Most of us realize that there’s a lot of valuable information that can be gleaned from the Internet. Whether you’re looking for the latest gossip on your favorite Hollywood star, following the election or researching a paper for school, the Internet can help you get the information that you need.
While most of us spend a lot of time pulling information from the Internet, sometimes we find ourselves posting it as well. We might be posting a question to a newsgroup seeking a technical answer or looking for that long-lost relative. What we must also realize is that in much the same way that we use the Internet to get information about our favorite topic, identity crooks are surfing the Internet looking for bits and pieces of personally identifiable information that they can use to steal our precious names.
Be careful what you post
All information is not created equal. As tempting as it may be to simply advise people not to post or provide any information online, it isn’t practical. There are legitimate reasons to post information online, and by not doing so, we reduce our online experience and limit the benefits of the Internet.
What we can do, though, is be careful about the type of information we provide. While it makes sense to post detailed information online about a technical problem so you can get help resolving it, it’s more difficult (but not impossible) to justify providing more personally identifiable information, such as name, address, date of birth, Social Security number, mother’s maiden name, etc.
We also need to remember that the more information we provide, the more significant it becomes. For example, if someone comes across your first name on the Internet, it means very little. Add your last name to it, however, and it means a bit more. Again, add a few more bits of information, such as your address and your date of birth, and you can quickly see where things start taking shape for an identity thief who’s on the prowl. So it’s not simply the type of information, it’s how it all can be used together.
Understand why you’re providing information
I doubt there are many people who’ve heard about protecting their personal information more than my friends and family have. Considering my background, it’s just my thing. I’m constantly telling them to protect it and to do so fiercely. Yet, even after hearing it day in and day out for the last five or so years, they’ll still sometimes provide information without really knowing why. Legitimate business or not, just because someone tells you they need your Social Security number doesn’t mean they really do. Don’t provide it without asking why. You’ll be surprised at how many of those people asking for it really don’t know why they need it and, in the end, won’t require you to provide it if you challenge it.
In the online world, even if some online forms request personal information, the information may not be required. Don’t assume that it is — see if you can proceed without providing it. If the information is required, take a minute to decide whether it makes sense for you to supply it. If something doesn’t seem right, don’t provide the information.
Is it worth the risk?
As you provide information online, measure not only whether it makes sense but also if it’s worth the risk. For example, if you’re getting your credit report online through a secure website from one of the three bureaus, you should expect to provide some personally identifiable information. In this case, the risk is relatively low, since you’re dealing with one of the three credit bureaus, making the transaction through their secure site, and getting a credit report in return, which is an important item and likely worth the small risk.
However, what if you’re providing personal information on a form as part of an online contest to win a free phone? Do you know who the recipient of that information really is? Is taking the chance of providing that information to an identity thief really worth the chance to win a free phone? It may sound far-fetched, but it’s not — people do it all the time. As part of surveys or contests, they provide very personal information without stopping, taking a deep breath, and asking if it’s worth the risk. They get caught up in the moment, as I vividly remember just a couple years ago when my wife received her free phone in the mail. As I asked all those questions that you would suspect that a person with my background might ask, we found out that what she really won was a new cell phone contract that she didn’t need.
How much information is too much?
There’s no quick and simple answer to this question. It depends on the type of information and why you’re providing it. I’ll go so far as to say, however, that providing any information that you don’t need to provide is too much. Protect your personal information fiercely, and always remember that your information might stay out there in cyberspace for a very long time. There will always be a crook out there browsing the Internet looking for those bits and bytes of information to steal someone’s precious name. Don’t let yourself become the next identity theft victim.