News RSS Feed


ID theft advice after child benefit fiasco

9:22am Thursday 22nd November 2007

comment Comments (16)   Have your say »


THE answer to avoiding becoming an identity theft victim can be found at the end of your hand.

That's according to the man behind a free Yorkshire website aimed at foiling criminals who steal people's confidential information.

Scarborough-based Jamie Jamieson, who operates the www.freeidprotection.co.uk site, says following its advice makes it virtually impossible for crooks to take out credit, apply for loans and mortgages and open bank accounts in other people's names.

His tip comes amid the scandal of HM Revenue & Customs losing discs containing the dates of birth, addresses and bank details of 25 million people.

Jamie says the key to ID theft protection lies in sending letters - the templates of which are held on his website - to the UK's three credit reference agencies, Equifax, Experian and Callcredit, warning lenders that any applications they receive must be authenticated by the applicant's thumbprint or be treated as fraud.

"These are called Notices of Correction and lenders must take notice of them," says Jamie, who set up the website earlier this year.

"Nobody else's thumbprint is good enough for an application, and it means that if a lender gives out credit in your name without a print, you are not liable. You can prove beyond doubt the application was not yours, and the fraudster's print can be given to the police as forensic evidence to help track them down.

"Although ID fraud is easy to commit, it's also easy to prevent, but so many people don't realise this. What has happened this week is finally making the public much more aware of the problem. This system is simple, quick and free, but everybody has a choice and it's only as good as the number of people who use it.

"The important thing is that ID thieves can't fake somebody else's thumbprint, and people who've followed our advice say it has been a tremendous weight off their mind because it doesn't give crooks the opportunity. The establishment clearly can't be relied upon to keep people identities safe - we have to take our own precautions."

Jamie's website, which also provides information on how to obtain inkless thumbprint pads, only asks for small donations to be made to St Catherine's Hospice in Scarborough and Cancer Research UK.

Meanwhile, York councillors have renewed calls for the Government's planned national ID cards scheme and register to be scrapped following the child benefit records fiasco.

Heslington councillor Ceredig Jamieson-Ball said: "If the Government cannot be trusted to look after the records of benefit claimants, how on earth can they be trusted to store data on every individual in the UK?

"There will be thousands of parents in York worried about how the Government intends to protect their identity following this loss when they simply can't prove lost data won't fall into the wrong hands."

York's Green Party leader Andy D'Agorne says he and fellow councillor Dave Taylor will donate to a legal fighting fund to defend those refusing to register if the ID card proposals become reality. He said: "Putting all our data in one place will be an ideal way to focus the efforts of every fraudster and computer hacker."


Your Say YourYork Press

andyb, york says...
9:50am Thu 22 Nov 07

Dead right, I`s Bad enough big Brother having all the details of your life without losing them as well. The can get stuffed if they think they`re going to make me have an ID card.

Jo, York says...
10:19am Thu 22 Nov 07

The important thing is that ID thieves can't fake somebody else's thumbprint


I'm fairly certain that if they root through your bins and find your mail then they'll be able to extract a thumbprint.

oli4uk, York says...
10:26am Thu 22 Nov 07

Im surprised to say it but I agree with D'Agorne on this one, I am not a fan of the ID card scheme, though I have to admit its more because the gornment is forcing the cost onto us rather than the issue of data security.

My only other issue is how the government will use and/or abuse the power offered by an identity card, the country is already too much of a nanny state, this provides countless opportunities of them increasing this.

akuma, York says...
10:59am Thu 22 Nov 07

I think people need to remember that the missing details while disgraceful on the part of the government.

THEY HAVE NOT BEEN STOLEN, NORE IS ANYONE SUGGESTING THAT THEY HAVE

They have been lost because of unforgivable admin errors.

While its alway sensible to keep tabs on bank statements etc, we are at no more risk from ID theft now, than we were last week before this story broke.

dhars, york says...
11:41am Thu 22 Nov 07

Whilst this sound a good idea intially how does this work practically. Who is going to check the thumprints if a fraudster has set up an account, and who will pay for pay for fingerprint experts to check them.

Also, if I have to submit a print for it to be accepted, does this mean I can no longer apply myself over the internet or by telephone as I can't submit my thumbprint then. Is my only option having to go and queue in the bank, and miss out on getting the best rates through online applications.

Free service or not Jamie, thanks but no thanks, sounds like by signing up to this then the fraudsters have won by making it harder for me to carry on with my life. I'll take my chances.

Jo, York says...
11:41am Thu 22 Nov 07

Akuma, I don't see the difference between lost and stolen, other than intent.

They have gone missing. They contain a lot of sensitive information. The risk of ID theft is surely worse.

akuma, York says...
11:49am Thu 22 Nov 07

Jo wrote:
Akuma, I don't see the difference between lost and stolen, other than intent. They have gone missing. They contain a lot of sensitive information. The risk of ID theft is surely worse.
Not true.

They have been lost in the government system, deleted during data migrations, not been accept by computer system when input, etc...

There is not 25 million sheets of paper in a bin somewhere with everyones infomation on just waitng for the wrong person to find it.

It got to be looked at in context, but add a bit of media scare mongoring and sensationalism to sell papers and you'd think we were all screwed.

RikRock, York says...
12:05pm Thu 22 Nov 07

HM Revenue & Customs losing discs containing the dates of birth, addresses and bank details of 25 million people.


Akuma, they have not been deleted or not accepted when inputed etc.. - They have lost the actual DISCS (CD's) containing the data

Badger, York says...
1:15pm Thu 22 Nov 07

RikRock wrote:
HM Revenue & Customs losing discs containing the dates of birth, addresses and bank details of 25 million people.
Akuma, they have not been deleted or not accepted when inputed etc.. - They have lost the actual DISCS (CD's) containing the data
Whilst it appears to be true that 2 CDs have gone missing, containing the data, the risk is still small.

We are told that the discs haven't been made to order in an attempt deliberately to pass data to criminals.

Assuming that is true, then there are 2 discs circulating somewhere (or stuck down the back of a radiator in a mail room) with unencrypted data which is password protected.

For the data to be useful, you need to assume that someone who knows what the discs are gets hold of them. That person then needs to be untrustworthy enough to pass the discs to someone who knows what to do with them in order to crack the passwords (possibly an easy job depending on the password) and then to use the data obtained for nefarious ends.

There are lot of ifs there, so I reckon the risk is low.

This shouldn't be confused with the fact that the weak link here was a human who has dropped a huge clanger and probably should be moved to a different job along with the managers who allowed this to happen. Nor should it be confused with the outcomes for potential vicitms should the data fall into the wrong hands by whatever route. Obviously, the trouble for an individual affected by identity theft is high, though the risk of it happening is low in this case.

Of course the guy who burned the discs could have been paid to get hold of the data, in which case the s**t will hit the fan!

Rantin Reg, Selby says...
1:20pm Thu 22 Nov 07

Solution: Oust this pathetic excuse for a government before the country becomes an even bigger shambles!

Rantin Reg, Selby says...
1:27pm Thu 22 Nov 07

Early retirement tips for Mr. Easty-Beastie identity stealer.

1. Come to England.

2. Take a job that none of the 1.65 million lazy British scivers will do.

3. Pay your taxes.

4. Submit a Data Protection Act Subject Access Request to HM Inland Revenue and stand back. - It will be too difficult for them to extract your data from the 30-40 million records they hold, so they will send you the lot on disk.

5. Sell the details to your Ruskie friends.

6. Retire in the sun.

Jo, York says...
2:06pm Thu 22 Nov 07

If the data is unencrypted then you don't need a password.

The disk might have some software which autoruns and asks for a password, but if you browse the CD's contents you'll find all that lovely data which is immediately readable and exploitable

akuma, York says...
2:34pm Thu 22 Nov 07

Akuma, they have not been deleted or not accepted when inputed etc.. - They have lost the actual DISCS (CD's) containing the data


Ok, I conceed that I was parcially wrong in the loss of the data.

But password or not, assuming it fell into the worng hands, the data will be stored in a format that only government software can read.

I highly doubt (but don't know) that its in Excel format.

It would be like trying to read hex in ms word.

Elizabeth, york says...
3:07pm Thu 22 Nov 07

akuma wrote:
Akuma, they have not been deleted or not accepted when inputed etc.. - They have lost the actual DISCS (CD's) containing the data
Ok, I conceed that I was parcially wrong in the loss of the data. But password or not, assuming it fell into the worng hands, the data will be stored in a format that only government software can read. I highly doubt (but don't know) that its in Excel format. It would be like trying to read hex in ms word.
The discs were not encrypted.

Badger, York says...
5:48pm Thu 22 Nov 07

Elizabeth wrote:
akuma wrote:
Akuma, they have not been deleted or not accepted when inputed etc.. - They have lost the actual DISCS (CD's) containing the data
Ok, I conceed that I was parcially wrong in the loss of the data. But password or not, assuming it fell into the worng hands, the data will be stored in a format that only government software can read. I highly doubt (but don't know) that its in Excel format. It would be like trying to read hex in ms word.
The discs were not encrypted.
No they weren't, but the format of the data rather than the encryption is the issue here. Most government departments seem to use antiquated software and database systems that are not compatible with other systems. It's unlikely that the data is in Excel or Access format and if it is stored in a proprietary format will be pretty difficult to read, encrypted or not.

Mr-Niceguy, Nottellinyer! says...
10:21pm Thu 22 Nov 07

INSIDE JOB WITH THE INTENTION TO DISCREDIT?

Comments are closed on this article.




Local Advertisers


Local Information

Enter your postcode, town or place name

House prices »   Schools »   Crime »   Hospitals »