#IdentityDefense

Jonathan Kamens 86 47jik@federate.social
2024-12-14

But wait, there's more! I asked #IdentityDefense to email me a chat transcript, and below is the entire email I received. Strange that there doesn't appear to actually be a chat transcript there.
Well, see, it's in the email, but you can't see it, because the email is a multipart/alternative MIME message, and they put the transcript in the text/plain part but not the text/html part. This is a *stunning* level of incompetence.

Email message with subject "Ada Chat Transcript". Body says:

"Hi,

Thanks for chatting with us. As you've requested, please see a copy of your conversation transcript below.

Ada
Ada Support Logo Ada Support Inc. © 2024"

There is no chat transcript below.
Jonathan Kamens 86 47jik@federate.social
2024-12-14

But wait, there's more. Here's the catastrophically bad chat I had with #IdentityDefense's #AI #bot (#fail!):

BOT: Hello, I am your Identity Defense chatbot.  
BOT: How can I assist you today? 

USER: I want to unlock and verify my account 

BOT: I'm sorry to hear that your account is locked. Please try resetting your password. 
BOT: Go to the sign-in page and click on “Forget password”. Verify your account using the email you receive and set a new password. 

USER: This isn't a password problem 

BOT: I apologize for the confusion. Could you please provide more details about the issue you're experiencing with unlocking and verifying your account? 

USER: Identity verification failed because my credit reports were locked. I've unlocked them all but now it won't let me retry the verification. 

BOT: If you unsuccessfully attempt to verify your identity a certain number of times, the quiz will be frozen for a period of 72 hours. This cool-down period is to safeguard your information. 
BOT: Note that if you start the quiz and do not finish it, this counts as a failed attempt. Also, in certain cases, there may be activity on your credit bureau file that causes you to immediately go into the 72-hour cool-down period. 

USER: The information you just gave me is incorrect. I only tried once, the failure was not caused by my answering any questions incorrectly, and it locked me out for 30 days, not 72 hours.BOT: No worries 
BOT: I'll send your question to our support team 
BOT: No one's available right now. For faster service, you can reach us via chat from 9 AM to 5 PM Eastern Time.  
BOT: Simply go to your login screen and click the chat button at the top right of your screen. I am here 24/7 if you need any assistance, I can help with most questions and concerns.  

USER: I am on chat right now, and it is currently between 9 AM and 5 PM Eastern time, so I don't understand why you're telling me to try that when that's what I'm doing right now. 

BOT: 👌 
BOT: I'll send your question to our support team 
BOT: No one's available right now. For faster service, you can reach us via chat from 9 AM to 5 PM Eastern Time.  
BOT: Simply go to your login screen and click the chat button at the top right of your screen. I am here 24/7 if you need any assistance, I can help with most questions and concerns.  

USER: I am confused, did you send my question to your support team or not? 

BOT: You got it 
BOT: I'll send your question to our support team 
BOT: No one's available right now. For faster service, you can reach us via chat from 9 AM to 5 PM Eastern Time.  
BOT: Simply go to your login screen and click the chat button at the top right of your screen. I am here 24/7 if you need any assistance, I can help with most questions and concerns.
Jonathan Kamens 86 47jik@federate.social
2024-12-14

But wait, there's more!
Before I was able to reach someone at #IdentityDefense on the phone, I tried using their live chat to get support.
Their web site claims agents are available "9 AM to 5 PM Eastern Time," but I got connected to an AI bot, not a live agent, and the AI bot was unable to transfer me to a live agent after it failed to answer my question.
So, did they forget to mention that live chat agents are only available Monday to Friday, or are they lying about having them at all?

Jonathan Kamens 86 47jik@federate.social
2024-12-14

OK, so, I finally got to someone from #IdentityDefense on the phone, and apparently the reason why it's failing is because they can't match up the email address or phone number I gave them with what's in my #TransUnion credit report.
Note: I gave them a unique #AnonAddy email address and my Google Voice # instead of my cell #, for privacy and identity protection reasons. So, again, their site can't cope with people who are already taking steps to protect their online identities. Awesome!

Jonathan Kamens 86 47jik@federate.social
2024-12-14

But wait, there's more!
I attempted to call #IdentityDefense on the phone to get my account unlocked so I could try the identity verification again, as instructed by their web site.
Their voice response system put me on hold and played annoying music for four minutes and then the call was disconnected.

Jonathan Kamens 86 47jik@federate.social
2024-12-14

Here's today's example of how all the #identityProtection companies are incompetent.
This is a screenshot from the enrollment process at #identityDefense.com.
Notice that the first field is asking me for a date but not telling me what date I'm supposed to enter.
I'm guessing they're asking for my birth-date, but I shouldn't have to guess.
Did anybody test this before they released it, and if so, are the testers so incompetent that they failed to flag this issue?
#infosec #privacy #identityTheft

Screenshot of a web form with the header "Personal Information" and the subheader "We require this information to provide your service."
Below that are three form fields. The fields don't have any labels to the left, right, above, or below them. Instead, there is grey text inside each field attempting to explain what it is for. The first field says "MM/DD/YYYY". The second says "Social Security Number". The third says "Confirm Social Security Number". One of these things is not like the others!
Jonathan Kamens 86 47jik@federate.social
2024-08-25

One of the free identity theft monitors we got as the result of a #dataBreach (#IdentityDefense) has informed my wife that her #SSN was in the #NPD breach Duh, hers and 100s of millions of others.
This is their mostly useless advice for what to do.
It's RIDICULOUS to advise people to freeze their credit report AFTER someone commits fraud with their SSN.
And how well do you think the IRS will handle it if everyone impacted contacts them "for protection against tax refund fraud"?
#privacy #infosec

1. Review earnings posted to your Social Security Statement. To get your Statement, go to www.socialsecurity.gov/myaccount and create an account.

2. If an identity thief is using your Social Security Number to open credit accounts, do the following:

    -File a report with the Federal Trade Commission. This report will serve as a police report for the purposes of remediation of any issues that arise from your stolen Social Security Number.

    -Freeze your credit report at the three credit bureaus.

3. Protect yourself from tax refund fraud by contacting the Internal Revenue Service. Go to www.irs.gov/uac/Identity-Protection or call 1-800-908-4490.

4. In extreme cases, you may want to apply for a new Social Security Number.

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst