Guide to avoid online identity theft

[sticky fingers]

BT has today published a ten-point guide to help prevent internet users becoming victims of the growing threat of online identity theft.

The guide appears in an internet security report published today, written in conjunction with CPP, Get Safe Online, Lloyds TSB, Metropolitan Police and Yahoo! The report highlights the growth of online threats, the current situation and what the future holds.

For instance, 8% of UK PC users fall victim to online fraud and 15% know someone who has been targeted by an internet criminal. However, the report shows that customers are not taking appropriate, available steps to protect themselves - one in ten people questioned, for example, indicated that they would have no qualms about giving their credit card details to an unidentified third party.

“Online identity fraud is a growing and, until now, a silent part of fraud in the UK, which accounted for £1.7 billion last year - £35 per adult per year,” explained Ray Stanton, head of security at BT Global Services. “We want to make sure that people are aware of the threat and are protecting themselves online, so they can enjoy the benefits of the internet.”

“Criminals are always looking for new ways to make money,” explained Detective Chief Superintendent Nigel Mawer, head of the Metropolitan Police Economic Specialist Crime Unit. “Online identity theft and fraud are the latest techniques. By protecting themselves against the growing threat, users are also protecting others, so we urge everyone who uses the internet to follow the ten point guide.”

Notes to editors
Ten point guide to protect your online identity

1. Keep your wits about you at all times
Understand the risks and operate on the internet in the same way as you do in the offline world, with caution and appropriate scepticism. But do not be frightened; with simply precautions it is safe to use online banking and traders.

2. Question why a Web site is asking for information about you?
Think about whether it is somewhere or someone you want to give your details to. Only use secure web sites and also use common sense when it comes to phishing emails and web sites

3. Never give any online security details to anyone unless it is completely necessary
Be particularly cautious if you share your accommodation with other people. Consider pass wording your computer to avoid unnecessary access.

4. Look after your password
Change your passwords regularly and avoid standard passwords like a family member’s names or dictionary words. When creating a password use a combination of letters, numbers and even special characters, like an exclamation mark when possible. This will make your password ‘strong’. Do not use the same password for every secure site you are registered with.

5. Never click on links in emails
Always type the web site (www) address for banks, financial institutions and retail sites into the browser address line or store them using the browser’s favourites function.

6. Keep up-to-date
Keep your security software (anti-virus, anti-spam, anti-spyware and firewall), operating system and applications such as Microsoft Office up-to-date at all times.

7. Remove the spies
Check all files on every computer that is connected to the internet at least once a week using anti-spyware and adware applications.

8. Keep your connection secure
Make sure everyone who uses the computer understands the precautions they need to take when online. Do not leave your broadband live unnecessarily and if you use a wireless modem ensure you set it to use at least 128-bit encryption if you are registered for online banking.

9. If it seems too good to be true, it probably is
Don’t open emails or go to sites that claim you have won a prize, unless you’ve entered a specific competition. If an email looks suspicious and is unsolicited delete it and don’t open it.

10. Know where to go for help should you be a victim of online identity theft
There are wide range of organisations and groups that people can turn to for advice should they be the victim of online identity theft. These include the police, industry bodies and suppliers of online services.