Many people do not realize how easily criminals can obtain our personal data without having to break into our homes.

Shoulder Surfing
In public places, for example, criminals may engage in "shoulder surfing" - watching you from a nearby location as you punch in your telephone calling card number or credit card number - or listen in on your conversation if you give your credit card number over the telephone to a hotel or rental car company.

Dumpster Diving 
Even the area near your home or office may not be secure. Some criminals engage in "Dumpster diving," going through your garbage cans or a communal Dumpster or trash bin to obtain copies of your checks, credit card or bank statements, or other records that typically bear your name, address and even your telephone number. These types of records make it easier for criminals to get control over accounts in your name and assume your identity.

Mail Scanning
If you receive applications for "preapproved" credit cards in the mail, but discard them without tearing up the enclosed materials, criminals may retrieve them and try to activate the cards for their use without your knowledge. (Some credit card companies, when sending credit cards, have adopted security measures that allow a card recipient to activate the card only from his or her home telephone number, but this is not yet a universal practice.)

Also, if your mail is delivered to a place where others have ready access to it, criminals may simply intercept and redirect your mail to another location.

Internet Traps
In recent years, the Internet has become an appealing place for criminals to obtain identifying data, such as passwords or even banking information. In their haste to explore the exciting features of the Internet, many people respond to "spam" - unsolicited email that promises them some benefit but requests identifying data - without realizing that in many cases, the requester has no intention of keeping his promise.

In some cases, criminals reportedly have used computer technology to obtain large amounts of personal data.

Why does it matter?
With enough identifying information about an individual, a criminal can take over that individual's identity to conduct a wide range of crimes, including: false applications for loans and credit cards, fraudulent withdrawals from bank accounts, fraudulent use of telephone calling cards, or obtaining other goods or privileges which the criminal might be denied if he were to use his real name. If the criminal takes steps to ensure that bills for the falsely obtained credit cards, or bank statements showing the unauthorized withdrawals, are sent to an address other than the victim's, the victim may not become aware of what is happening until the criminal has already inflicted substantial damage on the victim's assets, credit and reputation.