What is identity theft?
When a thief gathers information about you and uses it to impersonate or defraud you, it’s called identity theft.
Even a small amount of data—your Social Security number, password, address, mother’s maiden name, account number or PIN—is enough for a thief to make credit card purchases, open bank accounts, take out loans, or commit crimes in your name.
How can someone steal your identity online?
Phishing scams - Identity thieves attempt to trick you by sending a phony email or instant message (IM) that appears to come from a reputable organization (like your bank or favorite charity). The message tries to alarm you by suggesting that your account was compromised or will be closed unless you respond. The phony message typically contains a link to a webpage or a request to call a toll-free number. There, you’re tricked into revealing financial or other sensitive information on a realistic (but fake) webpage or to a “representative.”
Malicious software - Opening email attachments or clicking in a pop-up window may secretly plant harmful software on your computer that can let a thief collect your passwords or account numbers.
Data breaches - Identity thieves may break into insurance, hospital, government, and other databases to steal the personal information of thousands.
Oversharing - Social media is an ever-present part of many of our lives and it makes it easy to share photos, videos, posts, and other personal information. Unfortunately it makes it TOO easy to share, and thieves can sometimes find that information and use it to help steal your identity.
Five simple ways to help protect your identity online
It can take years to discover you’re a victim of identity theft, and even longer to clear your name and credit rating, so prevention is key.
1. Be defensive with sensitive information
-
Don’t put sensitive information in email, social media, or text messages. These methods may not be secure.
-
Look for signs that a webpage is secure and legitimate. Before you enter sensitive data, check to ensure the web address starts with https (“s” stands for secure) and shows a closed padlock. (The lock might also be in the lower right corner of the window.)
-
Make sure that you’re at the correct site—for example, at your bank’s website, not a fake. Look closely at the Save banking, shopping, and other financial transactions for your home computer. The security of a public computer, or your own computer over a public wireless connection, may be unreliable. Be cautious about clicking links in a message or pop-up window. If you’re unsure if a message is genuine—even if you know the sender—contact him or her using a different device or account.Microsoft Defender SmartScreen can help
-
Be careful about what you post on social media. You may be inadvertently sharing more information than you wanted to, or sharing it to a larger audience than you expected.
2. Create strong passwords and keep them secret
-
Strong passwords are long (phrases or sentences) that mix capital and lowercase letters, numbers, and symbols. Ideally your passwords should be at least 14 characters long.
-
Don’t use the same password everywhere. If it’s stolen, all the information the password protects, in all the accounts it's used on, is at risk.
-
Don’t share your passwords.
-
Writing them down is ok, as long as it's on a well-protected piece of paper away from your computer.
You'll find some tips on creating and using secure passwords here: Create and use strong passwords.
3. Protect your accounts and your credit
-
Stay on top of existing account balances by checking account activity regularly.
-
Report discrepancies quickly. The law protects you from having to pay for fraudulent transactions on your account, but only if you report them promptly.
-
Unless you are actively seeking a loan or other credit, contact the three bureaus to freeze your credit, which restricts access to your reports. For more information see Placing a credit freeze.
: Got a child under the age of 16? Consider freezing their credit too. Children are attractive targets for identity thieves because people don't usually check the credit reports for their kids.
-
Protect your credit with help from the major U.S. credit bureaus. Every year, get your free credit report (and that of any family member over age 14) from each credit bureau, and review them carefully. Order through AnnualCreditReport.com or call toll-free (877) 322-8228.
: Microsoft 365 Family and Personal subscribers in the U.S. can turn on identity theft monitoring in Microsoft Defender. For more information see Getting started with identity theft monitoring in Microsoft Defender.
4. Boost your computer’s security
-
Reduce your risk of identity theft by keeping all software (including your web browser) current with automatic updating.
-
Install legitimate antivirus and antispyware software. Windows comes with Microsoft Defender Antivirus already installed and turned on.
-
Never turn off your firewall.
-
Protect your wireless router with a password and use flash drives cautiously.
Microsoft can help: https://support.microsoft.com/security
5. Use an identity theft monitoring solution
Identity theft monitoring solutions (sometimes called identity theft protection) help you keep track of your data and alert you when your personal details are exposed in a breach, allowing you to take action as soon as possible.
Microsoft offers identity theft monitoring functionalities in Microsoft Defender as part of our partnership with Experian®. Defender’s identity theft monitoring solution consists of four major components: Dark web monitoring, credit monitoring1, 24/7 restoration support, and identity theft insurance. 2
Combined, these functionalities allow you to monitor your own identity details (as well as your family’s) for breaches on both the public internet and the dark web, keep track of (attempted) identity theft and fraud, get expert support when you need it the most, and enjoy the peace of mind that you’re covered for up to $1M USD in identity theft related costs, as well as up to $100k USD in lost funds.
For details on how to get started with identity theft monitoring in Defender, check out Getting started with identity theft monitoring in Microsoft Defender.
What you can do if someone steals your identity
Act immediately to correct your records. Document your efforts as you go: make copies of all email and letters and keep detailed notes of phone calls.
-
File a police report and get a copy to show your bank and other financial institutions that you are a crime victim, not a credit abuser.
-
Put a fraud alert on your credit reports with one of the major U.S. credit bureaus so that no financial institution grants new credit without your approval.
-
Close accounts accessed or opened fraudulently. Speak with the fraud department of each of those companies and follow up with a letter. When you open new accounts, use new passwords and PINs.
-
Report the theft to the U.S. Federal Trade Commission (FTC) at ftc.gov/idtheft or call toll-free (877) 438-4338.
-
Report suspicious or fraudulent incidents to the service provider. For example, in Microsoft services or software, look for the Report Abuse link, or contact us at Microsoft-Report a technical support scam.
-
If you’ve set up Defender’s identity theft monitoring solution, call the restoration support number that’s displayed in-app to get in contact with Experian’s 24/7 identity theft monitoring support for Microsoft Defender customers. Their restoration experts can guide you through the process of addressing the breached details or credit issue and even provide full-service identity restoration services in the event an identity thief is using your personal details to commit fraud.
See also
The keys to the kingdom - securing your devices and accounts
Protect yourself from online scams and attacks
¹Feature available in the United States and US territories. Credit score is a single bureau VantageScore 3.0 provided by Experian®. The monthly credit report is provided by Experian® using single bureau data. For users under the age of 18 or those without a credit history, credit score not included. Family organizers will not have the ability to onboard, view, and receive alerts related to family member credit monitoring. Your device's primary display language must be set to English.
²The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions. Review the Summary of Benefits.
