Protecting Innocence: An Expert‘s Guide to Preventing Child Identity Theft

As a cyber security professional who has specialized in identity theft and data privacy for over a decade, I‘ve seen the devastating impact this crime can have on individuals and families. But one of the most heartbreaking forms of identity theft is the one targeting our most vulnerable population: children.

The Growing Threat of Child Identity Theft

Most people don‘t realize how prevalent child identity theft really is. According to the 2022 Child Identity Fraud Report by Javelin Strategy & Research:

• 1.25 million children were victims of identity fraud in 2021
• $1,128 is the mean fraud amount for victims under 18
• 1 in 50 children had their identities stolen before the age of 18

Children are an extremely attractive target for identity thieves for several reasons:

1. Their Social Security numbers are essentially a "clean slate" with no credit history, so fraud can go undetected for years.
2. Criminals can use a child‘s identity to open bank accounts, credit cards, and other lines of credit.
3. A child‘s identity can be used to obtain a driver‘s license, secure employment, or rent an apartment.
4. Children won‘t be checking their own credit or applying for loans anytime soon so the fraud can continue for years before being discovered.

In the worst cases, a child could enter adulthood with their credit already destroyed, impacting their ability to access student loans, rent an apartment, or even find a job. Cleaning up identity theft is a time-consuming and expensive process at any age, but it can be especially devastating for young adults just starting out.

How Does Child Identity Theft Happen?

There are several ways that a child‘s sensitive personal data can fall into the wrong hands:

Data Breaches

Businesses, schools, and organizations often collect personal information on minors for enrollment, insurance, or activity registration purposes. If those databases are hacked and the information is leaked, it can end up for sale to identity thieves on the dark web. Notable breaches impacting children have included gaming sites like VTech (5 million parent/child records) and school data systems like Illuminate Education (millions of student records).

Even data breaches not directly involving children‘s data can enable child identity theft. Javelin found that children were 51% more likely to be victims if their parents had also suffered identity theft. Information gleaned from an adult‘s accounts can help thieves target their children too.

Social Media

Proud parents may not realize how the information they post about their children on social media can be misused. Details that seem innocent like full names, dates of birth, mothers‘ maiden names, pet names, and school locations are exactly the nuggets of data fraudsters need to piece together a child‘s identity or even find passwords to hack accounts.

"The allure of posting milestones and cute photos is strong, but parents need to think very carefully about how much they share publicly. Avoid using full names, don‘t post sensitive documents like birth certificates, and set profiles to private," advises Darren Wilson, Senior Security Consultant at SafeGuard Cyber.

Familial Fraud

Perhaps the most disturbing source of child identity fraud is someone the family knows and trusts. In 73% of child identity theft cases, the child knows the perpetrator. It could be a relative, family friend, or even a parent. Access to documents around the house or knowledge of key personal details make it all too easy to open accounts in a child‘s name or add them as an authorized user on existing accounts without consent.

Suzanne Nakano, a fraud investigator who has worked many child identity theft cases, says, "It‘s a huge betrayal of trust that can have devastating financial and emotional impacts. The fraud often isn‘t discovered until the child is old enough to apply for credit on their own and gets denied due to the impostor accounts and debts already in their name."

Synthetic Identity Theft

Synthetic identities are a type of fraud in which criminals create a fake persona using a combination of real and fabricated information. Children‘s Social Security numbers are especially desirable for synthetic fraud because they have no existing credit files. Thieves will pair a child‘s real SSN (often stolen through a data breach) with a fake name, address, and birthdate. They then gradually build up the credit profile of this fictitious identity over time. Eventually, they‘ll max out the credit limits and disappear, leaving the debts tied to the child‘s stolen SSN.

"Synthetic identity theft is one of the fastest growing types of financial crime, in part because it‘s harder for traditional fraud models to detect, especially when there‘s no existing credit file to compare it to," says Lindsey Havens, Senior Marketing Manager at BioCatch. "By the time it‘s discovered, there can already be significant damage to the child‘s credit."

Red Flags of Child Identity Theft

So how do you know if your child‘s identity has already been compromised? Here are some warning signs to be alert for:

• Pre-approved credit card offers addressed to your child
• Debt collection attempts (calls/letters) in your child‘s name for accounts you don‘t recognize
• Notice from the IRS that your child owes taxes or their SSN was used on another tax return
• Denied for government benefits because benefits are already being paid to another account using your child‘s SSN
• Receiving medical bills or insurance claims for services your child didn‘t receive
• Your child is denied a bank account because of a poor credit history

If any of these occur, it‘s time to investigate further. The first step should be to check if your child has a credit report. The credit bureaus (Equifax, Experian, and TransUnion) only generate reports if there has been activity associated with an SSN. You can request a manual search of your child‘s SSN, and the existence of a credit file in their name is an indicator of potential fraud.

Preventative Measures

While you can‘t eliminate risk entirely, there are several ways parents can safeguard their child‘s identity:

Freeze Their Credit

Setting up a security freeze on your child‘s credit is one of the most effective ways to prevent new accounts from being opened in their name. You can do this for free at all three credit bureaus. It does not affect existing accounts, it just blocks new ones from being opened. The freeze stays in place indefinitely until you request its removal.

"Freezing a child‘s credit is an easy and free way for parents to establish a baseline of protection. With a freeze in place, an identity thief will have a much harder time exploiting a stolen Social Security number for financial gain," recommends Eva Velasquez, President/CEO of the Identity Theft Resource Center.

Safeguard Sensitive Documents

Don‘t carry your child‘s Social Security card or birth certificate unless absolutely necessary (like to open a financial account for them). At home, keep these vital documents in a secure location like a safe or a locked filing cabinet. Consider scanning and password-protecting digital copies as a backup.

For documents you no longer need like old health forms or school registration papers, shred them before disposal to keep sensitive details out of the recycling bin and dumpster divers‘ hands.

Question Information Requests

Don‘t automatically fill in a Social Security number just because a form includes a space for one. In many cases, it isn‘t actually mandatory. Ask how the organization will use and protect your child‘s information. Find out if you can use just the last 4 digits instead of the full SSN, or if there are alternate identifiers you can use.

If anyone requests your child‘s SSN, confirm that they actually need it and that they have security measures in place to protect it. Reputable organizations should have a written policy that they can share on how personal data is handled.

Educate Your Kids

As soon as your children are old enough to understand, have an open conversation about privacy and security. Talk to them about creating strong passwords, never sharing personal details with strangers, and being careful what they post on social media. Emphasize the permanence of everything shared online.

Establish rules around internet usage including what sites they can visit, what apps they can download, and what information is okay to share. Make sure privacy settings are enabled on any social or gaming accounts. Explain that you‘ll be monitoring their online activity not as an invasion of privacy but as a way to keep them safe.

"Children are increasingly living their lives online and engaging with the world digitally. Just like we teach them physical safety tips, it‘s crucial that we arm them with the knowledge to keep their identities safe in the virtual world too," says Velasquez.

Check for a Credit Report

As a final safeguard, make a habit of requesting a credit report in your child‘s name on a yearly basis, just like you check your own credit regularly. Remember, a report will only be generated if there is activity associated with their SSN. So if a credit report does exist for your minor child, that‘s a major red flag that warrants further investigation and disputes of any fraudulent accounts.

The Road to Recovery

So what should you do if you‘ve taken all these precautions but still discover that someone has stolen your child‘s identity? Here‘s a step-by-step action plan:

1. File a report with the Federal Trade Commission (FTC) at identitytheft.gov. This report can be used to dispute fraudulent accounts.
2. File a police report with local law enforcement. This paper trail will be important for cleaning up the fraud and clearing your child‘s name.
3. Contact the credit bureaus to place a fraud alert on your child‘s credit. With an alert in place, businesses must take extra steps to verify identity before opening new credit.
4. Open an investigation with the companies where fraud occurred. Send copies of the FTC and police reports asking them to close fraudulent accounts and remove them from your child‘s credit.
5. Keep detailed records of all conversations including dates, contact names, and what was discussed. Follow up all calls with certified letters reiterating your requests.
6. Consider professional help through an identity theft protection or recovery service if the fraud is complex. They can guide you through the resolution process.

Empower Through Education

Discovering that your child has been a victim of identity theft is scary. You may feel angry, overwhelmed, guilty, and unsure where to start. But know that recovery is possible and there are many resources available to help you navigate the process. Don‘t be afraid to ask for help.

Most importantly, use the experience as a powerful teaching moment for your kids. Frame it not as a lecture about stranger danger but as an opportunity to take control of their own digital lives. Empower them with knowledge about how to keep their identities safe online and off. Encourage them to ask questions and come to you with any concerns.

"Child identity theft can shake a family‘s sense of security to the core, but it doesn‘t have to define your child‘s financial future," says Nakano. "Equipped with the right tools and information, parents and children can emerge from this experience stronger, smarter, and more united than ever in the ongoing fight against fraud."

Now that you know the risks of child identity theft, the red flags to look for, and the proactive steps you can take, you‘re already well ahead of the criminals. Stay vigilant, keep communicating openly with your kids, and rest a little easier knowing you‘ve put up the best defenses to protect the most priceless pieces of your child‘s identity – their innocence, their trust, and their boundless potential.