Identity Theft Leads to Criminal Charges for Woman Who Never Opened Cash App Account
A woman faces years in prison after an identity thief used her personal information to open a Cash App account, which was then used to receive funds from a scam.
Amanda Smith is confronting a potential six-year prison sentence due to a Cash App account opened in her name, an account she claims she never created. The situation unfolded when an identity thief allegedly used Smith's Social Security number and date of birth to establish the account. This account subsequently became a conduit for illicit funds, receiving $1,000 from a Facebook Marketplace scam where a buyer was directed to pay for non-existent items.
Investigators, armed with account details obtained from Block, Cash App's parent company, including Smith's SSN and date of birth, initiated an arrest in Pennsylvania. Smith, who states she had never visited Arkansas where the alleged crime occurred, spent three nights in jail. However, a review of the account records by 404 Media revealed discrepancies, indicating that the address and network used for the account did not match Smith's personal information.
Adding to the frustration, Smith encountered significant obstacles when attempting to investigate the fraudulent account. "Cash App refused to provide me with any information about the account, because I couldn’t prove that I was the owner," she stated. Despite the account being linked to her identity sufficiently to lead to her arrest, she was initially denied direct information from the company, only later obtaining account records through the criminal proceedings.
This incident serves as a stark reminder of the severe and far-reaching consequences of identity theft. Beyond the common concern of unauthorized charges on financial statements, individuals can find themselves facing criminal accusations for crimes committed using their stolen personal details. The source of Smith's compromised information remains unconfirmed, though she suspects it may stem from a data breach, as the phone number associated with the account was linked to her name in older breach data.
The practical implications for consumers are significant. Understanding the specific data exposed in a breach is crucial for an appropriate response. For instance, if only email addresses and phone numbers are compromised, vigilance against phishing and scam calls is paramount. If passwords are leaked, changing them across all reused accounts and enabling multi-factor authentication is advised.
When payment or banking details are involved, immediate contact with the financial institution and diligent review of accounts for suspicious activity are necessary. For the compromise of Social Security numbers and other sensitive identifying information, as in Smith's case, the recommendation is to monitor credit reports for unfamiliar accounts. In the U.S., freezing credit with the three major bureaus (Equifax, Experian, and TransUnion) can prevent the opening of new credit accounts, though it's not a foolproof measure against all forms of identity misuse.
Victims of identity theft who discover accounts opened in their name should contact the company's fraud department via their official website and report the incident to relevant authorities, such as IdentityTheft.gov in the U.S. Maintaining records of all reports and correspondence, and obtaining written confirmation of fraudulent account closures, are essential steps in mitigating further damage.
Services that scan for known data exposures linked to personal information, like Malwarebytes' Digital Footprint Scan, can help individuals identify if their data has been compromised. This proactive approach is vital in an era where data breaches are frequent and the misuse of personal information can lead to devastating personal and legal consequences.