"Identity Theft by Marriott" ™
 

(Note: This is a more general issue, not a hotel review. I will review the hotel in the appropriate thread for this hotel.)

Tonight, when I checked into the Courtyard San Diego Sorrento Mesa/La Jolla, the night desk clerk not only asked for my credit card and driver's license, he swiped the credit card and then insisted on also entering into his computers all the details on my driver's license.

When I asked why, he said it was the law and also could be helpful to the police! He also claimed it was required by all hotels. In fact, I believe that in California, credit card privacy laws actually prohibit saving this information. It's also never happened to me at any other hotel in the USA, including others in San Diego county.

I'm surprised he didn't demand my social security number.

If my card is subsequently misused, do I have a case against these folks for identity theft? Is this really some kind of new Marriott policy?

In the U.S., some hotels (such as the majority of those in Las Vegas) request identification from all guests at check-in, regardless of the method of payment. You could be paying in cash and offer a large cash deposit, and they'll still request an ID. AFAIK, the law doesn't prohibit them from asking when it's a condition of staying at the hotel.

I think it's far more likely that the front desk clerk incorrectly claimed (or even outright lied) that it was a legal requirement just to increase compliance of some local policy of that hotel. People are less likely to push back if they believe that it's the law, even when it really isn't.

Personally, I have no issues with having to show an ID on check-in to a hotel, but I'm not sure how I'd feel if (after confirming my identity) the desk clerk started to transcribe information from the ID, because my hotel profile and credit card already provide enough information to uniquely identify me.

As a matter of fact, the desk agent was telling the truth.

Taken from a news article:

If you ever have misfortune to stay at one of the “scratchy sheet” motels (like a Days Inn or a Motel 6), many will actually photocopy your license.

As to the credit card—you’ve never had yours swiped at check-in? Sometimes, I’m simply asked if I want to “use the card on file”, but I’d estimate that about half the time or more, I’m asked for the physical card. In fact, it’s often my Marriott Rewards Visa card which prompts an underachieving desk agent to look down at his/her screen and awkwardly add “...and we do have your gold elite status on file...”.

In Hong Kong and Singapore the hotel I stayed at took copy if all passports for guests in the room. It was not Marriott but IHG hotels including IC Singapore.

This quote doesn't state that the hotel must copy the driver's license number, date of birth, and home address. I would very much object to a front desk clerk doing that. Also, I do vaguely remember a CA law that while a driver's license could be checked as ID when paying by check (back in the day when checks were common), the vendor was prohibited from copying information from the ID onto the check, which had been common practice earlier (in fact, some people had their driver's license number printed onto their checks IIRC).

Since San Diego was mentioned, I do recall that on my last trip there, my hotel (nonMarriott) check in agent mysteriously disappeared behind the front desk with my ID (I always use my passport when I travel precisely because it doesn't contain my home address) and credit card. At the time, I thought that the person was checking about the status of my special suite, but I later have wondered about that.....

The quote also says the law was not passed but was postponed! Maybe it got passed later.

I have been asked to SHOW id in addition to my credit card many times. This is the first time the data has been written down -- that's what I object to. And that's what I think is illegal in California -- state law trumps local law even if the local law required it (which it doesn't).

I have a NY state drivers license with a bar code on the back and I'm pretty sure its been scanned at Lowes when returning items without a receipt. Never gave it a second thought.

Sadly, the hotel can set forth their own policies as it relates to collecting the drivers license; however, it does put the hotel at a higher risk as you mentioned regarding potential identity theft. It's a bit of a long shot though as most things also need your SSN.

On the other hand, I once got into it with a desk clerk as they wanted to photocopy my military ID and I refused. I even had to explain to them the US Code Chpt 33, section 701 and they still insisted and the GM was clueless they couldn't do this and said it was a requirement to stay at the hotel since I was booked on a government rate. Interesting enough, submitted a complaint to Marriott and got a personal call from them the very next day they would be handling the issue directly with the hotel to bring them into compliance.

Of course. I'm used to showing photo ID when checking in but it's the writing down of personal details that I find objectionable.

In some countries, hotels temporarily keep or record passport information, but those tend to be places where this is required by law and where the country also has a national ID card system involving the registration of one's home address. The USA does not require that everyone have an official national ID card to be carried at all times and shown to police and other officials upon request and for no reason.

If I were the OP, I would contact the California State Attorney Privacy Enforcement & Protection Unit http://privacylaw.proskauer.com/2012...otection-unit/ and/or the San Diego County District Attorney office. There is no way in my home state that anyone can collect your personal information. Even supermarkets and drug stores are prohibited...something the Ralphs chain once did but was fined millions for. This is California, the litigious state, come on... Showing your id and collecting the info are two different matters. This hotel should be sued.

Unfortunately, my limited experience in contacting government agencies has uniformly been that it was ignored. So I am skeptical about it being worthwhile; better to give the practice publicity (like on this thread) in the hopes that it has at least a little impact.

As for me, I'll never stay at the hotel again even though I will be back in the area regularly.

Talk to the GM & let him know why; otherwise things won't change. Plus it could be a FDC that didn't know what the heck he was talking about & made something up.

Cheers.

I checked in to the nearby Residence Inn last week. The clerk then didn't do that, he only looked at my ID. (Didn't even swipe a credit card, just asked if I wanted to use the one on file.)

It does seem to be the law (since shortly after 9/11/2001) to have to show ID.

Laws against securing a hotel room under a false name are much older than that. The relevant statute in Colorado, CRS 12-44-101 (4), dates from 1893.

I'm sure people have tried impersonating someone at check-in who, for example, they know is in town for a convention and is likely staying at the "convention hotel".

Re Marriott, I've always been asked for id, but don't ever remember a Marriott-family property copying down any information from it; they're just verifying the name. The USPS doesn't deliver to my home address, anyway. Usually that's the kind of thing mom-and-pop and Motel 6-type places do.

Though I have never travelled to the San Diego area, I ALWAYS provide my passport when asked for picture ID by the clerk. About 50% of the time, the clerk will try to hand it back and say, "how about a driver's license?" to which I reply, "how about that picture ID I just gave you?" There seems to be a unreasonable desire lately for clerks to put your address into the computer rather than just taking what is on the profile. I've yet to see a legitimate reason for this. Only once has a clerk refused my passport, to which I insisted on taking my 9-night business to the Springhill Suites next door (it was before the 6pm cancellation deadline). She changed her tune and verified that the name on the passport and picture of ME matched the name on the credit card and the reservation.

As a side note, another peeve of mine regarding clerks are those that want my zip code in order to process a cash transaction at a store. I always say, "1F2U3KU, it's Canadian". That about ends that conversation.

I don't think anyone is questioning the viewing of ID for check-in. That's been around for years. It's the copying of the DL info that Richard (and others) have a problem w/. While I do use my DL for ID when traveling in the US I don't allow them to copy anything. A Doubletree FDC (think it was DT; it was a Hilton brand) near SFO wanted to copy my DL & CC several years ago. I politely said that was a non-starter & he backed off.

Heck, when I was at the Prague Marriott they wanted to copy my AAA card to prove I was eligible for the rate & made up some b.s. about corp requiring it. I called them on it as I knew HQ didn't have that rule & said they could look at the card to verify it was me since they also had my passport in their hand with my name & pic but that was about it/no copying. We really got into it tooth & nail.

Re: clerks asking for zip code on cash at stores - blame their employers, not the clerk. They're just doing it for marketing purposes/where customers are coming from. I normally say 00000. Clerks look startled, but then shrug & plug it in.

Cheers.

What kind of ID theft could take place with just a DL number? I know the SS# could cause a lot of havoc if an ID thief has it.

Would they need more than a DL#?

Just curious and not defending the hotel. I have never had a hotel copy my DL# as an FYI. Not sure how I would react.

Making a fake copy of your DL with another persons picture, to start, which many cities and agencies accept for services (such as getting water and electric service in my home city of Los Angeles).

Might also get YOU arrested http://www.idtheftcenter.org/Governm...s-license.html

being overly paranoid...............

When I lived in Virginia in the 70s/80s my DL number was my SSN!

Did they change that since?

Does no state have the SSN as the DL number any more?

Yes, use of SSN was made optional sometime in the early 80s (I switched immediately) and in 2003 a law was passed in VA where the SSN is not allowed to be used in the DL number anymore.
I believe the Social Security Protection Act of 2010 which limits the Government's use of and access to social security numbers; probably doesn't allow states to use the SSN in a DL number anymore. I don't know that for sure, but at least I pointed those interested in finding out more int he right direction so they can go read up on it.

I've had trouble on the zip code in stores and at gas pumps when it wants my nine digit zip code (that I don't have memorized).

Your driver's license has your home address. When you check into a hotel, they know you won't be home for a certain number of days. Someone could pass on this information and your property could be robbed. This is why I never show my driver's license to TSA employees or airline airport workers. I also don't use it to prove age because I don't want the waiter to know my home address.

In addition, for ID theft, knowing your birthdate is helpful. Sometimes it's enough to convince a credit card call center worker that you're the one calling to request an address change and an new card, for example. Or knowing your name and birthdate can enable someone to find your mother's maiden name and birthdate (from birth records), which is often used for credit card and bank security questions.

That is what I always thought and I'd tell them that they didn't need it or gave them a made up one. Then one day my AmEx was rejected - they at least were using for it a security check. And I believe that the gas stations (at least some of them) are also using as security check. If it is a stolen card, I guess you are less likely to know the home zip.

Yes, many stores (e.g., Wal-Mart) and gas stations (Sam's) use the billing ZIP as part of the authorization process for credit card purchases.

You'll note that Sharon was clear in limiting her comment to "clerks asking for zip code on cash at stores" (emphasis added).

sorry - missed the reference to zip on "cash"

I'm pretty sure my home address is listed in my profile as I always get stuff from Marriott anyways, and I've seen their system (Opera) and it shows our home address when we check-in (it's tied to our rewards account). Unless of course you decide to only provide a business address....

I've never had a store or gas pump ask for 9-digit zip code, just 'zip code' & when I plug in the 5 digit zip code it accepts the zip code. While most people probably don't memorize their 9-digit I'd be surprised if many don't know their 5 digit.

Yes I was referring to request for zip on cash, not credit card.

Cheers.

Or a personal mail box. I got one (at a local UPS store) originally because I was traveling so much and having so much trouble with USPS not doing vacation holds they promised, and because there was no one home to sign for packages that needed signing. But when I moved about a year ago I shifted all my mail that I could (everything except physically connected utilities that need to know my real home address, basically) to the UPS store address. Every single credit card I have uses that as its mailing address (though a small fraction of them know my physical address "behind the scenes"). All hotels and airlines only know my UPS store mailing address. I've even updated DMV successfully with it, so the registration in my car doesn't even show my home address any more! (Though California DMV doesn't automatically reissue DLs when you move, so instead my DL just shows my former residential address).

Because it's not a USPS mailbox, it's accepted at places that say "no PO boxes". (It's called a Suite number, not a PO box, in the actual address.)

Now, I don't know if I'd consider the cost worth it just for "hiding" my home address. But since I needed it for package signing while I'm away on travel, etc, it was a no brainer for me to move "all" my "sensitive" mail there instead of just packages.

PO Regs say you're supposed to use "PMB" (Private Mail Box) in the address, not "Suite". They might start to enforce that some day. Or maybe not.

They dropped that requirement a long time ago. I just use #123, let the imaginations run wild.

Given even the USPS' own Click N Ship web site doesn't even build addresses according to the req's, how do you expect them to enforce them?

See the post above this one (from RogerD408), but also:

In my case, it's in the form of "Suite 123-456", where "Suite 123" is the actual official number of that UPS Store within a strip mall (the street address covers the whole strip mall), and the "456" is the only part that is my actual personal mailbox number.

One or two places that I did my address change did require me to say "Suite 123 PMB 456" because their system couldn't take "123-456" or even 123456" as a Suite number, but the rest of them are happy with "123-456", or in some cases "123456" because they can't take the hyphen (or can't take a Suite number longer than 6 digits total).

http://pe.usps.gov/text/pub28/28c2_040.htm says that the current regulation is to use either "PMB" or "#".

It isn't enforced, but it's there.

Seeking victims of identity theft
 

We work with a company in the identity protection space has just launched completely free identity protection. We are looking for people who would be willing to share their identity theft stories with us, and possibly the media, to help others learn how to protect themselves. If you’re interested and willing, we’d like to set up a time to speak with you and listen to your story.

Please respond to [email protected] with your name and phone number as well as a short summary of your identity theft experience. Chosen participants will receive a Starbucks gift card.

Well that doesn't sound scammy at all! (Is it Credit Sesame?)