Hooded Hacker – Getty Images Stock Photo
by JPMorgan Chase
(Sponsored by JPMorganChase)—While the internet can be an incredible resource, it can also expose users to dangers like hacking, data breaches, and phishing scams.
Unfortunately, the same tool that helps you live a convenient modern life can give hackers and criminals the opportunity to capture your personal data and financial information and exploit it on the dark web. Read on to discover what threats to your personal information are out there—and how you can fight back.
Because of the measures it takes to access the dark web, that part of the internet is inherently anonymous. It’s not illegal to access the dark web, and not all activities there are nefarious (for example, some individuals use it to access free speech and news in areas with high censorship).
However, the anonymous nature of the dark web means some people do use it for criminal activity, from drug trafficking to selling and soliciting private data. Even if you never personally access the dark web, your information could be floating around there. The dark web can be used to buy hacking or spamming services that target the public, and if a hacker obtains your personal information in a data breach, phishing scam, or malware attack, they can sell it to others on the dark web.
If your information is available on the dark web, it can have consequences beyond a hacked Facebook account or unauthorized credit card purchases. People who obtain your private financial information, from a routing number to your mobile banking login, can use that info to falsify tax returns, apply for loans, steal your identity, and even commit crimes in your name.
How do I know if my info is on the dark web?
It’s easy to find out if you’ve been compromised—just do a free scan of the dark web to detect any of your information using a trusted source like Experian or Google One.
If you do find your personal and financial data on the dark web:
- Work with your bank to flag any accounts that are involved as compromised or put a hold on your cards.
- Change the passwords on affected accounts and set up two-factor authentication for them.
- Put a fraud alert on your credit reports through the major credit bureaus. You can also take this step proactively before identity theft happens to you.
- Report any compromised documents to the right authorities. Alert the Federal Trade Commission about a leaked social security number at SSA.gov. If your passport has been stolen, report it to the Bureau of Foreign Affairs at travel.state.gov.
How can I protect my information?
Before disaster strikes, there are lots of ways you can monitor your finances for illicit dark web activity and protect your information.
Consistently monitor the security of your financial data by:
- Keeping an eye on your bank statements, email accounts, and credit reports for odd activity
- Setting up credit monitoring and bank account alerts so you can see if anything looks off or an unfamiliar purchase goes through
You can also practice online safety to protect your information with these steps:
- Don’t share personal information—including your bank account and card information or PINs —with anyone you don’t know or any website you don’t trust. If it seems like a website is asking for too much information, err on the side of caution.
- Vary your passwords between sites and use strong passwords. To create a trustworthy password, use at least 10-12 characters and combine symbols, upper and lowercase letters, and numbers. Change your password every 90 days on sensitive sites.
It’s also vital that you train yourself to recognize phishing scams and fake links or websites by using these easy steps:
- Don’t open email, text, or internet content that’s not from trusted sources.
- Always be cautious with communications that purport to be from your bank or ask you to share personal, login, or financial information.
- Remember that scam sites, links, and messages can look very real. When you’re in doubt, you can always independently contact the supposed sender to confirm that they wanted to contact you (without clicking any links or calling any numbers in the potential spam message).
Adhering to these steps can go a long way toward ensuring you don’t become a victim of financial theft on the dark web!