Join our Waitlist for Expert Advice!

Q&A: New Fraud and Identity Theft Rules Are your customers safe from online scamsters? How to comply with the FTC's new 'Red Flags' program.

By Randy Myers

Q: I recently learned about the Federal Trade Commission's Red Flags Rule, requiring businesses to plan a response to identity theft and fraud. My business has an online store, so does this apply to me? What steps do I need to take to become compliant?

A: Whether you're subject to the Red Flags Rule depends largely on how you get paid. If your customers simply charge purchases to a bank credit card, you're probably exempt. If you offer your own credit card, or sell first and collect payment later, you probably need to comply.

The rule took effect at the end of last year. It requires financial institutions and certain "creditors" to implement a written program for detecting and dealing with warning signs, or "red flags," that can indicate someone is trying to commit identify theft. Examples include an alert from a consumer reporting agency, or the presentation of suspect identification documents.

If you're covered under the rule, your Red Flags Rule program must do four things:

  1. Identify red flags relevant to your business or industry.
  2. Spell out procedures for detecting those red flags.
  3. Detail how you will respond to a red flag. (Who will you notify, what will you tell them?)
  4. Provide for regular updates to your procedures and the education of your staff.

Physicians, attorneys, accountants and many other professionals and service providers are exempt from the rule under the Red Flag Program Clarification Act of 2010. Other businesses qualify as creditors if they maintain consumer accounts that permit multiple payments or transactions and offer the potential for identity theft, and they (a) obtain or use consumer credit reports in connection with credit transactions, (b) furnish information to consumer reporting agencies in connection with credit transactions, or (c) advance funds to or on behalf of someone else -- unless the funds relate to providing of a service.

The FTC has information about the Red Flags Rule on its website here. Although it was published prior to the Clarification Act, this FTC how-to guide also offers helpful compliance advice. Failure to comply could result in FTC penalties of up to $3,500 for each customer account you maintain.

A former reporter for The Wall Street Journal and Dow Jones and contributor to Barron's, Randy Myers is a contributing editor for CFO and Corporate Board Member magazines.

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Business News

Meta Fires Employee Making $400,000 Per Year Over a $25 Meal Voucher Issue

Other staff members were fired for the same reason, per a new report.

Business News

She Sent a Cold Email to Meta Judging Its Ray-Bans. Now She Runs the Wearables Division.

Li-Chen Miller is now the face of Meta's AI glasses — here's how she got there.

Business News

A Wells Fargo Worker Was Discovered 4 Days After Dying at Her Desk. Her Cause of Death Was Just Revealed.

Medical examiners have released the cause of death of Denise Prudhomme, who was found dead at her desk in Wells Fargo's Tempe, Ariz. office.

Business News

Mark Zuckerberg Does a Better Job Than His Rivals at Explaining AI — And It's Helping Meta Outperform Alphabet, Amazon and Microsoft

Meta has been using AI for content recommendations, keeping users' attention for longer periods of time.