Skip to main content

How to avoid scams while filing your Equifax settlement claim

Equifax Settlement
Getty Images / SOPA Images

It sounds like a scam, but it’s not: Equifax really is giving millions of people up to $125 in cash or free identity restoration services after a 2017 data breach exposed the personal information of about 147 million people.

That said, it didn’t take long for scammers to start using the settlement as a way to get your personal information. According to the Federal Trade Commission (FTC), people have already set up copycat websites trying to bilk people into handing over private data — or even cash.

“Wouldn’t you know it? People may have already started putting up fake websites meant to look like the official Equifax settlement claims website,” wrote the FCC’s Michael Atleson on Monday. “To be sure you’re going to the right place, start at the FTC’s page: ftc.gov/Equifax.”

“A couple more things to remember. You’ll never have to pay to file a claim for these benefits. And anyone who calls and tries to get you to file a claim is almost certainly a scammer,” he added.

Beware of fake websites claiming to be the Equifax settlement claims website. To be sure you are going to the legitimate site, you can access it from the @ftc’s Equifax page: https://t.co/6Dz4lQYEf2 pic.twitter.com/1qDV3xyYSn

— FTC (@FTC) July 29, 2019

What to look for if you think you’re being scammed

The Federal Trade Commission (FTC) set up a site last week to guide people through the process. If you were affected by the breach, you can check your eligibility and file a claim at equifaxbreachsettlement.com. The ftc.gov/Equifax site is a guide to the claim itself and will direct you to the settlement site. Anything else is a scam, the FTC said.

A quick scan through Twitter and Instagram revealed more than a few posts using the settlement to promote tax services or identity protection companies, but we weren’t able to find any scam websites. Regardless, if you do decide to file a claim, be sure to double-check the domain of the website you’re in.

You should also watch out for any phishing emails claiming to be from the FTC or Equifax. It’s better to proactively go the settlement site itself to file a claim rather than risk clicking a link to a scam site.

Equifax agreed to a $575-700 million settlement with the FTC last week. In all, $300 million of the settlement will go towards credit monitoring services or cash payment.

Editors' Recommendations

Mathew Katz
Former Digital Trends Contributor
Mathew is a news editor at Digital Trends, specializing in covering all kinds of tech news — from video games to policy. He…
Lawsuit alleges Equifax’s stupid password made it super-easy to steal your data
cfpb investigation equifax hack headquarters

Remember that epic Equifax hack from 2017? As it turns out, the company made it pretty easy for hackers to get in. A recent filing in the United States District Court for the Northern District of Georgia, Atlanta Division points out a few of the company’s missteps that might have led to the breach.
The first of those issues comes in the form of the password the company users to protect a portal used to manage credit disputes. While you might think a major company holding personal information like people’s names, addresses, and social security numbers might use an exceptionally secure password in that instance, it actually went for something a different: It used “admin” as both the username and password for the portal.
Not exactly the most secure move.
If the shoddy password wasn’t enough, the company also stored unencrypted user information on a public-facing server. That meant that any attacker that compromised the website’s server would immediately have access to all the personal information stored on it, with no additional work required.
The website also wasn’t the only thing it left unencrypted. The company also failed to encrypt its mobile applications, so not only was it keeping sensitive data unencrypted on its own server, it was transmitting that data unencrypted over the internet.
When it did finally encrypt that data, it “left the keys to unlocking the encryption on the same public-facing servers, making it easy to remove the encryption from the data.”
The court filing suggests that the inadequacies in Equifax’s encryption protocol fell short of industry standards and data security laws, going as far to say that the company “did not know what they were doing with respect to data security.”
The hack on Equifax in 2017 reportedly impacted approximately 147 million people, exposing their personal information and social security numbers.
As part of a settlement from the incident, Equifax is paying more than $300 million toward credit monitoring services for the impacted customers. It’s also compensating customers who paid out-of-pocket expenses as a result of the breach.
If you were impacted, you can apply to receive credit monitoring services or a $125 settlement via Equifax’s site now.

Read more
Here’s how to claim $100 or more from Yahoo’s massive data breach settlement
Yahoo

Yahoo is about to reach a $117.5 million settlement in a class-action lawsuit over a series of data breaches that affected users between 2012 and 2016 -- and you're likely eligible for your $100 cut or free credit monitoring if you had an account during that time.

Millions of people could qualify for the $100 Yahoo settlement and the company has been emailing potentially affected users about the class action settlement over the past few weeks. Just because you got the email doesn't mean you'll get your settlement money or free credit monitoring.

Read more
Looking forward to that $125 Equifax settlement? FTC says it will be much less
Equifax Settlement

People affected by the 2017 Equifax data breach who chose to receive the $125 cash option from a settlement may be disappointed with their decision -- they're likely to get far less than $125 when all is said and done, according to the Federal Trade Commission (FTC). 

In a Wednesday blog post regarding the Equifax data breach settlement, the FTC urged the 147 million people affected by the breach to choose free credit monitoring over a cash settlement that could be as high as $125, but is likely going to be less due to the massive interest.

Read more