Identity Theft

You've probably seen a movie scene where a spy wears a mask of someone's face, copies their voice, and walks right through a secure door. Identity theft in the digital world works much the same way. A criminal steals your personal information and builds a version of you to wear online.

Websites and bank servers can't see the real face of the person on the other side of the screen. So they check who you are by whether the information matches: your username and password, a copy of your ID, a phone verification code. Criminals get hold of that information and disguise themselves as you almost perfectly, slipping past the security system.

When this happens, you could be sitting at home doing nothing, and a huge payment goes through in your name or a loan you've never heard of gets approved. Scattered bits of your data come together and become the most powerful key a thief could ask for.

Copying someone's photos on social media to pose as them is one thing. Identity theft is on a completely different scale. It takes over the legal standing and financial credit a person has spent years building, all at once.

Using stolen personal data, criminals take out loans through online-only banking apps or open new credit cards and max them out. If they also activate a prepaid MVNO phone line (a budget carrier plan) in your name, they can intercept the verification text messages too, and the victim has no chance to react. The debts and overdue records created this way stay in the victim's name until the fraud is proven and the record is corrected.

Victims often find out only when their bank account is suddenly frozen or a police summons shows up. Getting the lost money back is hard enough, but repairing your stolen credit and getting your daily life back takes far more time and stress than most people imagine.

These days, thieves don't just copy one person's information as is. To be more precise, a growing problem is synthetic identity theft: stitching together leaked data from several people to create a fake person who doesn't actually exist.

For example, in the U.S., a criminal might pair the Social Security number of a child who has no financial history with a made-up name and birth date. The financial system has a hard time telling right away whether this person is real. The criminal then builds up a credit score by paying small bills on time with this ghost identity, and finally takes out a loan worth tens of thousands of dollars and disappears.

To reduce your risk, use a different password for every site and make a habit of turning on two-factor authentication wherever you can. It also helps to use an identity-protection service and check regularly that no new phone lines or financial accounts have been opened in your name.