Washington, D.C.NASD issued an Investor Alert outlining ways investors can protect themselves from online identity theft.
The fastest growing online identity theft scam is “phishing” – a scam that uses legitimate-looking spam email to lure investors into revealing their brokerage account or bank information, Social Security numbers, passwords and other types of confidential information. According to an industry study by the Anti-Phishing Working Group (www.antiphishing.org), the number of unique phishing attacks has grown dramatically in 2004 – from 176 in January to 1,197 in May.
Other online identity theft scams include Trojan Horses and Brokerage Firm Identity Theft. Trojan Horses are malicious software programs that hide in files attached to an email or that you download from the Internet. Trojan Horses used in identity theft scams often take the form of “keystroke loggers” – programs that log the keystrokes the investor types, allowing scamsters to find the investor’s usernames and passwords and giving them access to the investor’s online accounts.
Some scamsters are copying brokerage firm web sites – creating phony web sites that misappropriate the name or web site content of legitimate brokerage firms to solicit business from unwary investors.
“The Internet has revolutionized the way that many individuals manage their finances, and interact with financial service providers. With the click of a mouse, you can view account information, pay bills, research investments, and buy and sell securities. Unfortunately, “identity thieves” also can exploit the Internet,” said John Gannon, NASD’s Vice President for Investor Education. “While identity theft is a growing problem online, with some vigilance and caution, individuals can better protect themselves from falling victim to these scams.”
In its new Investor Alert, NASD offers investors detailed tips for protecting against online identity theft, including handling of suspicious emails and suspicious web sites, and keeping personal and financial information secure online.
NASD’s Investor Alert on Online Identity Theft can be accessed at http://www.nasd.com/Investor/Alerts/alert_hacker.htm
Nothing herein is intended as legal or financial advice. The law is different in different jurisdictions, and the facts of a particular matter can change the application of the law. Please consult an attorney or your financial advisor before acting upon the information contained in this article.
Return to The Securities Law Home Page