Business identity theft protection

Learn how businesses can protect themselves against identity theft, safeguard sensitive information, and monitor their online reputations.

Back to identity theft HQ

BBB's identity theft HQ

Running a business has so many moving components; it can be hard to keep track of everything.

Although it may not be top of mind, you want to be sure you are doing all you can to protect your business’s reputation and take steps to prevent business identity theft. Better Business Bureau (BBB) has tips to help your business.

We often think of identity theft as a serious problem that affects individuals, but businesses are also at risk, and not just big name businesses. Criminals can steal a business's identity by gaining access to financial or other sensitive information. They also have a variety of ways in, including hacking, malware, phishing emails, swiping credit card info or even as far as finding old sensitive documents that have been improperly thrown out. BBB hosts Secure Your ID day and community shredding events to remind the public that identity theft is easily preventable; however, businesses should be vigilant about this issue and constantly ensuring they are doing all they can to protect their own and their customers' sensitive information.

Tired exhausted overworked indian office worker, creative manager, sitting at workplace holding his hands to his head, feeling stressed and tired from long work in laptop, needs a break, rest

Businesses should be wary of these red flags of identity theft:

You receive a request to verify orders you didn’t place.
You see unexplained changes to your business records.
You receive phone calls from someone trying to verify an address for your business that is not associated with your company or that you cannot confirm.
You receive invoices for storage, shipping or other services that you did not purchase.
You discover purchases, loans, or credit accounts opened in your business's name without authorization.
You are a victim of a phishing attempt or a business email compromise (BEC) scam.
Customers reach out to you about orders, products, or services the business didn't process or offer.
You receive a notification that a tax return has already been filed using the business's Employer Identification Number (EIN).

Consider these 6 tips to help protect your business:

Accounting financial audit bank banking account stock spreadsheet data with glasses pen and calculator in washed blue monochrome financial concept for analysis, audit finance forensics

1. Protect your business's bank accounts.

Review your commercial banking agreements to determine your protections and reporting requirements. Consider using a two-person authorization or other arrangement with your bank to protect against fraudulent wire transactions. Beware of phishing scams and monitor your bank account(s) frequently.

Three business people meeting and looking at a laptop and a document.

2. Protect your business's identifying information.

Guard your Employer Identification Number (EIN) and Tax Identification Number (TIN) the way you would your own Social Security or Social Insurance Number. Don’t give them out unless required, and shred old documents with business ID information in them. If your business or non-profit is required to give out your EIN, keep a close eye on your credit report.

Businesswoman hands working in Stacks of paper files for searching and checking unfinished document achieves on folders papers

3. Protect and monitor your state business registration information.

Regularly review your information filed with your state or province to make sure your information hasn’t been changed or updated without authorization.

Mid adult smiling Latin businessman in office, using credit card to pay online

4. Protect and monitor your business's credit card, supplier, and trade accounts.

Keep an inventory of accounts and key contact information. Review and reconcile account statements as soon as they are received, and immediately alert your credit card company if you find fraudulent activity.

Close up of a Commercial Credit check form on a desk

5. Protect and monitor your business's credit file.

At least once a year, review your business credit reports with Equifax, Experian and TransUnion. Keep personal and business finances separate and consider placing a credit security freeze on your personal credit file to make it harder for thieves to open new accounts under your business’ name.

Experian: experian.com
Transunion: transunion.com
Equifax: equifax.com

Female architects discussing a project looking at computer monitor with a male colleague working in front. Business people working together in an engineering office.

6. Protect your business's computers and networks.

Restrict use of your business computers to only business activities. Install anti-virus software and keep it updated regularly. Secure your company’s wireless network.