Protecting Your Home From Identity Theft Risks

Quick answer

• Secure your mail: Use a locking mailbox or retrieve mail daily.
• Shred sensitive documents: Never toss bills, bank statements, or personal information in the trash.
• Monitor your credit reports: Regularly check for any unusual activity.
• Limit online personal information sharing: Be cautious about what you post on social media.
• Use strong, unique passwords for online accounts: Avoid reusing passwords across different platforms.
• Install and maintain security software on your devices: Protect against malware and phishing attempts.
• Be wary of unsolicited communications: Don’t click on suspicious links or provide information over the phone.

Who this is for

• Homeowners concerned about the physical security of their property and personal information.
• Individuals who have experienced or are worried about identity theft impacting their finances or credit.
• Anyone looking for practical, actionable steps to safeguard their home and identity from common threats.

What to check first (before you act)

Your Home’s Physical Security

Assess where sensitive documents or personal information might be accessible from outside your home. This includes mailboxes, unsecured windows, or visible documents on your desk. Think about who has access to your home and what precautions are already in place.

Your Digital Footprint

Consider how much personal information you share online and the security of your home network. Are your Wi-Fi passwords strong? Do you use a VPN on public networks? Review your social media privacy settings.

Existing Security Measures

Evaluate what you’re already doing to protect your home and identity. This might include a home security system, shredder, password manager, or credit monitoring services. Identify any gaps or areas where these measures could be strengthened.

Step-by-step (simple workflow)

1. Secure your mailbox:

• What to do: Install a locking mailbox or make a habit of collecting mail immediately after delivery.
• What “good” looks like: You have a system that prevents anyone from easily accessing your mail without authorization.
• Common mistake and how to avoid it: Leaving mail in the box overnight or for extended periods. Avoid this by checking your mail daily, especially after known delivery times.

2. Shred sensitive documents:

• What to do: Purchase a cross-cut shredder and use it for all documents containing personal or financial information.
• What “good” looks like: All discarded sensitive documents are rendered unreadable.
• Common mistake and how to avoid it: Tossing documents with account numbers, Social Security numbers, or other PII into the trash. Avoid this by establishing a routine of shredding before disposing of any paper.

3. Monitor your credit reports:

• What to do: Obtain free credit reports from AnnualCreditReport.com and review them regularly.
• What “good” looks like: You can identify and dispute any unauthorized accounts or inquiries promptly.
• Common mistake and how to avoid it: Only checking credit reports when applying for a loan. Avoid this by setting a reminder to check at least annually, or more often if you have concerns.

4. Secure your home Wi-Fi network:

• What to do: Change the default router password to a strong, unique one and enable WPA2 or WPA3 encryption.
• What “good” looks like: Your home network is protected from unauthorized access.
• Common mistake and how to avoid it: Leaving the default router password or using a weak password. Avoid this by changing it immediately after setup and periodically thereafter.

5. Use strong, unique passwords for online accounts:

• What to do: Employ a password manager to generate and store complex, unique passwords for all your online services.
• What “good” looks like: Each of your online accounts has a distinct, difficult-to-guess password.
• Common mistake and how to avoid it: Reusing the same password across multiple sites. Avoid this by using a password manager, which eliminates the need to memorize them.

6. Install and update security software:

• What to do: Ensure your computers and mobile devices have reputable antivirus, anti-malware, and firewall software installed and kept up-to-date.
• What “good” looks like: Your devices are protected from common online threats.
• Common mistake and how to avoid it: Neglecting to update software or using outdated, ineffective security programs. Avoid this by enabling automatic updates for your security software.

7. Be cautious with personal information online:

• What to do: Think twice before sharing sensitive data on social media, in emails, or on unfamiliar websites.
• What “good” looks like: You are selective about who receives your personal information and how it’s used.
• Common mistake and how to avoid it: Over-sharing details like your full birthdate, address, or vacation plans on public profiles. Avoid this by reviewing your privacy settings and limiting what you post.

8. Enable two-factor authentication (2FA):

• What to do: Turn on 2FA for all accounts that offer it, especially financial and email accounts.
• What “good” looks like: An additional layer of security is in place, requiring more than just a password to access your accounts.
• Common mistake and how to avoid it: Skipping 2FA because it seems inconvenient. Avoid this by recognizing that the slight inconvenience is a powerful defense against unauthorized access.

9. Secure your home network router:

• What to do: Change the default administrative password for your router and disable remote management features.
• What “good” looks like: Your router’s settings are protected from unauthorized changes.
• Common mistake and how to avoid it: Leaving the default administrator username and password unchanged. Avoid this by consulting your router’s manual or manufacturer website for instructions.

10. Review financial statements regularly:

• What to do: Examine bank and credit card statements for any unauthorized transactions.
• What “good” looks like: You can quickly spot and report any suspicious activity.
• Common mistake and how to avoid it: Assuming everything is correct if no major issues are apparent. Avoid this by looking for small, unusual charges that could be a sign of ongoing fraud.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Leaving mail in an unsecured mailbox	Mail theft, leading to identity theft, fraudulent accounts, and financial loss.	Install a locking mailbox or retrieve mail daily.
Throwing away sensitive documents	Dumpster diving by criminals to obtain personal information for identity theft.	Shred all documents containing personal or financial data before discarding.
Using weak or reused passwords	Easy access for hackers to compromise multiple accounts if one is breached.	Use a password manager to create and store strong, unique passwords for each online service.
Sharing too much personal information online	Providing criminals with the data needed to impersonate you or answer security questions.	Review and tighten privacy settings on social media, and be judicious about what information you share publicly.
Not enabling two-factor authentication (2FA)	If your password is stolen, criminals can easily access your accounts.	Activate 2FA on all accounts that offer it, especially financial and email services.
Neglecting to update security software	Devices become vulnerable to malware, viruses, and phishing attacks.	Enable automatic updates for your antivirus, anti-malware, and operating system software.
Clicking on suspicious links or attachments	Installing malware, leading to data theft or ransomware attacks.	Hover over links to check the URL before clicking, and never open attachments from unknown or unsolicited senders.
Ignoring credit report discrepancies	Unnoticed fraudulent accounts or inquiries can damage your credit score significantly.	Regularly review your credit reports and immediately dispute any errors or suspicious activity with the credit bureaus.
Using public Wi-Fi for sensitive transactions	Unsecured networks can be easily monitored by eavesdroppers.	Avoid banking, shopping, or accessing sensitive accounts on public Wi-Fi. Use a VPN if necessary.
Not securing your home router’s administration	Unauthorized access to your router can allow criminals to redirect your internet traffic.	Change the default administrator password and disable remote management features on your home router.
Failing to monitor bank and credit card activity	Small fraudulent charges can go unnoticed, escalating into larger problems.	Set up transaction alerts for your accounts and review statements at least monthly for any unfamiliar activity.

Decision rules (simple if/then)

• If you receive an unsolicited email asking for personal information, then do not click any links or reply because it’s likely a phishing attempt.
• If you are about to throw away a document with your Social Security number on it, then shred it because it’s a prime target for identity thieves.
• If you notice a transaction on your bank statement you don’t recognize, then contact your bank immediately because prompt reporting can limit your liability.
• If your home Wi-Fi network is unsecured, then enable WPA2 or WPA3 encryption because this prevents unauthorized access to your network.
• If you are applying for a loan or service that requires a credit check, then obtain your free credit reports beforehand because you can review them for accuracy and identify potential fraud.
• If a website asks for more personal information than seems necessary for its service, then do not provide it because it could be a data harvesting scheme.
• If you use the same password for your email and your online banking, then change the banking password immediately because a breach in one could compromise the other.
• If you are going on vacation and will be away for an extended period, then place a hold on your mail delivery because this prevents mail from accumulating and signaling an empty house.
• If your computer is running unusually slow or displaying pop-ups, then run a full scan with your antivirus software because it may be infected with malware.
• If you are asked for your Social Security number over the phone by someone you don’t know, then do not provide it because legitimate organizations usually have this information already or will not ask for it unsolicited.
• If you receive a notification about a new account opened in your name that you didn’t authorize, then contact the credit bureaus and the financial institution immediately because this is a clear sign of identity theft.

FAQ

What is the most common way identity theft happens at home?

The most common ways involve mail theft, dumpster diving for discarded documents, and online breaches through phishing or malware. Securing your physical and digital presence at home is crucial.

How often should I check my credit reports?

It’s recommended to check your credit reports at least annually from each of the three major credit bureaus. You can get one free report from each bureau every year via AnnualCreditReport.com.

What kind of documents should I always shred?

Always shred documents containing your Social Security number, bank account numbers, credit card numbers, driver’s license number, medical information, and any other personally identifiable information (PII).

Is it safe to use public Wi-Fi for online banking?

No, it is generally not safe to conduct sensitive transactions like online banking or shopping on public Wi-Fi networks. These networks are often unsecured and can be easily monitored by cybercriminals.

What is two-factor authentication (2FA)?

2FA is a security process that requires two different authentication factors to verify your identity before granting access to an account. This typically involves something you know (like a password) and something you have (like a code from your phone).

How can I tell if my computer has a virus?

Signs of a virus or malware include a significant slowdown in performance, unexpected pop-up ads, programs starting or closing on their own, and unusual error messages. Running antivirus software can help detect and remove threats.

What should I do if I suspect my identity has been stolen?

If you suspect identity theft, act quickly. Contact the credit bureaus to place a fraud alert, file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov, and contact any financial institutions where fraudulent accounts may have been opened.

How can I protect my home from physical mail theft?

You can protect your mail by using a locking mailbox, retrieving mail promptly after delivery, opting for direct deposit or electronic statements, and considering a P.O. box if mail theft is a persistent problem in your area.

What this page does NOT cover (and where to go next)

• Detailed legal recourse or prosecution of identity thieves.
• Specific software recommendations for antivirus or password managers.
• In-depth guidance on managing credit scores after identity theft.
• International identity theft protection measures.
• Business or corporate identity theft prevention strategies.