Identity Theft Recovery & 
Cybersecurity Resources

Identity Theft Recovery

The following actions are intended to aid in the recovery of an identity theft victim. The order of these actions is intended to show the most critical actions first. COMPLETE THESE ITEMS AS SOON AS YOU LEARN OF FRAUDULENT ACTIVITY.

1. Contact one of the 3 credit reporting companies (Equifax, Experian, or TransUnion)
   • Make the company aware of the fraudulent activity
   • File an initial and extended fraud alert
   • Confirm company will contact other two companies to place initial and extended fraud alerts
     • A fraud alert requires creditors to verify your identity before accessing your credit report, so make sure each credit reporting company has your current contact information (home phone, cell phone, and address)
     • Extended fraud alert remains on your reports for 7 years and is free
   • When filing a fraud alert, request a copy of each credit report (Equifax, Experian, and TransUnion); by law, this should be free of charge; with an extended fraud alert, you can obtain 2 free copies of each credit report within a 12 month period
   • You can also have a credit freeze placed on your credit reports (optional)
     • Generally restricts all access to your credit reports; laws vary by state
     • There may be a small charge to temporarily suspend and reapply a credit freeze

2. Contact your bank and other financial institutions to make them aware of potential fraud
3. File an Identity Theft Complaint with the Federal Trade Commission (FTC) (see Identity Theft Resources document for website) and print an Identity Theft Affidavit from the FTC’s website
4. File a police report with your local police (bring copy of your Identity Theft Affidavit)
5. Dispute all errors on your credit reports by writing letters to each credit reporting company (Sample Letter)
   • List the errors that you found
   • Include copies of documents showing the errors
   • Ask the credit reporting company to remove fraudulent information
6. Dispute all errors on your existing accounts with the appropriate creditor/company
7. If you have had a tax return filed fraudulently in your name, complete the following in addition to the steps listed above:
   • File a valid copy of your tax return
   • Complete IRS Identity Theft Affidavit (Form 14039)
   • Contact IRS Identity Protection Specialized Unit (800) 908-4490
8. Change passwords to all financial, personal, and e-mail websites; do this regularly and make passwords complex; do not use the same password for all websites
9. Using anti-virus/anti-malware software, run full system scan of computer; make sure your computer’s firewall is turned on.

NOTE: Always document all names, phone numbers, and dates when you correspond with a credit reporting company or creditor.

Important Contact & Resource Hub

Custodians

• SchwabAlliance: 800-515-2157
• TDAmeritrade: 866-296-7455
• Fidelity: 877-556-0188
• Cass:   314-506-5545
• Schwab Charitabe: 800-746-6216
• Fidelity Charitable: 800-952-4438
• Vanguard: 800-462-2391
• Missouri MOST 529: 888-414-6678
• TIAA CREF: 800-842-2252

Credit Reporting Companies

• Experian: (888) 397-3742; http://www.experian.com/
• Equifax: (800) 525-6285; http://www.equifax.com/home/en_us
• TransUnion: (800) 680-7289; http://www.transunion.com/
• Sample letter to credit reporting company: http://www.consumer.ftc.gov/articles/0284-ask-credit-reporting-companies-remove-fraudulent-errors-your-credit-report

Government Resources

• Federal Trade Commission: http://www.consumer.ftc.gov/features/feature-0014-identity-theft
• Annual Credit Report: https://www.annualcreditreport.com/index.action - source of free credit reports
• IRS: (800) 908-4490; irs.gov/identitytheft; www.irs.gov/phising
• Online security and internet best practices: http://www.onguardonline.gov/

Note: Websites of major banks and financial institutions are great sources for additional tips and best practices.

Tips for Preventing Fraud in the Future

Cybercrime and fraud are serious threats and constant vigilance is key. Plancorp has policies & procedures, insurance coverage, and processes we follow to ensure client information is secure and we are doing all we can to protect our clients and their information. Our Chief Information Security Officer, Mike Esson, leads this activity and is available to discuss any questions or concerns.

While the Plancorp team plays an important role in helping protect your assets, you can also take action to protect yourself and help secure your information. This checklist summarizes common cyber fraud tactics, along with tips and best practices. Many suggestions may be things you’re doing now, while others may be new. We also cover actions to take if you suspect that your personal information has been compromised. If you have questions, we’re here to help.

Cyber criminals exploit our increasing reliance on technology. Methods used to compromise a victim’s identity or login credentials – such as malware, phishing, and social engineering – are increasingly sophisticated and difficult to spot. A fraudster’s goal is to obtain information to access to your account and assets or sell your information for this purpose. Following best practices and applying caution when sharing information or executing transactions makes a big difference.

How we can work together to protect your information and assets

• Keep us informed regarding changes to your personal information.
• Expect us to call you to confirm email requests to move money, trade, or change account information.

What you can do

• Be aware of suspicious phone calls, emails, and texts asking you to send money or disclose personal information. If a service rep calls you, hang up and call back using a known phone number.
• Never share sensitive information or conduct business via email, as accounts are often compromised.
• Beware of phishing and malicious links. Urgent-sounding, legitimate-looking emails are intended to tempt
• you to accidentally disclose personal information or install malware.
• Don’t open links or attachments from unknown sources. Enter the web address in your browser.
• Check your email and account statements regularly for suspicious activity.
• Never enter confidential information in public areas. Assume someone is always watching.

Exercise caution when moving money

• Leverage electronic authorization tools to verify requests. This is the fastest and most secure way to move money.
• Review and confirm all disbursement request details thoroughly before providing your approval, especially when sending funds to another country. Never trust wire instructions received via email and verify in person or via telephone.

Adhere to strong password principles

• Don’t use personal information as part of your login ID or password and don’t share login credentials 
  Create a unique, complex password for each website, Change it every six months. Consider using a password manager to simplify this process.

Maintain updated technology

• Keep your web browser, operating system, antispyware, antivirus, and firewall updated.  
• Check security and privacy settings by clicking the top right corner of your web browser. Make sure they’re strong.
• Turn off Bluetooth when it’s not needed.
• Dispose of old hardware safely by performing a factory reset or removing and destroying all storage data devices. 

Use caution on websites and social media

• Do not visit websites you don’t know, (e.g., advertised on pop-up ads and banners).
• Log out completely to terminate access when exiting all websites.
• Don’t use public computers or free Wi-Fi. Use a personal Wi-Fi hotspot or a Virtual Private Network (VPN).
• Hover over questionable links to reveal the URL before clicking. Secure websites start with “https,” not “http.”
• Be cautious when accepting “friend” requests on social media, liking posts, or following links.
• Limit sharing information on social media sites. Assume fraudsters can see everything, even if you have safeguards.

What to do if you suspect a breach

• Call Plancorp so that we can watch for suspicious activity and collaborate with you on other steps to take.