Previous Story: AOL releases delayed Netscape beta
Next Story: ChoicePoint stops selling some personal data

Anti-Phishing Act pushes for 5 years and $250,000 fine
By Grant Gross

A bill introduced in the U.S. Senate this week would allow prison time of up to five years and fines of up to US$250,000 for people who design fake Web sites for the purposes of stealing money or credit card numbers.

The Anti-Phishing Act of 2005, introduced by Senator Patrick Leahy, would outlaw "phishing," in which scam artists design Web sites to look like real banking or e-commerce sites, then e-mail spam to people saying they need to re-enter their account or credit card numbers at the bogus site.

The Vermont Democrat's bill, similar to one that failed to pass in 2004, would allow law enforcement officials another tool to fight phishing scams, by creating an opportunity to prosecute before the actual fraud takes place, said Julie Katzman, a legal advisor to Leahy on the Senate Judiciary Committee. The bill is intended to deter phishing scammers, she added.

"It helps to have a crime that defines the conduct," Katzman said. "It does send (scammers) a signal."

Leahy's bill would also extend the same penalties to so-called "pharming," in which scammers redirect computer users' browsers and direct them to spoofed banking or e-commerce sites.

Leahy, in a statement, noted that the average phishing Web site is active for less than six days.

"Some phishers and pharmers can be prosecuted under wire fraud or identity theft statutes, but often these prosecutions take place only after someone has been defrauded," Leahy said in a statement. "For most of these criminals, that leaves plenty of time to cover their tracks. Moreover, the mere threat of these attacks undermines everyone’s confidence in the Internet. When people cannot trust that Web sites are what they appear to be, they will not use the Internet for their secure transactions."

The number of new phishing messages climbed by an average of 38 percent a month during the last six months of 2004, according to the Anti-Phishing Working Group. The number of phishing e-mails grew by 42 percent, and the number of unique phishing Web sites grew by 47 percent in January, according to the group.

Leahy's bill requires that the spoofed Web sites be designed with the goal of committing fraud or identity theft. Parody Web sites, both commercial and political, are exempt from the penalties in the bill.

Posted March 5, 2005 12:22 AM |