Protect your identity

New York State Office of the Attorney General Consumer Frauds Bureau

Dear New Yorkers,

Online, in the mail, even in person — your identity can be at risk. 

Identity theft affects millions of people every year. Scammers assume our credit histories, grab medical benefits, even use our social security numbers for employment. 

It’s important to take steps to safeguard your personal information, just as you do your loved ones and personal property. Don’t share your information with strangers, lock it up at home, and protect it online with strong passwords. Avoid carrying information with you when you leave home. 

To find out more about how to keep your identity safe, or what to do if you believe your identity has been stolen, please consult my website's resources on identity theft.

New York State Attorney General Signature
Headshot of Attorney General Letitia James

Secure your personal information

Certain “personal identifying information” — like Social Security numbers, birth dates, and account numbers — can give identity thieves what they need to get a credit card, a job, and even medical benefits in your name. That’s why it’s important to guard this information carefully.

Unsolicited calls and mail

Never give your personal information to someone who contacts you unsolicited. Regardless of whether they call, email, or approach you personally, do not give your personal information to people you don’t know or did not contact.

Don’t be “phished”

Phishing is an attempt to get a victim to provide personal information such as their username, password, or credit card number. The scammers will text, email, or call, identifying themselves as your bank or a government agency. They will claim to need to “confirm your information” in order to “straighten out your account.”

Legitimate financial institutions will not contact you for important information. If you are unsure, call the bank — using published numbers — to verify whether they are indeed seeking information. Don’t click on links in emails from people you don’t know.

Cut the clutter

A good way to protect yourself is to reduce unsolicited offers. Here are some ways of cutting back on calls, credit card offers, and other solicitations.

Telemarketing calls or 1-888-382-1222

Credit card offers or 1-888-567-8688

Direct-mail and email offers

Online advertisements

Social Security number

Government agencies, employers, and banking or financial institutions — there are a limited number of institutions that require your Social Security number. Ask why it is needed. And, again, never give it out to someone who contacts you unsolicited.

Limit what you carry

Keep documents, like Social Security cards, at home in a safe place. Carry only the credit and bank cards you need.

Create strong passwords

If you use the internet, you need strong passwords, and you will need several of them. A strong password is one that:

  • cannot be easily guessed (for example your birthday, a loved one’s name, a pet’s name)
  • has multiple forms of characters (numbers, upper and lower case letters, symbols)
  • is at least eight digits long
  • is different from your other passwords

Use passwords on:

Wireless internet networks: Put passwords on your own networks; avoid conducting personal and financial business on public networks. 

Each individual computer and each account on the computer should be password protected.

Email: if you use your email for shopping, paying bills, or banking, there is a lot of personal information that can be accessed with the click of button. 

Smartphones: These are portable windows into your world. Use a strong password, in case it is lost, stolen or even borrowed by someone on the prowl. 

Use secure websites

Secure websites “encrypt” information as it is sent. When transmitting personal or financial information look for these signs:

  • S for secure: Look for an “S” at the beginning of the site’s name. A secured site will start with https://. 
  • security certificate: Many browsers use a padlock icon. Others will use the site name highlighted in color before the URL (the name of the site you’ve signed onto). When you click on this, it will tell you the name of the owner of the certificate, which should be the same as that of the site you are on. 

Destroy unneeded records

Shred important documents before discarding, including any record that contains personal identifying information, such as financial and medical records, receipts, tax returns, even credit card solicitations.

Monitor statements

Check credit card and bank statements carefully for any activity you didn’t authorize. 

With medical bills and health insurance, check carefully to be sure you actually received the treatment described.

Credit reports

Everyone is entitled to a free copy of their credit report each year, from each of the credit reporting agencies. If you see accounts or inquiries that you did not initiate or you don’t recognize, it may indicate that someone else is using your identity. Request a report from each of the major credit reporting agencies. You can schedule them at different times of the year. Visit or call 1-877-322-8228.

Child identity theft

Children’s identities are the most commonly stolen, sometimes by family members with bad credit ratings. Protect your children’s personal information as you would your own. Be sure to ask questions and take action if your children receive bill collection calls or credit offers in their names, are denied benefits because someone else is using their number, or receive notices from the IRS about taxes due.

Office of the New York State Attorney General Consumer Frauds Bureau
Information about identity theft

Annual credit reports

Major credit reporting agencies




U.S. Federal Trade Commission