In this instructional video, the presenter walks employees through the Federal Trade Commission’s five categories of identity‑fraud red flags and provides concrete, real‑world scenarios for each. The five categories are: (1) alerts from consumer reporting agencies such as credit freezes or active‑duty notices; (2) suspicious documents, including tampered IDs or mass‑produced application forms; (3) suspicious personally identifying information, like mismatched addresses, phone numbers, or SSNs tied to deceased individuals; (4) suspicious account activity, such as dormant accounts suddenly showing large purchases or limit increases; and (5) notices from others, including frantic customer calls or law‑enforcement inquiries. For each category the speaker explains what to look for, why it matters, and the appropriate response—following unfreeze protocols, physically inspecting IDs, cross‑referencing data, flagging account‑takeover behavior, and escalating to managers or law‑enforcement. The overall goal is to equip staff with a memorized framework and practical detection steps so they can prevent identity theft and protect customer accounts.
Chapters
Alright, this is the meat and potatoes. What does a red flag actually look like? The FTC groups them into 5 categories. I want you to memorize these types, so you aren't caught off guard. But memorizing a list is boring, so let's walk through some real-life scenarios for each one. Category 1: Alerts from consumer reporting agencies. Picture this: you're running a standard credit check for a customer who wants to finance a large purchase. The report pops up on your screen, but there's a notice attached—Active Duty Alert or Credit Freeze. The customer, let's call him Mr. Smith, is standing right there, smiling. He says, "Oh yeah, I froze that last week, just ignore it." Do not ignore it. A fraudster will try to charm you into bypassing the system. If there's a freeze, you need to follow the specific unfreezing protocol, which usually involves them contacting the credit bureau that issued the alert. Also, look for the data that just doesn't sit right. If there are any discrepancies between the information provided and what appears in the credit report or verification systems, such as mismatched addresses, inconsistent employment history, or age inconsistencies with the reported SSN data. That's a red flag worth investigating. Category 2: Suspicious Documents. This is where you have to physically look at what they hand you. Scenario: A young woman hands you a driver's license. The photo looks like her, sure. But run your thumb over the edge. Is it peeling? Is it thicker than usual? Does the hologram on the front not really glimmer when you tilt it? I've known cases where a thief literally pasted their photo over a stolen ID and re-laminated it. It looked fine from 3 feet away, but up close? It was a mess. Or, watch for the generic application. If they hand you a pre-filled form that looks like a photocopy of a photocopy, Be careful! Criminals often mass-produce these forms with different names but the same handwriting. If the signature on the ID looks like distinct, flowy cursive, but the signature on your contract looks like a jagged scribble? Stop! Category 3: Suspicious Personal Identifying Information . This is for the detectives in the room. You have to cross-reference. Let's say a customer gives you a home address, You type it into your system, or even Google Maps quickly, and it comes up as a mail drop, a UPS store, or, and I'm not kidding, a prison. Unless they live in the back of a UPS store, that's a problem. Or try this one: you have a customer, Jane Doe. She gives you a phone number, but when you look in your system, that same phone number is listed for a Bob Jones who opened an account last week. Unless Jane and Bob are roommates who share a cell phone, unlikely, you've got a fraud ring using a burner phone. And always, always check the Social Security number using your organization's verification tools. If your system or the credit bureau indicates the SSN is associated with a deceased individual, do not open the account. I don't care how alive the person in front of you looks. Ghosts don't buy cars. Category 4: Suspicious Account Activity. This is for those existing customers. Imagine an account that's been dormant for 2 years—no purchases, zero balance. Suddenly, on a Tuesday morning, it wakes up. The address is changed to a new state, and 2 hours later, there's a request for a $5,000 limit increase or a large order of easily resalable electronics. That is classic account takeover. The thief likely obtained credentials through a data breach or phishing, tested the account to see if it was active, and is now trying to bust out the credit line before the real owner notices. Another sign? The "breach of habit." If a customer who always pays on time suddenly stops paying, but their account shows tons of new charges? They didn't just decide to go on a spending spree and default—someone else is using their card. Category 5: Notices from Others. Sometimes, the red flag is a literal phone call. If a customer calls and screams, "Why did you charge me for a boat? I live in a desert!" Listen to them. Or if law enforcement contacts your office asking for records regarding a specific account because of an investigation. That's not a hint, that's a bullhorn. Don't try to "handle" the police yourself, get your manager. But definitely treat that account as compromised immediately.
