What Is Identity Theft Protection Insurance? 2026 Guide
The details matter. Two policies may advertise similar coverage amounts but offer very different benefits, exclusions, and recovery services.
This guide explains what identity theft insurance typically covers, where its limitations lie, and how to combine recovery support with everyday protection for your family’s accounts and devices.
What Is Identity Theft Protection Insurance?
Identity theft happens when someone uses your personal information without permission to commit fraud. That might mean opening a credit card in your name, applying for a loan with stolen details, or taking over an existing account.
The consequences are not always obvious immediately.
You might discover the problem when an unfamiliar account appears on your credit report, a debt collector contacts you about an account you never opened, or a financial institution sends a notice about activity you do not recognize.
Sorting it out can involve several organizations. You may need to contact lenders, dispute records, submit an identity theft report, and send supporting documents.
Identity theft insurance helps with certain expenses that arise during this recovery process.
For example, a policy might reimburse the cost of obtaining documents, mailing dispute letters, or taking qualifying unpaid time away from work to resolve the fraud.
Some plans also include professional identity restoration assistance.
The key is understanding exactly what the policy promises. Insurance benefits depend on the coverage agreement, not the general description used in an advertisement.
Understanding the difference between identity protection and identity insurance
Identity protection and identity insurance are often sold together, but they are not the same service.
Identity protection usually refers to tools that help detect suspicious activity, monitor exposed information, or reduce certain security risks.
Identity insurance focuses on eligible costs after a covered identity theft incident.
A service may include both, along with professional assistance.
Here is how the main components differ:
- Identity theft insurance: May reimburse expenses associated with resolving covered identity fraud.
- Credit monitoring: Watches for certain changes to credit reports, including unfamiliar accounts or inquiries.
- Identity monitoring: Checks selected sources for exposed personal information or signs of possible misuse.
- Identity restoration support: Helps people understand and complete the steps needed to recover from fraud.
- Cybersecurity protection: Helps reduce risks such as malware infections, phishing attempts, and compromised accounts.
Consider a stolen password.
A breach monitoring service might identify that the password appeared in a known data breach. You could then change the affected credentials before someone misuses them.
If a criminal has already used stolen information to open a fraudulent loan, credit monitoring and identity recovery assistance become more relevant.
Insurance may help with qualifying expenses from correcting the problem.
These services solve different parts of the problem. Having one does not mean you automatically have the others.
What Identity Theft Insurance Typically Covers
There is no single list of benefits that applies to every policy.
However, identity theft insurance commonly focuses on the costs of restoring an individual’s identity and correcting fraudulent records.
When evaluating coverage, pay attention to the following categories.
1. Document and administrative expenses
Identity theft recovery can generate paperwork.
A lender might request an identity theft report. A credit reporting agency may need a written dispute with supporting records. Some institutions may ask for certified copies or additional identification.
Depending on the policy, reimbursement could include:
- Postage for sending required documents.
- Photocopying or printing costs.
- Notary fees for qualifying paperwork.
- Certain expenses related to obtaining replacement documents.
Keep receipts and copies of correspondence.
An insurer may need evidence that each expense was directly connected to a covered identity theft incident.
Ordinary expenses that happen around the same time are not necessarily eligible.
2. Qualifying lost wages
Identity theft can interrupt the working day.
Someone may need to attend an appointment, speak with a financial institution, or provide documents during normal business hours.
Some insurance policies reimburse lost wages under specific conditions.
For example, the policy may require proof that the person actually lost pay while completing necessary recovery activities.
Taking time away from work does not automatically mean the time qualifies.
Check whether the policy covers only unpaid leave, how earnings must be documented, and whether a separate reimbursement limit applies.
3. Approved legal expenses
Certain identity theft disputes may require legal assistance.
This can happen when fraudulent debt leads to a complicated dispute or when an institution does not correct an inaccurate record after receiving supporting evidence.
Some policies cover eligible attorney fees associated with a qualifying identity theft incident.
However, legal reimbursement may be subject to prior approval, restrictions on the type of work covered, or separate limits.
If you think legal assistance might be necessary, contact the insurer before arranging services when the policy requires authorization.
4. Identity restoration services
Some identity protection plans provide access to a restoration specialist.
This person may help organize documents, explain dispute procedures, or assist with communications involving affected institutions.
For example, a specialist could help you understand how to dispute an unfamiliar credit account, what information a lender may request, and how to track the responses.
The scope of assistance varies.
Some services mainly provide instructions and document templates. Others offer more direct case management when you provide the necessary authorization.
5. Other covered recovery costs
Certain policies provide additional benefits for specific identity theft situations.
Rather than assuming these expenses are covered, read the policy’s description of qualifying losses.
Pay particular attention to any limits for individual expense categories.
A policy advertising a substantial overall coverage amount may still have much smaller limits for legal fees, lost wages, or document expenses.
Common Policy Exclusions and Limitations
The most important limitation to understand is that identity theft insurance usually does not replace stolen funds.
Suppose someone gains unauthorized access to a bank account and transfers money.
The account holder may have rights and remedies through the financial institution and applicable consumer protection rules. Those processes are separate from ordinary identity theft expense reimbursement insurance.
Some specialized policies offer broader financial fraud coverage. However, that benefit must be clearly included in the policy.
Do not assume that a high insurance coverage limit means the insurer will repay an equivalent amount of stolen money.
Other restrictions deserve attention.
Deductibles
A deductible is the amount the policyholder must pay before certain insurance benefits become payable.
Some policies have no deductible for particular categories. Others require the customer to cover an initial amount.
Maximum reimbursement limits
A policy may place a limit on total covered expenses and additional limits on specific categories.
For example, the amount available for qualifying legal assistance may differ from the amount available for lost wages.
Review both the overall limit and the smaller category limits.
Pre-existing incidents
Policies may restrict coverage for identity theft that happened or became known before the policy began.
If you purchase insurance after discovering a breach, do not assume existing fraud will be covered.
Insufficient documentation
Insurers generally need evidence to assess claims.
A reimbursement request may be denied when the expense is not adequately documented or does not meet the policy’s requirements.
Unapproved services
Some policies require advance authorization for legal or professional services.
An expense may be excluded if the policyholder independently arranges a service that required prior approval.
Excluded forms of fraud
Not every scam is considered identity theft.
For example, sending money to a fraudulent online seller may not meet the policy definition of identity fraud.
Similarly, a deceptive investment opportunity or an authorized payment made under false pretenses may be treated differently from a criminal opening an account using stolen identifying information.
Coverage depends on the wording of the policy and the circumstances of the loss.
Questions to ask before buying identity theft insurance
Before purchasing a policy, compare what you would actually receive if identity fraud occurred.
A useful buying checklist includes:
- Which identity theft incidents qualify for coverage?
- Does the policy reimburse document costs, lost wages, and legal fees?
- Are stolen funds covered under any separate benefit?
- Is there a deductible?
- What limits apply to each expense category?
- Can I receive help from a restoration specialist?
- Does coverage extend to my spouse, children, or other household members?
- Are incidents that started before the policy excluded?
- How quickly must a claim be reported?
- Which documents are required to claim reimbursement?
Also check coverage you may already have.
Some homeowners or renters insurance policies offer optional identity theft benefits. Certain financial services and employee benefit packages may include recovery assistance.
That does not mean the protection is identical, but reviewing existing benefits can help you avoid purchasing unnecessary overlapping coverage.
The best policy is not necessarily the one with the largest advertised reimbursement limit. It is the one with clear terms and benefits that address the recovery expenses you are most likely to face.
How the Identity Theft Recovery Process Works
Identity theft recovery usually involves more than changing a password.
The right response depends on what was stolen, how it was used, and which institutions are affected.
A compromised shopping account requires different steps from a fraudulent credit card application.
Still, most recovery situations can be approached in a practical order: identify the problem, secure affected accounts, document the incident, and contact the appropriate organizations.
Insurance and recovery assistance may make those steps easier, but they do not replace them.
Step 1: Early Detection and Data Breach Alerts
Identity theft sometimes begins with an ordinary-looking message.
A service sends a notice about a new login. A bank reports a suspicious transaction. A credit monitoring service identifies an unfamiliar inquiry.
These warnings deserve attention, but they do not all mean the same thing.
A data breach alert indicates that information may have been exposed.
It does not necessarily mean someone has used that information to commit fraud.
The first step is to establish what happened and what information may be involved.
Understand what information was exposed
Different types of exposed information call for different responses.
Email address and password
Change the password on the affected account.
If you reused that password elsewhere, change those accounts too.
Use unique passwords and enable multifactor authentication.
Check the account’s recent sign-in activity and recovery settings for changes you do not recognize.
Payment card information
Review recent transactions and contact the card issuer through an official channel.
The issuer can explain the appropriate steps for protecting the account and disputing unauthorized charges.
Do not rely on a phone number included in an unexpected message.
Sensitive identifying information
Exposure involving information used to establish financial identity may justify reviewing credit reports and considering additional protections.
In the United States, credit freezes and fraud alerts can help address certain forms of new-account identity fraud.
Email access
A compromised email account can have consequences beyond messages.
Criminals may attempt to reset passwords for shopping, banking, or cloud accounts connected to that address.
Secure the email account, review unfamiliar forwarding rules, and check whether the recovery email address or phone number has changed.
What credit monitoring can and cannot detect
Credit monitoring helps identify certain changes to a credit file.
Depending on the service, alerts may involve:
- Newly reported credit accounts.
- Credit inquiries.
- Certain changes to personal information.
- Unexpected changes in reported balances.
These alerts can be useful when someone applies for credit using stolen identifying information.
However, credit monitoring does not provide a complete view of identity theft.
A compromised shopping account may not affect your credit report.
An attacker could also take over an email account or misuse a payment card without immediately creating a new credit inquiry.
That is why credit monitoring and data breach alerts serve different purposes.
Credit monitoring focuses on credit-related activity. Breach monitoring helps identify known information exposure.
For additional guidance, the Federal Trade Commission explains the differences between identity theft protection services at What to Know About Identity Theft.
Consider credit freezes and fraud alerts
A credit freeze can make it harder for someone to open new credit accounts using your identifying information.
In the United States, consumers can request free credit freezes separately through Equifax, Experian, and TransUnion.
A freeze generally restricts access to the credit report for certain purposes. It does not close existing accounts or resolve identity theft that has already happened.
A fraud alert works differently.
It tells businesses checking your credit report to take additional steps to verify your identity before extending credit.
An initial fraud alert can be requested through one of the three nationwide credit bureaus, which must notify the others.
Neither measure stops every type of fraud.
However, they may be useful precautions when sensitive identifying information has been exposed.
U.S. consumers can use IdentityTheft.gov to find recovery steps suited to the type of identity theft involved.
Step 2: Working With Recovery Specialists
Identity theft becomes more complicated when several organizations are involved.
A person may need to contact a lender, dispute information with a credit reporting agency, and respond to a debt collector about the same fraudulent account.
Keeping track of these conversations can be difficult.
This is where identity theft recovery support may help.
A restoration specialist can explain what information different institutions are likely to need and help organize the steps involved in correcting fraudulent records.
Depending on the service agreement, assistance may include:
- Identifying accounts that need immediate attention.
- Explaining how to file an identity theft report.
- Preparing or reviewing dispute documentation.
- Helping organize correspondence with lenders.
- Explaining credit reporting disputes.
- Tracking responses from affected institutions.
- Identifying unresolved recovery tasks.
Imagine discovering a loan application you never submitted.
The lender may require a formal dispute and identity theft report. The credit reporting agencies may also need to be notified if the account appears in your credit file.
A restoration specialist could help coordinate the documentation so the information provided to each organization is accurate and consistent.
The goal is to reduce confusion and make the recovery process easier to follow.
What a restoration specialist cannot guarantee
A recovery specialist cannot force every institution to resolve a dispute immediately.
The lender or credit reporting agency may need to investigate the circumstances.
A specialist also cannot guarantee that stolen money will be returned.
Some recovery services may contact institutions on your behalf, while others only explain what you need to do.
Before paying for a service, ask what level of assistance is included.
Find out whether you receive direct case management, document preparation help, or general guidance.
Also ask whether assistance continues if a dispute remains unresolved.
Special considerations for families
Identity theft can affect children and older adults, not just people who actively use credit cards.
A child may have identifying information misused to open a fraudulent account.
Because children rarely check credit reports, this type of fraud may remain unnoticed until someone investigates an unexpected financial record.
Parents and legal guardians can review official procedures for checking whether a child has a credit file and requesting a protected credit freeze where appropriate.
Older family members may also need assistance recognizing fraudulent messages or reviewing unfamiliar financial activity.
Family coverage can be valuable in these situations, but policy eligibility varies.
Some insurance products cover specified household members. Others limit protection to the named policyholder.
Before selecting an insurance plan, find out exactly which family members qualify for reimbursement and restoration assistance.
Step 3: Documenting Losses and Filing Claims
Keeping records is one of the most practical things you can do during identity theft recovery.
You may need to explain the same incident to multiple organizations.
Accurate documentation helps you avoid relying on memory and provides evidence when applying for insurance reimbursement.
Start a secure record of the incident.
Include the date you discovered the suspicious activity, the affected account, and any reference numbers provided by financial institutions.
Record the dates of important conversations and save written responses.
What to document
Useful records may include:
- Official identity theft reports.
- Notices from affected companies.
- Financial statements showing disputed activity.
- Credit reports identifying unfamiliar accounts.
- Copies of submitted dispute letters.
- Responses from creditors or collection agencies.
- Receipts for postage, printing, or notary services.
- Proof of qualifying lost wages.
- Approved legal invoices.
- Insurance claim correspondence.
Store these documents securely.
If you use cloud storage, protect the account with a strong password and multifactor authentication.
Avoid sending identity documents or sensitive financial records through links in unexpected messages.
Use the insurer’s official website, verified contact details, or approved claim submission method.
How the insurance claim process generally works
The exact process varies, but most claims follow a similar sequence.
1. Report the incident
Contact the insurer or benefits administrator using the instructions provided in the policy.
Explain what happened and ask which documents are needed.
2. Confirm the coverage requirements
The insurer may need to determine whether the incident meets the policy’s definition of identity theft.
Ask about claim deadlines, covered expenses, and any approval requirements before spending money on professional services.
3. Submit supporting evidence
Provide the requested records, receipts, reports, and other information.
Keep copies of everything you submit.
4. Respond to additional requests
The insurer may need clarification about an expense or the connection between an expense and the identity theft incident.
Provide accurate information and retain written responses.
5. Review the outcome
If the claim is approved, reimbursement will depend on the policy’s coverage limits, deductibles, and other conditions.
If an expense is denied, review the reason provided and the applicable policy provisions.
Follow the insurer’s stated review or complaint process if you believe a decision should be reconsidered.
Example of recovery expenses
Consider someone who discovers a fraudulent credit account in their name.
The person contacts the lender, obtains a copy of the relevant credit report, submits an identity theft report, and disputes the account.
During the process, the person pays for required documents and takes unpaid time away from work for a necessary appointment.
A policy that covers those categories may reimburse qualifying expenses once the required evidence has been submitted.
However, the amount of the fraudulent account is a separate matter.
Correcting the debt involves the lender, credit reporting agencies, and applicable dispute procedures.
Insurance reimbursement does not automatically resolve the account itself.
Understanding this separation helps set realistic expectations when filing a claim.
Proactive Household Security vs. Post-Incident Insurance
Identity theft insurance becomes relevant when something has already gone wrong.
Device security, account protection, and monitoring help households address risks earlier.
These approaches should work together.
Consider how many services an ordinary household uses.
A parent may manage banking on an iPhone, shop on an Android phone, and store tax documents on a Windows computer.
Another family member may use a Mac for email and personal records.
Children might have gaming accounts, school profiles, and shared tablets.
Each account needs proper security.
If the same password is used across several services, one exposed credential can put multiple accounts at risk.
If a fraudulent message convinces someone to provide a verification code, strong antivirus software alone may not prevent an account takeover.
That is why households need a combination of credential protection, phishing defense, device security, monitoring, and recovery planning.
Identity theft insurance vs. cybersecurity protection
| Protection | Primary purpose | What it helps with | Key limitation |
|---|---|---|---|
| Identity theft insurance | Cover eligible recovery expenses | Document costs, qualifying lost wages, and approved legal expenses | Usually does not reimburse stolen funds directly |
| Credit monitoring | Identify certain credit report changes | Unfamiliar accounts, inquiries, and credit activity | Does not detect every form of account compromise |
| Data breach monitoring | Identify known information exposure | Exposed email addresses and credentials | Cannot identify every breach immediately |
| Antivirus and device security | Reduce device-related threats | Malware scanning and supported security checks | Cannot prevent every scam or identity fraud incident |
| Phishing protection | Warn about suspicious links and websites | Known malicious destinations and fraudulent pages | Some scams may not be detected |
| Identity restoration assistance | Support identity recovery | Disputes, documentation, and communication with institutions | Cannot guarantee a particular recovery outcome |
A household may need more than one of these services.
For instance, a breach monitoring alert may reveal that an email password was exposed.
Changing that password could help prevent unauthorized access.
If identity fraud has already occurred, recovery assistance may become necessary. Insurance may then help with eligible expenses.
Each tool has a different role.
How AVO Security supports proactive household protection
AVO Security focuses on helping households recognize and reduce common cybersecurity risks across supported devices.
Its features include Smart Scan, Web Shield, Link Checker, QR Scanner, Email Breach Scan, Wi-Fi Security, and VPN.
These tools can support preventive security habits, although their capabilities vary by operating system.
Email Breach Scan
An email address can appear in a known data breach even when the device used to access that account is not infected.
AVO’s Email Breach Scan helps users check for known exposure associated with an email address.
Suppose a household member discovers that an old shopping account appeared in a breach.
The practical response is to review that account, change any compromised password, and check whether the same credentials were reused elsewhere.
A breach result does not necessarily mean identity theft has happened.
However, it can give the user a reason to take timely action.
Web Shield
Phishing websites often imitate familiar services.
A fraudulent page may look like an online bank, a delivery company, or an account verification portal.
AVO’s Web Shield helps identify known unsafe and malicious destinations.
That warning may help someone avoid entering sensitive information on a recognized phishing page.
However, new scam websites may not be detected immediately.
Users should still verify unexpected payment requests and login notices through official channels.
Link Checker
Suspicious links can arrive by email, text message, or social media.
A message might claim that a delivery failed or a streaming account requires an urgent payment update.
Link Checker helps users examine an unfamiliar URL before visiting it.
This provides an extra opportunity to identify potential risk rather than opening every link automatically.
QR Scanner
QR codes are commonly used for menus, payments, event registration, and online forms.
Scanning a QR code does not prove that the linked website is legitimate.
AVO’s QR Scanner helps examine the destination associated with a QR code.
For unfamiliar requests involving payment or account access, independently verifying the destination remains sensible.
Smart Scan
Smart Scan helps users review supported security conditions on their devices.
The checks available depend on the operating system.
Windows, macOS, and Android permit different forms of security inspection.
On iPhone and iPad, third-party security applications cannot examine every installed app in the same way a desktop antivirus scanner can.
When evaluating cross-platform cybersecurity, compare the specific capabilities available for each device rather than assuming they are identical.
Wi-Fi Security and VPN
Household devices regularly connect to home networks and unfamiliar public connections.
AVO’s Wi-Fi Security feature helps assess certain aspects of network security.
Its VPN provides an encrypted connection to the VPN service.
This can support safer network use, but it does not prevent someone from voluntarily entering credentials on a fraudulent website.
A VPN also does not replace strong passwords, updated devices, or careful account verification.
What AVO Security does not replace
AVO Security is not identity theft insurance.
It does not automatically reimburse stolen funds, cover legal fees, or provide insurance claim payments.
Its Email Breach Scan is also different from credit bureau monitoring.
Checking for known email exposure does not mean the software monitors every credit application or newly opened loan.
Similarly, detecting a suspicious link does not eliminate the need to verify unusual requests.
AVO’s role is preventive and detection-oriented cybersecurity.
Families looking for expense reimbursement, formal credit monitoring, or professional identity restoration services should evaluate those benefits separately.
You can explore family antivirus and cross-platform protection to learn how AVO Security helps protect supported personal devices against common online threats.
Practical steps to reduce identity theft risks at home
You do not need a complicated security routine to improve household protection.
Start with the accounts and devices that handle the most sensitive information.
1. Protect your main email account
Email is often used to reset passwords for other services.
Use a unique password and enable multifactor authentication.
Review recovery phone numbers, backup email addresses, and unfamiliar forwarding rules.
2. Stop reusing passwords
A password exposed through one service may be tested against other accounts.
Use different passwords for banking, shopping, email, and social platforms.
A reputable password manager can make this easier.
3. Use stronger sign-in methods
Enable multifactor authentication where available.
Passkeys and security keys can offer stronger phishing resistance than methods that require users to type verification codes into websites.
4. Keep devices updated
Install operating-system and browser security updates promptly.
Avoid using unsupported devices for sensitive activities.
Keep built-in protections enabled unless you have a clear reason to change them.
5. Review financial accounts
Check transactions regularly.
Turn on alerts for relevant payment or account activity.
If you notice an unauthorized transaction, contact the financial institution promptly through an official channel.
6. Be cautious with personal information requests
Do not assume that a message is genuine because it includes your name, address, or other familiar details.
Information exposed in a breach can make fraudulent messages appear convincing.
When in doubt, contact the organization independently.
7. Protect children and older family members
Discuss common scams in clear language.
Children should know not to share personal details or payment information without permission.
Older adults may benefit from help reviewing unfamiliar account notifications or suspicious requests.
Offer assistance in a way that respects their privacy and independence.
8. Prepare for possible recovery
Keep important account recovery information in a secure place.
Know how to contact your bank and card providers.
Understand where to obtain official identity theft recovery guidance.
If you have insurance, keep the policy details accessible and review what is covered before an incident occurs.
These habits cannot eliminate every risk.
They do, however, address many of the situations in which stolen credentials or deceptive messages can lead to account compromise.
Why prevention and recovery belong together
A suspicious delivery message and a fraudulent credit account are different problems.
In the first situation, a person receives a link asking for a small payment.
A link checker identifies the destination as suspicious. The person avoids the page and verifies the delivery through the official service.
Preventive protection has helped reduce exposure.
In the second situation, someone discovers that an unfamiliar loan has already been opened in their name.
Avoiding future phishing links will not resolve that fraudulent account.
The person needs to follow identity theft recovery procedures, contact the affected lender, and correct any inaccurate credit information.
If eligible expenses arise, insurance may provide financial support.
Good household security prepares for both situations.
Preventive tools can reduce the likelihood of certain incidents. Monitoring can reveal signs of exposure or misuse. Recovery services and insurance can help address the consequences when identity fraud occurs.
None of these measures guarantees complete protection.
Together, they provide a more practical approach than relying on one service for everything.
Frequently Asked Questions About Identity Theft Coverage
What does identity theft protection insurance actually cover?
Identity theft insurance typically reimburses certain expenses involved in recovering from covered identity fraud. Depending on the policy, these may include document costs, qualifying lost wages, and approved legal fees. Coverage amounts, deductibles, and exclusions vary, so the policy wording determines which expenses qualify.
Does identity insurance reimburse stolen funds directly?
Most identity theft insurance policies focus on recovery expenses rather than replacing money stolen from financial accounts. Some specialized policies may include additional financial fraud benefits, but these should be confirmed before purchase. Unauthorized transactions should also be reported promptly to the relevant financial institution.
How does a recovery specialist help after a breach?
A recovery specialist helps people understand what steps to take after identity fraud and may assist with documentation, disputes, and communication with affected organizations. Some services offer direct case management, while others provide guidance and document support. The specialist cannot guarantee immediate correction of every fraudulent record or repayment of stolen funds.
Why is proactive device protection necessary alongside insurance?
Insurance generally helps with qualifying costs after a covered incident, while device security and phishing protection aim to reduce certain risks beforehand. Updated software, strong passwords, multifactor authentication, and suspicious link checks can help prevent avoidable account compromise. Using these precautions alongside insurance provides broader protection than relying on reimbursement alone.
How do data breach alerts speed up resolution?
Data breach alerts can help identify exposed accounts so users can respond sooner. Depending on the information involved, the next steps may include changing passwords, reviewing account activity, enabling multifactor authentication, or considering credit protection measures. Alerts do not reverse a breach, but acting promptly may reduce opportunities for further misuse.
Identity theft protection insurance can help make the recovery process less financially disruptive by covering certain eligible expenses. Before purchasing a policy, check the actual benefits, limits, exclusions, and the level of restoration assistance included.
But insurance is only one part of household protection. Securing email accounts, using unique passwords, monitoring financial activity, and recognizing phishing attempts are practical steps that deserve attention before fraud occurs.
AVO Security supports that preventive approach through cross-platform device security, phishing protection, suspicious link checking, network security features, and known breach monitoring. Combined with appropriate financial safeguards and identity recovery coverage, these tools can help households stay better prepared for identity theft risks.
