New on FinoLib · Volume V: Personal Finance
I have just published a new article on FinoLib, my free finance education library: Identity Theft and Scams: How to Protect Yourself. It is part of Volume V: Personal Finance. It is part 1 of a 2-part guide. Below is a summary of the topic in plain, expert language, so you can follow the idea even before you open the full article.
The idea in plain words
Identity theft works because of three weak spots. Your Social Security number is both your name and your password. Lenders can pull your credit file on request. And the law treats a payment as yours once you press send. You can close these gaps. Freeze your credit at all three bureaus, use logins that cannot be tricked by fake websites, and never pay anyone who contacted you first by a method they picked. A freeze is like a lock on the door that only you can open.
Key points
■A freeze blocks new-credit checks but, by law, not employers, landlords, insurers or your existing lenders.
■Federal law covers transfers someone else makes; a payment you send yourself, however deceived, is generally your loss. Britain has made banks reimburse most such losses since Oct 2024; the United States has not.
■Paid monitoring rarely pays: at 2021 survey rates, the expected yearly out-of-pocket loss from identity theft is about $9 per adult.
■Gift cards, crypto, wires and a “safe account” are the tells of nearly every scam.
A closer look
The FTC’s Consumer Sentinel Network — the federal government’s central fraud-reporting database — recorded $15.9 billion in reported consumer fraud losses in 2025, up from $12.5 billion in 2024 and more than double the $5.8 billion reported just four years earlier in 2021. Separately, the FTC received more than 1.1 million identity theft reports through IdentityTheft.gov in 2024, and the FBI’s Internet Crime Complaint Center logged $20.9 billion in reported cybercrime losses in 2025, up 26% in a year. These are reported figures only — the FTC itself estimates the true scale of fraud is substantially higher, since only a fraction of victims ever file a report at all.
Identity theft is the use of your personal information to take money or credit in your name; the response playbook is in 13.4.
Data gets out through company breaches, phishing messages that lead to fake login pages, SIM swaps that move your number (and its text codes) to a thief’s phone, card skimmers, and stolen mail. The defenses:
Two categories dominate current fraud statistics, by two different measures: investment scams are the single largest category by dollar loss ($7.9 billion reported to the FTC in 2025; the FBI’s separate count is $8.6 billion), while imposter scams — someone posing as a government agency, a familiar business, or a relative — are the most frequently reported type of fraud, generating over one million reports. A new development sits inside both categories: AI-enabled fraud — voice cloning, deepfake video, AI-generated phishing text — was tracked as a distinct FBI category for the first time in the 2025 Internet Crime Report, already accounting for $893 million in reported losses from over 22,000 complaints.
A worked example
Worked Example — The Overpayment
You sell a bike for $450. The “buyer” mails a $2,450 check asking you to return the difference: $2,450 − $450 = $2,000. Your bank makes the funds available within days; the fake check is found weeks later and the deposit reversed. You lose the $2,000, and the bike if shipped.
Under the hood
Under the Hood: Why the Law Covers a Stolen Payment but Not a Tricked One
Regulation E defines an unauthorized transfer as one “initiated by a person other than the consumer without actual authority.” The test is who pressed send, not whether you were deceived. If a thief uses your card, or tricks you into revealing a card number or login and then moves the money himself, the transfer is unauthorized and your loss is capped by how fast you report (13.3). If you move the money yourself, the transfer is authorized, and recovery depends on the bank’s goodwill.
Money Move
Every state requires businesses to report breaches to you. When the letter comes, change the exposed password wherever you reused it; if your SSN was exposed, freeze your credit and get an IP PIN. Monitoring only detects; a freeze prevents.
Where Experts Disagree
The standard view (United States): whoever authorizes a payment bears the loss if it was a scam. Its assumptions: the sender is best placed to stop it, and guaranteed refunds would make victims less careful and invite false claims. The alternative (United Kingdom): since Oct 7, 2024, payment firms must reimburse victims of “authorized push payment” scams sent by bank transfer, up to £85,000 per claim, with the sending and receiving firms splitting the cost 50:50, an optional £100 excess…
What the full article covers
The full article includes worked examples, a look under the hood at the mechanics, a recap, a reveal-on-click quiz and the official sources behind every figure.
Volume V: Personal Finance
Read the full article on FinoLib
The complete article, Identity Theft and Scams: How to Protect Yourself, with every worked example, diagram, quiz and source, is free to read in Volume V, Personal Finance on finolib.com.
Explore the Finance Education Series: Vol. II — Capital Markets · Vol. I — Global Economy · Vol. III — Finance Encyclopedia · Vol. IV — Finance Careers · Vol. V — Personal Finance