# What can I do? when information is being traded on fraudulent sites?

**URL:** <https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899>\
**Category:** In My Humble Opinion\
**Created:** [July 8, 2024, 4:29pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899 "2024-07-08T16:29:00Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 8, 2024, 4:29pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/1 "2024-07-08T16:29:00Z")

</div>

My phone got hacked a month ago. I did a factory reset and manual setup. I didn’t want to risk a full restore from Google. I only reinstalled my most used Apps.

All online account Passwords changed and new credit card. On Amazon and PayPal there’s an option to sign off All signed-in accounts and change the Password.

I joined Equifax Complete Premier ID Protection and locked my credit report. Setup monitoring on my ssn, email etc. I requested a credit report to check for any activity.

I’ve gotten three Equifax alerts that my information was found on fraudulent trading sites that Equifax watches.

Other ID protection subscriptions offer similar monitoring.

Is there anything else I can or should do?

---

<div class="post-metadata">

**Author:** ![Omar\_Little](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/omar_little/32/269_2.png) [@Omar\_Little](https://boards.straightdope.com/u/Omar_Little)\
**Post date:** [July 8, 2024, 5:20pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/2 "2024-07-08T17:20:31Z")

</div>

Just monitor your financial institutions activity, debit and credit. Most institutions will bear the cost of fraud on your accounts if they are notified within 60 days of the fraudulent activity.

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 8, 2024, 5:36pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/3 "2024-07-08T17:36:54Z")

</div>

I feel like the guy in the LifeLock commercial that put his ssn on the side of a Truck. [That didn’t work out for him](https://www.wired.com/2010/05/lifelock-identity-theft/).

I’m not sure how mine got compromised. Probably from financial documents on my phone. I learned about file vaults too late.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [July 8, 2024, 5:59pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/4 "2024-07-08T17:59:51Z")

</div>

My mom got one of these warnings, that her SSN showed up on Dark Web sites. Which, really, is so vague as to be meaningless. I could very easily create a website with millions of peoples’ SSNs on it. Just generate a bunch of nine-digit numbers. It only means anything at all if those numbers are connected to some other form of personal information.

---

<div class="post-metadata">

**Author:** ![Roderick\_Femm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/roderick_femm/32/14875_2.png) [@Roderick\_Femm](https://boards.straightdope.com/u/Roderick_Femm)\
**Post date:** [July 8, 2024, 8:30pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/5 "2024-07-08T20:30:39Z")

</div>

I am a little paranoid about using my phone for financial transactions, because (without actual knowledge one way or the other) it seems less secure than using my PC through my ISP (I don’t use VPN, and that’s my last initialism in this post). So I don’t have any payment apps on my phone at all. In a pinch, I could use Paypal online (I don’t have the app installed), which might not be very secure either, and I think I’ve done it once. I have never used my phone to buy anything online either, nor keyed in any credit card information.

I don’t say this to pat myself on the back, for all I really know I am taking precautions that are completely pointless. I just prefer to operate this way. I can usually wait to order something online until I get home.

Does one only get those messages about one’s information being sold on the dark web if signed up for a service to do that?

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 8, 2024, 10:08pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/6 "2024-07-08T22:08:36Z")

</div>

I used Kaspersky for several years. It has a feature to scan the dark web for the phone’s primary email address.

The Identity Theft Protection Services allow more monitoring for ssn, health plan number etc.

It’s useful to know. But the dark web is unregulated. I can’t demand that my information be removed.

I’ve been trying to plug any security risks that I have. Kaspersky didn’t alert me to a malware attack. I switched my antivirus to Bitdefender.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [July 8, 2024, 11:37pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/7 "2024-07-08T23:37:10Z")

</div>

Kaspersky is a Russian based company. People have concerns about it for some time. It was recently [blocked](https://www.reuters.com/technology/biden-ban-us-sales-kaspersky-software-over-ties-russia-source-says-2024-06-20/) from selling in the US. (It was earlier restricted in other ways.)

---

<div class="post-metadata">

**Author:** ![Duckster](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/duckster/32/1244_2.png) [@Duckster](https://boards.straightdope.com/u/Duckster)\
**Post date:** [July 8, 2024, 11:42pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/8 "2024-07-08T23:42:01Z")

</div>

> [@aceplace57](#):
>
> My phone got hacked a month ago.

I read this a lot on social media, but no one has ever explained to me what actually occurred. So how were you “hacked”?

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 8, 2024, 11:54pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/9 "2024-07-08T23:54:10Z")

</div>

I don’t know for sure. It was probably a link that I was tricked into pressing.

Sometimes a web page ad will suddenly Open the Play store with a App ready to install. I never do anything except close the Play store.

The malicious stuff won’t bother asking. It just drops it’s payload quietly.

They had signed into my Google account. Emails that I noticed in the morning were missing that afternoon. I looked under Manage Google Account, Security, Your Devices and saw three unknown Iphone devices signed-in. I don’t own an Iphone. I signed them off and changed my password.

Meanwhile my Antivirus App never sent any notifications.

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 9, 2024, 12:11am UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/10 "2024-07-09T00:11:49Z")

</div>

Kaspersky has saved me a couple times. Blocking a malicious website before it opened. That blocked warning screen is always scary.

This time Kaspersky snoozed. I needed to quit using a Russian product anyhow.

Bitdefender has good reviews. I’m using it now.

---

<div class="post-metadata">

**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\
**Post date:** [July 9, 2024, 2:54am UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/11 "2024-07-09T02:54:41Z")

</div>

Is this stuff that Microsoft Defender is missing?

---

<div class="post-metadata">

**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\
**Post date:** [July 9, 2024, 2:00pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/12 "2024-07-09T14:00:24Z")

</div>

AFAICT, Microsoft doesn’t have a Bitdefender product for the Android OS.

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 9, 2024, 2:44pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/13 "2024-07-09T14:44:06Z")

</div>

Bitdefender (trial) is on my phone. I don’t know who makes it.

> **[The Best Android Antivirus for 2024](https://www.pcmag.com/picks/the-best-android-antivirus-apps)**
>
> More phones run Android than any other mobile OS, and there's a correspondingly large variety of malware. Based on our testing, these are the top Android antivirus apps for keeping your devices safe.

> **[Bitdefender Mobile Security for Android Review: Pros & Cons, Features,...](https://www.techradar.com/reviews/bitdefender-mobile-security-for-android)**
>
> A full-featured security suite for your phone

---

<div class="post-metadata">

**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\
**Post date:** [July 9, 2024, 2:47pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/14 "2024-07-09T14:47:10Z")

</div>

From Wikipedia, “Bitdefender is a Romanian cybersecurity technology company headquartered in Bucharest, Romania, with offices in the United States, Europe, Australia and the Middle East.”

Not sure if there are the same concerns about it that there are about Kaspersky.

---

<div class="post-metadata">

**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\
**Post date:** [July 9, 2024, 2:49pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/15 "2024-07-09T14:49:15Z")

</div>

Well, that’s interesting 🤔

I haven’t bought it yet.

I need to read more antivirus reviews.

I know it keeps wanting me to buy their VPN. I already bought PIA awhile ago.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [July 9, 2024, 2:53pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/16 "2024-07-09T14:53:27Z")

</div>

> [@aceplace57](#):
>
> The malicious stuff won’t bother asking. It just drops it’s payload quietly.

That shouldn’t be possible. It’s not the web page doing the asking; it’s your phone’s own operating system. It might be, of course, that some attacker has figured out a way to trick the OS, but phone OSes are much more locked down than desktop computers, so it’s both harder to find such exploits in the first place, and they get fixed quicker when they do come up.

---

<div class="post-metadata">

**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\
**Post date:** [July 9, 2024, 3:55pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/17 "2024-07-09T15:55:03Z")

</div>

> [@aceplace57](#):
>
> I’ve gotten three Equifax alerts that my information was found on fraudulent trading sites that Equifax watches.

If I were you, I would not worry too much about this. Why is Equifax telling you this? Because _they want to sell you something_; their credit monitoring service.

---

<div class="post-metadata">

**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\
**Post date:** [July 9, 2024, 4:04pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/18 "2024-07-09T16:04:44Z")

</div>

> [@gnoitall](#):
>
> AFAICT, Microsoft doesn’t have a Bitdefender product for the Android OS.

Note that Bitdefender is unrelated to Windows Defender, the antivirus and firewall software that comes with Windows.

---

<div class="post-metadata">

**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\
**Post date:** [July 9, 2024, 4:17pm UTC](https://boards.straightdope.com/t/what-can-i-do-when-information-is-being-traded-on-fraudulent-sites/1003899/19 "2024-07-09T16:17:07Z")

</div>

Oh, brain crossed some wires. I meant Microsoft Defender, as @Czarcasm mentioned.

Bitdefender is a “competing” cyber product. I guess they have mobile products. I probably saw the mentions in the thread and got derailed.
