Linking to us? Read about permalinks.
Leaving a comment? Read my comment guidance.
Want more info? Read my welcome post.

Tom's Tweets

Tuesday, October 30, 2007

Facebook Identity Fraud

Mark Zuckerberg - founder of Facebook.

Millions of members of social networking site Facebook are leaving themselves open to identity fraud according to internet security company Sophos.

Graham Cluely, a senior technology consultant at Sophos, commented that: "There is an Oprah mentality to some of these sites – people let it all hang out, and update their information minute by minute."

Facebook has come a long way since its launch in 2004. Founded by Harvard student Mark Zuckerberg the network was originally targeted at US students. Within a year the network was open to any student worldwide who had an academic email address. The network was further expanded in September 2006, when Facebook became available to anyone with an email address subject to a minimum age limit of thirteen.

As a result the popularity of Facebook has absolutely rocketed over the last 12 months with the network now boasting 42 million active members worldwide, 3.5 million of whom are in the UK. Not surprisingly this massive loyal following has pushed it to the seventh most popular site on the web, according to traffic analysis company Alexa.

Facebook storms up the Alexa rankings.

Each Facebook member creates a profile, quite often including details about their date of birth, home location, education and employment background - all valuable information to a potential identity thief. The information given on Facebook might seem trivial in itself but combined with other resources on the internet - the electoral register being the most obvious - it can be used to create a credible second identity of the unsuspecting victim.

As an illustration of how easy this is consider the following facts:
  • For a small fee anyone can order a duplicate birth certificate of any other person born in the UK. Anyone can turn up in person and pay in cash for this service.
  • A passport can be obtained by providing a copy of a birth certificate and a photograph authenticated by a 'person of standing'.
  • A driving licence can be obtained by providing a passport and a photograph authenticated by a 'person of standing'.
  • A bank account can be opened or credit obtained by using a passport or driving licence as proof of identity.
I use the phrase 'person of standing' in inverted commas because this can vary anywhere between the local Member of Parliament and the local shopkeeper. Even I've been asked to sign quite a few driving licence and passport applications and not once have the authorities made any attempt to verify my credentials - granted that might be because I always sign in my capacity as a government worker.

According to APACS, an organisation representing UK payment providers, online banking fraud rose to £33.5 million in 2006 - an increase of 44% over the previous year. Meanwhile internet shopping fraud amounted to £155 million and identity fraud as a whole costs the UK economy a staggering £1.7 billion each year.

A UK driving licence - also available in Scotland.

A spokesman for the British Bankers Association (BBA) warned that: "Anything as basic as your address or your date of birth could be used by identity thieves, so [with] anything as basic as that you should beware of broadcasting, and anything more personal than that can be even more help to criminals."

I personally hate Facebook - with a passion. The idea that any old waif or stray in your past life, or not as the case might be, can track you down and invite you to become a friend is nauseating in the extreme. I ended up joining just because I considered it rude to ignore requests of friendship, but I warn you now - if you happen to be one of my Facebook friends don't expect much in the way of a profile or activity!



0 comments: