This site requires JavaScript to be enabled
An updated version of this article is available

Security Awareness: What to Do If You Responded to a Scam or your Identity was Stolen?

28 views

4.0 - Last modified on 06/16/25 Revised by Nasuti, Vincent

3.0 - Last modified on 07/15/24 Revised by Nasuti, Vincent

2.0 - Last modified on 12/13/23 Revised by Bouknight, Britt

1.0 - Created on 06/26/18 Authored by Bouknight, Britt

Shared a Password?

If your identity was compromised, or if you responded to an email or phone scam and shared personal information, such as a password, we recommend that you change the passwords to your online accounts immediately. You should also update your software and run a virus scan on your computer.

 

Shared Financial Information?

If your identity was compromised, or responded to an email or phone scam and shared financial information, such as your bank account number, contact the Department of Public Safety at 856-256-4922 and ask to speak or meet with a police officer so they can file a report.

As always, stay proactive until you're absolutely certain fraud-related problems have subsided and you know how to identify potential suspicious activity in the future. The more you educate yourself on phishing and other internet scams, the less likely it is such problems will occur.

We also recommend you take the following steps to ensure your personal information is protected:

  

Change Passwords

If your identity was compromised, or you've clicked the wrong link or provided personal information in response to a phishing scam, change the passwords to your online accounts immediately. This goes for your Rowan NetID account, which you can update at netid.rowan.edu, as well as your personal email, social media and other online accounts. 

Consider using a passphrase for your password. A passphrase is a password made up of a sequence of words with numeric and/or symbolic characters inserted throughout. A passphrase could be a lyric from a song or a favorite quote. Passphrases typically have additional benefits such as being longer and easier to remember.

For example, the passphrase "My passw0rd is $uper str0ng!" is 28 characters long and includes alphabetic, numeric and special characters. It is also relatively easy to remember. Such passwords are much harder for cybercriminals to break.

 

Update Your Software

Update your software to the newest version and run a comprehensive virus scan if you think you've infected your system with a virus or other malware.

Additionally, you should use encryption, ensure you have a firewall enabled, and regularly back up personal information on an external hard drive.

Avoid using public WiFi networks whenever possible, and if you must use a public connection, select the most secure option, such as a Virtual Private Network (VPN). Also, make certain to turn your computer off when not in use, as it's inaccessible to hackers when powered down.

 

Check Accounts Regularly

Review your bank and credit card accounts regularly to be sure no suspicious activity is taking place. You may also opt to leave a fraud alert on your credit report for a while until you're absolutely certain you're out of the proverbial hot water.

If a company you have an account with has suffered a data breach, it’s possible your email may have been pwned, which means your email and password for that site’s account has been exposed to cybercriminals. Cyber-criminals can use stolen information from these data breaches to target you with phishing emails and other scams. To continue to protect your online accounts and avoid falling for a scam, similar to how you would check a bank statement for unauthorized transactions, it is important to periodically review and be aware of sites where your information may have been exposed. See our guide for how to check if your account has been compromised.

 

Contact Credit Agencies

Contact one of the three major credit bureaus as soon as possible and let them know your account was potentially compromised. Place a fraud alert on your account until the issue has been resolved with the major credit bureaus:

AgencyPhone Number 
Equifax800-525-6285
Experian888-397-3742
TransUnion800-680-7289

 

IdentityTheft.gov also includes a general outline of steps to follow when your identity is stolen. You may also call 877-438-4338 for assistance. The Federal Trade Commission ID Theft Guide at http://www.consumer.ftc.gov/articles/pdf-0009-taking-charge.pdf, or the print copy provided by Rowan University, provides a comprehensive list of steps to follow to place a fraud alert, order credit reports and other steps to take to recover from identity theft.

 

Setup Identity Protection Service

Sign up for Identity Protection Services. There are various companies that provide Identity Protection Services and sometimes another insurance policy you have, such as home owner's insurance, provides identity protection service as part of the plan. 

 

Contact Banks and Credit Card Companies

Alert your bank and credit card companies and explain the situation. Your credit cards might not have been used yet, but if you feel unauthorized charges are in your future, it's essential to freeze or cancel your cards. Let your bank know what happened so they can further protect your account and credit line.

 

Contact Internal Revenue Service (IRS)

If you suspect someone stole your identity and used your SSN for employment purposes or could use your SSN to file a tax return then contact the Internal Revenue Service Identity Protection Specialized Unit to Report the fraud.  Go to http://www.irs.gov/uac/Identity-Protection for Identity Theft assistance from the IRS. You may also call 800-908-4490 and will likely be asked to complete and print Form 14039 (Identity Theft Affidavit) available at http://www.irs.gov/pub/irs-pdf/f14039.pdf and mail or fax to the appropriate office using the options listed on page 2 of the form.

In addition, the IRS provides a transcript of your tax account transactions. You can get a transcript online or by mail to view your tax account transactions, line-by-line tax return information or wage and income reported to the IRS for a specific tax year. Go to http://www.irs.gov/Individuals/Get-Transcript/ and follow the instructions to setup an account and review the transcript online, or to request a transcript by mail.

 

Contact Social Security Administration

If you suspect someone is using your Social Security Number (SSN) for work purposes, you can review your earnings posted to your record on your Social Security Statement and review your Social Security Statement online. Go to http://www.socialsecurity.gov/myaccount/  and follow the instructions to setup an account and review the statement online. You may also call the Social Security Agency at 800-772-1213 for general assistance.

 

Review Other Reporting Resources

The FBI and the National White Collar Crime Center run a site called the Internet Crime Complaint Center. It features many tips and other helpful information about avoiding email scams and what to do if you fall victim to one.

It also offers a link for filing a claim against a third party who stole your identity or made an attempt.

 

Other Questions 

For any technology questions, including to report a scam, please contact the Technology Support Center at 856-256-4400 or support@rowan.edu. If you received or have responded to a suspicious email and provided your Rowan University account information, it is critical that you report these types of incidents immediately so that the Technology Support Center can guide you on appropriate steps to protect your account. Acting quickly will help minimize the risk to your own account as well as protect the University. 

For any security questions or to contact the Information Security Office, please send an email to iso@rowan.edu.