In further proof that identity theft can happen to anyone, a fraud investigator at the Federal Trade Commission recently had her identity stolen. After she got her purse snatched, she wrote a firsthand piece about her identity theft experience. The thief got her wallet and her phone, which the crook immediately turned off. While she had a strong password on her phone, she didn’t want to risk the thief being able to access her data so she sent an erase command to wipe the device clean once it connected to the internet.
In light of her experience, she compiled a list of tips that will help you be a bit smarter about protecting your smartphone. We’ve also added two additional important tips.
- Lock your phone. Use at least a 6-digit passcode on your device, or use the pattern lock or fingerprint scanner. Set the device to lock when not in use. This is especially important if you use a mobile wallet or money transfer apps.
- Update it and back it up. Back up your device regularly and make sure automatic updates are turned on. Backing up your phone regularly and automatically makes sure that you’ll still have your stuff – if it disappears.
- Get help finding your phone. Install and turn on Find My iPhone (iOS) or Find My Device (Android). These apps could help you locate your device if you lose it. If your phone is stolen, these apps also let you remotely issue a command to erase your device – even if a thief turns it off.
- Alert your wireless provider if your phone is missing. Make the call as soon as you know your device is missing. They can permanently or temporarily disable the SIM card to stop someone from using the device for calls or the internet. It helps, too, if you have a record of your phone’s serial number or IMEI number (a unique identifier for your phone).
Our additional tips:
- Add a pin number to protect your SIM card. The password you have on your phone doesn’t protect your SIM card. A thief can simply remove the card and put it in a new phone and access your precious data. This TechRepublic article walks you through how to add a SIM PIN to your Android phone. Here’s an Apple article about how to do the same for your iPhone or iPad.
- Beware of elaborate phishing schemes that can pop up after your phone is stolen. Our previous blog post details an example of a phishing scheme specifically designed to steal your Apple login credentials if you’ve lost your iPhone.
- Turn on two-factor authentication. That means you’ll give your password and a second way to prove that you’re you. This extra layer of security makes it much harder for thieves to get into your accounts and lock you out. Many providers give several options to authenticate your identity, so be sure you have a backup method (like one-time use codes or a backup email address) in case you don’t have access to your device to receive texts or phone calls.
- Know which devices have access to your accounts. Many social media sites and email providers, and some phone operating systems, let you view the logins for your devices from the settings menu. You can remove devices from the account, and log out of the site remotely using a computer or another device. That’s handy if ever you lose your phone, tablet, or laptop.
- Check your log-in and account notifications. Many email and social media accounts can notify you if a new device connects to your account, or if someone tried to change your passwords.
- When in doubt, change your passwords. If you’ve lost your device, change your passwords. Many of us set our devices to remember passwords – which could mean that someone who gets your phone could get access to your accounts and personal information. So: if you lose your phone, change your email, social media, online banking, shopping, and other passwords right away.
For more tips on what to do to protect yourself from identity thieves, check out ftc.gov/idtheft.
Are you covered for identity theft?