Identity Thieves

The

timing couldn't have been worse. When Jeremy Johnson discovered that someone had applied for a couple of credit cards in his name and had run up a $6,000 tab, it was late September and law-enforcement agencies were busy tracking down terrorists. Johnson, 31, a production assistant at a cable-channel website, called his local precinct in Brooklyn and was told the N.Y.P.D. was so swamped, the detectives couldn't do anything unless he had the perpetrator's name and address.

Johnson knew that identity theft violates both state and federal laws, so he called the FBI and was forwarded to the Secret Service, which investigates counterfeiting and other types of financial fraud. An agent asked whether the case involved more than $25,000. Otherwise, he intimated, he had bigger fish to fry.

SPONSORED BY LATEST COVER STORY Mars Mission Jan. 26, 2003 Past Issues Sex & Health Jan. 19, 2003 ----------------- The Real Dean Jan. 12, 2003 ----------------- Person of the Year Dec. 29, 2003 ----------------- Lost Gospels Dec. 22, 2003 ----------------- Insurgents Dec. 15, 2003 ----------------- Diabetes Dec. 8, 2003 ----------------- Love/Hate Bush Dec. 1, 2003 ----------------- Jobs Nov. 24, 2003 ----------------- Jessica Lynch Nov. 17, 2003 ----------------- Russell Crowe Nov. 10, 2003 ----------------- Medicated Kids Nov. 3, 2003 ----------------- New SATs Oct. 27, 2003 ----------------- Eating Smarter Oct. 20, 2003 ----------------- CIA Leak Oct. 13, 2003 ----------------- What Went Wrong Oct. 6, 2003 ----------------- Reagan Letters Sept. 29, 2003 ----------------- Johnny Cash Sept. 22, 2003   SPECIAL REPORTS  Tech TIME: What You Got  21 Days to Baghdad  Election 2004 PHOTOS AND GRAPHICS  Getting to Mars  NASA's Schedule  Animal Attraction  Where Sex Drive Comes From  Quotes of the Week More photos >> MORE STORIES Nation: Living in Bill's Shadow Notebook: 10 Questions for Bob Dole Science: Mission to Mars More Stories >> CNN.com: Latest News

Johnson thought investigators were overloaded because of Sept. 11, but police say their response would have been pretty much the same had he called months earlier or phoned a precinct in Kansas City or Key West. In an age of instant credit, when you can apply online and start shopping within 30 seconds, identity theft has become an American epidemic. Calls to the fraud-victims help line at a national credit bureau have nearly doubled from the 522,922 received in 1997, and 86,168 identity-theft cases were reported to the Federal Trade Commission last year, making it the top consumer-fraud complaint. Because law enforcement lacks the manpower to investigate all the small-potatoes cases and creditors shrink from costly prosecution, identity theft remains a lucrative, low-risk crime.

But that may change, as government and industry efforts converge to protect a staple of the U.S. economy: easy credit. Sept. 11 underscored the ways that terrorists use identity theft to slip into U.S. society and fund their operations. Investigators have linked several suspects to credit-card fraud, including the two men with box cutters who were arrested on a train Sept. 12. The terrorist convicted last year in a 1999 plot to blow up Los Angeles International Airport used 13 identities lifted from the membership files of a Boston health club. Potential losses in Secret Service investigations jumped from $850 million in 1998 to $1.4 billion in 2000, prompting some lenders to begin to pool their fraud data.

Like most stories of identity theft, Johnson's is one of initial confusion and lingering anxiety. "How did someone get so much of my personal information, and what's to stop them from using it again?" he asks. "My Social Security number can go from criminal to criminal. I'm screwed for life."

Consumers have to pay only the first $50 of fraudulent charges made on their accounts, and many lenders waive even that amount. But last year credit-fraud victims spent countless hours and an average of $1,173 to restore their credit ratings. And all it takes to get the ball rolling is one crooked telemarketer or someone who fishes a receipt or "preapproved" credit-card offer out of your trash.

Johnson doesn't know how he got targeted. But Discover Card alerted him on Sept. 30 that someone had opened an account in his name. Johnson called the three major credit bureaus and found that two of his credit reports were riddled with errors. Accounts had been opened by someone who gave the wrong birth date and mother's maiden name. When he turned to his local police, a detective told him nothing could be done unless he had the suspect's name and address--implying that Johnson should do a little digging on his own.

This attitude is common at overburdened police departments across the country. At a special identity-theft task force in Los Angeles, each of the nine investigators handles nearly 600 active cases, with a simple case taking about 70 hours to investigate and more complex ones taking three times as long. Each of the nine specialists solves 30 to 40 cases a year, according to team member Ralph Richards. "We're making some headway, but it's a drop in the bucket," he says. "The chances of getting caught are much less than for the guy who steals your VCR."

Johnson was determined to beat those odds. He set about tracing a phone number on a fraudulent application for credit that had been made in his name. And he scored, in part by paying $25 to an online data broker--an information mercenary who may not care whether you're trying to track down a long-lost cousin or steal her identity. Johnson went so far as taking the subway to the suspect's address to match his name to an apartment number, noting there were flower boxes in his windows. "I felt like Angela Lansbury," he says.

When he presented his findings to the police near his home in Brooklyn, they said the case should be handled where the charged goods were delivered, in the Bronx, and the two precincts bounced Johnson back and forth until a report was finally filed in Brooklyn.

Johnson's next battle was obtaining information about the suspect from creditors. Some companies, such as Discover and Gateway, gave Johnson everything on the fraudulent applications. Others, including Zales and American Express, told him next to nothing. "Giving customers some information would hamper our security efforts," says AmEx spokesperson Judy Tenzer. "We consider an investigation a law-enforcement issue," says Maria Mendler, of Zales' lending arm, Citibank.