Wilson Mar bio photo

Wilson Mar

Hello!

Calendar YouTube Github Acronyms

LinkedIn

How to block thieves from taking advantage of data leaks to steal your good credit and money.

US (English)   Norsk (Norwegian)   Español (Spanish)   Français (French)   Deutsch (German)   Italiano   Português   Estonian   اَلْعَرَبِيَّةُ (Egypt Arabic)   Napali   中文 (简体) Chinese (Simplified)   日本語 Japanese   한국어 Korean

Overview

Your data is exposed

Today, what used to be secrets that uniquely identify you (social security number, birth date, home address, etc.) are now exposed over the dark web.

Even the government agency (DISA) which processes applications for Top-Secret clearance for all branches of the US military has been hacked.

Yet, many companies still give anyone access to your information when given enough of your secrets.

Monitoring is not enough. What will you do if you find out if you’ve been exposed?

[_] Look yourself up at:

Proactive defense

Here’s what can you do to guard your secrets: I can help you.

  1. Avoid doing business with organizations which have been hacked or does not offer MFA.

  2. On your mac, install and use a secure internet browser: Tor using brew install –cask tor-browser
  3. Install a Password Manager/Generator (KeePassXC) to generate a new for each account.
  4. Create a password database that works locally rather than over the internet cloud.
  5. Store your password vault on a secure USB device.
  6. Enable your trustee to access them if you are ever disabled or killed.

  7. Install Authenticator App Aegis (Android) or Authy on your mobile phone for MFA (Multi-Factor Authentication).
  8. Get a USB Yubikey (with custom markings) on your physical keychain to protect key accounts (emails, Paypal, banking, etc.).

  9. Create a different email for signing up to utilities (phone, trash, electric, etc.).
  10. Setup the phone number from your mobile carrier for Google Voice
  11. Give out your Google number rather than the phone number from your mobile carrier.
  12. Note in your Password Manager every account where you gave your private phone, so you can update them when that changes.

  13. Generate random nonsense words as answers to account recovery, and write them in your Password Manager.
  14. Give to medical personnel a birthdate that is a few days off because you’ll be asked to announce it publicly at medical offices.
  15. Do not give out information to somone calling you.

  16. Block thieves from using your social security number to apply for jobs.
  17. Unblock it before you submit an I-9 before starting work.

  18. Block thieves from opening credit in your name.
  19. Unblock your credit before applying for a credit card or loan.

  20. Open a POBOX to receive physical mail so your home address is not exposed.
  21. Print bank checks with POBOX rather than your home address. Aoid writing paper checks.
  22. Buy property using an Land Trust registed through a lawyer to avoid exposing your home address (but not jeopardizing Homestead protections).

  23. Get a passport to show TSA during travel (both domestic and international).
  24. Get a drivers license without your home address (not a Real ID).
  25. Remove biometric capabilities before/while traveling.
  26. Get a burner phone to use while traveling.

  27. Open an email only for banks (so you can ignore emails about banking on your social email).
  28. Create a different name and each account for social media.
  29. Setup an alternative name and email address to make social media posts.

  30. Setup blocks of calls from unknown numbers.
  31. Add known callers to your allow list.
  32. Ask those contacting you how they got your phone number.

  33. Keep cash on hand for emergencies.
  34. Hide valuables wisely.

Block Credit

In the US there are three companies that keep credit files which banks query before issuing credit:

WARNING: Do this at home rather than on an unsecure airport/hotel line.

[_] Equifax: Instructions at: https://www.equifax.com/personal/help/article-list/-/h/a/place-lift-remove-security-freeze/

  1. For information, see https://www.equifax.com/personal/credit-report-services/credit-freeze or call 888-298-0045 or send a registered letter to: Equifax Information Services LLC, P.O. Box 105788, Atlanta, GA, 30348-5788 https://www.equifax.com/personal/products/credit/credit-lock-alert/

  2. Use a secure browser to sign Up for an account online at
    https://my.equifax.com/consumer-registration/UCSC/#/personal-info
  3. Give your POBOX and phone.
  4. Equifax challenges you with confirming historical trivia from your credit history.

QUESTION: Is there a PIN to make changes?

  1. Optionally install the Equifax mobile app on iPhone or Android.
  2. In your email app, add a star for any email from the “from email”.

[_] Experian (used by Capital One) https://www.experian.com/blogs/ask-experian/how-to-add-a-security-freeze-to-your-credit-file/

  1. Use a secure browser to sign Up for an account online at
    https://www.experian.com/freeze or 888-397-3742 (8AM - 7PM CST) or send a registered letter to: Experian Security Freeze, P.O. Box 9554, Allen, TX 75013
  2. Click “Create a free account”.
  3. Click in “Last 4 of Social Security Number” and type it.
  4. Type in your secure phone number.
  5. From the text message, copy the URL and paste in your secure browser.
  6. Switch to the form and fill out your birth date, SSN.
  7. Enter your banking email, POBOX mailing address
  8. Generate a security question answer and random 4-digit PIN in your password manager.
  9. Copy answers from the password manager and paste it in the form. Submit and Continue.
  10. Call the company at 888-548-7878 if it cannot authenticate you.

  11. Write down the confirmation number and PIN number in the mail. This is very important because even if people know all your info, they don’t know the PIN assigned to your account.

  12. In your email app, copy the “from email” address and add a formula to star if when email comes from that email address.

[_] TransUnion (used by Capital One) 800-916-8800 M-F 8a-9p ET & SatSun 8a–5p ET. Instructions are at: https://www.transunion.com/credit-freeze/credit-freeze-faq#adding-freeze-0

  1. PROTIP: Avoid using a secure browser to Sign Up for an account online at
    https://www.transunion.com/free-credit-monitoring
  2. Click “Sign Up for Free”. BLAH: I got stuck at their “Validating information”.

  3. PROTIP: Sign up by phone: 833-806-1627 because I got rejected by their website.

QUESTION: Is there a PIN to make changes?

  1. In your email app, add a star for any email from the “from email”.

“Although not required, including one proof of identity and two proofs of your current address with your request can help us locate your record more efficiently. If you include documents with your request, all documents should reflect your current name and be unexpired. Please only submit photocopies of your documents. These can include:



The above actions has no effect on credit cards you already own. A freeze does not block charges on your credit cards. You can still use the credit cards you have.

UnBlock Credit

If you forget to unfreeze you credit before applying, you will most likely be denied.

Credit agencies must lift the freeze within one hour of an unfreeze request made online or by phone, or within three business days when made by mail.

  • https://my.equifax.com/membercenter/#/home

  • Experian

  • https://service.transunion.com/dss/login.page?dest=freezeStatus

Free credit report

[_] Mark on your calendar a repeating appointment each year to request a credit report from each credit reporting agency.

According to https://consumer.ftc.gov/free-credit-reports Extra free reports qualify if denied credit/employment, suspecting fraud, or unemployed.

  1. In a browser, go to AnnualCreditReport.com and select which bureau’s report you want (or all three).

    WARNING: Other sites offering this service are scams. https://consumer.ftc.gov/free-credit-reports

  2. Verify your identity with details like name, address, SSN, and account info—no credit card needed.

  3. View reports instantly online, or request by phone (1-877-322-8228) or mail (form to P.O. Box 105281, Atlanta, GA 30348-5281; expect 15 days).