Re: Identity theft

[robert <http://dummy.us.eu.org/robert>]

 > From: ", Flora" <http://www.state.vt.us/~Flora.>
 > Date: Wed, 6 May 2015 02:59:56 +0000
 >
 > I don't think they guessed my password. It consisted of random numbers, letters 
 > and special characters. They called the bank impersonating me. They knew my and 
 > Tim's social and our dates of birth and my poor phone password. 

Did the impersonators change your email or something?  I don't get how
they could get into your account from there.

In any case, my bank requires shared secrets in addition to SSNs,
birthdates, and phone PINs.

If they have your SSNs, then you should definitely freeze your credit
reports.  I've kept my frozen for years.

Re: birth dates.  Always lie when a web site requires your birth date and
never it post it anywhere.

Re: poor phone password.  I was about to say that you should probably
change your PIN.  And, never use a debit card except at your bank's ATM.
Use regular credit cards instead.

 > I will take your below suggestions. Also, I have requested a token from my 
 > bank. 

I assume that this is the 2-factor authentication I mentioned.

 > I will be filing a police report tomorrow.

Yeah.  Your bank will probably require this in order to get your money
back.  I had to do this many, many years ago when my checks were stolen.

 > I read online to have a box with 
 > a different zip code from where you live

I do this.

 > and have your bank statements and 
 > other financial info go there. 

Right.  It's a pain, but it too is not foolproof.  You still should shred
precious documents to make sure people don't dig through your trash.
Also, you should never reveal your box to anybody, especially online
shopping companies.  (I can show you tricks to get around doing this if
you want.)

 > This has all been quite stressful. I'll be going into work late tomorrow.