LEXISNEXIS GUIDANCE ON IDENTITY THEFT

UNCLAS SECTION 01 OF 02 STATE 088372 SIPDIS E.O. 12958: N/A TAGS: CASC CPAS KFRD CPPT CVIS SUBJECT: LEXISNEXIS GUIDANCE ON IDENTITY THEFT ¶1. When it comes to identity theft, it is often difficult to interpret results using LexisNexis. Many of the same factors that indicate identity theft can simply be a mistake or a legitimate association that is difficult to spot. Below are some guidelines to help consular officers interpret the data and suggestions on actions to take. ¶2. CA's access to LexisNexis includes U.S. records only. While it is often useful for research on persons who have been in the United States for extended periods of time, whether or not they are U.S. citizens, it is important to remember that LexisNexis does not contain information from outside the United States. ¶3. Remember that LexisNexis identifies only associations, not ownership. The comprehensive reports in LexisNexis do not indicate who specifically has a certain Social Security Number (SSN) or who specifically is using a certain Social Security Number. LexisNexis is a data aggregator which associates different data points, so overlap with more than one identity is unavoidable. It is therefore not only possible, but common, for roommates or relatives to be associated with one anothers' SSNs. ¶4. As a result, it is possible for a SSN association to be a product of nearly any situation. For example, an associated SSN can come from a shared address, even an address associated in error. Often, a fair amount of research is required to determine which associations are meaningful. Several tools are useful in this endeavor. ¶5. Relavint: The Relavint visual mapping tool can be very helpful in noting where identities are associated with one another. The Relavint icon is immediately next to the order report icon where search results are displayed. Relavint may make some connections automatically that the human eye does not see. You may notice, for example, that two people share an association with a common address or car registration. ¶6. Address History: Multiple, incomplete, and/or gaps in address may suggest identity theft. When a SSN is being used by more than one person, it may cause the information aggregator to list more than one address for a person during a distinct period of time, or to have gaps where there is no address at all. Alternately, it is possible that the history will display a series of address moves back and forth beween two addresses in relatively quick succession. This is because the aggregator is receiving conflicting information and gets "confused." ¶7. Conflicting information that gives the aggregator problems is often a sign that two people are using the same identity. For example, a person could show a consistent address history in New Jersey since 1970, but for the period 2003-present, shows addresses in both New Jersey and in Utah. This may suggest that a second person in Utah is using the person's SSN. If an individual has a complete address history with little overlap, this suggests that identity theft is not an issue. ¶8. Vastly Different SSNs: If an individual has more than one SSN and the numbers clearly have no relation to one another, this is a possible indication of identity theft. However, individuals are often associated if they have similar SSNs due to data entry errors on the part of credit agencies. For example, consider one individual with two SSNs: 333-33-3339 and 333-33-3336. While we cannot rule out identity theft, "9" and "6" are extremely close together on a numeric keypad, and this kind of data entry error is common. ¶9. Source Documents: Identity information in LexisNexis is based on source documentation that it is able to collect or purchase. The fewer source documents listed at the bottom of a LexisNexis report, the better the chance that, if there are multiple identities tied to one SSN, it is a mistake. For example, let's say that an SSN is attached to two identities: the first identity has a long, well developed, and complete address history with 25 source documents, and the second identity has a location history that covers only a couple of months. In all likelihood, the second identity was mistakenly associated with the first. STATE 00088372 002 OF 002 While identity theft cannot be ruled out completely, when someone tries to steal an identity, that person will likely stick with the identity for an extended period of time (versus abruptly giving it up after a short time) and more source documents associated with that stolen identity would have been generated. Always keep in mind that since LexisNexis is a data aggregator, identity fraud is more likely in a case where someone has two completely different SSNs, multiple simultaneous addresses during the last several years, and no visible connections in Relavint, versus someone who simply has two SSNs associated with his or her name. ¶10. Using Advanced Person Search: The Office of Fraud Prevention Programs (CA/FPP) suggests always starting your search in LexisNexis using the "advanced person search" option. The "advanced person search" option presents the data in a much more coherent and easy to read manner than the "regular person search" option. The "advanced person search" option also attempts to limit a SSN to the actual identity by using "smart" computer technology. A "regular person search" presents information in individual record form, which can be useful when trying to determine where the data came from. ¶11. PIERS: LexisNexis is most powerful when used in combination with the Passport Information Electronic Records System (PIERS). For example, information from passport applications can be entered into the "advanced person search" in LexisNexis to determine if the application data generally agrees with what is found in LexisNexis. If extra or different SSNs are listed, those SSNs can be searched using the SSN search function in PIERS. This type of search can determine if an individual is applying for passports with more than one SSN, or if multiple people are using the same SSN. ¶12. Suggested Actions When Identity Theft is Indicated: Don't panic! It is extremely common to find multiple persons associated with a SSN in LexisNexis, or for multiple SSNs to be associated with one person. This is usually not a sign of identity theft. The following actions are suggested: a. Go over the record again and try to determine if any appropriate associations exist. b. Compare the individual's address history in PIERS with their address history in LexisNexis. If the two databases more or less mirror each other, identity theft is probably not indicated. If they are totally different, this is of concern. c. Contact your liaison officer in CA/FPP to help with the analysis. If identity theft is probably indicated: a. Refer the case to your Assistant Regional Security Officer (ARSO-I) or Regional Security Office (RSO) if you suspect your applicant has stolen an identity. b. Refer the case to your ARSO-I or RSO (and notify your CA/FPP liaison) if you suspect your applicant is the victim of identity theft. Do NOT inform the applicant. It is nearly impossible to conclusively prove identity theft using LexisNexis. c. In any case where a SSN may have been compromised, inform your Social Security Administration representative at post. CLINTON