Graham Blland

Bedfordshire

IT Security consultant

Everybody seems to assume that this is a problem whihc must be solved by the end user. I would argue that the banks, finance companies etc. have a very large role to play in prevention. The theives are taking advantage of how easy it is to obtain credit, manipulate bank accounts, change addresses and passwords on these accounts and the very weak authentication methods which are used. These institutions should examine any of their procedures which can either be used to assist in identity theft (change of address, order new chequebook etc) and those involved once a theft may have been comitted (open account, obtain a loan and so on).
A lot of these changes would be relatively trivial, for example if an account address change has been made in the last 2 months any new chequebook ordered must be collected from a local branch rather than being posted out and the time delay should trigger a "where are my statements" question from the account owner which should arouse suspicion. Also the person collecting it will be captured on their CCTV cameras. I know none of these would be foolproof but lets not make it so easy for the criminals.