2. Notify the IRS and request an Identity Protection Pin for the next tax return. Without this, scammers may file a false return early and get any tax refund (Taxpayer guide to identity theft | Internal Revenue Service)

1. If you do not have a mailbox that locks, consider getting a post office box and redirecting all mail there.
   
   
2. Bank online with the bank sending out the check (or automatic transfer) wherever possible. Also, if you write a check, either hand it to that person/business directly or only mail from the "outgoing mail" slot inside your local post office (not even the drive up PO box right outside).
   
   
3. Ensure your phone has a SIM LOCK on it. You can do searches for your phone model/carrier or go to one of the cell carriers offices to get this done.

1. Create a family nonsense code word/phrase (example "unicorn poop") and have family members put it on a piece of paper in their wallet to. So if you get a call saying that a family member is injured, arrested, etc. and can you send money, you can ask for the codeword to verify it is legitimate. As an alternative, set up a question (or a list of questions in advance) that only a family member might answer ("Where did Susan go on vacation in August 2010?"). Many banks, etc. also have code words for access. Just make sure the hint for that code word will be obvious to you but not to others (My hint is "Virginia" and good luck ever figuring out what my word is.
   Another type of code would be a song title or phrase since music is "stored" in a separate part of the brain. Even if you cannot remember the words immediately, the tune may pop into your head and help you remember
   
   
2. If there is property, contact your local county deed office and ensure no additional names have been put on the deed. See if they have any procedures set up to avoid the possibility of someone transferring the deed to their name. And ensure notices of property taxes are sent to the correct location.

 

[Live Large]

I have Equifax Credit monitoring it works on a monthly notice, caught a fraudulent bank loan once. Handled quickly! Never froze credit but do check report annually. Low internet footprint just an old email, difficult passwords.

The previous post way too much for Me I’ve seen fraud in my previous ‘work’ life just make sure you keep some cash available it’s still relevant. Banks can (have) be breached.
Have an IRS Pin taxes filed early once but crooks didn’t get a refund - I owed taxes…lol

 

[Rianne]

All three credit agencies are frozen, but this Sim card lock has me concerned. AI says you should download an authenticator app on your password manager account. If your phone # is breached, then all your 2 factor authentication codes are breached.

 

[Al18]

You can use different methods for 2FA, including email and a Symantec VIP token

 

[NoEZmoney]

Best way to protect identity data online. From scams, hackers etc…

A couple years ago after a few data beaches in the news I froze our credit..
So far we haven’t had any issues.

Question
Wondering if it’s worth paying or one of these data removal services to remove your information from data brokers. Although it seems a little like playing whack a mole!
DeleteMe, etc…

Also, is there additional value in paying for credit monitoring…
My though is that I’m good with my credit frozen..

Thanks for any advice.

I can't speak for data removal services although I've done it myself with individual people-tracker websites. Pre-covid days, we started using two-system verification on everything --- credit cards, online banking, investment websites, social media, e-mails, etc. We get codes or log-in keys sent to our mobile phones or e-mail that are only good for a few minutes. We also have regular virus scan maintenance on our digital devices and use a Virtual Proxy Network (VPN) with rotating ISP every few minutes.

I'm sure a determined and savvy hacker could find work-arounds but we are doing everything we can to reduce their chances at success. We also change passwords every few months to a year depending if we think something funny is going on when we log-in.

Nothing is perfect but we manage the risks as we have to live in the digital world whether we want to or not.

My2Cents

 

[CaptTom]

I'm not a fan of "services" which claim to protect or wipe your information. The only thing the former has ever done for me is send me spam trying to get me to sign up for their "premium" level service. And frankly it's not the legitimate information brokers I worry about, it's the hackers on the dark web. I strongly doubt they're going to delete whatever they have on me just because I paid some service to ask them nicely.

On a related note, the problem with two-factor authentication is it assumes you always have your phone with you. Since I have a habit of dropping things like cell phones into the water, I have given a lot of thought to how I'll get at my accounts if I don't have my phone. Wherever possible, I give multiple phone numbers and e-mail addresses as my 2FA options.