1275s Identity theft: How criminals use a low-interest credit card scam to steal from you (Marketplace) images and subtitles

[♪♪]So we're about two minutes away from her house.And I'm going to make a right here.We've obtained a secret list.Yeah this is the street.Used by criminals to exploit Canadians.We have the names of thousands of Canadiansfrom across the country.We have credit cards.Addresses.Social insurance numbers.One by one we're warning them.They're victims of identity theft.I think she's going to be surprised obviously to see usat her door.-Hi, are you Fernanda? -Yes.Hi, I'm so sorry to bother you so late.My name is Makda, I'm with the CBC and the TV show Marketplace.We believe your personal information may havebeen compromised.So what do you see there?It's my name and my phone number, right?Mmm-hmm.-Are you Arsenio? -Yeah.That's your SIN number?Mmm-hmm.Yes.That's your credit card number.You know you're one of thousands of Canadiansthat are on this database.Youch.[Makda] How did these Canadians get onto this list?They were lured in by a phone call.Do you recall ever getting a phone call aboutreducing your interest rate on your credit card for a fee?I did a while ago, maybe close to a year agoDid your call go something like this?Carol, this is Ronnie in the verifications department and I'mrecording this conversation.[Makda] It sounds like they're calling from a bank or creditcard company.My name is Jim Mack.I'm a financial advisor here at card member services.[Makda] You may have heard the sales pitch too.I'll get you a nice decent interest rate.[Makda] Offering to lower the interest rate on yourcredit card for a one-time fee.You have authorized us to charge yourcard for the one-time retainer fee of $595.[Makda] That fee varies on every phone call.Congratulations.You're going to have lower rates for the rest of your life andthere will be a once-in-a-lifetime interestcharge on your account in the amount of $795.[Makda] Sounds like a pretty good deal.If you want to save money while paying off your debt.But these agents won't reduce your interest rate.And it's not all about that one time fee.What they're really after, your identity.It's called a "low interest" scam.Every year, the Canadian anti-fraud centre gets about300 complaints.But our investigation reveals a much bigger problem.We have the names of close to 3000 victims.From just one call centre.Along with the list, our source sendsus hidden camera video from Pakistan.Inside call centres.How do you spell your first name?[Makda] Listen to how much info the scammers can get.Remember the victims believe they're talking to a bank orcredit card company.Can you please verify me the account number on the faceof your card?6019 18--Can you just verify the last four of your social?6444.Crap I probably verified that, my information.You have a lot of people out there dishonest,and just try to rip off other people.[Makda] Muhammad Yousfi used to be one of those guys.A fraudster.He says operated a low-interest call centre in Pakistan.[Muhammad] We've done a whole lot of things,a whole lot of bad things, to a lot of good people.And by giving something back gives me closure.It gives me the ability of being able to feel like a humanbeing again.[Makda] He says he's now helping victims get their money back.And wants to expose this scam.[Muhammad] The whole idea is to actually get a consumer'spersonal information.It could be used to go ahead and apply for newcredit cards.We have actually gone as far as refinancing a guy's--a person's mortgage.We can pretty much redefine their lives byhaving that information.[Makda] In just one month, close to 3000 Canadians targeted byone call centre.The ultimate goal-- stealing your identity.I'm not going to trust nobody else anymore[Makda] Identity thieves steal billions of dollars every year.Is there a way to fight back?♪ Getting to know you ♪♪ Getting to know all about you ♪[voice-over] Equifax complete is everywhere you can't be.Thank you for calling TransUnion.Thank you for calling Equifax.[Makda] When it comes to flagging fraud in Canada,TransUnion and Equifax recommend two options-- a fraud alert andcredit monitoring.But do they really work?We're going to put them to the test.First, credit monitoring.What is credit monitoring?If there is any changes made to your file you will receivealerts as well from TransUnion.So if someone opens a credit card in my name I should knowabout it.-That is correct, sir -How much does it cost?It will cost you $19.95 monthly.[Makda] We sign up for credit monitoring with TransUnionand Equifax.That's about 500 dollars a year.Does it really work?I'm sure it does.[Makda] Next, our Marketplace producers apply for newcredit cards.If they work we expect to get email notifications from bothcredit bureaus.Next product, fraud alerts.What's a fraud alert?A fraud alert, ma'am, is a protective statement whichstays on the file for six years.We request the creditors to give you a call before extending anykind of credit It's free of cost.[Makda] If the fraud alert works,the credit card company or the bank should call to verify weare, who we say we are, before opening any accountsin our names.That's what we're going to test.By signing up for more credit cards.One batch of cards with credit monitoring.Another batch of credit cards with fraud alerts.If TransUnion and Equifax protections work,we expect to be tipped off every time.While we wait, we track more Canadians targeted by the lowinterest scam.Hi, are you Grace Johnston?Yes, I am.[Makda] This time our list takes us to Winnipeg.I want you to take a look at this.What do you see there?That's a lot of my personal information.We've got your credit card number.Yeah. Yeah.The CVC number on the back.Holy-moly.Yeah there's my birthday, my phone number,my address, my email, my mother's maiden name.Enough information to open a credit card,an account.It's just overwhelming to know that it's out there like that.[Makda] Grace can't believe she's on this list because shesays she took extra steps to protect herself when she wasscammed 3 years ago.The Royal Bank sent me, you know,a letter saying, "Come pick up your credit card."And I hadn't applied for one.[Makda] She went to the bank, changed her credit card.Got a new password.You thought you had protected yourself.Yeah[Makda] But her new credit card info is still out there.It was a violation of my privacy,it was unnerving.And it keeps coming back to haunt me.So anytime you deal with identity theft,you're impacting someone's trust level,you're impacting their credit score,you're impacting their reputation,and that lasting damage can follow someone foryears or decades.[Makda] Claudiu Popa is a cybercrime and identitytheft expert.He advises companies and government agencies on how toprotect themselves against cyberfraud.She alerted the bank, she changed her credit card andyet this is still haunting her.What she could do and what many Canadians can do,is in fact, change a lot more of those identity elements.She could change her email addresses,she could set up additional warnings.Maiden names are always used for security questions,and that's why security questions are so insecure.And should not be answered truthfully.[Makda] With that advice Grace tries fighting back against thefraudsters once again.And this time she tries something new.Like us, she signs up for credit monitoring with both TransUnionand Equifax.Okay, so I've now opened it up.[♪♪][Makda] Across the country in Vancouver,Robert Darch was a victim of old-school identity theft.We meet him at his music studio.I had my wallet stolen, I did what I thought I needed to do.Notified TransUnion, notified Equifax.[Makda] Darch says he signed up for fraud alerts with bothcompanies, if there was any suspicious activity, heexpected someone would call to verify his identity.Yeah, I thought, once you notify Equifax,once you notify TransUnion, uh, there's like a firewall in placeand you are protected, but that was not the case.[Makda] Months later he noticed something on his credit report.People were still able to open up bogus cell phone accountsin my name.[Makda] He says creditors never called to verify his identity.But a local news crew did.[mana] Time to get to the bottom of it.-I'm Rob, Rob Darch. [man] The real Rob.The real Rob Darch.I was extremely embarrassed when CTV showed up to my houseand asked me why I was selling stolen cell phoneson Craigslist.[Makda] Not only was he a victim,his stolen identity was used to defraud others.[Makda] What do you think of fraud alerts?I don't think they have any teeth.I don't think that they are going to protect Canadians.They definitely didn't protect me.[Makda] This is your Marketplace.♪ ♪Almost 3000 Canadians targets of a convincing scam.We're gonna go ahead and put the one-time lower activationfee of $995 as well on this account.[Makda] That one-time fee goes right to the fraudsters.But the real score?Banking codes.Credit card numbers.SIN numbers.You've been a victim of this more than once?Three or four times.They were trying to take money out my account.When I realized I go, "Oh my God."[Makda] So after the scammers get our private information,where does it all end up?The answers might be in Baltimore at Terbium Labs.Companies hire them to monitor the dark web forstolen information.What is the dark web?The dark web is a part of the internet that is,it's unindexed, it doesn't show up on Google,it's not something you can stumble upon,it's not something you can easily access.[Makda] Emily Wilson is a certified fraud examinerat Terbium.Dark web marketplaces are these big ecommerce platforms wherepeople can buy and trade and sell stolen information.It is basically Amazon or eBay but for illegal content.So it's like online shopping for criminals?It's exactly that.[Makda] Could Grace's info be on these sites?With her permission we provide Terbium herpersonal information.What did you find?I found a few things that were concerning to me.We found something that seemed to match pretty closely to whatmight've been one of Grace's credit cards.So if we go over to one of these carding markets,this is actually the market we found Grace's card on.[Makda] This one here? -This one here.[Makda] But that posting was from a few months ago.It's no longer on the site.The fact that it's no longer there means that someone hasprobably bought it already, which means that she may beat risk for even more compromise now.[Makda] We break the news to Grace.Again, violated.The deeper it goes, the more it gets out there,the more it gets out there the more a victim I become,and I don't like being a victim.[Makda] So who is buying and selling our stolen identities?[woman] We've got thousands of Canadian profiles for sale here.[Makda] We go hunting for answers on the dark web.[woman] 1000 SIN numbers.Being offered up for $104 total.[Makda] We reach out to top sellers.Some speak to us, on the condition we don't revealtheir usernames.We ask them how they got into identity theft.Identity theft is more profitable than selling drugs?Up to 10 thousand dollars a week?So what will hurt their profit margins?We ask one seller about credit monitoring services.Remember we've signed up for them.They don't know what credit monitoring is?Are they even afraid of getting caught?They're not afraid of the police.So is there any way to stop these identity thieves?We're about to find out.Remember, two Marketplace producers put fraud alerts ontotheir credit files with TransUnion and Equifax.They then signed up for new credit cards.To see if the companies would flag it.For service in English, press one.[Makda] For five credit cards.We expect five fraud alert calls.We only get three.Okay, there is something on your credit bureau report.That's why we called you.[Makda] That means fraudsters could've scammed us 2 out of 5times so how about credit monitoring?This time...We sign up for 6 credit cards.We add credit monitoring from Equifax and TransUnion.If it works, we're expecting to get two alerts for everyapplication so 12 alerts, right?Wrong.For 6 credit card applications, we get six alerts.But they come from one credit bureau never both.Confused?We are too.Turns out banks or credit card companies usuallyonly do credit checks with one credit bureau.Not both.And good luck figuring out which one.So if you don't pay hundreds of dollars a year for creditmonitoring with both Equifax and TransUnion,you may be a victim of fraud and not even know it.We show our findings to cybercrime expert Claudiu Popa.Definitely it's a flaw in the system,no amount of monitoring will give you 100% guarantee thatyou're going to be protected against identity fraud andidentity theft.So essentially, someone can steal your information,open an account, a credit card, and you would only findout afterwards?That's right.It's a reactive system.So is there anything that would work?A credit freeze is an organization tries to checkyour credit, and your account is frozen,that credit check would fall flat and would not be possibleto be completed.[Makda] A credit freeze locks your credit report withTransUnion and Equifax.No one.Including fraudsters.Can access your credit unless you unfreeze it.Can Canadians get a credit freeze?Credit freezes are not available in Canada.[Makda] And here's the thing.They are available.In the US.For free.In Pakistan, whistle blower Mohammad used to run alow-interest call centre scam.He knows how effective credit freezes can be.If the Canadian consumer had the ability of imposing a creditfreeze that would actually be a huge,a huge blow to the lower interest rate credit cardscammers, hackers.In general criminals all across the globe.[Makda] To prove the point, he provides us with an audiorecording of a low-interest scam in action.Note the person getting the call is an American,who appears to have a credit freeze.We heard back from the banks.Unfortunately, because the way your credit reports is set up wecannot get through to see what your credit score is.-Yeah. -I'm gonna shred your file.Yeah, okay.What do you think about that?This is a credit freeze working for the consumer.Clearly, it's a good preventative tool,and everyone should have access to it.It worked.Yeah, it worked in that situation.Then, whatever we have in place is not working.Could a credit freeze have made a difference for you?It probably would have.But you don't get that option,as a Canadian.That's very frustrating and depressing to hear.I would encourage the governments to give us asituation where we can freeze our credit,can protect ourselves from fraud.I don't see a good reason why we can't have that in our country.[Makda] This is your Marketplace.We have the personal information ofthousands of Canadians.They're victims of a credit card scheme.Sorry to have to deliver this kind of information.That's okay.If it's not you, then it'll be somebody else, right?I really thank you for talking to me.Thank you so much for helping.You're welcome.Their personal information,SIN numbers, credit card information,with some of that ending up for sale on the dark web.Equifax and TransUnion offer credit monitoring and fraudalerts to protect you against identity theft but our testfound they don't always work.They tell us credit monitoring is a good wayto stay alert to unauthorized activity.Equifax also says it would be a mistake to discourage consumersfrom signing up for fraud alerts.Experts tell us one of the best ways to stop scammers.A credit freeze.But they're only available in the US,where credit bureaus must offer freezes for free,by law.So why not Canada?[Makda] Turns out, Ontario planned to do the same thing.But that legislation stalled after last year'sprovincial election.We want to know why but the minister in charge ofconsumer protections, Bill Walker,who supported freezes while in oppositionwon't grant us an interview.So we catch up with him at an event in Owen Sound.Minister Walker, I'm Makda from CBC's Marketplace.-Pleasure, how are you? -Nice to meet you.Well, we've reached out to your office a few times to talkabout identity theft protections.Can you tell me why credit freezes are not availablein Ontario?I'm just really looking at all of those things.I don't have a specific answer for you at this point.Certainly, what we want to do is make sure,it's paramount that consumer protection is paramount foreveryone and we want to make sure we do things right.The legislation already exists,it already passed your government just needsto proclaim it.So why has that not happened?What I can tell you is anything that I do I want to havebalance, I want to ensure that I'm doing things that are goingto truly protect people.But credit freezes are available in the US.They have been free since last year.So shouldn't people here have that same protection?I certainly want to commit to the public of Ontario that ifthere's anything going on from a scam or a fraud perspective wewant to make sure we jump on it and understand it andtake action.[Makda] What do Canadians who've had their lives disrupted byidentity theft have to say?That's our information, and if I can control that being put outthere, that would be, that would make me feel a lot better.If they can do it in the States, why can't they do it in Canada?♪ ♪[Makda] Have you been a victim of identity theft?Send us your story to marketplace@cbc.ca.

Identity theft: How criminals use a low-interest credit card scam to steal from you (Marketplace)

It starts with what sounds like a promising phone call: For a one-time fee, you can lower the interest rate on your credit card. But the person on the other end of the line isn't with your bank or credit card company — and what that person is really after is your identity. We obtain a database of names of people who have had their identities stolen through this scam, and inform them about the breach. And we talk to experts and a former fraudster who tell us how you can protect your personal information, including testing whether Equifax and TransUnion are doing enough to protect you. To read more: www.cbc.ca/1.4990040 »»» Subscribe to CBC News to watch more videos: bit.ly/1RreYWS Connect with CBC News Online: For breaking news, video, audio and in-depth coverage: bit.ly/1Z0m6iX Find CBC News on Facebook: bit.ly/1WjG36m Follow CBC News on Twitter: bit.ly/1sA5P9H For breaking news on Twitter: bit.ly/1WjDyks Follow CBC News on Instagram: bit.ly/1Z0iE7O Download the CBC News app for iOS: apple.co/25mpsUz Download the CBC News app for Android: bit.ly/1XxuozZ »»»»»»»»»»»»»»»»»» For more than 75 years, CBC News has been the source Canadians turn to, to keep them informed about their communities, their country and their world. Through regional and national programming on multiple platforms, including CBC Television, CBC News Network, CBC Radio, CBCNews.ca, mobile and on-demand, CBC News and its internationally recognized team of award-winning journalists deliver the breaking stories, the issues, the analyses and the personalities that matter to Canadians.
identity theft, cbc news, scam, cbc marketplace, marketplace, credit card, low interest, low-interest credit card scam, cbc, fraud,
< ?xml version="1.0" encoding="utf-8" ?><>

< start="0.333" dur="5.205">[♪♪]>

< start="5.538" dur="2.036">So we're about two minutes away from her house.>

< start="11.043" dur="2.036">And I'm going to make a right here.>

< start="14.279" dur="3.071">We've obtained a secret list.>

< start="17.35" dur="1.869">Yeah this is the street.>

< start="19.219" dur="3.77">Used by criminals to exploit Canadians.>

< start="24.69" dur="2.369">We have the names of thousands of Canadians>

< start="27.059" dur="1.869">from across the country.>

< start="30.029" dur="1.635">We have credit cards.>

< start="31.664" dur="1.235">Addresses.>

< start="32.899" dur="2.336">Social insurance numbers.>

< start="36.268" dur="2.67">One by one we're warning them.>

< start="38.938" dur="2.569">They're victims of identity theft.>

< start="41.507" dur="2.87">I think she's going to be surprised obviously to see us>

< start="44.377" dur="2.136">at her door.>

< start="47.28" dur="1.702">-Hi, are you Fernanda? -Yes.>

< start="48.982" dur="1.867">Hi, I'm so sorry to bother you so late.>

< start="50.849" dur="4.338">My name is Makda, I'm with the CBC and the TV show Marketplace.>

< start="55.187" dur="3.137">We believe your personal information may have>

< start="58.324" dur="1.635">been compromised.>

< start="59.959" dur="1.835">So what do you see there?>

< start="61.794" dur="2.636">It's my name and my phone number, right?>

< start="64.43" dur="1.002">Mmm-hmm.>

< start="68.701" dur="2.202">-Are you Arsenio? -Yeah.>

< start="70.903" dur="1.034">That's your SIN number?>

< start="71.937" dur="1.035">Mmm-hmm.>

< start="72.972" dur="1.769">Yes.>

< start="74.741" dur="1.901">That's your credit card number.>

< start="76.642" dur="2.169">You know you're one of thousands of Canadians>

< start="78.811" dur="2.269">that are on this database.>

< start="81.08" dur="1.768">Youch.>

< start="82.848" dur="2.937">[Makda] How did these Canadians get onto this list?>

< start="85.785" dur="3.17">They were lured in by a phone call.>

< start="88.955" dur="2.902">Do you recall ever getting a phone call about>

< start="91.857" dur="4.906">reducing your interest rate on your credit card for a fee?>

< start="96.763" dur="3.57">I did a while ago, maybe close to a year ago>

< start="100.333" dur="1.868">Did your call go something like this?>

< start="102.201" dur="2.569">Carol, this is Ronnie in the verifications department and I'm>

< start="104.77" dur="1.669">recording this conversation.>

< start="106.439" dur="3.67">[Makda] It sounds like they're calling from a bank or credit>

< start="110.109" dur="1.569">card company.>

< start="111.678" dur="1.368">My name is Jim Mack.>

< start="113.046" dur="3.97">I'm a financial advisor here at card member services.>

< start="117.016" dur="3.07">[Makda] You may have heard the sales pitch too.>

< start="120.086" dur="3.103">I'll get you a nice decent interest rate.>

< start="123.189" dur="2.569">[Makda] Offering to lower the interest rate on your>

< start="125.758" dur="2.903">credit card for a one-time fee.>

< start="128.661" dur="1.935">You have authorized us to charge your>

< start="130.596" dur="3.938">card for the one-time retainer fee of $595.>

< start="134.534" dur="2.703">[Makda] That fee varies on every phone call.>

< start="137.237" dur="1.233">Congratulations.>

< start="138.47" dur="2.87">You're going to have lower rates for the rest of your life and>

< start="141.34" dur="2.069">there will be a once-in-a-lifetime interest>

< start="143.409" dur="3.804">charge on your account in the amount of $795.>

< start="147.213" dur="2.169">[Makda] Sounds like a pretty good deal.>

< start="149.382" dur="2.803">If you want to save money while paying off your debt.>

< start="152.185" dur="3.436">But these agents won't reduce your interest rate.>

< start="155.621" dur="3.136">And it's not all about that one time fee.>

< start="158.757" dur="4.038">What they're really after, your identity.>

< start="162.795" dur="2.135">It's called a "low interest" scam.>

< start="164.93" dur="3.271">Every year, the Canadian anti-fraud centre gets about>

< start="168.201" dur="1.734">300 complaints.>

< start="169.935" dur="3.904">But our investigation reveals a much bigger problem.>

< start="173.839" dur="3.07">We have the names of close to 3000 victims.>

< start="176.909" dur="1.769">From just one call centre.>

< start="183.816" dur="2.269">Along with the list, our source sends>

< start="186.085" dur="2.636">us hidden camera video from Pakistan.>

< start="188.721" dur="1.835">Inside call centres.>

< start="190.556" dur="1.668">How do you spell your first name?>

< start="192.224" dur="3.237">[Makda] Listen to how much info the scammers can get.>

< start="195.461" dur="3.337">Remember the victims believe they're talking to a bank or>

< start="198.798" dur="1.602">credit card company.>

< start="200.4" dur="2.302">Can you please verify me the account number on the face>

< start="202.702" dur="1.635">of your card?>

< start="204.337" dur="4.437">6019 18-->

< start="208.774" dur="3.137">Can you just verify the last four of your social?>

< start="211.911" dur="2.002">6444.>

< start="213.913" dur="4.504">Crap I probably verified that, my information.>

< start="218.417" dur="2.737">You have a lot of people out there dishonest,>

< start="221.154" dur="3.27">and just try to rip off other people.>

< start="228.828" dur="3.503">[Makda] Muhammad Yousfi used to be one of those guys.>

< start="232.331" dur="1.168">A fraudster.>

< start="233.499" dur="3.67">He says operated a low-interest call centre in Pakistan.>

< start="237.169" dur="2.87">[Muhammad] We've done a whole lot of things,>

< start="240.039" dur="4.471">a whole lot of bad things, to a lot of good people.>

< start="244.51" dur="6.073">And by giving something back gives me closure.>

< start="250.583" dur="5.238">It gives me the ability of being able to feel like a human>

< start="255.821" dur="1.501">being again.>

< start="257.322" dur="3.537">[Makda] He says he's now helping victims get their money back.>

< start="260.859" dur="2.47">And wants to expose this scam.>

< start="263.329" dur="3.203">[Muhammad] The whole idea is to actually get a consumer's>

< start="266.532" dur="1.669">personal information.>

< start="268.201" dur="3.203">It could be used to go ahead and apply for new>

< start="271.404" dur="1.434">credit cards.>

< start="272.838" dur="4.572">We have actually gone as far as refinancing a guy's-->

< start="277.41" dur="2.302">a person's mortgage.>

< start="279.712" dur="5.739">We can pretty much redefine their lives by>

< start="285.451" dur="1.401">having that information.>

< start="286.852" dur="5.072">[Makda] In just one month, close to 3000 Canadians targeted by>

< start="291.924" dur="1.602">one call centre.>

< start="293.526" dur="3.169">The ultimate goal-- stealing your identity.>

< start="296.695" dur="2.97">I'm not going to trust nobody else anymore>

< start="299.665" dur="4.004">[Makda] Identity thieves steal billions of dollars every year.>

< start="303.669" dur="3.137">Is there a way to fight back?>

< start="307.673" dur="1.935">♪ Getting to know you ♪>

< start="309.608" dur="3.003">♪ Getting to know all about you ♪>

< start="312.611" dur="3.171">[voice-over] Equifax complete is everywhere you can't be.>

< start="317.95" dur="1.267">Thank you for calling TransUnion.>

< start="319.217" dur="1.77">Thank you for calling Equifax.>

< start="320.987" dur="2.869">[Makda] When it comes to flagging fraud in Canada,>

< start="323.856" dur="5.005">TransUnion and Equifax recommend two options-- a fraud alert and>

< start="328.861" dur="1.234">credit monitoring.>

< start="330.095" dur="1.835">But do they really work?>

< start="331.93" dur="1.669">We're going to put them to the test.>

< start="336.602" dur="2.136">First, credit monitoring.>

< start="338.738" dur="1.768">What is credit monitoring?>

< start="340.506" dur="2.135">If there is any changes made to your file you will receive>

< start="342.641" dur="1.768">alerts as well from TransUnion.>

< start="344.409" dur="3.504">So if someone opens a credit card in my name I should know>

< start="347.913" dur="1.735">about it.>

< start="349.648" dur="2.803">-That is correct, sir -How much does it cost?>

< start="352.451" dur="5.105">It will cost you $19.95 monthly.>

< start="357.556" dur="3.337">[Makda] We sign up for credit monitoring with TransUnion>

< start="360.893" dur="1.668">and Equifax.>

< start="362.561" dur="2.37">That's about 500 dollars a year.>

< start="364.931" dur="1.2">Does it really work?>

< start="366.131" dur="3.571">I'm sure it does.>

< start="369.702" dur="3.07">[Makda] Next, our Marketplace producers apply for new>

< start="372.772" dur="1.268">credit cards.>

< start="374.04" dur="3.704">If they work we expect to get email notifications from both>

< start="377.744" dur="1.101">credit bureaus.>

< start="380.879" dur="2.103">Next product, fraud alerts.>

< start="382.982" dur="1.367">What's a fraud alert?>

< start="384.349" dur="2.936">A fraud alert, ma'am, is a protective statement which>

< start="387.285" dur="1.836">stays on the file for six years.>

< start="389.121" dur="3.237">We request the creditors to give you a call before extending any>

< start="392.358" dur="2.669">kind of credit It's free of cost.>

< start="395.027" dur="1.535">[Makda] If the fraud alert works,>

< start="396.562" dur="3.97">the credit card company or the bank should call to verify we>

< start="400.532" dur="3.571">are, who we say we are, before opening any accounts>

< start="404.103" dur="1.167">in our names.>

< start="405.27" dur="2.069">That's what we're going to test.>

< start="407.339" dur="2.803">By signing up for more credit cards.>

< start="410.142" dur="3.337">One batch of cards with credit monitoring.>

< start="413.479" dur="3.437">Another batch of credit cards with fraud alerts.>

< start="416.916" dur="3.203">If TransUnion and Equifax protections work,>

< start="420.119" dur="2.569">we expect to be tipped off every time.>

< start="424.79" dur="4.605">While we wait, we track more Canadians targeted by the low>

< start="429.395" dur="1.034">interest scam.>

< start="430.429" dur="1.602">Hi, are you Grace Johnston?>

< start="432.031" dur="1.068">Yes, I am.>

< start="433.099" dur="3.369">[Makda] This time our list takes us to Winnipeg.>

< start="436.468" dur="1.502">I want you to take a look at this.>

< start="440.372" dur="1.702">What do you see there?>

< start="442.074" dur="4.504">That's a lot of my personal information.>

< start="446.578" dur="1.302">We've got your credit card number.>

< start="447.88" dur="1.802">Yeah. Yeah.>

< start="449.682" dur="1.868">The CVC number on the back.>

< start="451.55" dur="1.535">Holy-moly.>

< start="453.085" dur="3.603">Yeah there's my birthday, my phone number,>

< start="456.688" dur="4.538">my address, my email, my mother's maiden name.>

< start="461.226" dur="2.67">Enough information to open a credit card,>

< start="463.896" dur="1.635">an account.>

< start="465.531" dur="4.104">It's just overwhelming to know that it's out there like that.>

< start="469.635" dur="3.403">[Makda] Grace can't believe she's on this list because she>

< start="473.038" dur="3.804">says she took extra steps to protect herself when she was>

< start="476.842" dur="2.169">scammed 3 years ago.>

< start="479.011" dur="2.169">The Royal Bank sent me, you know,>

< start="481.18" dur="1.935">a letter saying, "Come pick up your credit card.">

< start="483.115" dur="1.836">And I hadn't applied for one.>

< start="484.951" dur="2.836">[Makda] She went to the bank, changed her credit card.>

< start="487.787" dur="1.467">Got a new password.>

< start="489.254" dur="1.569">You thought you had protected yourself.>

< start="490.823" dur="1.201">Yeah>

< start="492.024" dur="2.903">[Makda] But her new credit card info is still out there.>

< start="494.927" dur="1.968">It was a violation of my privacy,>

< start="496.895" dur="1.736">it was unnerving.>

< start="498.631" dur="3.67">And it keeps coming back to haunt me.>

< start="502.301" dur="2.77">So anytime you deal with identity theft,>

< start="505.071" dur="2.001">you're impacting someone's trust level,>

< start="507.072" dur="1.836">you're impacting their credit score,>

< start="508.908" dur="1.801">you're impacting their reputation,>

< start="510.709" dur="3.003">and that lasting damage can follow someone for>

< start="513.712" dur="1.802">years or decades.>

< start="515.514" dur="2.87">[Makda] Claudiu Popa is a cybercrime and identity>

< start="518.384" dur="1.368">theft expert.>

< start="519.752" dur="3.47">He advises companies and government agencies on how to>

< start="523.222" dur="2.369">protect themselves against cyberfraud.>

< start="525.591" dur="4.37">She alerted the bank, she changed her credit card and>

< start="529.961" dur="2.136">yet this is still haunting her.>

< start="532.097" dur="3.003">What she could do and what many Canadians can do,>

< start="535.1" dur="5.005">is in fact, change a lot more of those identity elements.>

< start="540.105" dur="2.236">She could change her email addresses,>

< start="542.341" dur="4.571">she could set up additional warnings.>

< start="546.912" dur="3.504">Maiden names are always used for security questions,>

< start="550.416" dur="3.303">and that's why security questions are so insecure.>

< start="553.719" dur="2.669">And should not be answered truthfully.>

< start="556.388" dur="3.303">[Makda] With that advice Grace tries fighting back against the>

< start="559.691" dur="1.903">fraudsters once again.>

< start="561.594" dur="2.802">And this time she tries something new.>

< start="564.396" dur="4.404">Like us, she signs up for credit monitoring with both TransUnion>

< start="568.8" dur="1.636">and Equifax.>

< start="570.436" dur="4.337">Okay, so I've now opened it up.>

< start="574.773" dur="1.903">[♪♪]>

< start="581.313" dur="2.103">[Makda] Across the country in Vancouver,>

< start="583.416" dur="4.737">Robert Darch was a victim of old-school identity theft.>

< start="588.153" dur="2.336">We meet him at his music studio.>

< start="590.489" dur="4.939">I had my wallet stolen, I did what I thought I needed to do.>

< start="595.428" dur="3.169">Notified TransUnion, notified Equifax.>

< start="598.597" dur="3.17">[Makda] Darch says he signed up for fraud alerts with both>

< start="601.767" dur="3.837">companies, if there was any suspicious activity, he>

< start="605.604" dur="3.503">expected someone would call to verify his identity.>

< start="609.107" dur="2.537">Yeah, I thought, once you notify Equifax,>

< start="611.644" dur="3.87">once you notify TransUnion, uh, there's like a firewall in place>

< start="615.514" dur="2.77">and you are protected, but that was not the case.>

< start="618.284" dur="3.202">[Makda] Months later he noticed something on his credit report.>

< start="621.486" dur="3.404">People were still able to open up bogus cell phone accounts>

< start="624.89" dur="1.235">in my name.>

< start="626.125" dur="3.804">[Makda] He says creditors never called to verify his identity.>

< start="629.929" dur="2.001">But a local news crew did.>

< start="631.93" dur="1.869">[mana] Time to get to the bottom of it.>

< start="633.799" dur="2.102">-I'm Rob, Rob Darch. [man] The real Rob.>

< start="635.901" dur="1.234">The real Rob Darch.>

< start="637.135" dur="2.47">I was extremely embarrassed when CTV showed up to my house>

< start="639.605" dur="2.169">and asked me why I was selling stolen cell phones>

< start="641.774" dur="1.968">on Craigslist.>

< start="643.742" dur="1.735">[Makda] Not only was he a victim,>

< start="645.477" dur="3.103">his stolen identity was used to defraud others.>

< start="648.58" dur="2.036">[Makda] What do you think of fraud alerts?>

< start="650.616" dur="1.601">I don't think they have any teeth.>

< start="652.217" dur="3.137">I don't think that they are going to protect Canadians.>

< start="655.354" dur="1.869">They definitely didn't protect me.>

< start="657.223" dur="1.935">[Makda] This is your Marketplace.>

< start="660.125" dur="3.27">♪ ♪>

< start="663.395" dur="5.305">Almost 3000 Canadians targets of a convincing scam.>

< start="668.7" dur="2.236">We're gonna go ahead and put the one-time lower activation>

< start="670.936" dur="3.103">fee of $995 as well on this account.>

< start="674.039" dur="3.637">[Makda] That one-time fee goes right to the fraudsters.>

< start="677.676" dur="1.535">But the real score?>

< start="679.211" dur="1.468">Banking codes.>

< start="680.679" dur="1.435">Credit card numbers.>

< start="682.114" dur="1.301">SIN numbers.>

< start="683.415" dur="2.236">You've been a victim of this more than once?>

< start="685.651" dur="2.769">Three or four times.>

< start="688.42" dur="2.703">They were trying to take money out my account.>

< start="691.123" dur="3.103">When I realized I go, "Oh my God.">

< start="694.226" dur="3.404">[Makda] So after the scammers get our private information,>

< start="697.63" dur="1.334">where does it all end up?>

< start="700.432" dur="4.271">The answers might be in Baltimore at Terbium Labs.>

< start="704.703" dur="2.77">Companies hire them to monitor the dark web for>

< start="707.473" dur="1.468">stolen information.>

< start="708.941" dur="2.301">What is the dark web?>

< start="711.242" dur="3.371">The dark web is a part of the internet that is,>

< start="714.613" dur="2.536">it's unindexed, it doesn't show up on Google,>

< start="717.149" dur="2.002">it's not something you can stumble upon,>

< start="719.151" dur="2.736">it's not something you can easily access.>

< start="721.887" dur="2.969">[Makda] Emily Wilson is a certified fraud examiner>

< start="724.856" dur="1.368">at Terbium.>

< start="726.224" dur="3.604">Dark web marketplaces are these big ecommerce platforms where>

< start="729.828" dur="3.37">people can buy and trade and sell stolen information.>

< start="733.198" dur="5.839">It is basically Amazon or eBay but for illegal content.>

< start="739.037" dur="2.703">So it's like online shopping for criminals?>

< start="741.74" dur="1.268">It's exactly that.>

< start="743.008" dur="2.902">[Makda] Could Grace's info be on these sites?>

< start="745.91" dur="2.57">With her permission we provide Terbium her>

< start="748.48" dur="1.635">personal information.>

< start="750.115" dur="1.435">What did you find?>

< start="751.55" dur="2.069">I found a few things that were concerning to me.>

< start="753.619" dur="2.535">We found something that seemed to match pretty closely to what>

< start="756.154" dur="2.737">might've been one of Grace's credit cards.>

< start="758.891" dur="1.835">So if we go over to one of these carding markets,>

< start="760.726" dur="3.237">this is actually the market we found Grace's card on.>

< start="763.963" dur="1.434">[Makda] This one here? -This one here.>

< start="765.397" dur="2.936">[Makda] But that posting was from a few months ago.>

< start="768.333" dur="1.702">It's no longer on the site.>

< start="770.035" dur="3.17">The fact that it's no longer there means that someone has>

< start="773.205" dur="2.502">probably bought it already, which means that she may be>

< start="775.707" dur="3.504">at risk for even more compromise now.>

< start="779.211" dur="1.936">[Makda] We break the news to Grace.>

< start="781.147" dur="1.634">Again, violated.>

< start="782.781" dur="3.17">The deeper it goes, the more it gets out there,>

< start="785.951" dur="3.77">the more it gets out there the more a victim I become,>

< start="789.721" dur="2.136">and I don't like being a victim.>

< start="794.125" dur="3.905">[Makda] So who is buying and selling our stolen identities?>

< start="799.731" dur="4.038">[woman] We've got thousands of Canadian profiles for sale here.>

< start="803.769" dur="3.136">[Makda] We go hunting for answers on the dark web.>

< start="806.905" dur="2.068">[woman] 1000 SIN numbers.>

< start="808.973" dur="4.639">Being offered up for $104 total.>

< start="813.612" dur="2.803">[Makda] We reach out to top sellers.>

< start="819.185" dur="2.602">Some speak to us, on the condition we don't reveal>

< start="821.787" dur="2.002">their usernames.>

< start="827.759" dur="2.87">We ask them how they got into identity theft.>

< start="834.266" dur="3.237">Identity theft is more profitable than selling drugs?>

< start="839.738" dur="3.003">Up to 10 thousand dollars a week?>

< start="842.741" dur="2.702">So what will hurt their profit margins?>

< start="845.443" dur="3.237">We ask one seller about credit monitoring services.>

< start="848.68" dur="2.97">Remember we've signed up for them.>

< start="855.32" dur="2.203">They don't know what credit monitoring is?>

< start="858.791" dur="1.401">Are they even afraid of getting caught?>

< start="865.23" dur="2.002">They're not afraid of the police.>

< start="867.232" dur="3.237">So is there any way to stop these identity thieves?>

< start="870.469" dur="1.668">We're about to find out.>

< start="873.639" dur="3.937">Remember, two Marketplace producers put fraud alerts onto>

< start="877.576" dur="3.57">their credit files with TransUnion and Equifax.>

< start="881.146" dur="2.803">They then signed up for new credit cards.>

< start="883.949" dur="2.502">To see if the companies would flag it.>

< start="886.451" dur="2.469">For service in English, press one.>

< start="888.92" dur="1.536">[Makda] For five credit cards.>

< start="890.456" dur="2.635">We expect five fraud alert calls.>

< start="893.091" dur="2.103">We only get three.>

< start="895.194" dur="3.236">Okay, there is something on your credit bureau report.>

< start="898.43" dur="1.368">That's why we called you.>

< start="899.798" dur="3.536">[Makda] That means fraudsters could've scammed us 2 out of 5>

< start="903.334" dur="3.938">times so how about credit monitoring?>

< start="907.272" dur="1.001">This time...>

< start="908.273" dur="2.035">We sign up for 6 credit cards.>

< start="910.308" dur="4.271">We add credit monitoring from Equifax and TransUnion.>

< start="914.579" dur="3.837">If it works, we're expecting to get two alerts for every>

< start="918.416" dur="3.604">application so 12 alerts, right?>

< start="922.02" dur="1.034">Wrong.>

< start="923.054" dur="3.438">For 6 credit card applications, we get six alerts.>

< start="926.492" dur="3.737">But they come from one credit bureau never both.>

< start="930.229" dur="1.167">Confused?>

< start="931.396" dur="1.435">We are too.>

< start="934.233" dur="2.768">Turns out banks or credit card companies usually>

< start="937.001" dur="2.337">only do credit checks with one credit bureau.>

< start="939.338" dur="1.267">Not both.>

< start="940.605" dur="2.303">And good luck figuring out which one.>

< start="942.908" dur="2.836">So if you don't pay hundreds of dollars a year for credit>

< start="945.744" dur="3.203">monitoring with both Equifax and TransUnion,>

< start="948.947" dur="3.403">you may be a victim of fraud and not even know it.>

< start="952.35" dur="3.805">We show our findings to cybercrime expert Claudiu Popa.>

< start="956.155" dur="1.834">Definitely it's a flaw in the system,>

< start="957.989" dur="5.606">no amount of monitoring will give you 100% guarantee that>

< start="963.595" dur="2.57">you're going to be protected against identity fraud and>

< start="966.165" dur="1.567">identity theft.>

< start="967.732" dur="3.804">So essentially, someone can steal your information,>

< start="971.536" dur="3.805">open an account, a credit card, and you would only find>

< start="975.341" dur="1.267">out afterwards?>

< start="976.608" dur="1.001">That's right.>

< start="977.609" dur="2.069">It's a reactive system.>

< start="979.678" dur="2.135">So is there anything that would work?>

< start="981.813" dur="3.504">A credit freeze is an organization tries to check>

< start="985.317" dur="2.869">your credit, and your account is frozen,>

< start="988.186" dur="3.004">that credit check would fall flat and would not be possible>

< start="991.19" dur="2.269">to be completed.>

< start="993.459" dur="2.802">[Makda] A credit freeze locks your credit report with>

< start="996.261" dur="2.035">TransUnion and Equifax.>

< start="998.296" dur="1.202">No one.>

< start="999.498" dur="1.101">Including fraudsters.>

< start="1000.599" dur="3.236">Can access your credit unless you unfreeze it.>

< start="1003.835" dur="1.469">Can Canadians get a credit freeze?>

< start="1005.304" dur="3.903">Credit freezes are not available in Canada.>

< start="1009.207" dur="1.135">[Makda] And here's the thing.>

< start="1010.342" dur="1.201">They are available.>

< start="1011.543" dur="1.401">In the US.>

< start="1012.944" dur="1.302">For free.>

< start="1015.814" dur="3.603">In Pakistan, whistle blower Mohammad used to run a>

< start="1019.417" dur="2.003">low-interest call centre scam.>

< start="1021.42" dur="3.57">He knows how effective credit freezes can be.>

< start="1024.99" dur="6.773">If the Canadian consumer had the ability of imposing a credit>

< start="1031.763" dur="2.837">freeze that would actually be a huge,>

< start="1034.6" dur="4.537">a huge blow to the lower interest rate credit card>

< start="1039.137" dur="2.235">scammers, hackers.>

< start="1041.372" dur="2.17">In general criminals all across the globe.>

< start="1043.542" dur="2.735">[Makda] To prove the point, he provides us with an audio>

< start="1046.277" dur="3.438">recording of a low-interest scam in action.>

< start="1049.715" dur="2.869">Note the person getting the call is an American,>

< start="1052.584" dur="2.435">who appears to have a credit freeze.>

< start="1055.019" dur="1.602">We heard back from the banks.>

< start="1056.621" dur="2.769">Unfortunately, because the way your credit reports is set up we>

< start="1059.39" dur="2.537">cannot get through to see what your credit score is.>

< start="1061.927" dur="2.202">-Yeah. -I'm gonna shred your file.>

< start="1064.129" dur="1.735">Yeah, okay.>

< start="1065.864" dur="1.802">What do you think about that?>

< start="1067.666" dur="3.971">This is a credit freeze working for the consumer.>

< start="1071.637" dur="3.136">Clearly, it's a good preventative tool,>

< start="1074.773" dur="2.369">and everyone should have access to it.>

< start="1077.142" dur="1.034">It worked.>

< start="1078.176" dur="2.068">Yeah, it worked in that situation.>

< start="1080.244" dur="2.67">Then, whatever we have in place is not working.>

< start="1082.914" dur="2.302">Could a credit freeze have made a difference for you?>

< start="1085.216" dur="1.635">It probably would have.>

< start="1086.851" dur="1.269">But you don't get that option,>

< start="1088.12" dur="1.134">as a Canadian.>

< start="1089.254" dur="2.202">That's very frustrating and depressing to hear.>

< start="1091.456" dur="1.902">I would encourage the governments to give us a>

< start="1093.358" dur="2.135">situation where we can freeze our credit,>

< start="1095.493" dur="1.836">can protect ourselves from fraud.>

< start="1097.329" dur="3.169">I don't see a good reason why we can't have that in our country.>

< start="1100.498" dur="1.836">[Makda] This is your Marketplace.>

< start="1103.568" dur="1.835">We have the personal information of>

< start="1105.403" dur="1.902">thousands of Canadians.>

< start="1107.305" dur="2.103">They're victims of a credit card scheme.>

< start="1111.176" dur="2.035">Sorry to have to deliver this kind of information.>

< start="1113.211" dur="1.234">That's okay.>

< start="1114.445" dur="2.77">If it's not you, then it'll be somebody else, right?>

< start="1117.215" dur="4.17">I really thank you for talking to me.>

< start="1121.385" dur="1.803">Thank you so much for helping.>

< start="1123.188" dur="1.001">You're welcome.>

< start="1124.189" dur="1.401">Their personal information,>

< start="1125.59" dur="2.67">SIN numbers, credit card information,>

< start="1128.26" dur="5.171">with some of that ending up for sale on the dark web.>

< start="1133.431" dur="3.203">Equifax and TransUnion offer credit monitoring and fraud>

< start="1136.634" dur="3.437">alerts to protect you against identity theft but our test>

< start="1140.071" dur="2.336">found they don't always work.>

< start="1142.407" dur="2.736">They tell us credit monitoring is a good way>

< start="1145.143" dur="3.137">to stay alert to unauthorized activity.>

< start="1148.28" dur="4.237">Equifax also says it would be a mistake to discourage consumers>

< start="1152.517" dur="2.603">from signing up for fraud alerts.>

< start="1155.12" dur="3.604">Experts tell us one of the best ways to stop scammers.>

< start="1158.724" dur="1.267">A credit freeze.>

< start="1159.991" dur="2.536">But they're only available in the US,>

< start="1162.527" dur="3.103">where credit bureaus must offer freezes for free,>

< start="1165.63" dur="1.368">by law.>

< start="1166.998" dur="2.236">So why not Canada?>

< start="1171.503" dur="2.869">[Makda] Turns out, Ontario planned to do the same thing.>

< start="1174.372" dur="2.536">But that legislation stalled after last year's>

< start="1176.908" dur="1.869">provincial election.>

< start="1178.777" dur="2.636">We want to know why but the minister in charge of>

< start="1181.413" dur="2.669">consumer protections, Bill Walker,>

< start="1184.082" dur="2.469">who supported freezes while in opposition>

< start="1186.551" dur="2.202">won't grant us an interview.>

< start="1188.753" dur="3.471">So we catch up with him at an event in Owen Sound.>

< start="1192.224" dur="3.77">Minister Walker, I'm Makda from CBC's Marketplace.>

< start="1195.994" dur="1.402">-Pleasure, how are you? -Nice to meet you.>

< start="1197.396" dur="3.336">Well, we've reached out to your office a few times to talk>

< start="1200.732" dur="2.035">about identity theft protections.>

< start="1202.767" dur="3.137">Can you tell me why credit freezes are not available>

< start="1205.904" dur="1.635">in Ontario?>

< start="1207.539" dur="2.168">I'm just really looking at all of those things.>

< start="1209.707" dur="2.036">I don't have a specific answer for you at this point.>

< start="1211.743" dur="1.802">Certainly, what we want to do is make sure,>

< start="1213.545" dur="2.936">it's paramount that consumer protection is paramount for>

< start="1216.481" dur="1.935">everyone and we want to make sure we do things right.>

< start="1218.416" dur="1.469">The legislation already exists,>

< start="1219.885" dur="2.069">it already passed your government just needs>

< start="1221.954" dur="1">to proclaim it.>

< start="1222.954" dur="2.102">So why has that not happened?>

< start="1225.056" dur="1.669">What I can tell you is anything that I do I want to have>

< start="1226.725" dur="2.669">balance, I want to ensure that I'm doing things that are going>

< start="1229.394" dur="1.535">to truly protect people.>

< start="1230.929" dur="1.901">But credit freezes are available in the US.>

< start="1232.83" dur="1.836">They have been free since last year.>

< start="1234.666" dur="3.17">So shouldn't people here have that same protection?>

< start="1237.836" dur="2.335">I certainly want to commit to the public of Ontario that if>

< start="1240.171" dur="2.47">there's anything going on from a scam or a fraud perspective we>

< start="1242.641" dur="1.567">want to make sure we jump on it and understand it and>

< start="1244.208" dur="1.202">take action.>

< start="1245.41" dur="3.236">[Makda] What do Canadians who've had their lives disrupted by>

< start="1248.646" dur="1.935">identity theft have to say?>

< start="1250.581" dur="4.906">That's our information, and if I can control that being put out>

< start="1255.487" dur="3.87">there, that would be, that would make me feel a lot better.>

< start="1259.357" dur="3.937">If they can do it in the States, why can't they do it in Canada?>

< start="1263.294" dur="3.738">♪ ♪>

< start="1267.032" dur="2.902">[Makda] Have you been a victim of identity theft?>

< start="1269.934" dur="3.838">Send us your story to marketplace@cbc.ca.>