Watch out for "phishy" contacts. The most common form of phishing is emails, phoning (Vishing) is
also starting to rise, pretending to be from a legitimate retailer, bank, organization, or government
agency. The sender asks to "confirm" your personal information for some made-up reason: your
account is about to be closed, an order for something has been placed in your name, or your
information has been lost because of a computer problem. Another tactic phishers use is to say
they're from the fraud departments of well-known companies and ask to verify your information
because they suspect you may be a victim of identity theft! In one case, a phisher claimed to be from
a state lottery commission and requested people's banking information to deposit their "winnings" in
their accounts.

Know that phishing can also happen by phone. You may get a call from someone pretending to be
from a company or government agency, making the same kinds of false claims and asking for your
personal information. If someone contacts you and says you've been a victim of fraud, verify the
person's identity before you provide any personal information. Legitimate credit card issuers and other
companies may contact you if there is an unusual pattern indicating that someone else might be using
one of your accounts. But usually they only ask if you made particular transactions; they don't request
your account number or other personal information. Law enforcement agencies might also contact
you if you've been the victim of fraud. To be on the safe side, ask for the person's name, the name of
the agency or company, the telephone number, and the address. Get the main number from the
phone book, the Internet, or directory assistance, then call to find out if the person is legitimate.
Be suspicious if someone contacts you unexpectedly and asks for your personal information. It's hard
to tell whether something is legitimate by looking at an email or a Web site, or talking to someone on
the phone. But if you're contacted out of the blue and asked for your personal information, it's a
warning sign that something is "phishy." Legitimate companies and agencies don't operate that way.

Act immediately if you've been hooked by a phisher. If you provided account numbers, PINS, or
passwords to a phisher, notify the companies with whom you have the accounts right away. For
information about how to put a "fraud alert" on your files at the credit reporting bureaus and other
advice for ID theft victims, contact the Federal Trade Commission's ID Theft Clearinghouse at
877-438-4338,TDD 202-326-2502 or: