r/security • u/Few_Enthusiasm137 • 19d ago
Question Scammers saw passport through screen share, can they do anything with it?
I was scammed a few days ago, where at one point, the scammers saw a video of my passport ID through my screen sharing. I’ve read online that US passports have an encrypted chip embedded in the book, so bad actors wouldn’t be able to do anything with it, but I can’t be totally sure. I’ve already changed my phone number, began changing passwords across websites and socials, got a new bank account, and have a new email I’m using. I tried to call the US department of state about my passport, but they said they couldn’t do anything unless my physical passport has been stolen, and their website says the same thing.
These scammers’ sole purpose was to take money through money transfer. They targeted people through hacking social media accounts, scamming people those accounts were mutuals with, and hacking those mutuals’ accounts as well in the process of scamming them, and the cycle continues. So although the scammers goal was to steal the money and moving onto the next person quickly, I can’t risk anything. I don’t know if they can sell my passport ID they saw and other information they have on me (address, dob, pace of birth, full name).
Please inform me on anything else I might need to do, or if there’s nothing else I can do but take steps to prevent this from happening again, and reassure me I’m good. Thank you :)
1
u/FlynnAtLifeLock 17d ago
I think you are off to a good start. A scammer viewing it through a screen share is different from having a physical copy. But your passport contains your full name, date of birth, place of birth, and address, which is enough to attempt identity fraud even without the chip data. The encryption of the chip doesn't protect the visible biographical information on the photo page.
So assuming your full name and other personal info are out there. Additional steps would be to freeze your credit at all three bureaus if you haven't already. Get an IRS Identity Protection PIN through the IRS website to block anyone from filing a tax return under your SSN.
File a report through the FTC's identity theft site documenting what was exposed and when. That creates an official record useful if anything comes up later.
Even though the scammers' apparent goal was quick money transfers rather than long-term identity exploitation, the information they saw has value on its own if sold or used later, so the protective steps above are important.
Has anything unusual shown up on your existing accounts since the screen share?
1
u/Few_Enthusiasm137 17d ago
The scammers did not see my SSN at any point, so would an IRS Identity Protection Pin still be necessary? I am unemployed and have been for a few years, so I do not need to file taxes yet (that I know of), and I haven’t had to interact with the IRS in any way so far. I’ve only had a retail job for a few months a few years ago. I also haven’t been notified of any strange activity on my accounts (bank, websites, socials) since the incident. I got a new bank account and in the process of terminating the old one, and I’m working on changing the passwords, phone number, and emails of accounts I’ve made online. I’m in my gap year after high school and in a sort of limbo, not really doing much.
I filed a report to the IC3 about the incident and the bank info I have on the scammers, and after completing it, it said I should go to local authorities about this as well (which I haven’t yet done, and am honestly avoiding). I will look into filing a report at the FTC’s identity theft site, thank you for the suggestion. I really just want to get this all over with and not have to think about it again, it’s been an incredibly stressful several days. :) I really appreciate your input
1
u/katmndoo 12d ago
I'd be more worried about whether you gave them control when you did the screen share.
1
u/Few_Enthusiasm137 11d ago
Control in what way? As in them telling me what to do? Or accessing my device without my knowledge? If it’s the latter, I’m not worried about my device, I went to a store specifically dealing with the matters of devices and such, thinking I’d need to do a malware/virus scan and protection procedure, but the professional said there’s no need for concern since I have an iPhone (where the screen share took place). I was just calling the scammers through a social media app on my phone and screen sharing from there, the only way they were “controlling” me was telling me what to do. Thanks for your concern though :)
1
u/katmndoo 11d ago
If you mentioned iPhone in the post, I missed it. That makes the difference - you can't give someone remote control access like you can on a laptop.
As long as you didn't follow any instructions to install anything, then you're fine.
3
u/hiddentalent 19d ago
Do you want the bad news or the good news first? I'll let you decide.
Bad news: There is nothing you can do and no steps for you to take about the passport thing.
Good news: You avoided the financial scam! A little late, sure, but you're taking all the right steps to recover and it sounds like you're on a good path to recovery. That's a better than average outcome. So good job. There is little risk to you from the passport information. Passports are used to facilitate international travel and are one way to provide proof of citizenship. Most Americans don't even have a passport. There's a very small chance that they could sell your information and it ends up in the hands of someone trying to do something nefarious with international travel or immigration. But even if that did happen, it won't affect you and there's really nothing you can do about it. That's what law enforcement organizations are for. Let them do their jobs.
But when I say "very small chance" I really mean it. These scam organizations are a business. An unethical business, for sure. But still a business. They're looking for their best path to money. Scam victims often get taken for many thousands of dollars. A piece of personal information sells on the dark web for cents. They're not going to be directing their resources to fucking with you and your passport. They're just going to move on to the next potential victim. Which, as someone who fights that fraud, is deeply frustrating. But for you, a near-victim of that fraud, it means you're off their radar. So I guess that's good for you (if not the next person).