Latest news with #identityfraud
CBC
2 days ago
- Business
- CBC
Your SIN is a 'master key.' Here's why you must protect it
Dave has learned the hard way that you don't want the wrong person getting a hold of your social insurance number. In 2024, he became a victim of identity fraud. Someone used his SIN to open a bank account and get their hands on some quick cash. And while he didn't lose any of his own money, his credit score tanked for a period. "The most frustrating part was being told, 'Hey, there isn't much we could do about this. Your information is on the dark web. It will be used again.' And months later, it was used again," Dave, of Laval, Que., told Cost of Living. Dave isn't his real name. CBC has agreed to identify him by a pseudonym, as police have told him that further exposing his identity could lead to more challenges. Dave was one of 4.2 million Desjardins customers that had their data leaked in 2019. And they aren't the only victims. Over the past few years, customers with Sobeys, Ticketmaster, London Drugs, Nova Scotia Power and the Canada Revenue Agency, to name a few, have had their data breached. And since more businesses and organizations have started asking for social insurance numbers, experts are cautioning people to be very selective about who they share their SIN with. "It's the most sensitive, secret and unique identifier. Essentially, it's the master key to our identity in Canada," said Claudiu Popa, co-founder of KnowledgeFlow Cybersafety Foundation, which advocates for online safety for Canadians. SINs The social insurance number was created with the launch of the Canadian Pension Plan in the 1960s and used to track who was eligible, as well as for various employment insurance programs. According to Popa, there aren't many places that actually need to know it. A new employer needs your SIN, as does your bank and some government agencies, like the CRA. But more organizations are asking for people's SINs. Popa says that includes gyms, landlords, insurance companies and schools. He says none of these places need your SIN, but that doesn't stop them from asking. That's because it's an easy way to check someone's credit with a unique number. But some companies are also using it as an identifier for customers. "It has just become a lazy way of uniquely identifying people, and unfortunately it places people at the risk of privacy breaches," said Popa. So what do you do if someone asks for your SIN? Just say no. But as the cliché goes, that's easier written into a CBC article than done in real life. Just ask Greg Pace. When Pace made a major career change from an RCMP officer to a farmer, he figured it was a good idea to take some classes to gain more knowledge about the new field. But midway through the government-sponsored classes, someone from the program pulled him aside and informed him he hadn't put his SIN in his paperwork. "I felt there was a lot of social pressure to comply. And yet I knew it wasn't the right ask — that they were, I felt, overstepping," said Pace. Pace, whose background as an RCMP officer taught him to be wary of sharing personal information, asked why, but wasn't given a reason. So he refused, and when it became obvious he was no longer welcome, he left the course. Compromised What makes the social insurance number so valuable to fraudsters, compared to a credit card number or bank password? Popa says it's because, unlike other pieces of information, it isn't easy to change. Dave knows that all too well. Just in the past year, fraudsters have tried to open two different bank accounts in his name and have bought multiple iPhones online. And the onslaught of fraud came just as Desjardins' offer of free credit monitoring was running out. It's taken Dave a lot of time to talk to banks, credit bureaus and police to get it all straightened out each time. And it's not just a hassle. It can tank his credit score. "To know that somebody could use … your information in a fraudulent manner, something that you worked so hard to build, is extremely frustrating," said Dave. Since the Desjardins breach, some have requested new SINs. But that doesn't happen often. It requires proof that the number has been used in fraud, not just that the information has been leaked. And fraudsters are clever, Popa says. They'll often wait until their victims' credit monitoring has run out, which is usually public information. In an email to CBC, Employment and Social Development Canada (ESDC) says it takes steps to protect people from having their SIN compromised, including awareness campaigns, fraud prevention resources and secure application processes. It says that if your number is compromised, you should file a police report, notify the Canadian Anti-Fraud Centre, contact a credit bureau and report it to any affected government programs. It doesn't, however, recommend applying for a new SIN. "Having multiple SINs can increase fraud risk. Getting a new SIN does not erase the old SIN and does not protect it from future abuse," said ESDC spokesperson Saskia Rodenburg. A different method? There is another potential solution: digital IDs. This system would allow you to share only what you want to share and nothing else. "You might have something like a digital wallet that's in your phone, or in your smart tablet," said Joni Brennan, president of the non-profit Digital ID and Authentication Council of Canada. One piece of information on the ID could be your verified income, for example, which you would be able to share with whichever person or organization that requires it. This way, she says, you could share only the information that's necessary, or that you want to share. Some regions are taking the necessary steps, like B.C., but don't expect a Canada-wide digital ID anytime soon. That's because provinces have a lot of jurisdiction over credentials. And as that progresses, Brennan says finding ways to protect our SIN needs to be an ongoing conversation. "As we see, new technologies come forward that might create new ways for bad folks to do bad things, [so] the space that's focused on security and protection and privacy needs to continue to evolve, as well."
FF News
12-06-2025
- Business
- FF News
Synthetic Identity Document Fraud Surges 300% in the U.S. - Sumsub Warns E-Commerce, Healthtech and Fintech at Risk
Sumsub , a global leader in verification, today released Q1 2025 identity fraud trends based on internal data, revealing a dramatic rise in AI-enabled fraud across the United States . According to platform data, deepfake fraud has surged by 1100%, while synthetic identity document fraud rose by over 300% with attackers exploiting generative AI to create fake passports, IDs, and biometric data. Sumsub analyzed millions of verification checks conducted on its platform between January and March 2025 across industries such as fintech, e-commerce, healthtech, and edtech to uncover emerging fraud trends. One of the most pressing concerns is the rise of synthetic identity document fraud, where criminals use AI tools to generate fake identity documents such as driver's licenses or passports. These synthetic identity documents are often realistic enough to bypass basic KYC checks, posing a significant challenge for businesses. Unlike synthetic identity documents, which involve the creation of entirely fake personas using a mix of real and fabricated data, synthetic identity documents refer specifically to falsified documents or images generated by AI. Fraudsters then use these AI-generated visuals to open accounts, conduct illicit transactions, or bypass compliance processes, making detection increasingly difficult without advanced verification tools North America-Specific Insights (Q1 2025): Synthetic identity document fraud spiked by 311% in North America compared to Q1 2024 , making it the region's most alarming growth vector. , making it the region's most alarming growth vector. Deepfake fraud jumped by 1100%, marking a clear signal that generative AI is being used to bypass facial recognition and biometric checks. marking a clear signal that generative AI is being used to bypass facial recognition and biometric checks. High fraud activity was recorded in e-commerce, healthtech and edtech ––industries have seen accelerated digitization post-pandemic. ––industries have seen accelerated digitization post-pandemic. The U.S. in particular saw a sharp increase in fintech fraud attempts, underscoring the need for real-time, multi-layered fraud prevention solutions. Key Global Findings (Q1 2025): Synthetic identity document fraud is rising across all regions, fueled by widespread access to GenAI tools that can generate highly realistic fake IDs. Top markets for synthetic identity document fraud include: Ethiopia (2.17%) Pakistan (2.08%) Nigeria (1.52%) Other notable markets: Hong Kong (0.99%), Indonesia (0.84%), Turkey (0.80%) Deepfake-related attacks are growing globally, particularly to bypass biometric systems—now one of the fastest-evolving fraud vectors. Healthtech fraud attempts rose by 384%, signaling its emergence as a high-value target alongside fintech and e-commerce. Regional deepfakefraud surges: Canada : 3,400% Hong Kong : 1,900% Singapore : 1,500% Mainland China : 1,183% Germany : 1,100% United Kingdom : 900% United States : 700% 'The pace at which fraud tactics are evolving is staggering,' said Andrew Sever , CEO of Sumsub. 'As generative AI becomes more accessible, so does the ability to generate synthetic identity documents and deepfakes at scale. What we're seeing is a broader trend, in which Fraud-as-a-Service is becoming a reality, where malicious actors can easily access sophisticated tools to carry out attacks. Businesses can no longer rely on outdated verification tools. It's imperative they adopt an intelligent, adaptive approach to stay ahead.' To combat this new wave of fraud, Sumsub continues to invest in advanced AI-powered fraud detection, document authenticity analysis, and biometric defense tools to protect businesses and users worldwide. The company urges organizations to stay proactive by integrating multi-layered verification and continuous monitoring into their onboarding and transaction workflows. People In This Post Andrew Sever Sumsub
Daily Mail
06-06-2025
- Automotive
- Daily Mail
Mother was terrified she'll be dragged to court after over £770 in bus lane fines when taxi was registered at her her address
A mother bombarded with 11 bus lane fines feared she would be dragged into court after a taxi was registered to her home. Shocked Anna Brunskill was horrified when she received a notice from the DVLA on April 23 telling her a vehicle had been registered at her address in Warrington with a name she did not recognise. Since then the 49-year-old has received almost a dozen £70 bus lane penalty notices, racking up to £770 in total. She said nine of these charges were posted to her on the same day of May 15 - despite her having no idea who owns the car now tied to her home address. The marketing manager has already alerted the DVLA and Warrington Borough Council to inform them of the situation. Anna spotted the vehicle appears to have a taxi light on its roof in the photos on the penalty notices. She said there was a chance it was an innocent mistake, as there are two roads with similar names in the area. But she was concerned due to the sudden volume of fines. However, Warrington Borough Council, in Cheshire, confirmed it was a 'genuine mistake'. Describing the debacle, Anna said: 'We suddenly got 11 fines in the post. 'I think that's what raised my suspicions more than anything. 'We don't know this person, we've lived at this address for 14 years and we don't know the car at all. 'That's not very nice, it's a bit worrying especially these days with identity fraud. 'It's definitely alarming and the fact that he only bought this car in April just before we started getting these fines.' When she received the notice that a new vehicle had been registered at her address, confused Anna swiftly rang the DVLA to report this to them. She said they told her they would open a case for her and then on May 8 Anna received the first bus lane fine for the car that had been registered to her address. She said rang the local council, who told her to get an acknowledgement form from the DVLA and send it to them so they could pause the charges. While on the phone with the council, Anna says she was told that there were 10 other penalty charges for the car registered at her address. Two days later she received a huge stack of them through the post. Since then Anna has received confirmation from the DVLA that her address has been removed from their records. Anna said: 'It was worrying. 'I was more worried about the bus lane to be honest and the DVLA bit because I thought, you don't want to not be paying your penalty notices. 'You can get all sorts of things against your name can't you if you don't sort things like that? So that was my main worry. 'You could get a county court judgement against you. 'When you're talking about county court judgements and stuff it can affect your credit history and all sorts. 'It is absolutely irritating, I probably spent about three hours in total speaking to people, being on hold, waiting for people. 'They've all been very helpful to be fair but time out of your working day isn't great.' The DVLA said that any motorist who receives fines or correspondence for a vehicle they do not own should contact Action Fraud, the issuing authority of any fines or penalties and also write to DVLA giving as much information as possible. They said that if the DVLA is made aware of an error on the vehicle record, upon receipt of satisfactory evidence, the Agency will remove the address details from the vehicle record. They explained it is an offence to knowingly provide false information or documents to the DVLA under the Road Traffic Act 1972. A Warrington Borough Council spokesman said: 'Unfortunately, a genuine mistake was made when the taxi driver's vehicle was registered with the DVLA. 'Ms Brunskill's fines for driving in a bus lane have now been cancelled, and no further action will be taken.'
CNN
21-05-2025
- CNN
A 24-year-old Venezuelan man posed as a teenage homeless migrant and forged documents to enroll at an Ohio high school, officials say
A 24-year-old man was arrested Monday for allegedly forging documents to enroll in an Ohio high school, where he studied for over a year before the identity fraud was discovered, authorities said. Anthony Emmanuel Labrador Sierra enrolled at Perrysburg High School in January 2024 with a Venezuelan birth certificate showing he was 16 years old, claiming he was a homeless migrant who had been trafficked into the country, according to a Perrysburg Police Division incident report. Labrador Sierra started at the school and was eventually placed with a local family who had previously hosted exchange students, according to the police report. The host family was granted temporary and later permanent guardianship of Labrador Sierra in 2024, and they helped him with obtaining a social security number and driver's license while he was in their custody, according to the police report. He also used forged documents to obtain federal Temporary Protective Status (TPS) from US Citizenship and Immigration Services, Perrysburg Schools said in a statement. Migrants under TPS humanitarian relief are protected from being removed from the country or detained based on their immigration status, and may obtain legal employment, according to the USCIS website. Labrador Sierra's identity first came into question on May 14, when a woman contacted the guardian family and told them he was actually a 24-year-old man and the father of her child, police said. She sent them several photos: a driver's license and social security card with Labrador Sierra's name and a March 27, 2001, birth date; and several from Facebook showing her and Labrador Sierra, along with Labrador Sierra with a child. The guardians contacted the school district that evening, according to Perrysburg Schools. Administrators met with Labrador Sierra the following day and 'he denied the allegation and asserted that the birth certificate submitted during enrollment - which indicates he is currently 17 years old - was accurate,' the school's statement says. CNN has reached out to an attorney for Labrador Sierra for comment. 'Given the seriousness of the claim, Perrysburg Schools immediately directed the guardians to keep Labrador off school property while the matter was investigated further,' the school district said. During the course of the investigation, the district said it 'found social media posts by others, including those claiming to be Labrador Sierra's family.' Police said those posts include several from a Zulay Sierra, whom they believe to be Labrador Sierra's mother based on the birth certificate he provided to the school district. One of the posts she shared shows Labrador Sierra wearing a Perrysburg soccer uniform with the caption 'Happy birthday son,' according to police. It was dated March 27 – matching the birth date on the picture of the driver's license that the woman had sent the guardians, according to the police report. Police reached out to US Customs and Border Patrol and were told Labrador Sierra 'had an expired work visa and that he was considered an overstay in this country,' according to the police report. CBP told police his visa had expired in 2023, the year he reached out to enroll in high school, police said. The Perrysburg Township Police arrested Labrador Monday during a traffic stop on a forgery warrant. He was riding in the passenger seat of the car driven by the woman who had exposed his identity to his guardian family, according to the police report. CNN has reached out to the guardian family and the woman who contacted them for comment. Labrador Sierra was arraigned Tuesday, court records show. He pleaded not guilty to a forgery charge, a fifth-degree felony. His bond was set at $50,000, and his next court date is scheduled for May 29. He may soon be facing federal charges as well, according to US Customs and Border Protection. 'Labrador is an illegal alien who overstayed his visa and has no legal status. US Border Patrol placed an immigration detainer on him with the local police department,' a CBP spokesperson said in a statement to CNN. 'Federal charges are being pursued.' Department of Homeland Security Assistant Secretary Tricia McLaughlin issued a statement confirming Labrador Sierra is from Venezuela and calling his actions 'disturbing.' McLaughlin said US Immigration and Customs Enforcement, or ICE, also lodged a detainer against him. The school district called the situation 'highly unusual,' but added that it 'is confident proper legal channels were followed to provide support for an individual presenting themselves as an unaccompanied minor…' CNN's Hanna Park contributed to this report.
CNN
21-05-2025
- CNN
A 24-year-old Venezuelan man posed as a teenage homeless migrant and forged documents to enroll at an Ohio high school, officials say
A 24-year-old man was arrested Monday for allegedly forging documents to enroll in an Ohio high school, where he studied for over a year before the identity fraud was discovered, authorities said. Anthony Emmanuel Labrador Sierra enrolled at Perrysburg High School in January 2024 with a Venezuelan birth certificate showing he was 16 years old, claiming he was a homeless migrant who had been trafficked into the country, according to a Perrysburg Police Division incident report. Labrador Sierra started at the school and was eventually placed with a local family who had previously hosted exchange students, according to the police report. The host family was granted temporary and later permanent guardianship of Labrador Sierra in 2024, and they helped him with obtaining a social security number and driver's license while he was in their custody, according to the police report. He also used forged documents to obtain federal Temporary Protective Status (TPS) from US Citizenship and Immigration Services, Perrysburg Schools said in a statement. Migrants under TPS humanitarian relief are protected from being removed from the country or detained based on their immigration status, and may obtain legal employment, according to the USCIS website. Labrador Sierra's identity first came into question on May 14, when a woman contacted the guardian family and told them he was actually a 24-year-old man and the father of her child, police said. She sent them several photos: a driver's license and social security card with Labrador Sierra's name and a March 27, 2001, birth date; and several from Facebook showing her and Labrador Sierra, along with Labrador Sierra with a child. The guardians contacted the school district that evening, according to Perrysburg Schools. Administrators met with Labrador Sierra the following day and 'he denied the allegation and asserted that the birth certificate submitted during enrollment - which indicates he is currently 17 years old - was accurate,' the school's statement says. CNN has reached out to an attorney for Labrador Sierra for comment. 'Given the seriousness of the claim, Perrysburg Schools immediately directed the guardians to keep Labrador off school property while the matter was investigated further,' the school district said. During the course of the investigation, the district said it 'found social media posts by others, including those claiming to be Labrador Sierra's family.' Police said those posts include several from a Zulay Sierra, whom they believe to be Labrador Sierra's mother based on the birth certificate he provided to the school district. One of the posts she shared shows Labrador Sierra wearing a Perrysburg soccer uniform with the caption 'Happy birthday son,' according to police. It was dated March 27 – matching the birth date on the picture of the driver's license that the woman had sent the guardians, according to the police report. Police reached out to US Customs and Border Patrol and were told Labrador Sierra 'had an expired work visa and that he was considered an overstay in this country,' according to the police report. CBP told police his visa had expired in 2023, the year he reached out to enroll in high school, police said. The Perrysburg Township Police arrested Labrador Monday during a traffic stop on a forgery warrant. He was riding in the passenger seat of the car driven by the woman who had exposed his identity to his guardian family, according to the police report. CNN has reached out to the guardian family and the woman who contacted them for comment. Labrador Sierra was arraigned Tuesday, court records show. He pleaded not guilty to a forgery charge, a fifth-degree felony. His bond was set at $50,000, and his next court date is scheduled for May 29. He may soon be facing federal charges as well, according to US Customs and Border Protection. 'Labrador is an illegal alien who overstayed his visa and has no legal status. US Border Patrol placed an immigration detainer on him with the local police department,' a CBP spokesperson said in a statement to CNN. 'Federal charges are being pursued.' Department of Homeland Security Assistant Secretary Tricia McLaughlin issued a statement confirming Labrador Sierra is from Venezuela and calling his actions 'disturbing.' McLaughlin said US Immigration and Customs Enforcement, or ICE, also lodged a detainer against him. The school district called the situation 'highly unusual,' but added that it 'is confident proper legal channels were followed to provide support for an individual presenting themselves as an unaccompanied minor…' CNN's Hanna Park contributed to this report.
