We are all bombarded with information. Nowhere is this truer than in our mailboxes, both real and virtual. After all, everyone who wants to get in touch with us has a phone number, social media account and a million other low-cost ways to get in touch. It seems like the only people who send mail anymore are the folks who want to sell us something.
If you treat your mail like most people, you skim through it on your way from the mailbox to the door, stuff it in a mail sorter and promise to deal with it later. Your inbox gets treated the same way. If it is something from some-one you know, you read it, chuckle, and respond. If not, it is probably safe to ignore.
This is the kind of behavior that identity thieves are counting on. Petr Murmylyuk, a Russian immigrant living in New York, was convicted in 2014 of breaking into a number of online brokerage accounts like Scottrade, E*Trade Financial, Fidelity and Charles Schwab, among others. His purpose was to initiate trades that moved the price of assets in a complicated combination of identity theft and security manipulation. He cost his victims more than a million dollars in losses, and he will likely only have to pay about $500,000 in restitution. He did not get away with his fraud, but his victims still lost a lot of money.
Imagine if this happens to you. You keep your retirement fund in an online brokerage account. You regular deposit a few hundred dollars a month, and you do not want to withdraw the money any time soon. So, you just log in eve-ry so often to make sure your auto payments are being made and check the balance. One day, you check the bal-ance and discover tens of thousands of dollars are just gone.
If you are counting on your brokerage to reimburse you, you might be waiting a while. Scottrade, for example, “does not cover situations in which … you failed to take reasonable precautions to protect your privacy.” Fidelity, too, specifies the need to ensure that transactions were not made by someone you “allowed” to access your ac-count. Other online brokerage firms have similar policies to protect their own interests over yours.
What can you do to stop it? You already know how to maintain security on your online accounts. Choose strong, complex passwords. Do not access sensitive websites from public computers. Do not click links in emails that look suspicious. This is all the same financial personal hygiene you probably already practice.
However, when it comes to online financial accounts, like brokerages and draft accounts, there is an extra step you need to take. You need to read your statements carefully. Here is how the process works:
Pick a day each month. Making it the same time each month will help you remember as well as help you establish a reliable control. You do not need much time, just 20 or 30 minutes. Take care of it while you are drinking your cof-fee in the morning.
Go through monthly statements and confirmations for all your accounts. Make sure you or your spouse recognize every transaction that has been made. Keep an eye out for the following kinds of transactions:
- Transactions originating in foreign countries or other distant places. Identity thieves will often try to throw you off the trail and avoid prosecution by committing their crimes in distant places.
- Small transactions. It is tempting to write off a dollar here or there, but thieves are frequently counting on that tolerance. They will use a small transaction to test a stolen credit card or breached account. If they get away with that, they will try bigger amounts.
- If you suspect something is wrong with your security, call the company and ask for a login history. This is a document that lists the dates, times and locations of every access that has been made to your account. This should let you know if someone else has gained access. Obviously, if that is the case, you should change your passwords and let your financial institutions know immediately.
- If you notice anything else that is amiss, call the financial institution immediately. The longer you wait, the more likely it is they will conclude it was something you authorized. Even if it is off business hours, call immediately and leave a message. Starting the process as soon as possible creates a trail that will be useful in the event of a dispute about responsibility.
It is a big and scary financial world, but the price of financial security is constant vigilance. With proper precautions and monitoring your credit reports yearly from each of the three credit bureaus, TransUnion, Experian, and Equifax, you are off to a good start.
