
The influx of emails began arriving around the same time the government began issuing coronavirus relief payments in April.
Some individuals had queries about their tax details or how to navigate the IRS payment portal. The majority of people who contacted me were simply seeking to know where their money was and when it would arrive. Could I assist them in locating it?
For more on digital privacy and security, be sure to watch the video below:
Then, a concerning group of email senders appeared: those who mistakenly believed I was an IRS worker. How my Mytour email address ended up circulating across the web and became linked to any suggestion that I work for the IRS is a mystery. But the requests kept coming, and many contained details that could jeopardize the senders' identities.
At first, it was just the last four digits of someone’s Social Security number along with their full legal name. Then a previous emailer called me and left their full Social Security number in a voicemail. I’ve also received messages with partial SSNs, mailing addresses, full SSNs, birth dates... you name it, I’ve gotten it all.
And it terrified me. After years of writing about identity theft and phishing scams, I am now witnessing firsthand how many individuals have overlooked the countless warnings and advice shared by various publications, government bodies, and nonprofit organizations.
Say it louder for those in the back
So, let me say it again, because it’s worth repeating repeatedly:
Never, under any circumstances, send your Social Security number via email. Don’t give it to anyone who contacts you unexpectedly, claiming they need it for some reason. And if possible, don’t even speak it aloud.
It’s far too dangerous.
You may think you’re doing everything right to protect your identity from fraudsters, but there’s a good chance that someone you know is completely unaware. According to Federal Trade Commission data, consumers filed over 3.2 million complaints with the agency last year alone, with more than 1.7 million related to fraud and over 650,000 involving identity theft.
Fraud can affect anyone—your parents, your friends, people of all ages. Interestingly, the age group most vulnerable to financial losses from fraud is those aged 30-39. However, as victims get older, their financial losses tend to increase.
How to have a conversation with your parents about scammers
Though anyone can become a victim of a scam or identity theft through various means, I’ve found that discussing these topics openly with older generations—like the retirees who emailed me—is often more challenging.
While I might feel comfortable giving a close friend a stern warning about sharing their personal details, my parents or others with more life experience may feel offended or embarrassed by that approach.
So, I reached out to Cameron Huddleston, author of “Mom and Dad, We Need to Talk: How to Have Essential Conversations with Your Parents About Their Finances,” for some guidance on how to address this sensitive subject.
While you might react to hearing about a scam attempt (or, worse, a successful scam) by thinking, “Everyone knows that’s a scam!” Huddleston pointed out that such a response can actually make your parents or older adults feel alienated and embarrassed.
“One of the best ways to start talking to your parents about scams and identity theft is to share an example,” she explained. “You might show them an article you read about a recent scam or share a TV report. Or you could tell your parents about a scam call you received and warn them to stay alert for similar ones.”
Rather than reprimanding or lecturing your family members, Huddleston recommended highlighting how sophisticated scammers can be, stressing that anyone can fall victim and that criminals are constantly devising new methods to deceive people.
She also suggested helping your parents if they feel uneasy simply hanging up or ignoring the phone altogether. “Instead, guide them in creating a phrase they can use to politely end a call without feeling guilty. For example, advise your parents to tell telemarketers and suspicious callers that they have a guest and can’t talk right now,” Huddleston recommended.
At the very least, keep this in mind
Even those who are confident in their ability to spot scams can still be deceived by criminals. And at times, you might drop your guard unintentionally and find yourself in risky situations—like the emailers who contacted me.
Here’s the absolute minimum you need to remember to protect your identity. Learn it, live by it, and embrace it:
The IRS will never call you asking for your Social Security number. In fact, the IRS rarely calls at all, preferring to communicate through traditional mail.
The Social Security Administration won’t call you asking for your number because they already have it on file.
Never email sensitive personal details like your SSN or images of official documents (Social Security card, driver’s license, passport) unless the transmission is encrypted. For instance: If your doctor’s office asks you to upload a picture of your ID to their patient portal, that’s fine. But don’t send an email with the image attached.
Only provide your SSN when you’re absolutely certain it’s necessary for the service you’re requesting. Don’t hesitate to ask if there’s another way to verify your identity.
If you’re unsure, tell the caller that you’ll contact your credit card issuer/bank/government agency directly before sharing any personal information they’ve asked for.
Don’t click on links sent via text or email by unknown people, or from individuals pretending to represent government agencies.
