Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Your Identity Is Worth Less Than $15

Posted by kdawson on Wed Apr 09, 2008 07:12 AM
from the less-than-your-fillings dept.
I Don't Believe in Imaginary Property writes "One of the more interesting tidbits in Symantec's Global Internet Threat Report (PDF, 105 pages) is the price sheet, which suggests that someone's 'full identity' is worth in the range of $1-$15. Your email password goes for $4-$30 and your bank account might fetch $10-$1000. With those prices, I wonder how often they pay more for the bank account than is actually in it? There's also an executive summary (PDF, 36 pages)."
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • No way! (Score:5, Funny)

    by moezaly (1197755) on Wednesday April 09 2008, @07:16AM (#23011278)
    Of course this article is wrong. Just look at how much all these politicians care about us.
    • Apples and oranges.
      These data are about what you saved in the past, and have in the present.
      WRT entitlements at least, politicians are
      • all about what can be siphoned from you in the future
      • skimming a percentage from across all of society (modulo those rich enough to put their cash elsewhere, mind you) and not just wrecking individuals
      • telling you "we're taking this from you for your own good, because it's Teh Right Thing To Do"

      If only the 10th Amendment still had any teeth.

  • by adpsimpson (956630) on Wednesday April 09 2008, @07:16AM (#23011282)

    So when the British government introduce their fantastic, shiney, new, biometric, uhackable ID card system, can we get them to buy our ID off us?

    • Re: (Score:3, Interesting)

      That got me thinking - fingerprint checks, what if you fail and then say "but I cut my finger, it's still healing"?

      And that got me thinking further, if they're needed for medical care, what happens to people who do cut their fingers?

      Hmmm.
      • Re: (Score:2, Interesting)

        You'd have to seriously hurt yourself to disable this biometric:
        http://www.fujitsu.com/global/casestudies/WWW2_casestudy_BTM.html [fujitsu.com]
        • Or you make a backup [slashdot.org].
        • Not to doubt this study, but I think it must depend heavily on the technology of the reader itself. As a diabetic that pricks their finger often, I can tell you that the "dots" that appear on the fingerprint image (more on the electronic ones than the ink ones) have messed up my acces at more than one client. This includes a good deal of banking and Federal clients. My FBI background check has been rejected electronically at multiple clients and they requested ink prints because of the "dots" left by my fin
      • they treat you but don't let you go until your finger has healed or you can pay, if you can't pay they take a kidney on deposit against a loan to pay it back!
    • Either that or once they get as close to their "unhackable" pipe dream as possible we'll all be forced to pay hundreds of GB£ to ensure that it's protected properly specifically so that our identity isn't sold for $15 or less.
    • Forget the British government. I printed my name and address on slips of paper so that when store clerks ask me for my phone number or address I can just offer to sell it to them for $2 taken off the cost of my purchase. I figure that they can get it anyway off the credit card companies, but $2 is probably cheaper. I never got anything but strange looks and "I can't do that" as a response. They don't seem to see the irony.

      -- PS. Don't forget to check out the new season of the Sarah Connor Chronicles th
  • by allcar (1111567) on Wednesday April 09 2008, @07:17AM (#23011290)
    Whilst I am sure identity theft is a very real problem, I'm not sure I want Symantec to be my source of information about it. They have done more to reduce internet security than most, with bloated, unusable virus checkers that people end up simply disabling. Furthermore, there is a pretty obvious marketing angle to all of this.
  • by BadAnalogyGuy (945258) <BadAnalogyGuy@gmail.com> on Wednesday April 09 2008, @07:18AM (#23011300)
    a bank account might fetch $10-$1000. With those prices, I wonder how often they pay more for the bank account than is actually in it?

    How much do you assume the average person has in their bank accounts? I realize that living at home with your parents and not having to pay for rent, utilities, food, and clothes may allow you to skate by with a very low monthly balance, but the vast majority of people who work for a living have to have the cash on hand (in their checking account, anyway) to pay for all these necessities.

    But I don't suppose someone whose name is "I don't believe in imaginary property" would have a very solid grasp of the real world.
    • by IBBoard (1128019) on Wednesday April 09 2008, @07:35AM (#23011430) Homepage
      It depends which account. I'm 18 months out of University, have finally got on to the housing ladder (which isn't easy in the UK with stupidly inflated house prices), and am supporting myself, my wife, and soon a baby as well. We've got more than that in one of our bank accounts. Granted, it isn't our Current Account (which I assume is what the Americans call their Checking Account because they write their cheques from it), but it's still an account with more money than that in.

      But as someone else mentioned, they probably want them for laundering rather than emptying.
    • by WiglyWorm (1139035) on Wednesday April 09 2008, @07:41AM (#23011484)
      Do you know how many people in America live paycheck to paycheck?

      Quite a few people have bank balances that hover between the grand total of their most recent paycheck and $0. Or don't they count?
    • Re: (Score:3, Interesting)

      Should be an interesting poll:
      How much money do you have in your (checking+savings) bank accounts?
      1. 12 paychecks
        • by MMC Monster (602931) on Wednesday April 09 2008, @08:06AM (#23011710)
          I meant to have the poll as:

          How much money do you have in your (checking+savings) bank accounts?
          1. Less than 1 paychecks
          2. 1-2 paychecks
          3. 3-5 paychecks
          4. 6-12 paychecks
          5. more than 12 paychecks
          6. I'm an edge case, you insensitive clod.
    • No one with a financial brain keeps any substantial amount of money in bank accounts.

      Any emergency savings you have should be held in money market accounts or short / medium term GICs.

      Smart people let their money work for them.

      I have an OK job, few debits, and no kids - and I *NEVER* have more than $100 cash in my bank account at any time. I pay for everything with credit card to accumulate points and/or cash back, and pay it in full every month, and the surplus goes into retirement funds and money market a
      • Don't you remember just 8 years ago? Stocks are a gamble, nothing more. Like any other casino, you will eventually lose your cash.

        My extra money goes into a 4% savings account. I can get it any time with 24 hours notice. Yeah, yeah, I can get 10% on the stock market. Sounds great, until it crashes - again or you get caught in a bad trade.

        I tend to keep about a thousand in my chequing account. (Which works out to ... calculating ... a "loss" of about 50 cents a month compared to the parent putting his on t
        • Re:Why would you? (Score:5, Informative)

          by JustinOpinion (1246824) on Wednesday April 09 2008, @09:46AM (#23012836)
          You set up a sweep account [wikipedia.org], or manually perform the same action. Basically you take the funds that you want to keep available (for bills, etc.) and invest them in something that is easy to quickly buy/sell without penalty (e.g. money market [wikipedia.org]). Whenever you need cash in your checking account, you transfer it from that investment account. Whenever you have a surplus in your checking, you move it into the investment account immediately, so that it can get a higher interest rate than it would in you checking account.

          You can have sweep accounts set up to automatically move money back-and-forth to maintain a reasonable balance in your checking, so that you always have enough to pay bills. Of course a money market (or similar) will get a better return than a bank account, but won't perform as well as longer-term investments (e.g. GIC), so funds not needed on a short-term basis should still be invested elsewhere.

          As the grandparent post said, however, keeping substantial sums in a standard bank account amounts to wasting money.
    • by unlametheweak (1102159) on Wednesday April 09 2008, @08:09AM (#23011730)

      ...but the vast majority of people who work for a living have to have the cash on hand
      Ever look at discarded bank slips from ATM's? I have on occasion, and if it is any indication, most people rarely have more than $1000 dollars in their bank accounts. Or are you assuming the average person is a (relatively) high paid professional that doesn't have a mortgage, car, kids, etc? And people who do have any amount of money probably don't keep it in a bank account but in stocks, bonds, mutual funds, treasury bills, etc.
  • by dave1791 (315728) on Wednesday April 09 2008, @07:20AM (#23011318)
    From TFA - "Bank accounts were the most commonly advertised item for sale on underground economy servers known to Symantec"

    I'm curious as to where this data came from. Is it public record from court cases? Or does Symantec know more than the cops?
    • From what I have heard, news reports, the numbers came from various sites and chat channels where the items are for sale.
  • is not so much what the identity is "worth", but rather how easy it is to steal. If your identity is going for say, $6 "retail", then it must have been very easy to steal for them to sell it and turn a buck at that price, especially considering the additional business risk. Hey that's lunch at McDonalds.

    The reality is probably placing greater value on the actual identity and the money that can be scammed from it, it's just that there are so many identity thieves out there and it's so easy to do, that the
  • by rodney dill (631059) on Wednesday April 09 2008, @07:24AM (#23011352) Journal
    1. Open lots of bank accounts
    2. Sell them
    3. Profit

    (It'd be funnier if it didn't sound so plausible)
      • Selling your own bank account number to someone else illegal? That's an interesting thought.
        Could be fraud against those wanting to steal from it... but IANAL.
  • honeypot identities (Score:5, Interesting)

    by FudRucker (866063) on Wednesday April 09 2008, @07:25AM (#23011362)
    what should be done is for banks to work together with law enforcement and create a bunch of fake identities with flags on them that when used it automatically notifies the police and sends all information to the police (photos, fingerprints & whatever else)...
  • to money launderers. If someone has an empty, neglected bank account they will probably be much less likely to report suspicious activity on it. A fraudster could use the account to have various payments for spam, cracking etc. put into the bank account, then he could make an ATM card linked to that account and draw the money without ever having to use his own name or even go through the trouble of creating a fake identity.
  • by TripMaster Monkey (862126) on Wednesday April 09 2008, @07:33AM (#23011418)
    Your Identity Is Worth Less Than $15

    (checks bank balance...)

    Yeah, that's about right...*sigh*...
  • by MongooseCN (139203) on Wednesday April 09 2008, @07:41AM (#23011482) Homepage
    Check out page 3 of the executive summary. In Jan-Jun of 07, they found that 89% of web vulnerabilities were in ActiveX plugins in IE. 1% of vulnerabilities were in Mozilla extensions.

    I think we have a clear winner here...
  • by unlametheweak (1102159) on Wednesday April 09 2008, @07:42AM (#23011494)
    From the title:

    Your Identity Is Worth Less Than $15
    Wrong! My identity is priceless. And try telling some-one that (their identity is worth $15.00) who can't get a security clearance, a car loan, a job, etc. because their "identity" has been abused by some asshat junkie.

    My bank account, however, is another matter; nothing gained nothing lost :P
  • If your bank account can clear a 6-figure check, then the ability to access that money must be worth more than 1k, right?
  • by idontgno (624372) on Wednesday April 09 2008, @07:47AM (#23011552) Journal

    Who steals my purse, steals trash; 'tis something,
    nothing;
    'Twas mine, 'tis his, and has been slave to
    thousands:
    But he that filches from me my good name
    Robs me of about 15 bucks.

  • I smell profit ! (Score:5, Interesting)

    by Ihlosi (895663) on Wednesday April 09 2008, @07:53AM (#23011586)
    1. Open bank account.


    2. Sell account information.


    3. Close bank account.


    Repeat.

    • Buy cheap bank accounts

      cash a lot of dodgey cheques/ use for money laundering/ donate to republicans

      withdraw money

      profit
  • your bank account might fetch $10-$1000
    Well its good to know those trying to steal my bank account won't make a profit!
  • What'd be the source for the price list?
    Are those guys into this market?
  • by Jason Levine (196982) on Wednesday April 09 2008, @08:54AM (#23012224) Homepage
    When apparently you can just dumpster dive behind your local bank [connpost.com] to get all the bank accounts you would ever need?
  • by twotommylong (794494) on Wednesday April 09 2008, @08:57AM (#23012266)
    "With those prices, I wonder how often they pay more for the bank account than is actually in it? "

    It's not just the funds the fraudsters are after... They are after 3 things:

    1) Once you have a bank account, you capacity in the laundering pipeline. With the $10,000 detection threshholds, and the other AML (anti-money laundering) requirements, it takes a lot more bank Xfers to multiple parallel accounts to move money between the point of fraud, to the point of safe harbor. ACH-IN.... ACH-OUT. These are often 'mule' accounts to allow a network of smaller transfers that allow a larger aggregate money movement. Since I have 30-90 days before you notice all these $1-9000 xfers going in and out of your account... I need to constantly get new bank accounts to keep my laundering pipeline at full 'bandwidth.' If I'm lucky, I can pull a change of (email) address on you, so I can completely control the account for a small period of time (NOTE: address change just got 'red flagged' by the US FACT act of 2003... so in addition to Patriot Act reviews at account opening... address changes will (mandatory by all financial institutions by Nov 2008) be audited by regulators to verify the organization did due diligence to check for fraudulent activity).

    2) Having a Bank Account makes opening a PayPal, a credit card, a stock trading or another bank account all the easier. All of these are much more lucrative, and they can leverage funds (margin, credit) , and if I open them, there is much less chance of detection by you (since I completely control the contact information). This is classic identity theft ("Officer, I don't have a bank account in the Outer Antilles!")

    3) if we get lucky, you got cash... which we'll use in a leverage scam (open a stock account, and seed a pumpNdump).
  • $1-$15 for a full identity?

    At those prices maybe I can finally afford to upgrade mine!

  • by petes_PoV (912422) on Wednesday April 09 2008, @09:33AM (#23012680)
    So my email address is worth between $4 and $30. Excellent - I can afford to retire now.

    If you know someone (hell, anyone) who pays this kinda ca$h, please let me know. With my own domain I can create email addresses indefintely, and at $30 each it's literally printing money.

    Now, of course if the reality was that spammers pay a tiny fraction of a cent per address then it's less worth my while (but could still be worth knocking together a script for).

    Which option strikes you as most likely? Yes, thought so.

    In similar news, my password is worth money too? Really? My password is "chocolate" - that'll be another couple of $$ please (feel free to sell it on yourself, too).

    Now, I'll just sit back and wait for all the SPAM^H^H^H^Hmoney to start rolling in. Hmmmm, I think I just burned out my irony circuits.