- Silicon Valley's 19 Coolest Places to Work
- Is Windows 8 Development Worth the Trouble?
- 8 Books Every IT Leader Should Read This Year
- 10 Hot Hadoop Startups to Watch
CSO - The entrepreneurial small-business spirit is alive and well in cyberspace. Unfortunately, a significant piece of it is devoted to crime, and a significant piece of that involves identity fraud.
A study released Wednesday by ID Analytics' ID:A Labs found more than 10,000 identity fraud rings in the U.S. -- some of them led by career criminals, but a surprising number amounting to mom-and-pop operations involving friends and family, said the author, Stephen Coggeshall.
Coggeshall told CSO Online while about two thirds of ID fraud attempts are shut down before they do any damage, that obviously leaves a third getting through.
While the average income of fraud ring members is unclear, it is clearly paying off, he said. "If these people weren't successful, they wouldn't be doing it."
The study, which covered the past decade but put most of its focus on the past three years, included an examination of more than a billion applications for bankcards, wireless services and retail credit cards. It found identity fraud rings attacking all three industries, with wireless carriers the favorite target.
Coggeshall said he found fraud rings throughout the U.S., but most were in a "belt of fraud stretching through the rural Southeast," from Virginia to Texas. He said one of the things that surprised him was that while lone individuals involved in fraud tend to come from urban areas, the fraud rings tend to be in rural areas.
"Another thing was that I expected to see mafia-type professionals who were not related, but just in business together," he said. "We do see that, but we also found large numbers of family and friends -- fraud rings where they share last names and addresses, so they're siblings, parents and children."
One of the things that likely makes this an attractive business opportunity in a poor economy is that even when attempted frauds are caught and rejected, the chance of perpetrators being arrested and prosecuted is low.
Coggeshall's report gave examples of several fraud rings that included significant detail. One, he reported, included, "a male and female over the age of 70, a woman of 48 with the same family name, and a second woman of 48 with a different last name."
"All participants are using multiple SSNs and last names; three have alternate first names and birthdates," he said. "Together, this identity fraud ring has perpetuated 345 falsified credit card applications and a fraudulent payday loan. The male is retired, but uses a former email address from a respected institution to increase credibility. This fraud ring is located in a subdivision in the Indianapolis area."
Yet, Coggeshall said, to his knowledge, none of the members of that ring or two others he profiled, in Washington, D.C. and McAllen, Texas, has been prosecuted or even arrested, which meant that he had to leave some details out of the report "to protect the privacy of the individuals involved."
"We work with the fraud shops at financial institutions, not directly with law enforcement," he said. "But I would think the FBI would be interested in working with us. Identity fraud around IRS tax returns is big problem. I would think."