Identity Theft on Facebook

I’m not usually one to perpetuate fear of the internet.  I’m a pretty open book when it comes to my online life.  This recent article though has made me take notice, and I wanted to be sure you know how to protect yourself from things like this.

The article talks about a man who stole around $57,000 from his neighbors in his apartment complex in the UK.  He did it by randomly checking out banks for usernames of his neighbors and then using their Facebook profiles to answer the security questions.  Once he gained access he was able to have the bank reissue cards, and transfer money.  Although he wasn’t very smart in transferring money to his own personal bank account.

So, there are 2 lessons here.  First, how easy is it to find your Mother’s maiden name on your Facebook profile?  What about other information, like your kids birthday’s, your birthday, where you were born, what high school you went to?  If you have used any of that information for a “forgot password” security question, then it shouldn’t be readily available on your Facebook profile.  Especially if your profile isn’t very private.

Second lesson is on the Security Questions itself.  If I’m allowed, I will always write my own question.  I have a question that I use frequently, that doesn’t have a real answer.  The answer is a made up location.  It doesn’t exist.  If I can’t write my own question, I will always pick a question that does not have an answer people can find on the internet.  I always say, people can find out what your Dog’s name is, or where you were born, or what your Father’s middle name is.  These are things that a little big of digging into the internet or public records can reveal.

If all of the questions have answers that are likely recorded somewhere, make up an answer that isn’t the real answer but is one you remember.  So, say you want to use your Father’s middle name as a security question.  If your Father’s real middle name is John, pick something like Joe as your answer.

We are able to access so much information on the internet, from our Credit Cards and bank accounts, to our bills and social networks.  Don’t let someone gain access to your information by putting the data out there that they need to take control of your accounts.