Pennsylvania Woman Arrested After Her Identity Was Stolen

I’ve been writing about identity theft and scams for years, and most of the time, people who’ve been victimized are placed in the “financial loss” category. However, I think I've found a perfect example of how damaging this type of crime can be to unsuspecting victims: identity theft isn’t just a financial problem caused by a loan or a credit card opened in our name.

Identity theft wears many hats and can affect us in many ways—sometimes it can land an innocent person in jail.

Key takeaways

• Stolen personal details can be used to create payment accounts and commit fraud in someone else’s name
• Not using a particular app does not necessarily mean an account cannot be opened using your identity
• Treat unexpected account notices, collection letters, police contact or unfamiliar transactions as urgent warning signs
• Monitoring exposed data and acting quickly after a breach can help limit the damage
• Keep records of every report, alert and conversation if you suspect identity theft

What do you think can happen if someone fraudulently opened a CashApp account in your name?

The story of a 47-year-old woman in Pennsylvania helps shed light on the consequences of identity theft. According to 404 Media, Amanda Smith was served an arrest warrant after her local sheriff’s department knocked on her door in April this year.

The warrant was for computer fraud in Arkansas, a state she said she never visited. She even told reporters that she was “completely confused” and not a very tech-savvy person.

And here’s the kicker: Smith learned that someone on Facebook Marketplace had persuaded a user to send $1,000 to a CashApp account that was created using her Social Security Number and date of birth. Despite never using CashApp or creating said account, the woman spent three nights in the local jail and was forced to go through nearly six months of proving her innocence in the criminal case against her.

The case is especially unsettling because the account contained details that reportedly did not match Smith, including an unfamiliar address, phone number, device and network information. Yet the stolen identity details attached to the account were enough to point investigators in her direction.

Smith believes her identity may have been stolen through a past data breach and used to create the Cash App account. She says she didn't learn about that account until evidence was shared as part of her criminal case; when she contacted Cash App herself, she reportedly couldn't get details because she couldn't prove she owned it.

Her private investigator has raised questions about whether the evidence established that Smith actually operated or controlled the account, rather than simply showing that her personal details were attached to it. Her lawyer is seeking to have the charges dismissed and argues that the information they have provided supports Smith’s claim of innocence.

According to the report, the account received the $1,000 from the Marketplace scam and quickly moved the money in smaller amounts to other accounts—activity that appears consistent with an effort to distribute the funds.

The case is ongoing. Smith has reportedly declined a plea deal because accepting it would mean accepting consequences for a crime she says she did not commit; a hearing is scheduled for November.

It’s an extreme example, but it illustrates an important reality: personal information exposed in a breach can be collected, combined with other data and misused long after the original breach is forgotten.

You may also want to read:

Identity Theft Prevention: Protect Your SSN & Credit

Learn how to prevent identity theft, protect your Social Security number and credit, monitor your accounts, and spot signs of fraud.

BitdefenderBitdefender

Cash app scams: How to stay safe and what to do if they happen to you

Cash App scams are fraud schemes that trick users into sending money, sharing login codes, or giving away personal information through fake support messages, bogus giveaways, fake payment confirmations, investment offers, refund tricks, romance scams, or marketplace deals.

BitdefenderCristina POPOV

How to reduce your risk

• Protect the accounts that protect everything else. Use strong, unique passwords and two-factor authentication, especially for email, financial services and mobile-provider accounts.
• Be careful with personal data. Your date of birth, address, phone number and answers to common security questions can help criminals impersonate you or pass weak verification checks.
• Check unfamiliar notices instead of ignoring them. A welcome email for a service you never joined, an unexpected password-reset email or a letter about an account you do not recognize may be an early sign of misuse.
• Respond quickly if you discover fraud. Contact the company involved through its official channels, secure affected accounts, report the incident and keep copies of reference numbers, emails and documents.
• Consider a credit freeze. In the US, freezing your credit can make it harder for someone to open new credit accounts in your name.
• Never send money to ‘fix’ an identity-theft problem. Scammers may impersonate banks, law enforcement, credit bureaus or identity-protection companies to exploit people who are already worried.
• Search for yourself occasionally. Google your name, email address and phone number to see what is publicly visible. You may find old profiles, people-search listings or accounts you forgot about. Remove or restrict what you can.
• Don’t ignore breach notifications. If a company tells you that your data may have been exposed, take it seriously (even if the breach happened years ago). Change your password, make sure it is not reused elsewhere and enable two-factor authentication.
• Use identity monitoring to stay informed. Bitdefender Digital Identity Protection can alert you when exposed personal information appears in a breach and help you understand what needs attention. For US readers, Bitdefender Identity Theft Protection also provides credit and identity monitoring, recovery support and identity-theft insurance.

Remember: No service can prevent every crime committed with stolen data. But knowing what is exposed, catching warning signs early, and having a clear response plan can make a deeply stressful situation easier to contain.