Margaret Reid’s trip to Portsmouth, Va., in 2001 was like so many trips the Houston-based business owner had made over the years. She checked into the Renaissance Portsmouth Hotel and Waterfront Conference Center for several days and made herself comfortable. On her last day there, as she rushed to catch her flight, Reid neglected to pack the completed Discover Card application she had placed on her bed. One month later, she received an unexpected phone call: The credit card company informed her that someone was trying to open accounts in her name.

That call kicked off Reid’s three-year struggle to reclaim her identity. She stopped working for one month so she could devote herself to tracking down and closing the fraudulent accounts opened with her information. She hired a private investigator to find the thief’s identity. For almost two years, Reid traveled back and forth from Houston to Portsmouth, fighting with law enforcement to have her case heard, until her identity thief was finally behind bars.

The perpetrator: a maid from the Renaissance Portsmouth Hotel.

It seems wrong to describe Reid as lucky. Six years later, her wounds from reclaiming her identity are still raw.

“I was violated by [the thief], I was violated by the system,” she said. “It’s as close to rape as you can get.”

But Reid knows she’s in the small minority of identity theft victims who find closure in their cases.

The Federal Trade Commission reports that approximately nine million Americans have their identities stolen each year, though other reports peg the number higher. A recent Gartner study found that 15 million people had their identities stolen in 2006 — which works out to one new victim every two seconds, according to the Identity Theft Resource Center. The crime takes many forms, from someone stealing your credit card and running up charges, to a criminal using your personal information to impersonate you.

Despite the prevalence of identity theft, most cases go unsolved and experts say it’s one of the toughest crimes to prosecute. Most victims don’t know how or when their identities were stolen, according to Beth Givens, founder and director of the Privacy Rights Clearinghouse. And once they have someone’s information, identity thieves move quickly. They open credit card and bank accounts under false names and addresses, or sell victims’ personal information to organized crime rings. Jurisdictional problems also complicate matters: a victim is often in one place, while the thief is in a different state — or country. And many law enforcement agencies simply lack the resources, training and time needed to solve identity theft crimes. Which is why millions of Americans are scammed out of countless dollars and priceless hours each year.

“The question isn’t if [it will happen], it’s when,” said Linda Foley, founder of the Identity Theft Resource Center. “Identity theft is a crime of opportunity. A thief is going to take advantage of an opportunity.”

That opportunity could appear anytime. It could be when you least expect it, like when you’re on the road for yet another business trip.

At some point during your travels, you’ve probably used an ATM in a high-traffic area without checking to see if anyone was looking over your shoulder; or dashed out of your hotel room, late for a meeting, leaving a stack of bills and bank statements lying on the bed; or left your laptop charging on your hotel desk, instead of locked in the safe.

As innocent — and commonplace — as those actions are, they’re behaviors that make travelers susceptible to identity theft. Technology has certainly given identity thieves new means to steal personal information: Hackers can hop onto unencrypted wireless networks and intercept account and password information from people around them. Or, in another common practice, thieves can use “skimming” devices that steal credit and ATM card numbers when they’re run through a machine.

But when it comes t o travel, experts believe that most identity thieves rely on low-tech tactics to get the job done.

“The old-school methods are the easiest [for criminals],” said Terri Cullen, author of The Wall Street Journal Complete Identity Theft Guidebook.“The most common type of identity theft is someone lifting your wallet, or stealing your driver’s license or credit card. That’s how the majority of identity thefts happen when it comes to travel.”

Jorge Rey could attest to that. One year ago, the Florida- based information security and IT audit manager likely had his identity stolen through “shoulder surfing” a low-tech identity stealing tactic in which a thief obtains personal information by eavesdropping on conversations or watching as people enter their account information at ATMs or online.

In a crowded airport waiting area, during a layover on a business trip to Canada, Rey used his laptop to log into his bank account. The next day, the bank called to inform him that someone had placed four new payees on his account and tried to write them $5,000 in checks. Luckily, Rey was able to close the account immediately and did not lose money. He never found out his thief’s identity, but he’s certain his information was stolen during that layover.

“Someone definitely looked at my user ID and password,” Rey said. “Maybe they recorded it with a cell phone, maybe they memorized it.”

So if identity theft can strike even the most seasoned, tech-savvy business travelers, how can you protect yourself?

Although no precaution offers 100 percent security, there are ways to safeguard your identity. First tip: Pack lightly — specifically, your wallet and briefcase.

“Whether you’re traveling for business or leisure, leave your most sensitive items at home,” said Cullen.

There’s little reason to tote your checkbook while traveling. Ditto for Social Security cards. Leave them behind unless you absolutely need them — and it’s unlikely that you will.

“Your Social Security number, in the hands of a crook, can lead to new account fraud [a thief opening bank and credit card accounts in your name],” said Givens.

Ditch the debit cards, too; it’s better to have a credit card stolen than a debit card. The Fair Credit Billing Act limits consumers’ liability for unauthorized credit card charges to $50. Federal law safeguards against unauthorized debit card use as well: If you report unauthorized withdrawals within two business days, you’ll only be liable for up to $50. However, after 60 days from your last statement, you could be liable for up to $500. After that, you could be responsible for the entire amount. By that point, the thief may have wiped out your entire account.

Cullen recommends designating one credit card for use on the road; it’s easier to detect fraudulent use when your business and personal charges aren’t mixed together.

Another tip: No hotel is secure — no matter how many stars it has. Givens recommends always using the hotel safe and shredding documents that include personal information.

On the tech front, password-protect — or double password-protect — your laptop and PDA. Better yet, Givens and Foley suggest, encrypt files containing sensitive information (your company’s IT team can probably do this for you). Don’t use banking sites when you’re not sure if you’re connected to a secure network. And never enter sensitive information unless you’re on a secure web site that starts with “https” and has a locked icon in the bottom right-hand corner of the browser.

There’s also no replacement for old-fashioned vigilance. Be aware of your surroundings and belongings, while you’re in transit, in the hotel, in meetings.

Finally, monitor your finances. Check your bank account balances and credit card charges when you’re on the road; Cullen notes that people often let that slide while they’re traveling. And check your credit history annually. Federal law gives consumers the right to request one free credit report each year from Experian, Equifax and TransUnion, the three credit-reporting agencies.

If your identity has been stolen, the FTC recommends four immediate steps: Place a fraud alert on your credit reports and review those reports; close any accounts that have been tampered with or opened in your name; file a complaint with the FTC; and file a police report. Though the amounts of money lost and the time victims spend reclaiming their identities varies, most victims say the psychological stress of the crime is intense and long-lasting. Many must monitor their credit reports for years and are on constant lookout for new accounts opened, purchases made, and, in some dire cases, crimes committed in their names.

Privacy rights advocates and identity theft victims believe that it will take more than just personal vigilance to make the crime less common. “The Social Security number has strayed far from its original mission of providing benefits,” said Cullen. “There needs to be a crackdown on how Social Security numbers are used as identifiers.”

Recently, the House Ways and Means Committee unanimously approved a bill that would ban the use of Social Security numbers on numerous documents, including employee ID cards and checks. It would also require the federal government to overhaul its systems to create other identifiers.

Foley believes the bill is a start. She’d also like to see federal laws regarding proper document disposal and better background checks for workers who deal with sensitive consumer information. She added, “The only way we’re going to have any effect on the problem of identity theft is if we work collaboratively as consumers, as businesses, as law enforcement, to [create] legislation and awareness at all levels.”