Think Before your Click to Protect Yourself from Identity Theft by Eric P. Zeitlin

Hardly a week goes by without news of another data breach or similar situation in which individuals’ personally identifiable information is exposed. Even some of the most well-known and respected brands, including Equifax, Target, Sony and FaceBook, have been targets of attacks. As criminals get more creative in the ways in which they commit these crimes, consumers and the investing public must remain vigilant and take appropriate precautions to protect their identities and keep their personal information hidden from prying eyes.

Most investment advisory firms make it easy for their clients to securely log into a portal to review and download account statements and end-of-year tax forms, including 1099s. Similarly, investors may share these documents, as well as pay stubs, social security numbers and other sensitive information, with their advisors and tax preparers via email or file-sharing platforms, such as Dropbox. The problem with these convenient methods for sharing data is that they can be prone to security flaws that may increase the likelihood that individuals will fall victim to scams.

Some of the most common forms of identity theft involve email, text and telephone phishing and malware attacks. In these scams, criminals often pose as a person or organization that victims know, such as a coworker or vendor with a trusted email domain, in order to “reel in” victims to open a message. Criminals then attempt to “lure” the victims into clicking on a link or opening an attachment that tricks victims into disclosing personal information and/or contains malware that allows criminals to access victims’ files or track keystrokes to gain information.

Protecting investors from becoming victims of email scams requires that they think before they click and recognize the tell-tale signs of phishing attacks.

• The Message Contains a Link. Scammers often pose as the IRS, financial institutions, credit-card companies or even tax-service providers to lure unsuspecting victims into logging into their accounts via a “spoofing site” that looks like a legitimate website.  The link may appear to come from a trusted URL, such as www.irs.gov, when, in fact, it directs victims to a malicious website. To avoid these scams, investors should refrain from “clicking” links contained in emails. If an email appears to be out-of-the-ordinary, the recipient should close the message and either telephone the legitimate sender or open a new browser and type in the agency or business’s correct website address.
• The Message Contains an Attachment.  Email messages may include attachments that, once opened, can download malicious software onto victims’ computers, often without the victims’ knowledge. Similarly, the attachment may contain spyware that allows criminals to track victims’ keystrokes and secretly obtain passwords, Social Security numbers, financial accounts and other sensitive data.
• The Message Purports to Come from a Government Agency or Financial Institution. Fear tactics, such as the threat of fines and imprisonment, are commonly used to trick unsuspecting victims into opening emails and replying with their personal data. Investors should know that the IRS will never initiate contact with them via email or telephone, nor would the agency ask taxpayers for PINs, passwords or similar confidential information.
• The Message is from a Friend.  Criminals who hack individuals’ email accounts can potentially steal all the email addresses of the victims’ contacts. Subsequently, scammers may send phishing attempts to every one of those contacts, who may assume those messages are from their friends or colleagues and inadvertently divulge their sensitive data. Often, these messages contain clues indicating they may be fraudulent, such as a missing subject line, obvious typos or improper language use.

About the Author: Eric P. Zeitlin is managing director of Provenance Wealth Advisors, an Independent Registered Investment Advisor affiliated with Berkowitz Pollack Brant Advisors + CPAs, and a registered representative with Raymond James Financial Services.  For more information, call (954) 712-8888 or email info@provwealth.com.

Provenance Wealth Advisors, 515 E. Las Olas Blvd., Ft. Lauderdale, FL 33301 (954) 712-8888.

Eric P. Zeitlin is a registered representative of and offers securities through Raymond James Financial Services, Inc., Members FINRA/SIPC.

Raymond James is not affiliated with and does not endorse the opinions or services of Berkowitz Pollack Brant Advisors + CPAs. PWA is not a registered broker/dealer and is independent of Raymond James Financial Services. Investment Advisory Services offered through Raymond James Financial Services Advisors, Inc., and Provenance Wealth Advisors.

This material is being provided for information purposes only and is not a complete description, nor is it a recommendation. Any opinions are those of PWA and not necessarily those of Raymond James. The information has been obtained from sources considered to be reliable, but Raymond James does not guarantee that the foregoing material is accurate or complete. There is no guarantee that these statements, opinions or forecasts provided herein will prove to be correct.