The job hunt is on.
You are networking, posting resumes at job search Web sites and filling out countless applications.
The more exposure you get, the better your chances of landing a job.
Unfortunately, more exposure means more personal information is out there, possibly increasing the risk of identity theft.
"We get at least a dozen calls each week from people who have been victimized through job searches," said Pam Dixon, executive director of World Privacy Forum, a nonprofit, public interest research group. "This is really a problem, and in a bad economy it gets worse."
Authorities warn that crooks can skim driver's license and Social Security numbers from the paper and digital trail left behind after the first paycheck is cashed.
And with the region's unemployment rate lingering at 14.2 percent, thieves have plenty of candidates to choose from.
According to the Federal Trade Commission, 51,140 Californians reported being victimized by identity theft in 2008, the second highest rate in the nation.
Employment-related fraud ranked first in occurrence, beating out credit-card fraud and accounting for 20 percent of all identity theft complaints to the FTC from the state.
The damage caused by identity theft in 2008 was $48 billion. On average, $300 to $600 is lost in a typical incident.
More than 20 percent of identity-theft incidents reported nationwide are paper based - where "someone went through a stack of papers or someone did something foolish like threw all the papers in the Dumpster," said Jay Folley, executive director of the Identity Theft Resource Center.
All some crooks need is a name and driver's license number.
"They get a box of blank checks from Staples and print them with your name on it," Folley said. "One group passed 120 checks in an eight-hour period in 11 states."
But excluding personal information from a job application can be worrisome for those seeking employment.
"When you are desperately looking for a job, you don't want to set up any barriers and appear as not willing to cooperate," said Joanne McNabb, chief of the California Office of Privacy Protection.
Kelly Matsushima of Ontario had to fill out at least 20 applications before getting a job at the "1/28 Raceway" store at the Montclair Plaza.
More than half of the places she applied asked for a Social Security number on the application.
"I put it on some, but if I didn't feel right, I just wrote `I will supply it in the interview,"' Matsushima said.
A cautious approach should be followed when posting resumes online as well, McNabb said.
Crooks can pose as prospective employers, gaining access to thousands of personal files never intended for their prying eyes.
According to World Privacy Forum, the typical information listed on a resume - such as name, home address, telephone number and detailed work history - has "street value."
Resumes posted on one job search Web site could also be sold to another site, multiplying the chances of a security breach.
"It's a significant issue," said Michael Abney, a San Bernardino County deputy district attorney. "It's definitely going up. We are overwhelmed. The Internet makes it (scams) easier."
Crooks also have been known to create job postings that appear legitimate, but instead of a paycheck, the unsuspecting victim finds themselves facing criminal prosecution and even jail time.
"The resume is just a starting point," Dixon said.
These particular scams are fairly simple: The victim responds to a job offer to work from home, depositing checks into their account and then transferring the money to the "employer's overseas affiliate." As a payment for services rendered, the victim gets to keep a share, usually 15percent.
In some instances, instead of money, the victim is asked to receive and forward packages - essentially receiving and distributing stolen goods.
"Most people don't realize they are committing a crime," Dixon said. "We've seen victims go to jail. You could also be forced to repay all the money. You are victimized twice."
To be on the safe side, experts suggest avoiding vaguely worded job offers - phrases such as "we have thousands of jobs" or "we work with major companies" are red flags.
"Don't reply to e-mails with popular domain names like hotmail or gmail," Dixon warned.
Asking for Social Security numbers too early is not a good idea for employers either and can have legal consequences if a security breach is traced back to the hiring process.
"If you collect it, you are responsible for it," Folley said. "You have 200 people turn in an application, you will look at 10 or 20 that meet the requirements and invite them back. But now you are stuck with holding onto 180 others for which you can be sued if they get lost. How foolish is that?"
Employers can be fined under California's Unfair Competition Law as well as Civil Code Section 1798.81, which states a person or an entity may not publicly display anyone's Social Security number.
"The fines are $2,500 a page, and each page counts as a hit," Folley said. "If law enforcement can track it back to you, the city attorney can make a killing out of you."
Most employers are aware of privacy laws and take precautions against ID theft.
Rosa Ramirez is an assistant manager at New York and Company at the Montclair Plaza. Although the store's employment application does ask for a Social Security number, all applications are kept on file for six months and then shredded, Ramirez said.
But asking for a Social Security number from online applicants is irresponsible, Dixon said.
"It's frustrating for the job seeker," she said. "They have to do it or they won't get a job. It happens a lot, especially at the big-box stores. They want that number up front before anything else."
The California Office of Privacy Protection has published a Business Privacy Handbook, which advises businesses to limit access to records containing sensitive personal information to those who need to use them in the performance of their duties and require use of passwords to access such databases.
It also suggests that businesses store paper records containing sensitive personal information in locked cabinets and, if no longer needed, use proper disposal methods such as shredding.
Old computers, hard drives, photocopiers or fax machines with electronic media containing personal information should be disposed of only after the data has been destroyed.
Usually, people find their identities have been compromised when the calls start coming in from debt collectors or when they are denied a loan.
In the worst-case scenario, "a cop pulls you over to write you a traffic ticket and there are warrants for your arrest," Folley said.
"If the crooks give your name and Social Security number when they get arrested, you can get a criminal record," McNabb said.
Out of every 700 incidences of identity theft, only one is prosecuted. Unlike a physical robbery, an identity thief does not have to be in the same state or country as the victim when the crime is committed.
"The majority of times, we never figure out how (thieves) got (the information) in the first place," Abney said.
Once the personal information is out, it's almost impossible to control its use, McNabb said.
"Crooks will open a secure credit card to create credit history and pay it off to create an opportunity to borrow more," she said.
"Our advice is don't put your Social Security number or driver's license number on the initial application.
"Just don't do it, don't do it, don't do it."
What to do if you become a victim of identity theft
1. Once the ID theft is discovered, it should be reported to all three of the major credit bureaus so that your file can be flagged with a fraud alert: Experian, (888) 397-3742; Equifax, (800) 525-6285; and TransUnion, (800) 680-7289.
2. Report identity theft to your local police department so they can issue a report. You will need to give copies to creditors and the credit bureaus.
3. Call creditors for any accounts that the thief opened or used. Ask them not to hold you responsible for new accounts opened by the thief. If your existing credit accounts have been used fraudulently, ask the credit issuers to close those accounts and to report them to credit bureaus as "closed at consumer's request."
4. If you open a new account, have it set up to require a password or PIN to approve use. Don't use your mother's maiden name or the last four numbers of your Social Security number as your password.
5. Fill out the Federal Trade Commission's ID theft affidavits.
6. Write a letter to each credit bureau and creditor. Repeat what you said in your telephone call and send copies of your police report and ID theft affidavits.
7. Consider a credit freeze, which makes sure your file cannot be shared with potential creditors, insurers, employers or residential landlords without your permission.
8. If your checks, ATM card or bank account information are lost or stolen, call the bank and close your accounts. Report the stolen checks to major check verification companies. Call TeleCheck at (800) 710-9898 and Certegy Inc. at (800) 437-5120. To find out if the identity thief has passed bad checks in your name, call SCAN at (800) 262-7771. Follow up by writing to your bank. Send your letter by certified mail, return receipt requested.
9. If your driver's license or DMV-issued ID card is stolen, call the toll-free DMV Fraud Hotline at (866) 658-5758.
10. If your mail was stolen or your address changed by an identity thief, contact your local postal inspector.
11. If you suspect that someone else has claimed unemployment benefits using your Social Security number, call the California Employment Development Department's toll-free Fraud Hotline at (800) 229-6297.
For more information, go to www.privacy.ca.gov or call (866) 785-9663.
SOURCE: California Office of Privacy Protection
Tips on preventing identity theft
Avoid vaguely worded job offers. Phrases like "we have thousands of jobs" or "we work with major companies" are red flags.
Choose a high-quality job search site and resume database with good privacy practices.
Be sure to keep a record of where you have posted your resume and remember to go back and delete it from the sites after you have finished your job search.
Never put a Social Security number on your resume. Instead provide it when you are invited for an interview or when the employer obtains your permission to conduct a background check. The only exceptions to the rule are federal or state jobs, which typically require a Social Security number up front.
If using a resume-writing service in job-search efforts, get an agreement in writing that the service will not sell or share your resume with any third parties or partners.
If a job offer asks you to scan your ID or driver's license and send it in, don't do it.
Reply to job ads directly by looking for a company-related e-mail address to send your resume to.
Post a resume directly on the Web site of the company you wish to work for.
If possible, mask your contact information or e-mail address when posting a resume, so you can have control over who can contact you.
SOURCE: World Privacy Forum
VICTIM'S RIGHTS
If you are a victim of identity theft, you have rights under state law.
You have the right to get copies of documents relating to fraudulent transactions or accounts created using your personal information and to have that information removed from your credit reporting agency files.
You have the right to stop debt collection actions related to a debt resulting from identity theft and can receive up to 12 free credit reports, one per month, in the 12 months from the date of the police report.
You have the right to assert a defense against anyone claiming a right to money or property in connection with a transaction resulting from identity theft.
You have the right to an expedited proceeding in Superior Court for getting a judge's order finding that you are factually innocent.
You have the right to be listed in the California Department of Justice's Identity Theft Victim Registry, which gives victims of criminal identity theft a mechanism for confirming their innocence.
SOURCE: California Office of Privacy Protection
