The Red Flags Rules are designed to fill the cracks in the system that allowed identity thieves to fraudulently pilfer the identities of others. Six agencies were involved in drafting the Red Flags Rules: the Treasury Department’s Office of Thrift Supervision, Office of Comptroller of the Currency, Federal Deposit Insurance Corp., Federal Trade Commission, National Credit Union Administration, and the Federal Reserve System. They came up with the following guidelines as examples of red flags. These were gleaned from the Identity Theft Red Flags and Address Discrepancies under the Fair and Accurate Credit Transactions Act of 2003.
A fraud alert included with a consumer report.
Notice of a credit freeze in response to a request for a consumer report.
A consumer reporting agency provides notice of an address discrepancy.
Unusual credit activity, such as an increased number of accounts or inquiries.
Documents provided for identification appear altered or forged.
Photograph on ID inconsistent with appearance of customer.
Information on ID inconsistent with information provided by the person opening the account.
Information on ID, such as signature, inconsistent with information on file at financial institution.
Application appears forged or altered, or destroyed and reassembled.
Information on ID does not match any address in the consumer report. Social Security number has not been issued or appears on the Social Security Administration’s Death Master File, a file of information associated with Social Security numbers of those who are deceased.
Lack of correlation between Social Security number range and date of birth.
Personal identifying information is associated with known fraud activity.
Suspicious addresses supplied, such as a mail drop or prison, or phone numbers associated with pagers or an answering service.
Social Security number provided matches one submitted by another person opening an account for other customers.
An address or phone number matches those supplied by a large number of applicants.
The person opening the account is unable to supply identifying information in response to a notification that the application is incomplete.
Personal information is inconsistent with information already on file at a financial institution or creditor.
Person opening account or customer is unable to correctly answer challenge questions.
Shortly after a change of address, creditor receives request for additional users of account.
Most of available credit used for cash advances, jewelry or electronics, and customer fails to make first payment.
Drastic change in payment patterns, use of available credit or spending patterns.
An account that has been inactive for a lengthy amount of time suddenly exhibits unusual activity.
Mail sent to customer is repeatedly returned as undeliverable despite ongoing transactions on active account.
Financial institution or creditor notified that customer is not receiving paper account statements.
Financial institution or creditor notified of unauthorized charges or transactions on customer’s account.
Financial institution or creditor notified that it has opened a fraudulent account for a person engaged in identity theft.
Source: Federal Trade Commission
