Technique

Credit File Address Injection

Also known as: New Credit File Address, Credit Report Address Injection, Fraudulent Address Addition, Address Planting

EXPLOITATION

Attacker opens accounts using victim's stolen PII with an attacker-controlled address, causing that address to be added to the victim's credit bureau file for future fraud.

Defense

How to defend against this

How to spot it

  • Unfamiliar address appears on credit report
  • Credit monitoring alerts for new address added
  • Mail from creditors at addresses you do not recognize

Tools you can use

Steps you can take