PandemicOversight.gov

Identity theft isn't a new problem, but it's a persistent one across major pandemic relief programs.
Here's what we're doing about it.

It's Identity Theft Awareness Week...
January 31 – February 4, 2022

Although in our work, it's a 365-day-a-year problem.

Cyber criminals have been taking advantage of the ongoing crisis to hack away at personal information and steal people’s identities. We’ve been keeping an eye on the situation and we know it's important to you, too.

This week, an update on the work we're doing, the work we're supporting, and news worth sharing on handling identity theft.

New from the PRAC

Small Business Administration Paycheck Protection Program Phase III Fraud Controls Report

In response to high levels of fraud in the first round of Paycheck Protection Program funding, the Small Business Administration (SBA)
put new controls in place.

In our latest report, we warn that persistent gaps in the SBA's new controls still might not catch identity theft and other 
common fraud schemes.

Key Insights: State Pandemic Unemployment
Insurance Programs

We also looked at more than 40 reports from 16 states to see how they handled jobless benefits early in the pandemic. About a third of the states reported identity-related fraud schemes. In Colorado, 
one social security number was used 151 times
to access unemployment insurance. That's just the start.  

Two New Indictments from the PRAC Fraud Task Force

Our collaboration with partner OIGs resulted in two new indictments in December, including one involving an identity theft repeat offender who allegedly stole the identities of individuals and companies to obtain more than $7 million dollars from the Paycheck Protection Program and the Economic Injury Disaster Loan Program.

Fake COVID-19 testing sites could put your privacy and identity at risk

We've been tracking the new trend of scam testing sites—while a fake testing site might look and feel like a real convenience in a pinch,
the long-lasting damage of identity theft is not.

Last week, the FTC posted three steps you should take before providing personal information at a pop-up COVID-19 testing site:

Get a referral. Go somewhere you have been referred to by your doctor or state or local health department’s website.

Check the source. Did you hear about a new testing site on a neighborhood social media group or email listserv? That “neighbor” could actually be a scammer.

Make sure the site is legit. Check with your local police or sheriff’s office if you suspect that it's not.

In Case You Missed It

Identity, Authentication, and the Road Ahead:
A Cybersecurity Policy Forum

Susan Gibson, Inspector General for the National Reconnaissance Office and Chair of the PRAC's Identity Fraud Reduction & Redress Working Group, spoke at this two-day event about barriers anti-fraud measures can inadvertently present to individuals who legitimately need access to relief.

You can read a summary of the event or click below to watch it in full. 

Find More on
Identity Theft Awareness Week

For more details on Identity Theft Awareness Week, including links and information for free resources and events, visit ftc.gov/idtheftweek. Follow #IDTheftWeek #idtheft on Twitter

Having trouble viewing this email? View it as a Web page.