Ninni Mikkonen of Helsinki was surprised when she received a letter from a collection agency for an unpaid bill on an iPad and an iPhone that had been ordered by phone from teleoperator DNA in her name during the summer of 2014.
“When I got in touch with DNA it became apparent that someone had misrepresented themselves as me and ordered the items without paying for them,” says Mikkonen, who is unsure how the thief gained access to her social security number.
“I had not lost my wallet or anything like that, so I don’t know how the thief accessed my personal information,” she says.
Mikkonen reported the incident to the police, where it is under investigation.
However, determining the identity of the culprit is proving difficult as a prepaid mobile phone number and bogus email account were used for order follow up.
At the post office, the package containing the iPad and the iPhone was likely given over to the thief who simply showed the package’s tracking code. Whether the thief showed fake or stolen ID is not known.
Identity theft is not illegal – yet
In Finland, identity theft is not against the law.
As of September, police have recorded more than 8,000 identity theft reports. The figure is slightly higher than for the same time in previous years. For example, for all of 2013, some 9,400 reports of identity theft were filed.
In reality, the figure may be higher as the police don’t gather official statistics on identity theft because presenting oneself as someone else is not against the law.
A Minister of the Interior working group recommended in 2010 that identity theft be criminalised, but that has not happened yet. However, that may change as of next year as the Ministry of Justice has submitted a report that recommends identity theft be a crime.
Shifting the responsibility
The Finnish postal service Itella does not take a stance on Mikkonen’s case, citing communications confidentiality clauses. However, Markku Rajamäki Director, Chief Risk and Security Officer at Itella says that, “it is normal for a family member to pick up a package. For example, economy class packages are often handed over to individuals who have the tracking or identity code.”
Rajamäki says Itella has acted according to the rules and that the merchant (DNA in this case) has considered the risk involved regarding the combination of security features used when they send packages.
According to DNA, additional security features have been added to economy service packages such as requiring a proxy letter if a family member or someone else is picking up a package on someone else's behalf.
DNA would prefer that the post take responsibility. “Over the phone it’s not possible to verify a person’s identity, which is why that takes place at the post office,” says DNA administrative director Vesa Vuoti.