Identity fraud is a serious crime—and it’s on the rise. Last year, more than 11.6 million adults were victims of identity fraud, up 13 percent over the year before.

But did you know smartphone owners are at greater risk? It’s estimated smartphone owners are victims of identity fraud at a rate about one-third higher than the general public. Why? It could be as simple as behavior.

Many smartphone owners don’t take advantage of security protocols that would protect them from fraud. For example, 62 percent don’t use a password on their home screen. So if their phone is lost, anyone who finds it can access their personal information. Additionally, 32 percent of owners save login information right on their devices—again, exposing that information, and anything revealed through logins, to anyone who picks up their phone.

Putting a password on your smartphone is probably the most important thing you can do to protect yourself. Other steps you can take include downloading updates to your apps and software, inputting passwords and account numbers manually rather than asking your phone to remember them, and turning on a data wiping feature or enrolling in a data wiping service—which will erase your phone’s data after a specific number of failed password attempts.