Identity Theft Prevention Tips

While it is easy to get caught up in the threat of text message phishing scams, the most effective solution to combat this fraud is for businesses to educate their customers about the risks involved when responding to a text message. Fraudsters rely on the ignorance of people and the trust customers place in their bank or other reputable brand.

Tips for businesses

1. Only send out relevant information and never ask customers to provide sensitive information via insecure electronic channels such as e-mail or text.

2. When communicating with customer using text messages, personalise the messages and include information that would not be available to phishers. This will enable customers to distinguish between legitimate and phishing messages.

3. Look critically at your text message and email communications, and consider whether fraudsters could benefit from imitating your message. Educate your customers on potential phishing scams. Inform your customers as soon as you are aware that someone has been using your company name fraudulently.

4. Make your text messaging policies known (e.g. message will always be personalised or we will never ask you to give us your PIN number).

5. Ensure that your marketing material is consistent with the communications you send to customers and that call centre staff are well trained.

Tips for customers:

1. Never respond to a text or email message that requests personal information. Do not divulge sensitive information such as credit card numbers via insecure electronic channels such as texting, e-mail or over the telephone.

2. Be aware that it is easy for criminals to imitate organisations by using electronic communications and initiate emails or text message phishing scams. If unsure whether or not something is a scam, always take the time to investigate it.

3. Always verify a contact number, especially those in emails or text messages. If the “bank” called you, call them back. Double check phone numbers that appear in a text message – you can do this via the Internet or by referring to any marketing material. For ease of reference, store banking phone numbers on your mobile phone, along with email and website addresses.

4. Never ever give your PIN number or password to a PERSON. Only use your PIN on systems that have been designed for this purpose, i.e. ATM’s and official internet banking sites. These systems have been designed such that employees at the bank cannot access this information.

5. Report it. If you are unsure of how a company received your number, or are suspicious about a text message that you have received, you should contact the company and report your concerns. You can also visit the Mobile Data Association and 160Characters Association for more details on text messaging regulations in the UK.