Security Corner Blog

Homeowners who want to borrow money without refinancing their mortgage may turn to a home equity line of credit, or HELOC. The option can be particularly attractive if you have a low-rate mortgage but want to tap the equity you've built in your home. However, you also need to watch out for fraudsters who want to use your HELOC to steal money.

What Is HELOC Fraud?

HELOC fraud is when a criminal takes a fraudulent draw from someone else's HELOC, or when they open a HELOC using a home they don't own as collateral. There are various ways that fraudsters commit HELOC fraud, including:

• Create or write counterfeit HELOC checks: The fraudster might convince your lender to send them checks tied to your account or simply write fraudulent checks. They then forge your signature, which may be available in your public mortgage records, and deposit the check into their account.

• Trick your lender into changing your account information: The fraudster might buy or research your personal information. They'll then try to impersonate you and persuade your lender to change the name, address and other information tied to your account. After that, they might change your online account's login information and request a draw to their bank account.

• Steal your account's login information: Alternatively, fraudsters might trick you into installing malware that records the activity on your phone or computer. They can then try to take over your online account and use it to request fraudulent HELOC draws.

• Move money between your accounts before stealing it: A more complex scheme involves fraudsters taking a draw from your HELOC to your checking account, or an account they opened in your name. Then they write themselves a check or wire the money to their account.

• Create an online profile to hide their tracks: You have to be worried even if you don't use online banking. In at least one case, fraudsters created an online profile and enrolled in electronic statements to hide their activity from the homeowner. They then use other tactics to steal money from the HELOC.

Once the fraudster has the money in their account, they can take it and disappear. However, fraudsters may repeatedly target your HELOC account to steal more money.

How to Protect Yourself From HELOC Fraud

In part, HELOC fraud can happen because your mortgage and HELOC may be part of public records, which gives fraudsters a starting point when looking for victims. Additionally, check verification might be difficult. And the application review and verification process for HELOCs often isn't as stringent as it is for mortgages.

However, there are steps that you can take to help protect yourself from HELOC fraud. Many of these can also protect you from other types of identity theft and fraud.

• Beware of phishing: Phishing emails and texts (called smishing texts) might look like they're coming from a trusted company, government agency or someone you know. But they're actually an attempt by fraudsters to earn your trust or scare you into responding. Clicking on a link might infect your device with malware that the fraudster can use to steal your personal and login information.

• Opt out of HELOC checks: You could ask your lender if you can opt out of HELOC checks altogether. Instead, you can take draws by electronically transferring funds to your bank account.

• Keep an eye on your HELOC with online banking: If you don't already have one, you may want to create an online account with your lender to keep someone else from setting up an account first. Also, regularly monitor your HELOC's statements from your computer, the mobile app or the physical statements you receive in the mail. You may also be able to sign up for alerts and get an email, text or app notification when there's a draw request or disbursement.

• Use unique passwords: Creating unique passwords is important for protecting your accounts from fraudsters who purchase stolen login information. And the passwords should be completely unique, so reusing your email or social media account passwords is a bad idea. If they follow a theme, such as the company's name followed by a number, they could still be easy to figure out. A password manager might be an easy way to create and store these passwords.

• Enable multifactor authentication: Try to enable multifactor authentication (MFA) on your account. The security feature can require someone to enter a second type of verification—such as a code sent to your email or phone—when logging in. This can help keep fraudsters out of your account even if they know your login information. Using an authentication app or device may be safer than requesting a text message, but that's not always an option.

• Monitor your credit: You could use paid or free credit monitoring programs to keep an eye on your HELOC's balance. Creditors generally update the credit bureaus monthly so you won't necessarily see the changed balance immediately.

• Add a security freeze to your credit reports: You have the right to add a security freeze to your credit reports, which can limit other people's access to the reports. Also called a credit freeze, this can help stop someone from opening a HELOC—and other types of credit accounts—in your name. Adding and removing freezes is free, but you need to freeze each of your credit reports separately.

What to Do if You've Already Been a Victim of HELOC Fraud

If you notice unusual activity in your HELOC account, such as changed contact information or an unexpected balance, contact your lender immediately. You might not be liable for debt that's the result of fraudulent activity, but you still want to make sure the lender can stop the fraudster and that you'll have access to your account when you need it.

In addition, consider taking the following steps to report the fraud and protect yourself:

• File a fraud report with the Federal Trade Commission (FTC), which will give you information on the next steps you can take.
• File a police report, especially if you suspect you're the victim of identity theft.
• Run an antivirus scan on your devices.
• Change your account's password.

You also have the right to add fraud alerts to your credit reports, which let creditors know that they should take extra steps to verify your identity before opening a new credit account.

Article content and third-party links are provided for information purposes only. Original article: Experian.com