News & Views

Full article with accompanying PDF resource list posted at:

On the morning of January 7, I received three email messages from PayPal asking me if I had made three changes. If not, I was to call PayPal at the long distance number in Nebraska provided in the emails. Since I hadnt used PayPal in months, I called PayPal to straighten out what I thought would be a simple matter. The first call lasted 38 minutes and consisted of information sharing and being on hold, I learned that someone had changed my password, added his/her email address (danifilth@yahoo.com), changed my accounts primary email address, and then tried to authorize an instant transfer of $293.90 from my Golden 1 checking account to sales@tekgaming.com

As a result of the call, my existing PayPal account was closed and a new one opened. Even though the PayPal representative was reasonably clear and helpful, I was shaken by the unexpected intrusion. During the moment I took to ponder whether to call or visit my bank (Golden 1), my phone rang and a representative from my Visa credit card (also Golden 1) asked me if I had made 7 purchases totaling over $1,600 that morning! As a result of that 20-minute conversation, my current Visa account was closed and I was told I would receive a new card shortly.

Needless to say, after that conversation, I paid a personal visit to Golden 1. After 60 minutes, I left with new bank accounts, temporary checks, having signed a new direct deposit form for Pers and fraud alert phone numbers for the three major credit bureaus (Equifax, Experian and Transunion).

My next set of chores took the rest of the afternoon in my home office. I called Equifax first and found out they would notify the other two credit bureaus. Then I moved on to contact organizations that would be affected by my change of bank accounts and Visa credit card (e.g. online payments to IRS, FTB, SMUD, etc.). A major surprise was no access to the records from my old checking or Visa accounts, i.e. bill paying data and outstanding checksI was able to reconstruct everything, but it required additional timeand I had to write and mail checks for some of the items originally scheduled for online payment.

Luckily I was spared the stress of dealing with disputing out-of-pocket expenses; however, to make sure I covered the bases, I searched for state and national identity theft information online. Both the Federal Trade Commission and the California Office of Privacy Protection offer very helpful information; however, if you ever do need to deal with dispute resolution, you will find the sample forms and letters available at the Office of Privacy Protection website invaluable.

After digesting information from both sites, I filed a City of Sacramento Police Department crime report online (submitted on a Fridayreceived an email with report number on the following Tuesday). I found other online sources helpful as well; see the handout I distributed at the general meeting below.

Even though the aftermath continued through the end of February, I consider myself quite fortunate. What I hope were the last occurrencesbank insufficient funds notifications due to PayPal and bank computer glitcheswere resolved to my satisfaction.

I feel safer since I have a) an understanding of identity problems and remedies, b) changed key passwords and c) cancelled my PayPal account. Also, I have direct phone numbers and email addresses for key people who are familiar with my situation and can help me if anything else surfaces.
------

Attribution: © 2005 Gail McGovern, MacNexus, the Sacramento Macintosh User Group. May be reprinted without prior authorization by any registered Apple User Group.