Criminals are seizing on a surge in job losses to steal unemployment benefits from Americans nationwide. This complicates an already tough situation for millions of financially strapped Americans and overwhelmed state unemployment offices.
While there's no exact measure of how many fraudulent claims have been made, states from Washington to Maine say they've seen an increase and numerous federal agencies are working to fight it.
"About 10% of (unemployment insurance) payments are improper under the best of times, and we are in the worst of times," Scott Dahl, the inspector general for the U.S. Labor Department, told the House Subcommittee on Government Operations. Dahl estimated that at least $26 billion in benefits could be wasted, with the bulk of that going to fraudsters.
This forces unemployed workers, already reeling from the loss of a job, to fight for the benefits they need and are entitled to.
"We are deeply concerned about the well-being of these people and when they will get this resolved and get the money they need to live on," said Eva Velasquez, president and CEO of the non-profit Identity Theft Resource Center, which has seen a sharp jump in calls for help with unemployment fraud.
Since mid-March, 42.7 million people have applied for unemployment benefits, though some have been rehired as states allow businesses to reopen. On Thursday, the federal government said 21.5 million people are receiving jobless aid. That creates added opportunity for criminals. An extra $600 a week in benefits makes it more lucrative.
Additionally, state unemployment agencies have been overwhelmed by claims and are working to get payments to those in need as fast as possible. In some cases, security experts say the new processes, added workload and outdated systems may have made it easier for criminals to act.
"This is El Dorado for them and it's pure hell for victims," said Adam Levin, founder of data security firm CyberScout.
Security experts say the bulk of the fraud appears to be committed by criminals using stolen data to make claims using someone else's identity. The information has often been gleaned from prior data breaches or direct attacks on state systems.
In many cases, victims don't know they have been affected until they apply for benefits and find out someone has beat them to the punch. Some even find their benefit payments halted when a criminal usurps their benefits.
Victims should report a suspected fraud to the state, their employer and file a police report. But resolving the issue and getting proper payment means going through the state agency that processes unemployment benefit claims, which is potentially already overwhelmed.
The U.S. Secret Service issued a memo last month that suggested a well-organized Nigerian fraud ring was targeting state unemployment systems, according to the New York Times, which got a copy of the document. But agents were still working to pinpoint who was involved and from where. The memo said that Washington was the hardest-hit state but there was evidence of attacks in North Carolina, Massachusetts, Rhode Island, Oklahoma, Wyoming and Florida. The California cybersecurity firm Agari estimated last week that at least 11 states have been targeted.
On Thursday, officials in Washington said the state has recovered $333 million out an estimated $550 million to $650 million paid out fraudulently.
Those with jobs are also targets of the fraudsters. Blake Victor Kent said that last week he got a letter from the Massachusetts Department of Unemployment Assistance informing him that they had commenced payments for his unemployment claim.
"That's funny, because I am still employed," he said.
Kent thought his information may have been exposed when he was a victim of a data breach a few years back. But his employer, Massachusetts General Hospital, sent an email a few days later to staff saying they were aware of a number of such cases for employees.
In other cases, criminals are targeting people with false job offers, assistance filing unemployment and to glean personal information. Other people may also be targeted and used as "mules" to move money for the criminals.
Experts warn that if a criminal has enough information to make an unemployment claim, they have enough information to commit other acts of identity theft. So people need to protect themselves from further harm by freezing their credit and monitoring their credit regularly for any irregularities.
People should practice good cyber hygiene as well, suggests John Breyault, who manages the National Consumers League's Fraud Center. That means changing passwords regularly, using two-factor authentication whenever possible to log into accounts and being wary of offers that seem too good to be true, whether that is by phone, online, mail or in person.
"Until this unemployment problem starts to recede, this is going to be a problem that sticks with us," Breyault said.
Rachel La Corte in Olympia, Washington, contributed.
