Ep 29: Stay A Step Ahead of Cyber Criminals. Protecting Your ID and Other Important Matters.
Listen & Subscribe
dark+apple dark+spotify dark+youtube
Assume that your information is already out there. Your goal is to ensure that nobody misuses your data."
In this episode, we discuss the importance of protecting yourself from identity theft.
We provide practical steps and tips for safeguarding your personal information and financial accounts.
Key takeaways
Place fraud alerts on your credit and consider extended fraud alerts if your identity has already been stolen.
Place a credit freeze on your credit to prevent new accounts from being opened in your name.
Use a password manager to generate strong, unique passwords for each account.
Enable two-factor authentication on all your financial accounts.
Create a separate email address for your financial accounts, and be cautious of suspicious emails.
Monitor your account activities regularly and set up alerts for any unusual transactions.
Create a social security account to monitor your earnings and prevent unauthorized access.
Create an IP PIN with the IRS to prevent fraudulent tax filings using your social security number.
Take proactive steps to protect your identity before leaving the country.
The speakers' views and opinions discussed in this episode should not be considered financial, tax, or legal advice. Consult your advisor for any legal, cross-border tax, and financial advice.
Be sure to join the conversation by following us on social media:-
-
Jane Mepham (00:03.304)
And we are back with another episode of the International Money Cafe Podcast. Identity theft threatens your financial life and can absolutely ruin your life, your families, your friends. In the last couple of weeks, you probably read about the massive data breach that happened from national public Data where information for
over 2 .9 billion people was released into the dark web. The data includes data from people from the US, Canada, the UK, and a whole host of other countries. And it contains a person's full name, address, social security number, phone number, and alternate names. And so with all the recent data breaches that have happened over the last few years,
The approach Manasa and I are taking is to assume that your information is already out there. Your goal is to ensure that nobody misuses your data. And so in today's episode, we're going to be talking about identity theft and how to protect yourself.
Manasa Nadig, EA (01:20.142)
Yes. And, you know, these are some of the steps that we are going to go over with you that Jane and I have already taken. And we definitely want to make sure that you can be protected and you take these steps and make sure that, you know, this the identity that to whatever extent will not happen to you. But before we do that.
Why should you be concerned about identity theft? If this is something you've wondered, or if you're new to the country and you're thinking about why is everybody talking about this? So things can go wrong when personal information gets into the hands of people who have various different ways of manipulating it. And they could take over your investment accounts. They could take over your bank accounts.
your social security accounts, they could take over your insurance policies. God knows they could open new accounts in your name. They could. This is the worst thing is they could file fraudulent tax returns with your Social Security Number. And so if you ask around or if you read, you probably will hear of horror stories where it took victims.
years and years to get out of this identity theft crisis. Not to mention other impacts that this can have on their lives, you know, that could probably just put a hold on everything or most of everything that they can do until their identity is cleared and their credit is cleared. So we're going to go into a few things today about how to protect yourself.
assuming that your data is out there. Right Jane?
Jane Mepham (03:19.148)
Yes. And we'll also, as we go through them, we'll include some caveats because this is something we've done and we found some interesting things as we kind of went through this that we'll be talking about. So the first thing you want to do is place fraud alerts on all on your credit. A fraud alert tells a potential creditor that they need to check in with you before extending credit. So anybody or company or
anybody that says, know how you get all these offers in the mail? They need to call you and check in with you. And the way to do it is you can call the credit agency or do it on each agency's website. Now these three agencies, main agencies is Experian, there's Equifax and there's TransUnion. If you go to each one of these websites, you'll be able to place an alert on one of their site and
here's a nice thing, it's going to be forwarded to the other two sites. So you only need to do it on one. Now, when you place this alert it's only good for one year. But what that means is you're also removed from pre -screened credit and insurance offers for six months. There's another kind of alert called an extended alert. So if your identity has already been stolen and you can actually prove it, so you need to
go to the website, identity theft .gov to report. So actually show that your identity is out. You'll be able to get an extended alert lert and that can actually last for up to seven years. If you're on active duty, especially if you're outside the country, your alert lert will last for two years. For most people, the annual a lert will suffice. And one of the things I want to call out is so
You've already gone out. This is a very practical step. Make sure you do it today. Do the following two things after you place the alert. One, create a calendar reminder to come back and update it after one year. You want to make this like a yearly ongoing thing. Two, as part of the service, they'll offer to give you a free credit report. You're entitled to one anyway. Go ahead, download a copy.
Jane Mepham (05:39.682)
and check to see if there are any issues that you can then take care of.
Manasa Nadig, EA (05:45.892)
Yes. Yeah, I totally am on the ball with the one that where you have to set up that reminder to make sure that you are renewing that alert because that's something that most of us forget, right? But the next important thing that you need to do is place a credit freeze on your credit. So a credit freeze or a security freeze
is the best way to help prevent new accounts from being opened in your name. So it's free to freeze, unfreeze, or temporarily lift a freeze on your credit. And this will not affect your credit score. And this is something that we've had to do recently where we forgot that we had put a freeze, but then we had to call and temporarily lift the freeze on our credit so that
our credit history could be checked for something. So unlike the credit alert though, this credit freeze needs to be done individually on each of these credit reporting sites. So you have to go to each of the sites that we just said, the TransUnion, the Experian, and the Equifax site. And there is a place where you can put this.
freeze and you definitely need to do it and make sure that it's done correctly. Of course, you can also do the credit freeze over the phone, but we would prefer that you do this online to make sure that it is properly taken care of. We will provide you links in our newsletter to the credit agencies and you can look for that. But again,
while you're placing these credits freeze So be careful not to sign up for any extra services that these credit unions, sorry, the credit agencies would be offering to you. And this is something you may probably want to look out for because sometimes if a credit monitoring service is
Manasa Nadig, EA (08:09.25)
you know, they may offer you an ID step protection or they may offer you a different type of service, but it might involve payment. But remember, a credit freeze is free and you should not confuse it with a credit lock. So credit lock is different from a credit freeze. Right Jane, then you want to talk about that a little bit first?
Jane Mepham (08:37.622)
Yeah, cause when I did it, I noticed they tried to sell me the credit lock. So I don't need a credit lock right now. I don't need to pay for a monitoring service. Maybe in future I do, but right now I don't. So I don't need to pay for that. The other thing I noticed that you call out is when I did it on Experian, I noticed that somehow they opted me into various credit card offers, loans, and all kinds of things. And so as soon as I,
Manasa Nadig, EA (08:52.272)
Mm
Jane Mepham (09:07.472)
put my freeze on, I started getting a whole bunch of marketing emails, like literally almost every day. If I was to go ahead and apply for it, not that I will, I would have to unfreeze my credit and apply for the offers, which literally deface the purpose of what I have to do. So what I've had to do is go back into my account on Experian now that I did it online and unsubscribe from all kinds of marketing emails. I don't need to get.
anything from them. And then another thing you want to do is obviously keep monitoring your credit report and you can get free credit reports every year from the official site annualcreditreport .gov. Be careful because there's some fake sites out there. You want to go to annualcreditreport .gov. On top of that, also put alerts and freezes for your family.
Manasa Nadig, EA (09:39.505)
Yeah.
Jane Mepham (10:04.144)
If married, encourage your spouse to do the same thing, especially if you share accounts. You can do it for them, but it's a pain because you have to prove your relationship to them. You can not do it online. You have to do it via mail. So it's better if you just sit there with them and say, okay, let's go through this same process that I just went through. If your kids are over 18, do the same thing with them. Go through the same process with them.
If they're working and earning and they end up earning below the standard deduction threshold, there's a tendency not to file taxes. So they may not know that the information has been misused for filing fraudulently. So you really want to make sure you do it for them. If they are below 18, you should still do it on their behalf. The only thing is the agencies have to create a credit.
report or a credit file for them. So again, it does involve like a lert of, online, a lot of sending IDs and doing all these things via mail, but it's probably absolutely worth it. Again, assuming their data is out there and we're going to take a quick break for a very important message, but don't go away. Come back because on the other side, we'll talk about
other the things you can do to protect yourself online.
Manasa Nadig, EA (11:40.174)
Hey, welcome back. So here's what we're going to talk about. A whole bunch of stuff that you can do to protect yourself online. So let's start off with one that I think already a lot of people know about this, but we want to talk about this is a password manager. So what's a password manager? A password manager is a software that saves all your passwords.
So you don't have to remember them when logging into different accounts. So there are a few issues that a password manager will solve. One is that I think that what most people have observed that when you come up with passwords, your passwords either tend to be very simple or it can be somehow connected back to you. So the password manager helps mitigate that. And of course,
Hey, I used to be guilty of this, reusing the same password on many different sites. So, you know, of course now I've stopped doing that, but the password manager will help you do that because that's what they do. They generate random passwords for you. So no two sites will have the same password. And a good password manager will also scan your database and let you know if you have weak or reused
password. So you need a super, super strong master password, which is the only thing you need to remember in order to access this password manager. A good password manager will cost you some amount of money per year. I think what Jane and I have seen is it goes anywhere from $50 to $60 every year. Most of them will work on your laptop.
and your phone. There are a few examples. We don't endorse these, but we're just throwing this out there for you to use if you would like. There's Dashlane, Bitwarden, NordPass, et cetera, et cetera. There's a whole bunch of them out there. Please do your research. And when you're there, going through the password manager, change all your passwords. And also, plan to change them every quarter.
Manasa Nadig, EA (14:05.824)
I know it's a pain, believe me, I can understand. My tax software company makes me do this. So you have to change it every quarter, but it's better, way better than having to deal with your information in the wrong hands. So password manager. And then the second thing that I totally believe in is the two factor authentication. And Jane will second me on this.
you should enable a two factor authentication on all your accounts, especially your financial accounts. And basically this means that, you you need two forms of authentication. When you log into a system, that would be the password and then there's a one time code generated and that's sent to either an authenticated app or to your, as a text message to your phone number, you get a call to your phone number.
But definitely, please set up two -factor authentication on all your financial accounts. think, Right Jane, do you agree?
Jane Mepham (15:15.574)
Yeah. And the one thing I've actually noticed with Schwab, which is where Elgon Financial Advisors, Custodies our Clients Money, they will allow you to set up a verbal password on your account. So this extra layer ensures that you are genuinely the one logging in, even if your information has been stolen. So that's sort of going over and beyond the two factor authentication. And now that I mentioned Schwab, let's actually talk about
your specific financial accounts. What are some other things that you can do? So when the recent AT &T breach happened, it exposed data, including personal emails. And so one of the things we've noticed is people tend to use the same email address everywhere. So what we're recommending is know that email address is out. So you should go out and create a new email address.
and this email address is to be used only for your financial accounts or your banks, let's say your brokerages. Don't mix it with your everyday other emails. But in the meantime, if you receive funny looking emails or something, as we say, doesn't pass the smell test or just seems a little off, please, please, please don't click on them. Instead, send them to your delete folder, play it safe.
Be cautious and vigilant at all times. And then while you're in there, we now have a new email address. Monitor your account activities constantly. This is one that you can actually automate where you set up alerts to be notified with certain transactions or kind your bank or brokerage account. For example, withdraws above a certain amount or get weekly balances. And again, this will ensure that if something is off, you'll get ahead of the situation and being automated means it's less work.
for you. Again, while you're in there, ensure your phone number has an account PIN One of the more sophisticated ideas that ideas we've had is where a thief will go out, get your number and put it out. like change your number and move it to another phone number. Set up a PIN with a phone company. So if anyone wants to put your number out, they cannot do so without that PIN
Jane Mepham (17:43.108)
And as part of that, one of the things I really now even talk to the kids about, if you get calls from numbers you don't recognize, please don't answer the phone. Go ahead and block them. If it's a friend or somebody genuine, they'll probably leave a message and you can always call them back.
Manasa Nadig, EA (18:00.142)
Yeah, yeah. You know, also, while we're talking about phones, you know, nowadays, you get a whole lot of text messages which have links in them, you know, so I think we should also say, don't click on those various links that you get in from a random person in a, you know, text message or a WhatsApp message or whichever. Yeah, yeah, yeah. And you know, I would also definitely
Jane Mepham (18:23.504)
I
Manasa Nadig, EA (18:30.312)
advise our listeners to create a social security account. Definitely go to login .gov, L -O -G -I -N .gov. You can create an account and when you're on your social security account, you will see all of your social security earnings are listed. And you can make sure that in fact,
all of your social security earnings are listed. And if there's anything missing, you can reach out to those employers or reach out to the social security administration and let them know. And you can also kind of check in on what your social security estimated payments will be, you know, depending on how close you are to retirement or to the age of the full retirement age, et cetera. So
That's one thing. And also creating a social security account means that you can ensure that nobody else can claim your account and make sure that that's protected. So definitely that's a big one. And also, if you live overseas, sometimes, and this is the only way that you can log in and check.
You know, if your checks have been mailed and what's going on with your social security benefit payments. So definitely create a social security account. Now, the other big thing that I tell all my clients, and I would definitely like our listeners to know, is to create an IP PIN. IP is an identity protection PIN.
which you create every year on the IRS's website. So go to the IRS .gov and you can download an IP PIN. This is to be done every year. And this basically puts a stop on anybody else who's trying to file taxes under your social security number because nobody can file a return on using your social security number
Manasa Nadig, EA (20:47.244)
unless they know your five digit IP PIN. And this is something that people discover as after the fact, you know, because they will file a return and they'll get an error reject and it'll say that somebody else has filed their taxes before they did. And that is, yeah.
Jane Mepham (21:08.156)
Quick question. So when you say create the IP PIN are you doing it every year or so you're getting a different PIN every year or does IRS mail it to you? I'm not clear on that.
Manasa Nadig, EA (21:13.86)
Mm
Manasa Nadig, EA (21:23.746)
No, you have to go and create, I'm sorry, you have to go and download this IP PIN yourself every year. Now, the IRS might send you a new IP PIN every year, but that is mailed to you. So, you know, that is a letter that you will have to keep. There is a little bit of...
Jane Mepham (21:30.782)
I see. Okay, okay.
Manasa Nadig, EA (21:51.244)
you know, we will need to go into this a little further. Now, if you have created an IP PIN and downloaded it online, then, you know, you have to go back and do it every year and download an IP PIN every year. And either if you're doing your taxes yourself, then you use that or you give it to your tax professional to use. Now, I have had instances where
Jane Mepham (21:54.97)
Okay.
Manasa Nadig, EA (22:20.24)
an IP PIN has been requested from the IRS, but they do not have an account with the IRS, which we can talk about next. But because of that, the IRS then mails them a letter every year with the five -digit IP PIN, which I feel is not the most safe way. But there are people who do not have access
to computers or they're not able to access computers or, you know, there are various different reasons why the IRS might send them this letter. And we can go into that a little more or maybe on another episode, but yeah.
Jane Mepham (23:05.102)
Okay. So the key thing, I think what I'm hearing you say is you have to create the account first. That's a key thing. Okay. Gotcha. Thank you for that explanation. Yeah. Okay. That's great. Okay.
Manasa Nadig, EA (23:12.802)
Yes, exactly.
Manasa Nadig, EA (23:17.666)
Yeah, exactly. yeah, so now talking about creating that account, know, please create an account with the IRS. So you go in, it'll ask you some, you know, questions to authenticate who you are. And once you have authenticated that, you go to id .me is the website. And when you go to the IRS's website, it kind of leads you down there.
and you will create an account. And basically, creating this account lets you do a lot of things with the IRS online. And you can also look at your estimated payments and you can get your account transcripts and all of that. And yes, you can also get your IP PIN when you're there. There's another question that I'm asked from time to time, and this is
If you have relocated overseas, can you create an IRS account with a foreign address? At this time, you know, it's a hit or a miss. Some people have said that they are able to create an account with a foreign address. But, you know, this is you may need to have a US address to create this account to be sure that it is created.
and it exists, you know, so, so, so putting it bring this out there. So yes, create that online account on the IRS website, and make sure that you have the IP PIN to prevent people from filing taxes using your social security number. And that is a fraudulent way of using your social security number.
Jane Mepham (25:15.458)
scary but I'm glad we're talking about it. So I know you've been filing taxes for a long time. Have you ever seen anybody's stuff get rejected because maybe somebody had already filed their taxes? no.
Manasa Nadig, EA (25:18.546)
Mm -hmm.
Manasa Nadig, EA (25:32.24)
yeah, thankfully, yeah, thankfully not, you know, as much because we put into place a lot of protocols in order to make sure that client data is protected. But it does happen from time to time, you know, whatever reason for other reasons, somebody's social security number might've got compromised. And that's the scariest thing to see.
is when you file a return and it comes back with an e -file reject code that says this primary social security number has been used already or somebody has already filed a return. So yeah, that's definitely not something you want to hear in February, March, or April because you now have to do all of these things and now start
Jane Mepham (26:26.192)
Yeah.
Manasa Nadig, EA (26:29.38)
put all of those things into place, there is, if you go to the IRS's website, there's actually, the IRS has taken a lot of pain in putting together this, you know, steps that a person can do if their identity has been compromised or in this case, somebody else has already used it and filed a return. And you can kind of put a stop to that by taking all those steps and filling a certain form and doing that.
I've had to help out a few friends this past year who had this problem. It's very ugly.
Jane Mepham (27:04.686)
Jane Mepham (27:12.368)
I can't imagine as soon as you say that, think my, my heart just, yeah, that's, that's scary. And maybe we should actually that particular website where if your ID, your social security number has been compromised, maybe, you know what, let's put a link, on the show notes as part of that, just in case somebody finds himself in this situation. Yeah. Yeah. Yeah. Yeah. So
Manasa Nadig, EA (27:18.435)
Yeah.
Manasa Nadig, EA (27:34.914)
Yeah, sure, for sure, for sure. Yeah, I know. anything else you can think about, Jane, like, you know, when if what happens to social security numbers and data when somebody leaves the country or yeah.
Jane Mepham (27:43.725)
Yeah.
Jane Mepham (27:48.282)
Yeah, I'm like, I gotta say this. gotta say this. So thanks. Thanks for the prompt. If you're leaving the country, we typically tend to work with people who are, okay, I'm about to leave the U S what are some of the things I should do? And we'll talk about your accounts and addresses and all that stuff before you leave the country, please, please, please, please take some time to put all this in place. The alerts, the freezes, the, the
Manasa Nadig, EA (27:52.227)
Yeah.
Jane Mepham (28:17.444)
the two -factor authentication, the password manager, the IP PIN and all the things that we've talked about. Because as Manasa pointed out, sometimes it's really difficult to be able to do these things when you have a foreign address. And we actually haven't seen a way where, especially when they have to send you something, where you'd be able to do this. So before you leave the country, the last thing you should do is lock down your identity. That's what it comes down to.
And with that, is there anything else? Or are good to wrap this up?
Manasa Nadig, EA (28:51.78)
Yeah, I think we really lined up quite a few things that people can do to protect your identity. So if you have listened to this episode and this has sort of, you know, given you many good pointers on what you should do, please forward this episode to all of your friends and all your family and let them know what they can do and the steps they can take. Because in this day and age,
This is something super, super important. So yeah, having said that, thank you for listening. And when you get a chance, please go to our new website, our brand new spanking new website and check it out. And while you're there, sign up to be notified when new episodes drop. Stay tuned. We'll be back with more.