logoalt Hacker News

michaelttoday at 8:55 AM0 repliesview on HN

> In fact, knowledge-based quizzes are used routinely by credit reporting agencies -- the big ones like Experian. And they've been presented by background check services, too.

Yes - and they don't work.

> They work like this: they scrape your credit reports and public records in a deep dive for your old addresses, employers, contact info, a whole smorgasbord of stuff.

Most of which don't work on an 18-year-old. No credit history, no past employers, no bill payments, no history of moving houses, address is their parents' house.

There is no smorgasbord. There's name, date of birth, parents' address - all of which are widely known matters of public record (which is why the credit rating agency has them in the first place).

> But it's multiple choice: "which of these did you live at? None of the above? All of them?" "Which one of these wasn't your employer?"

Fantastic, the credit rating agency has just told the fraudster several of your past addresses, and your past employers.

Sure, there's a phony or two in the list - but the fraudster can try as many times as they want, comparing employer and address lists between different credit applications.