Fraudsters Exploit Vacant Properties for Identity Theft

What Happened

Fraudsters have developed a new method for identity theft that exploits vacant properties and postal services. This approach, highlighted in a recent fraud tutorial circulating in online chat groups, details how these criminals are using legitimate services to intercept sensitive mail. By focusing on real-world infrastructure, they have created a low-cost, difficult-to-detect workflow for stealing identities.

How It Works

The process begins with identifying vacant residential properties. Fraudsters often search real estate listings for homes that are recently rented or long-term unoccupied. Once a suitable property is identified, they use postal services like USPS Informed Delivery to monitor incoming mail remotely. This allows them to identify valuable documents such as financial statements or credit cards.

Next, they escalate their operation by submitting change-of-address requests. This is often done using fake identities or forged documents to redirect mail to a location controlled by the fraudster. This hybrid model combines open-source intelligence, physical property exploitation, and digital manipulation, granting them persistent access to victims' sensitive information.

Who's Being Targeted

The primary targets of this fraud scheme are individuals with vacant properties, particularly those who may not frequently check their mail. This includes homeowners who have moved away or those renting out properties. The method is particularly insidious because it operates outside traditional cybersecurity defenses, making it hard for victims to detect until significant damage is done.

Signs of Infection

Victims may notice missing mail, unexpected bills, or credit inquiries they did not initiate. If someone has recently moved or is renting out a property, they should remain vigilant about their mail and monitor their financial accounts closely.

How to Protect Yourself

To safeguard against this type of fraud, individuals should:

• Regularly check their mail and monitor for any suspicious activity.
• Use services like USPS Informed Delivery to track incoming mail.
• Be cautious about sharing personal information, especially when renting or selling property.
• Consider implementing a credit freeze or fraud alerts with credit bureaus to prevent unauthorized access.

What This Means

The U.S. Postal Inspection Service has reported a 139% increase in mail receptacle theft between 2019 and 2023, highlighting the growing impact of mail-enabled fraud. Organizations and individuals must adopt cross-domain signal correlation, including address usage patterns and identity inconsistencies, to detect these sophisticated attacks that bypass conventional security measures. This evolving fraud tactic poses a significant challenge, emphasizing the need for heightened awareness and proactive measures to protect personal information.