Every year, about 15 million Americans become victims of identity theft, one of the most pervasive and expensive crimes in the world. Another 100 million face potential exposure of personally identifiable information—home address, log-in credentials—via data breaches and consumer negligence. Whether you're shopping online, messaging friends, or checking your bank app, your information can be taken in an instant.
The good news: you can protect yourself.
Hackers depend on negligence and complacency. While there's no individual cyber insurance policy to recoup losses, there are clear steps to reduce your risk, prevent harm, and stay vigilant online.
Unauthorized account misuse makes up most identity theft cases. Even "small" incidents—a stolen credit card or compromised bank login—can mean weeks or months of damage: credit scores drop, payments are missed, and recovery is piece by piece. Taking safeguards seriously pays off.
Put the Right Safeguards in Place
Protecting Your Devices
Use good antivirus software on all devices—desktops, laptops, tablets, and phones. Hackers count on open Wi‑Fi and forgotten mobile devices. When choosing protection, look for: antivirus, spyware detection, a strong firewall, spam filters, and web-browsing protection. Don't rely only on the built-in firewall. Keep software updated, turn on private browsing, and always use https and the padlock symbol on sites that handle sensitive data.
- Check if your ISP offers free or discounted antivirus.
- Free versions work for basic use; upgrade if you run a home business or store sensitive data.
- Wipe and remove identifying info from devices before disposing of them.
Protecting Your Phone Number
Your phone number can be used to create a fake identity. Keep it safer by:
- Opting out of telemarketing: Enroll in the federal Do Not Call registry (free for home and mobile).
- Keeping your number private: Don't give it out without asking why it's needed; businesses generally can't require it to complete an order.
- Using an alternate number: Google Voice or similar services let you give a number to businesses without exposing your real one.
Protecting Your Identity
Guard your Social Security number and other PII:
- Lock it up: Keep your SSN card in a safe or safety deposit box; don't carry it unless necessary.
- Ask questions: If a form asks for your SSN, ask why. Many places can verify identity without you writing it down. Never give it over the phone to someone who called you.
- Work smarter: If you're self-employed, get an IRS tax ID so you can complete forms without sharing your SSN.
Use an avatar instead of a real photo where possible, and tighten privacy settings on social accounts so only people you choose can see your profile.
Take Appropriate Preventive Measures
Reduce your paper trail and lock down how you handle sensitive data offline and online.
- Reduce paper: Electronic statements, P.O. box for sensitive mail, pick up mail promptly, vacation hold when away.
- Opt out of prescreened offers: 1-888-567-8688 or optoutprescreen.com. Shred offers you don't use.
- Shred sensitive documents: Cards, statements, receipts, utility bills, medical records, prescription labels. Use separate bags for shreds.
- Passwords: Don't write them on paper that ties them to accounts; if you must, lock that document away.
Email & Phishing
Configure spam filters and don't open or click links from unknown senders. If your bank or a friend sends something odd, verify through a separate channel first. Legitimate government agencies and creditors almost never ask for SSN, credit card, or other sensitive data only by email or phone. When in doubt, delete the email, hang up, and contact the organization yourself using info you look up separately.
Password Safety
Use strong, unique passwords per account. If one is compromised, the rest stay safer. Use a password manager to generate and store them. Use false password hints (not real maiden names or pet names). On shared or public devices: don't let the browser remember you, check out as guest when possible, and always log out. Never check banking or other sensitive data on unsecured public Wi‑Fi.
Social Media Privacy
Limit personal details on profiles and max out privacy settings. Don't post full birth date, address, phone, or payment info. Avoid linking too many accounts—one compromised login can expose the rest. Use separate credentials per service when you can.
Keep Track of Your Personal Info
Patrol your online presence regularly. Set a Google alert for your name. Run an image search on your profile photos to see where they appear. Use a data-search service to see where your name, address, and phone show up, then adjust privacy settings.
Monitoring for Fraud
Check account statements and credit reports on a schedule. You're entitled to one free report per year from each of the three major bureaus—use the only government-approved site, AnnualCreditReport.com. Dispute errors with both the bureau and the reporting company. Report identity theft and online fraud to the Internet Crime Complaint Center and local law enforcement; a record on file supports recovery and helps combat cybercrime.
Protecting yourself in advance, limiting who can access your data, and monitoring your presence are the best ways to stay ahead of cybercrime and keep your personal information safe.