My children have avoided all social networking sites. The simple key is to begin educating them early about privacy issues. They understand that there are people who want to hurt them, either physically or financially. They never give out personal information. They know that texts and e-mails, like diamonds, are forever. They see our vigilance, daily.

It has worked for us.

... Excellent, Paul, EXCELLENT. I recommend your method to all readers with young children!

The most workable solution I can think of is to find a ghost address in New York, and use it for everything: vehicle title and registration, driver’s license, bank account, mail (until I get a PO Box). On paper, I would be “living” there.

But in actuality, I would live and work 50 miles away. Either in my box truck, large converted van, or a room rented with cash, no ID or SSN (very unlikely, I know). If I get a room or apartment, I might go without a vehicle at all (walk, bike, bus, train).

I have a NM LLC, but from what I’ve seen on this site it would be nearly pointless using it in New York. Even if the LLC comes up when the plates are run, so would tons of personal info (maybe even name?). Would there be any benefit?

Maybe I can just register the truck with the LLC in a different state. I’ve been living in Colorado for 4 years now, driving around daily through busy cities with plates registered to a friend’s address in a bordering state. No one has ever cared. I have never been pulled over. I imagine the cops in NY might be a bit more willing to hassle me though, especially since the plates would not likely be from even a bordering state.

I’d appreciate any thoughts or suggestions. Thank you.

... Athough NY is probably the most difficult state in which to maintain your privacy, I doubt that "tons of personal info" will come up when a NY license plate is checked out.

1) Obtain a P.O. Box in my name with my current address (just to make it easy for now).

2) Obtain a LLC from Michael with a Canary Island principle office address but with my P.O. Box as a mailing address (Just for now to receive Articles of Organization)

3) Use the new LLC to set up a CMRA with my name as authorized user

4) Cancel P.O. Box!!!

5) Contact Michael with new CMRA address to receive official LLC mail, ask Michael to get rid of any paperwork with canceled P.O. Box

Now, do I not have a usable address for mail and packages that has no link to my actual address without the headache of coming up with a Ghost Address? Could I not use any name as long as I put “in care of” the LLC? If I give out the CMRA address and receive mail at it the only thing anyone can know is that I am somehow associated with the LLC and do some kind of “business” in the area which is about the level of privacy that I want. Thank you

... I think the CMRA is still going to require two forms of government-issued ID. In addition, you must fill out USPS Form 1583 showing your home address.

BTW, it's only Rosie who uses a Canary Islands address. Michael uses one in a different country. (That is equally acceptable, of course. You can't use either address as your own, anyway. It's just for listing on the NM website.) Please contact Michael if you have any further questions about this.

In the past, SSN wasn't even on the passport application. Then, a law was passed that when anyone applied for a passport, the IRS had to be notified. The wording on the passport form made it clear that there was a $500 fine for not providing your SSN for this purpose. What wasn't clear was that while the IRS had to be notified, you could leave the SSN blank on the form and notify the IRS yourself. I did that when I renewed my passport in the 1990's with no hassle or delay in getting the renewal.

The current law says that anyone "doing business" with the State department has to furnish a TIN, which for us mere mortals is our SSN. I do not know of anyone who has found a way around this - yet.

Your grandson did well to check out the check before cashing it, because once you've deposited a fake check to a bank account, you become responsible for the money should the check subsequently bounce. Typically, by the time the cashing bank and the customer realize that they've been scammed, the scammer is long gone.

IMMEDIATELY contact ALL THREE credit reporting bureaus and place a fraud alert restriction on your credit record.

This is the first step to protecting your credit record.

Next, contact the Federal Trade Commission and the FBI with the information in the email you responded to and make a written complaint, so you have it on record. It's important at this point to do everything in writing, sent certified mail, return receipt, so that you can build a case file with which to defend yourself against allegations by vendors who extend credit to imposters.

Next, contact all banks and other institutions with whom you do business, IN WRITING, and inform them of the identity theft, and TELL them not to open any accounts or advance ANY credit without a letter signed by you or an appearance in person.

Immediately cancel all credit cards and bank accounts and open new ones with new account numbers by going to your bank and telling them about the incident. They will be very receptive and helpful.

Your information may never get abused, but you MUST take immediate action to control the possible damage.

And, of course, never give anyone personal information by email. Ever. For any reason. Period.

If possible, repeat giving, to the same phishing site, your full name but this time give a different address, different DOB, and a different SSN, every time. If you do this often, there will be hundreds of different numbers matching your name; thus, one might assume they're all fake, you're playing a game, or it will force the phishers to dig through the pile of falsehood. I'm not sure how legal this might be, in respect to giving out random SSNs. Just a suggestion.

My credit union WILL NOT ALLOW CUSTOMERS TO REFUSE ONLINE BANKING -- even if they are told that a criminal contact via internet is likely due to a personal security breach. It seems the only defense is to put passwords in place to block outside interference, even if the service isn't desired. It might be a good idea to check your bank's policy on this.