How can I avoid identity theft online?
Identity theft is when someone uses personal information about you in an attempt to impersonate you. Identity thieves often do this to make purchases, establish accounts in your name, and sometimes commit more serious crimes.
There are steps you can take in your online activities to avoid identity theft:
- If you host a web site, whether personal or business related,
never post your picture or full contact information, and be very
careful about what biographical information you publish; less is
better.
- Do not provide personal sensitive data unless you are certain of
both the security of the site and the legitimacy of the need for the
information. See What is sensitive data, and how is it protected by law?
- Check periodically if any of your personal data has been made
publicly available without your knowledge. See How can I determine if my Social Security number or other sensitive information is secure?
- When submitting personal information online, make sure you are at
a secure web site. See How do I know if my browser is connected to a secure web server?
- For any accounts you manage online (e.g., utilities, credit cards,
banking), always use a password. Don't create a password derived from
easily available information (e.g., birthdays, mother's maiden name,
last four digits of your Social Security number). Many accounts will
ask for your mother's maiden name as an additional means of
identifying you; instead, consider providing an unrelated password. If
you must store financial information on your computer, use a strong
password. See Passwords and passphrases.
- When doing business online, confirm that you're dealing with a
legitimate organization. One way to check this is by calling the
company's customer service number from your account statement or
telephone book.
- Always read web site privacy policies. Make sure you understand
how your personal information will be secured and used.
- Keep your computer's virus protection software
updated. If you are an Indiana University student, faculty member, or
staff member, you can get Symantec AntiVirus (SAV) from
IUware for free.
- Do not use an automatic login feature (i.e., when your operating
system saves your username and password) and always log off or lock
your computer when you step away from it.
- Before you dispose of or give your computer to another user, make
sure you delete all personal information stored on it. The best way to
do this is to wipe and rebuild the operating system. For information
about how to do this in Windows, see In Windows, how do I safely rebuild my computer?
- Don't download files or click hyperlinks provided by
strangers. At IU, to guard against this, many types of files are
blocked from delivery to or from your email account. For a list of
these files, see At IU, what types of attachments are blocked from my email account? Additionally, there are a variety
of ways you can filter spam from your IU accounts to avoid
receiving mail from unknown senders; see At IU, how can I filter spam?
- Use a firewall as your first line of defense in protecting private information. Most modern operating systems, such as Windows XP, Vista, and Mac OS X have a built-in firewall; however, these might not be enabled by default. For more information, including how to enable your computer's firewall, see What is a firewall?.
If you become a victim of online identity theft, immediately contact the institutions through which you have your accounts that were involved and your local law enforcement office. At IU, contact your IUPD campus office; for contact information, see How do I contact the university police at each IU campus? You may also want to contact the fraud departments of the three major credit bureaus, Equifax, Experian, and Trans Union so that they may place an alert on your file, blocking further fraudulent activity.
If the theft involved an IU person or a university technology, in
addition to the steps above, file a report with the University
Information Security Office (UISO) at
it-incident@iu.edu .
For more information, you can also visit the following web sites:
- Federal Trade Commission
- Identity Theft Resource Center
- Department of Education MISUSED home page
- LooksTooGoodToBeTrue.com
Last modified on November 10, 2009.







