Saturday, April 2, 2011

Protect your company - Colorado has almost zero protections against someone editing your state business records

Update January 26, 2012: Colorado now has the option to lock down business registrations.

Almost zero . . .

In the State of Colorado the principle/owner of a business can create a corporation online, file amendments, corrections to contact information and annual reports.

It's nice to have that ability online, and the fee's for filing over the Internet are substantially lower than filing by paper.

But, and this is a HUGE BUT: there is no way to password protect your ability to alter your records.

This was exposed half a year ago, one very good write up about the problem was posted on ComputerWorld: Colorado warns of major corporate ID theft scam (Link pops a new tab or window.)

Seems like a good time to revisit the problem given my feelings about a potential scam snail mail solicitation received today.

So what should a business owner or principle do to protect their corporate ID in Colorado?

Buried within the sage but overly general advice on protecting your business posted by the Colorado Secretary of State is the one thing you can do to be notified when your corporate record is altered: add your email to their notification list.

Here are the steps:

1) Get thee to http://www.sos.state.co.us/pubs/business/ProtectYourBusiness/protectyourbusiness.htm

2) Click the left upper link offering to "Subscribe to E-mail Notification Services"

3) Click the first link under the heading: "E-mails specific to a business organization record" entitled "Click here to subscribe to e-mail notification regarding a specific record"

4) This brings you to a search page, you can either enter your state ID, or search on your business name. After entering your search criteria, click the Search button.

5) Click the ID Number of YOUR business from the list after doing the search.

6) This brings you to a summary page of the business record. Find and click the link at the bottom that states: "Subscribe to E-mail Notification Regarding this Record"

7) Enter a valid email address and click the Subscribe button.

8) Within the hour (after I tried this it took about 50 minutes) you should receive an email from the Colorado Department of State (entity.subscribe@sos.state.co.us) confirming the subscription.

. . .

This is just WEAK. Complex steps to subscribe, no real security. No way to verify anyone's identity. Oh sure, it's a felony to misrepresent yourself on the states website, but since when has that stopped the criminals?

No comments:

Post a Comment

Comments are welcome but moderated to prevent spam links. I usually check them at least once a day in the evenings - so please be patient with me if your comment does not appear quickly.

Thank you.