In order to pre­vent and mit­i­gate Iden­ti­ty Theft, the Coun­ty will pro­vide appro­pri­ate respons­es to the fol­low­ing Red Flags:

(A) Alerts, Noti­fi­ca­tions or Warn­ings from a Con­sumer Report­ing Agency.

  1. A fraud or active duty alert is includ­ed with a cred­it report.
  2. A cred­it report­ing agency pro­vides a notice of cred­it freeze in response to a request for a cred­it report.
  3. A cred­it report­ing agency pro­vides a notice of address discrepancy.
  4. Receiv­ing a report of fraud with a cred­it report.
  5. Receiv­ing indi­ca­tion from a cred­it report of activ­i­ty that is incon­sis­tent with a customer’s usu­al pat­tern or activity.

(B) Sus­pi­cious Documents.

  1. Doc­u­ments pro­vid­ed for iden­ti­fi­ca­tion appear to have been altered, forged or unauthentic.
  2. The pho­to­graph or phys­i­cal descrip­tion on the iden­ti­fi­ca­tion is not con­sis­tent with the appear­ance of the appli­cant or per­son pre­sent­ing the identification.
  3. Receiv­ing oth­er doc­u­men­ta­tion with infor­ma­tion that is not con­sis­tent with exist­ing cus­tomer infor­ma­tion (such as if a person’s sig­na­ture on a check appears forged).
  4. Receiv­ing an appli­ca­tion for ser­vice that appears to have been altered or forged.

(C) Sus­pi­cious Per­son­al Iden­ti­fy­ing Information.

  1. The per­son open­ing the cov­ered account or the cus­tomer fails to pro­vide all required per­son­al iden­ti­fy­ing infor­ma­tion on an appli­ca­tion or in response to noti­fi­ca­tion that the appli­ca­tion is incomplete.
  2. Per­son­al iden­ti­fy­ing infor­ma­tion pro­vid­ed is not con­sis­tent with per­son­al iden­ti­fy­ing infor­ma­tion that is on file with the County.
  3. A person’s iden­ti­fy­ing infor­ma­tion is the same as shown on oth­er appli­ca­tions found to be fraudulent.
  4. A person’s iden­ti­fy­ing infor­ma­tion is con­sis­tent with fraud­u­lent activ­i­ty (such as an invalid phone num­ber or fic­ti­tious billing address).
  5. A person’s social secu­ri­ty num­ber is the same as anoth­er customer’s social secu­ri­ty number.
  6. A person’s address or phone num­ber is the same as that of anoth­er person.
  7.  A person’s iden­ti­fy­ing infor­ma­tion is not con­sis­tent with oth­er infor­ma­tion the cus­tomer provides.

(D) Unusu­al Use of, or Sus­pi­cious Activ­i­ty Relat­ed to, the Cov­ered Account.

  1. A change of address for a cov­ered account fol­lowed by the Coun­ty receiv­ing a request for the addi­tion of autho­rized users on the account or adding oth­er parties.
  2. A cov­ered account that has been inac­tive and then becomes active.
  3. Pay­ments stop on an oth­er­wise con­sis­tent­ly up-to-date account.
  4. Mail sent to the cus­tomer is returned repeat­ed­ly as unde­liv­er­able although trans­ac­tions con­tin­ue to be con­duct­ed in con­nec­tion with the customer’s cov­ered account.
  5. The Coun­ty is noti­fied of unau­tho­rized charges or trans­ac­tions in con­nec­tion with a customer’s cov­ered account.
  6. A new account is used in a man­ner con­sis­tent with fraud (such as the cus­tomer fail­ing to make the first pay­ment, or mak­ing the ini­tial pay­ment and no oth­er payments).
  7. An account being used in a way that is not con­sis­tent with pri­or use (such as late or no pay­ments when the account has been time­ly in the past).
  8. The Coun­ty receives notice that a cus­tomer is not receiv­ing his/her paper statements.

(E) Notice From Cus­tomers, Vic­tims of Iden­ti­ty Theft, Law Enforce­ment Author­i­ties, or Oth­er Per­sons Regard­ing Pos­si­ble Iden­ti­ty Theft in Con­nec­tion with Cov­ered Accounts Held by the County.

  1. The Coun­ty is noti­fied by a cus­tomer, a vic­tim of iden­ti­ty theft, a law enforce­ment author­i­ty, or any oth­er per­son that it has opened a fraud­u­lent account for a per­son engaged in iden­ti­ty theft.
  2. Should any of the above instances of sus­pi­cious activ­i­ty that could be iden­ti­ty theft occur, the Coun­ty will take imme­di­ate actions to either pre­vent or mit­i­gate the situation.

In order to detect any of the Red Flags iden­ti­fied above with the open­ing of a new account, Coun­ty per­son­nel will take the fol­low­ing steps to obtain and ver­i­fy the iden­ti­ty of the per­son open­ing the account:

Steps can include:

  • Requir­ing cer­tain iden­ti­fy­ing infor­ma­tion such as name, date of birth, res­i­den­tial or busi­ness address, prin­ci­pal place of busi­ness for an enti­ty, social secu­ri­ty num­ber, driver’s license or oth­er identification.
  • Ver­i­fy­ing the customer’s iden­ti­ty, such as by copy­ing and review­ing a driver’s license or oth­er iden­ti­fi­ca­tion card.
  • Review­ing doc­u­men­ta­tion show­ing the exis­tence of a busi­ness entity.
  • Inde­pen­dent­ly con­tact­ing the customer.

In order to detect any of the Red Flags iden­ti­fied above for an exist­ing account, Coun­ty per­son­nel will take the fol­low­ing steps to mon­i­tor trans­ac­tions with an account:

Steps can include:

  • Ver­i­fy­ing the iden­ti­fi­ca­tion of cus­tomers if they request infor­ma­tion (in per­son, via tele­phone, via fac­sim­i­le, via e‑mail).
  • Ver­i­fy­ing the valid­i­ty of requests to change billing addresses.
  • Ver­i­fy­ing changes in bank­ing infor­ma­tion giv­en for billing and pay­ment purposes.

Respons­es to these Red Flags are com­men­su­rate with the degree of risk posed based on the County’s risk assessment.

  • Appro­pri­ate respons­es may include the following:
  • Com­plete ver­i­fi­ca­tion of iden­ti­fi­ca­tion for fraud, active duty, cred­it freeze or address dis­crep­an­cy alert for any of these types of alerts found on a con­sumer cred­it report when apply­ing for services;
  • Mon­i­tor­ing a cov­ered account for evi­dence of iden­ti­ty theft or sus­pi­cious activ­i­ty by plac­ing on the County’s watch list;
  • Con­tact­ing the customer;
  • Chang­ing any pass­words, secu­ri­ty codes, or oth­er secu­ri­ty devices that per­mit access to a cov­ered account;
  • Reopen­ing a cov­ered account with a new account number;
  • Not open­ing a new cov­ered account;Closing an exist­ing cov­ered account;
  • Not attempt­ing to col­lect on a cov­ered account or not send­ing a cov­ered account to a debt collector;
  • Noti­fy­ing law enforce­ment; or
  • Deter­min­ing that no response is war­rant­ed under the par­tic­u­lar circumstances.