UPDATE: As of noon, February 28, the credit bureaus began to allow linking to the annualcreditreport.com site from other sites. To see what the previous non-linking "blacklisted" message looked like prior to the credit bureaus' change in policy, see Figure 2 in the Call Don't Click report.
The World Privacy Forum and the Privacy Rights Clearinghouse sent a letter to the Federal Trade Commission (FTC) today requesting the agency immediately take steps to protect consumers in advance of the March 1 rollout of free credit reports to Midwestern U.S. residents.
The organizations are requesting that the FTC immediately require the credit bureaus to allow legitimate news organizations and consumer groups to link online to the www.annualcreditreport.com site. The organizations also requested that the FTC issue cease and desist letters to domains that deceptively state that they are the official “annual credit report” site when they are not. The domains falling in this category are listed in the World Privacy Forum’s “Call Don’t Click” report, available at www.worldprivacyforum.org.
The organizations also asked the FTC to investigate the affiliate marketing practices of the credit bureaus in relationship to www.annualcreditreport.com.
The letter to the FTC is based on findings in a new report issued by the World Privacy Forum that shows that consumers may be better off calling or mailing for their federally mandated free credit report instead of going online for it.
For the report, researchers analyzed two areas: the official Web site, www.annualcreditreport.com, and they also looked for very close misspellings of the official site to see if any “phishing” or scam sites had been put online.
The World Privacy Forum study, “Call Don’t Click: Why It’s Smarter to Order a Federally Mandated Credit Report via Phone Instead of the Internet,” documents that 96 known “imposter” domains exist.
- 28 of the imposter domains belong to Experian, a credit bureau.
- 68 of the imposter domains belong to or are hosted at “pay per click” companies.
- 50 of the “pay per click” domains are live, and some are luring consumers to inappropriate and risky Web sites. Some of the “pay per click” sites lead consumers to Experian and other credit companies’ commercial sites in order to cash in on the credit bureaus’ affiliate marketing programs.
Additional issues were found at the official annualcreditreport.com site itself. The primary finding was that the credit bureaus are blurring the lines between what is free for consumers and what is available for a cost. This was accomplished in several different ways at the credit bureaus’ subsections of the official site.
For example, the TransUnion section of the annualcreditreport.com site automatically selects consumers to receive marketing information and have their information shared with affiliates and partners. Experian and Equifax had potentially confusing menu navigation bars that did not clearly distinguish between the free areas of credit report access and the for-pay sections.
“As a long-time pro-technology advocate, it saddens me to advise consumers to avoid a legitimate Internet site,” said Pam Dixon executive director of the World Privacy Forum and a principal investigator for the report. “The Internet is a medium I have long recommended to consumers as a vehicle for advice, research, and consumer information. If the credit bureaus take to heart the findings of this report and clear the confusing information from the annualcreditreport.com site and clean up the imposter domains, my recommendation to avoid the site will change.”
Consumer Tips
- When phoning the toll free number (877-322-8228) for a free credit report, ask that only the last four digits of your SSN are displayed.
- If you call for your report or have it mailed to you, have your credit report mailed to a secure mailbox.
- Know that you are not required to give out your email address in order to obtain a federally mandated free credit report.
- If you do choose to go online to www.annualcreditreport.com to access your credit report, be absolutely certain that you have not mistyped in the annualcreditreport.com address. If you see pop-up ads, or if you notice that the site is not a secure site, close your browser and start over. (Secure sites will have a padlock logo in the corner, and the address will read https:// instead of just http://).
- If you go online to www.annualcreditreport.com to access your TransUnion credit report, be sure to look for any pre-checked marketing or newsletter offers. If you decide you do not want these offers, uncheck the box.
For the joint letter to the FTC, see
http://www.worldprivacyforum.org/letters/ftc02282005.html
