Avoiding Scams

So much is done online today—shopping, banking, keeping up with friends, and more—that identity theft and other scams are a bigger risk than ever. It’s particularly true for people with disabilities who may need to give personal assistants, family members, or others access to their computers, phones, and tablets. Learn some ways to protect yourself.

What is Identity Theft?

Identity theft is when criminals trick you to get access to your personal information – your birth date, Social Security number, accounts, passwords, contacts, photographs, files, and more – and use that to steal your money, open credit accounts, file tax returns, make health insurance claims, and more, all without you knowing.

Improving Your Digital Security

It’s convenient to do most things online, but it’s a risk because online data can be stolen. Do everything you can to reduce that risk.

Protect Your Login

• Know which accounts have sensitive information. Bank accounts, shopping sites and social media all store important data about you. Use a different ID and password for each account and, if you can, don’t use an email address as your user ID. Here are three simple tips to make your passwords stronger.
• Don’t give your password to anyone. If someone asks for your password by phone, email, or text, say no. If you need to let someone use your passwords to help you with your accounts, check those accounts weekly. If you must give passwords to someone you don’t know, like a temporary assistant, change the passwords afterward.
• Use a password manager. It’s important to have separate passwords for all of your accounts, so that if one account is hacked, the rest will still be safe. That means you need a program that keeps track of all your passwords. Web browsers (like Chrome, Firefox, Safari, or Edge) can store passwords for you, but it’s even better if you use a separate password manager service or program. A password manager can also help you by automatically generating complex passwords that hackers can’t guess. Get more information on choosing a password manager or watch a video about them.
• Use dual-factor authentication if you can. Also called two-step verification, dual-factor authentication makes it harder for someone else to get into your accounts. The way it works is that after you enter your user ID and password, you’re asked for a second piece of information, like a fingerprint, smartcard, or a code sent to you by email, phone, or text. You can only enter your account when you give that second piece of information.
• Be careful using Google or Facebook to log in to other sites. If you log into sites using Google or Facebook, be extra careful with your Google or Facebook account. Use strong passwords, have different passwords for each, change passwords every 60 days, and check Google’s or Facebook’s security center frequently.

Protect Your Computer and Phone

To prevent scammers from taking control of your computer or phone:

• Use antivirus software
• Schedule and accept automatic security updates, or check at least monthly that you’re up to date
• Use software that is well known and is recommended

Be Aware of Phishing Scams

Scammers try different ways of fooling you into giving them your passwords, credit card information, or other personal details:

• Fear: Threatening you with serious consequences (like being arrested or shutting off your utilities) unless you act quickly.
• Curiosity or greed: Promising a big payout for a small fee.
• Relationships: Saying a loved one needs you to send money immediately, or bad things will happen.
• Looking real: Pretending they are Amazon, your bank, the IRS, or some other company or organization.

Be cautious if you get an unexpected text or email. Check the return address and look for spelling and grammar errors. Even if it looks good, it can still be a scam. If you have any doubts, delete it without opening it, then contact the real company’s customer support.

For a suspicious phone call, ask for a number to call back, and then check that phone number against the ones on the company’s website.

These scammers use their tricks and their stories to get you to send them money, give them your personal information, or click on their fake links. Don’t. Assume that any call, text, or email came from a scammer until you can prove otherwise.

Be Careful Online

Stay alert. Scammers set up fake sites that are similar to real addresses, like “peopels.com” instead of “peoples.com” for People’s United Bank. Check your credit card and bank statements regularly, either in print or online, and tell your bank immediately if you see anything unusual.

Use a credit card instead of a debit card for online shopping, because credit cards have the strongest protection. If you must have someone else enter credit card information for you, keep a close eye on that account.

The more places your personal info is stored, the more chances it can be stolen, so limit the number of sites where you save your address and payment information.

Improving Your Physical Security

You also need to protect your identity when you are physically out and about, not just online.

ATM and Debit Card Safety

It’s harder to steal a debit card through an ATM or cash register than online, but it happens. Make sure no one can see you enter your PIN at a cash register, gas pump, or ATM, and never store your PIN with your debit card. If possible, use an ATM at your bank or a bank you know. Sometimes, scammers set up fake ATMs to steal debit card information.

However, most debit card theft is done by someone with easy access to your card and PIN. Store your credit and debit cards carefully when at home and make sure to watch any activity on your account.

Think About What You Carry

Carry only the ID and cards that you need and nothing more. Some wheelchair users keep a small bag on the side of their chairs because it’s hard to access a wallet in their pocket. If you do this, make sure the bag is securely attached to your wheelchair and zipped at all times.

Credit Fraud

Actual identity theft, where criminals open credit accounts in your name, is less likely than simple theft, but is more serious. Your bank or credit card company may monitor your credit for you at little or no cost, and will alert you if a credit card or loan is opened in your name.

You can also look into freezing your credit as an extra security measure. If you decide to freeze your credit, you will have to get it temporarily unfrozen if you need to let somebody see your credit report for good reasons (like if you apply for a credit card).

Create an Action Plan

If you realize you gave a scammer money or your personal information, or a scammer has control of your computer or phone, create an action plan listing all the steps you need to take. The Federal Trade Commission (FTC) explains What To Do If You Were Scammed, including how to report it to the FTC.

Resources for Avoiding Scams

Learn more about how to protect yourself from scammers.

• Consumer Credit Counseling Services (CCCS) offers a downloadable Identity Theft Prevention Guidebook.
• The Federal Deposit Insurance Corporation (FDIC) has cybersecurity tips to protect your online bank information.
• Hands on Banking explains how to manage Identity Theft and Fraud.
• MyCreditUnion.gov has a Fraud Prevention Center.
• The World Institute on Disability offers an interactive online course on Identity Theft (free account registration required).