NEW YORK -- The number of Americans victimized by identity theft is on the rise.

Do You Protect Yourself From Identity Theft?

But at the same time, victims are striking back quicker and limiting how much is stolen.

A study released by Javelin Strategy and Research said the number of reported identity theft cases jumped 22 percent last year, to 9.9 million. But it also said the cost per incident, including unrecovered losses and legal fees, fell 31 percent, to less than $500.

One reason for the spike in cases is likely the worsening economy. A Javelin spokesman said "criminals are getting more desperate."

He said Javelin found that many thefts occur offline, contrary to what many people believe.

Researchers said most thefts resulted from:

A lost or stolen wallet, checkbook or credit card

Through information stolen in your own home, including by friends, relatives, and in-home employees

Through mail theft from an unlocked mailbox

By a data breach at any agency that maintains access to your private information

By retrieving your unshredded information from a trash can, a method known as “dumpster diving”

Those offline thefts accounted for 35 percent of victims who knew how their data was taken, lost or stolen. Physical thefts accounted for more than half of all online channels put together -- which accounted for 11 percent of stolen identities.

The survey also said women are 26 percent more likely to be victims of identity theft.

Surveyors Warn Of 'Vishing' Scams

Researchers also warned of increased attempts at over the telephone "vishing." Identity thieves created the simple phone based scam to fraudulently direct victims to a fake Web site.

Vishing schemes are only slightly different than phishing schemes, and there are two main ways in which criminals use this technique. One version, thieves send a false e-mail from the victim's bank which prompts them to call a telephone number. The other version has thieves calling with a recorded message asking the victim to call a phony bank telephone number. In both versions, thieves glean account information and use it to steal the victim's money.