Dumpster Diving Still Works: Shred Before the Bin

It's a Thursday night. Trash goes out tomorrow. You drag the blue bin to the curb and, on top, stacked neatly in a grocery bag, sits last month's bank statement, a pre-approved credit card offer, and the pharmacy label off a prescription you finished in March. Your name and address are on every single one.

Nobody hacked anything. Nobody phished anyone. Whoever grabs that bag didn't need a single skill, just a flashlight and a bad attitude.

I'll be honest, dumpster diving feels like a scam from a 1995 movie. It isn't gone. It's just boring, which is exactly why it works. Everyone's busy worrying about deepfakes and the paper pile on the counter becomes the soft spot.

How this one actually works

There's no clever script here, which is the point.

1. Someone finds paper. Trash at the curb, a recycling bin behind an apartment building, a bag left by a dumpster. They're looking for anything with a name and something attached to it.
2. They pick out the useful parts. An account number on a statement. A pre-approved credit offer with your name and address already printed on it. A prescription label. A cleared check with your signature and routing number.
3. They use what they found. Sometimes it's a direct attempt to open or take over an account. Sometimes it's just one puzzle piece that gets combined with something else, like a breached password or a phone number. A scammer who knows your real account details sounds a lot more convincing on the phone than one reading from a cold script. (If a license or ID number ever left your hands, this post covers the cleanup.)

The scammer never has to be good. Your paper does the work for them.

Why it's harder to catch than a phishing text

A phishing text shows up in front of you. You can look at it, squint, scan it, and decide.

Trash theft is invisible. There's no notification, no weird link, no moment where something feels off. You find out weeks later when a credit card you never applied for shows up, or a bill stops arriving because someone changed the billing address. The FTC lists both of those as signs of identity theft, along with charges you didn't make and accounts you don't recognize on your credit reports, on its identity theft page{target="_blank"}.

It also isn't the same thing as check washing, which targets outgoing mail sitting in a mailbox. Dumpster diving is the other end of the paper trail: stuff you've already decided you're done with.

What to shred, according to the FTC

I'd rather not make up my own list. The FTC published one in June 2025, in a consumer alert titled Which documents to keep and which to shred{target="_blank"}. Its shred list:

• ATM receipts
• Offers of credit or insurance
• Cleared checks (after 14 days)
• Credit reports
• Prescription information for medicines you no longer take
• Expired warranties
• Expired credit cards, driver's licenses, and other forms of identification

The same alert puts bank statements, pay stubs, credit card and utility bills, and deposited checks in a keep-for-a-year pile. My read: when the year's up, they belong in the shredder with everything else on that list.

It also draws a hard line the other way. Birth certificates, Social Security cards, passports, and wills go in the lock-it-up-forever category, not the trash. If you've ever wondered where to put those, the answer is somewhere with a lock, not near the kitchen counter.

The red flags that it already happened

Dumpster diving rarely announces itself, so look for the aftermath:

• A bill that stops showing up. Someone may have changed the billing address.
• Credit offers or accounts you don't recognize on a credit report.
• Charges or withdrawals you didn't make.
• A collection notice for something you never opened.
• Mail for you at an address that isn't yours, or no mail at all for a stretch.

None of these prove paper was the source. They're just the signals worth acting on fast, whatever the cause.

If this already happened to you

Take a breath. Then:

1. Report it at IdentityTheft.gov{target="_blank"}. The FTC's site builds you a personal recovery plan, tracks your progress, and pre-fills letters and forms.
2. Place a credit freeze with each of the three credit bureaus. While a freeze is in place, nobody can open a new credit account in your name, per the FTC.
3. Consider an initial fraud alert if you suspect fraud. It tells businesses to check with you before opening a new account. The FTC says it's free and lasts one year.
4. Call the real number on the back of your card for any account you think was touched. Not a number from an email or text. The what to do after a data breach walkthrough covers the same cleanup order.
5. If it's your kid's information, the synthetic identity theft post explains why a child's clean credit file is an attractive target.

You didn't do anything wrong by having mail. The person going through your trash did.

How to make your bin boring

Here's the setup I'd actually recommend, and yes, I know it isn't glamorous. The goal is that anyone digging through your trash finds nothing worth the trouble.

A shredder for whole pages. Statements, credit offers, old IDs, anything on the FTC's list. Get a cross-cut model, not a strip-cut one. The cross-cut shredder in the Shop is the Amazon Basics 12-sheet cross-cut shredder, which is sized for a household that shreds regularly rather than once a year.

A roller stamp for the daily mail. Not every envelope deserves a shredder run. A roller stamp scrambles a name, address, or account number in a couple of seconds, which is what actually gets used on a busy Tuesday. If it's harder than "roll it and toss it," people stop doing it.

There's also the full Shop if you'd rather see the kit in one place.

What these two don't do matters just as much:

• They don't touch anything digital. A shredder has no opinion about a data breach, a phishing email, or a leaked password. If you're not sure whether your email address is already out there, you can check it against known breaches.
• They don't undo anything that already happened. If a statement went in the bin last year, shredding the next one only helps the next one.
• A roller stamp isn't a substitute for shredding a full page. It's for labels, envelopes, and the odd line of text.

A few habits that cost nothing:

• Don't leave the bag sitting out overnight. Put paper bin-bound out the morning of pickup, not the evening before.
• Shred before recycling, too. Recycling bins, especially shared ones in apartment buildings and dorms, are just as open as the trash. The college student scam guide makes the same point about dorm recycling.
• Go paperless where it's offered, so there's less to shred in the first place.
• Use a local shred day if you don't want to buy a machine. The FTC suggests it for exactly this situation.

FAQ

What is dumpster diving in identity theft? It's what it sounds like: someone goes through trash or recycling looking for paper with names, addresses, account numbers, or offers of credit. No hacking required. The defense is just as low-tech: destroy the identifying parts of paper before it leaves your house.

What should I shred, according to the FTC? The FTC's June 2025 alert lists ATM receipts, offers of credit or insurance, cleared checks (after 14 days), credit reports, prescription information for medicines you no longer take, expired warranties, and expired credit cards, driver's licenses, and other ID. If you don't have a shredder, the FTC suggests a local shred day.

Is a roller stamp enough, or do I need a shredder? They do different jobs. A roller stamp is for names and addresses on envelopes and labels. A shredder is for whole pages like statements and credit offers. Plenty of people end up using both.

Does shredding protect me from online identity theft? No. It closes the paper door only. It does nothing about data breaches, phishing, or someone already holding your information. If you think your identity has been stolen, report it at IdentityTheft.gov, and consider a credit freeze.

Do I need to shred junk mail? Shred anything with your name plus an account number, and any offer of credit or insurance. A pre-approved credit offer is the one people forget, and it's on the FTC's shred list. A pizza coupon can go in the bin, though rolling the label takes two seconds.

Put a shredder next to the recycling bin tonight, and the only thing a thief finds in your trash is trash.

Sources: FTC, "Protecting your personal information: Which documents to keep and which to shred" (June 10, 2025); FTC, "What To Know About Identity Theft".