23 Jul 2007
Social networkers are opening themselves up to identity fraud by posting too much personal information on their profile pages, according to credit information provider Equifax.
As more and more people sign up to MySpace, Bebo, Facebook, Friends Reunited and others, increasingly large amounts of personal information is becoming available to fraudsters and identity thieves.
"Fraudsters are taking advantage of the craze for social networking, and people do not realise the significance of the information they put out on the web and who may be accessing it," warned Neil Munroe, external affairs director at Equifax.
"More and more consumers are signing up to these sites every day and the chances are they'll put on their date of birth, location, email, job and marital status.
"We do not want to stop people using these sites, but we do advise them to limit the information they make available to stop people stealing their identity."
Mark Sunner, chief security analyst at MessageLabs, told vnunet.com that a whole new level of social engineering is emerging on the internet.
"Many consumers have only just made their first foray into this new and exciting web 2.0 development," he said.
"The last thing they will be expecting is that the same water which they treat as entertainment is already muddied with the kind of individual that makes a career out of identity theft, spam and phishing."
Equifax offers five tips to help avoid becoming a target for criminals on social networking sites:
Latest stories from Privacy
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
Orange and Intel talk us through the ins and outs of their San Diego smartphone
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
Working within the central Service Desk Team of a well...
GIS Applications Engineer - circa £35k Excellent opportunity...
Senior C++ Developer x 2 - Senior C++ Software Engineer...
We are actively searching for Information security specialists...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Consumers must be vigilant to this new approach from fraudsters
This concern has been on the radar ever since social networking sites were introduced. However, since we have seen a boom in popularity in this way of networking the threat has really begun to manifest itself. This article is right to suggest that there is now a huge amount of personal information available on these kind of sites, with people more and more willing to disclose personal information. People underestimate just how easy it is for fraudsters to piece together data sources and create a profile of an individual. Largely criminals are using these sites to directly impersonate individuals. However, organised crime rings also use social networking sites to confirm indentities and information gained from other sources. The major concern here is people?s willingness to hand over personal information without thinking about the implications. It is usually the young and inexperienced that are the most vulnerable. Individuals really need to start being more aware of these threats before disclosing information. The following steps need to be taken for the public to protect itself when visiting social networking sites: Do not issue factually identifying information such as date of birth, address etc. Instead give approximate numbers to describe your profile, e.g ?I am between 18 and 25? Those using social networking sites need to treat web users as complete strangers ? you wouldn?t give a person you met on the street your address, so why give it to someone online that you?ve never met before? Banks and the media need to continue to push the warning messages of the risks of disclosing personal information in the public domain.
Posted by: Bart Patrick, SAS UK 23 Jul 2007