Identity document usage and identity theft in EU

!!!!

!!!!

Iden%ty(document(usage(and(iden%ty(the2(in(EU(

Marek(TIITS([email protected](

(

(

FP7%EKSISTENZ! Marseille,!15!September!2015!!P.2!

Mo?va?on!

•  Iden%ty(the2(is(a(big(issue,(but(how(big(exactly?(•  What(are(the(financial(and(societal(consequences(

of(ID(the2?(•  How(people(change(their(behaviour,(when(they(

have(experienced(ID(the2?(•  Does(it(help(to(fight(ID(the2,(if(we(know(what(

people(use(their(iden%ty(documents(for?(


Unique!new!data!set!

•  New(data(set(for(analysing(ID(use(paLerns,(ID(the2(and(acceptability(of(novel(eID(solu%ons(

•  Six(EU(member(states((–  AT,(DE,(ES,(FR,(IT,(UK(–  and(USA(

•  Census(representa%ve(web(survey(among(16U65(year(olds(

•  450+(fully(completed(ques%onnaires(per(country((


0%

5%

10%

15%

20%

25%

30%

35%

40%

AT DE ES FR IT UK US

% o

f res

pond

ents

Misuse or attempted misuse of

personal information within the last 36 months

Other misuse of personal information, such as application for new ID document or gov benefits New accounts or contracts, such as credit card, bank account or e-mail

Other existing accounts, such as telephone, utilities, insurance policies

Existing Internet accounts, such as e-mail, social network, online shopping

Existing bank or other financial accounts

Existing credit cards

Multiple different incidents


0%

2%

4%

6%

8%

10%

12%

14%

16%

18%

20%


% o

f res

pond

ents

Misuse or attempted misuse of

personal information within the last 12 months

Other misuse of personal information, such as application for new ID document or gov benefits New accounts or contracts, such as credit card, bank account or e-mail

Other existing accounts, such as telephone, utilities, insurance policies Existing Internet accounts, such as e-mail, social network, online shopping Existing bank or other financial accounts

Existing credit cards

Multiple different incidents


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%


% o

f res

pond

ents

who

kno

w th

e du

ratio

n of

mis

use

How long had your personal information been misused before you discovered it?

One year or more

Six months to less than one year

Three months to less than six months One month to less than three months At least a week, but less than one month (7-30 days) More than a day, but less than a week (25 hours-6 days) One day or less (1-24 hours)


Someone hacked into my computer or it was infected with

a virus 23%

Someone stole it during an in-person

purchase / transaction

19%

I responded to a fraudulent email or

phone call 13%

Someone stole it during an online

purchase / transaction

11%

Someone close to me knew or had

access to the information

9%

Stolen from a company that had

my personal information in its files

8%

Someone stole it from my postal mail

4%

My mobile telephone or computer was lost or stolen

4%

My passport or identity card was lost or stolen

3%

Someone stole it from my garbage

3%

Stolen from personnel files at place of employment

2%

A government office released my information or document

to the wrong person 1%

How do you think your identity document or personal information was accessed or taken?


How!big!issue!is!ID!theP!financially?!

•  The(value(of(the(money,(goods(or(services(obtained(by(criminals(will(be(ca(12U16(bEUR(in(2015(in(EU28(–  around(7U9(bEUR(in(the(USA(

•  15U20%(of(the(ID(the2(cases(involve(direct(financial(losses(

•  The(euro(value(obtained(by(thieves(varies(from(less(than(10(euros(to(tens(of(thousands(of(euros(per(case(–  average(>(1000(euros(–  median(<(500(euros(

(Lu2hansa(market(cap(=(5(bEUR)(


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%


% o

f res

pond

ents

, who

hav

e su

cces

sful

ly

solv

ed th

eir f

inan

cial

or c

redi

t pro

blem

s How long did it take you to clear up all of the financial and

credit problems associated with the misuse after you discovered it?

One year or more

Six months to less than one year Between three and six months

Between one and three months At least a week, but less than one month (7-30 days) More than a day, but less than a week (25 hours-6 days) One day or less (1-24 hours)


0%

10%

20%

30%

40%

50%

60%

70%

Medical care, new contracts or

identity documents

Existing contracts, e.g.

telephone, utilities, insurance

New accounts or contracts, e.g. Internet, credit

card, loan

Existing bank account

Existing credit card

Existing Internet account

% o

f vic

tims

of ID

thef

t

Did you file a police report about the misuse of your personal information? Yes


I change my password(s) or PIN

code(s) more frequently

17%

I use better passwords that are more difficult

to guess 15%

I am more careful about sharing my

personal information 11%

I changed my banking details / credit cards

10%

I review my financial statements more

carefully 9%

I limit the access to the information I publish on

social media, e.g. Facebook

9%

I use better security software for my computer

7%

I check my credit report regularly

5%

I shred personal documents before disposing of them

5%

I use better security software for my mobile telephone

3%

I changed my telephone number(s)

3%

I lock my mailbox 2%

I changed my passport or identity card

2%

Other, please specify! 1% I changed my place of

residence 1%

As a direct result of the misuse or attempted misuse of your personal information, in what ways has your behaviour

changed?


Iden?ty!and!security!

•  Government(issued(iden%ty(documents(•  Private(services(


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

Birth certificate Passport Identity card Driver's license

% o

f res

pond

ents

who

are

ver

y co

nfid

ent o

r con

fiden

t, un

deci

ded

excl

uded

How confident are you that your current identity documents,

which the government has issued to you, are secure both in terms of their design and how they are actually issued?

AT

DE

ES

FR

IT

UK

US


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

Bank account Credit card Mobile phone Private e-mail Facebook

% o

f res

pond

ents

who

are

ver

y co

nfid

ent o

r con

fiden

t, un

deci

ded

excl

uded

How confident are you that the following services,

which you have yourself signed up for, are provided in a secure manner so that you are protected from any potential misuses?

AT

DE

ES

FR

IT

UK

US


The!adop?on!of!eID!remains!uneven!in!EU!

•  Spain((65%(of(popula%on)(and(Estonia((90%)(well(ahead(•  Slow(takeUup(in(Germany((35%)(and(Italy((12%)(•  No(eID(in(a(number(of(member(states(

(


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

On-line banking,

payments or investment

Purchasing goods or

services on-line

On-line services of the national government

On-line health or medical services

On-line services of the regional

or local government

Access to corporate network of

your workplace

% o

f res

pond

ents

, w

ho h

ave

elec

tron

ic ID

car

d Spain: How often do you use your identity card to authenticate

yourself electronically for the following services?

Never

Less than once a year

Once or twice in a year

Multiple times in a year

Monthly

Weekly

Daily


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

Passport and fingerprint checked

with a special device

Electronic ID card and secret PIN

code

Electronic ID card and fingerprint checked with a special device

Mobile phone with a special SIM card

and secret PIN code

Mobile phone and fingerprint checked

with built-in fingerprint reader

% o

f res

pond

ents

who

agr

ee, u

ndec

ided

exc

lude

d

I would be willing to use the following to authenticate myself for secure Internet services, e.g. government or bank services

AT

DE

ES

FR

IT

UK

US


0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%


% o

f res

pond

ents

I prefer to sign documents electronically rather than on paper, if both options are available

Strongly agree

Agree

Undecided

Disagree

Strongly disagree


Conclusions!

•  Direct(financial(value(obtained(by(ID(thieves(will(total(at(12..16(bEUR(in(2015(in(EU28(

•  Main(targets(of(ID(the2:(exis%ng(Internet(accounts(and(credit(cards(

•  ID(the2(involving(government(issued(iden%ty(documents(is(rela%vely(rare(–  However,(such(ID(the2(may(poten%ally(lead(to(severe(and(longUlas%ng(consequences(for(the(individuals(involved(

•  Ease(of(use,(and(trust(in(government(issued(IDs(are(the(key(to(widespread(adop%on(of(eID!(


Government!issued!eID!for!foreigners!

Identity document usage and identity theft in EU

Data & Analytics

Transcript of Identity document usage and identity theft in EU