Security for Veterans & Military Families

VA Identity Theft: The Highest-Risk Exposure for Veterans

The VA has experienced some of the largest federal data breaches in US history. The 2006 VA laptop theft exposed the names, SSNs, and dates of birth of 26.5 million veterans. Subsequent breaches have continued. This means your personal information may already be circulating in data broker databases and on the dark web — not because of anything you did, but because of the institutions that hold your records.

Steps specific to veterans:

• Request your VA records — Request a copy of your VA records via the VA's records portal to know exactly what's on file. If you find errors, you can formally dispute them.
• Freeze your credit at all three bureaus — It's free and takes 15 minutes total. Equifax, Experian, and TransUnion all have online portals. A freeze blocks new credit from being opened in your name without a temporary lift — the most effective protection against new-account identity theft. FTC
• Consider identity theft protection with VA-specific coverage — Aura monitors VA benefit accounts specifically, in addition to credit and dark web monitoring. This is unique to Aura among major identity theft protection services.
• Watch for VA benefit fraud specifically — Fraudsters target VA disability and pension benefits. If you receive notice of a change to your VA benefits you didn't initiate, contact the VA's Inspector General at 1-800-488-8244 immediately.

PCS Move Security: The Vulnerability Window

Permanent Change of Station moves create a specific security vulnerability window. During a PCS, your personal information is shared with more parties than at almost any other time: movers, real estate agents, banks, landlords, utilities, and the government. And you're doing all of this under a hard deadline with less time to verify each transaction carefully.

Before your PCS move:

• Pull a credit report — Know your baseline before you start the process. If something goes wrong during the move, you'll need the before-move baseline to prove what changed.
• Place a fraud alert at one bureau — Fraud alerts last 1 year and require creditors to take extra steps to verify identity before opening new credit. Unlike a freeze, a fraud alert still allows credit to be opened, but adds friction for fraudsters.
• Change passwords on financial accounts — Before you move, change passwords on your bank, credit cards, retirement accounts, and email. This ensures any credentials that have been sitting around unrotated are refreshed at a known-clean point.
• Set up mail forwarding immediately — USPS change of address takes effect in 7–10 days. Set it up the moment your new address is confirmed. Mail theft during the gap is a common source of PCS-related identity theft.
• Use a PO Box or secure mail option — On-base housing often has APO/FPO addresses; if you're moving off-base, consider a PO Box for the first 30 days while you establish your new address as trusted.

After your PCS move:

• Pull your credit report again 60 days after the move to catch any fraudulent accounts opened during the transition window.
• Verify all financial institutions have your new address — statement mail going to your old address is a liability.
• Re-register for emergency alerts at your new location (see our Emergency Contacts guide and its state resource finder).

Cybersecurity for Military Families

Military families face specific cyber threats beyond standard consumer risks:

Social media operational security (OPSEC)

This cannot be overstated. Unit movements, deployment dates, return windows, and base information should never appear on personal social media — even in vague terms. This isn't just a military readiness issue; it's a direct home security risk. A Facebook post saying "counting down — only 3 more weeks!" tells every burglar in your area exactly when your home will be unsecured and for how long. The OPSEC checklist:

• Set all personal social accounts to "Friends only" or private
• Never post unit names, deployment destinations, or dates
• Never post photos from inside an installation showing security measures or sensitive areas
• Review what your children post — teenagers often don't understand OPSEC implications
• Ask friends and family not to post on your behalf about your deployment status

Device security on deployment

• Use a VPN on personal devices when using any public or foreign Wi-Fi. We recommend NordVPN for its audited no-logs policy and strong encryption — available on all devices, $3–4/month on a 2-year plan.
• Enable full-disk encryption on laptops (FileVault on Mac, BitLocker on Windows). Standard on modern devices but verify it's on.
• Use different passwords for personal and government systems — never reuse.
• Enable remote wipe capability on phones and laptops before any travel.

Phishing targeting military and veterans

The FTC and DoD both document targeted phishing campaigns against military members, veterans, and military spouses. Common patterns:

• Fake VA claim processors — fraudsters pose as VA representatives or VSOs (Veterans Service Organizations) offering to "expedite" claims for a fee. The VA and accredited VSOs never charge for claims assistance.
• Military spouse scams — "I'm a deployed soldier who needs help with a financial situation" — a well-documented romance/wire transfer fraud pattern that specifically targets military spouses.
• SCRA benefit scams — "You're owed SCRA back payments" — soliciting SSN and financial information. Legitimate SCRA claims are handled through your JAG office, not cold contacts.
• Fake military charity scams — before donating to any military charity, verify at Charity Navigator or BBB Wise Giving Alliance.

Home Security During Deployment

A home that goes unoccupied for 6–15 months presents specific security challenges. This is one of the most common security discussions in FRG (Family Readiness Group) meetings, and for good reason.

Physical security for a deployed household:

SCRA Financial Protections

The Servicemembers Civil Relief Act provides significant financial protections that reduce security vulnerabilities:

• Interest rate cap: Pre-service debts are capped at 6% interest while on active duty. Creditors who don't honor this can be held liable.
• Lease termination: Active-duty members can terminate a residential lease with 30 days notice after receiving deployment orders or PCS orders. No penalty, no credit impact.
• Foreclosure protection: Courts can stop or delay foreclosure proceedings against active-duty service members.
• Auto repossession protection: Requires court action before repossession of a vehicle purchased before active-duty status.

To invoke SCRA protections: Send written notice with a copy of your orders to each creditor. The Military Consumer at consumer.ftc.gov/military has form letters and dispute processes if creditors don't comply.

Free Security Resources for Veterans and Military Families

• Military OneSource (militaryonesource.mil) — Free counseling and resources including financial counseling with identity theft recovery assistance
• JAG Legal Assistance — Free legal help for active-duty members including SCRA enforcement, identity theft response, and consumer issues
• FTC Military Consumer (consumer.ftc.gov/military) — FTC resources specifically for service members and veterans including scam alerts and identity theft guides
• VA Inspector General Hotline — 1-800-488-8244 for reporting suspected VA benefit fraud or data security concerns
• CFPB for Servicemembers (consumerfinance.gov) — Financial protection resources and complaint submission for SCRA violations

Product Recommendations for Military Families

Frequently Asked Questions