GREENWOOD CREDIT UNION (“GCU”) wants to help you to protect yourself from online scams.  One of the most common types of fraud is e-mail.  Educating yourself is key to protecting your personal information as well as your computer.  GCU will never request personal or financial information by e-mail.

COMMON SCAMS

Phishing
E-mails are received claiming to be from someone (i.e., credit union, United States governmental agency) that you know and trust.  The e-mail may request that you reveal (respond) with confidential information such as user ID, password, account numbers, social security numbers, etc.  If this information is supplied, the criminal could use this to gain access to your accounts or identity.

Spoofing
Another way a criminal may gain access to your confidential information is spoofing.  An e-mail may contain a link which would transfer you to a website or login page that appears to belong to a company or government agency familiar to you.  This is called a “spoofed” site.  The spoofed site will appear legitimate – but it is not.  The criminal’s goal is to get your information.

Smishing
Here is how it works.  A group calling itself “Security First CU” (which is no relation to any credible credit union) (they may also use another credit union name) may send a test message or e-mail to an individual.  The message informs the recipient that their account is being closed due to fraud.  The message requests the individual contact them to reactivate their account by calling a telephone number.  Some of these scams may utilize a 909 area code as a call back number.  Calling that number results in an automated request to enter personal information including credit card numbers.

Vishing
You would receive an automated message from your credit union or credit card company claiming that there is fraud on your account or unusually activity.  In the automated call there will be a telephone number for you to call back.  In the automated message, a telephone number is given for you to call and “verify” your personal information such as account number, PIN numbers, date of birth, etc.,  Once the information is entered the criminal now has your information and can gain access to your accounts.

After numerous reports of illegal activity, the fraudster’s telephone number has been shut down by the telephone provider.  However, it is likely that the fraud will continue, utilizing a different telephone number.

This fraud is an attempt to obtain personal information from consumers.  Consumers should NOT call the sender of this message nor take any other requested action.  Under no circumstances, should personal information be shared in response.

Identify Theft
Confidential information such as your name, date of birth, social security, driver’s license, credit card numbers, and bank account numbers is obtained without your knowledge with the purpose to commit fraud or theft.

Your wallet may be stolen; information such as your statement (bank, credit cards) may be taken from the mail or the trash (remember it is best to shred all banking statements or any material with your account information).  Remember the information could be obtained from someone you know and trust.

What should you do if you have reason to believe someone has stolen your identify?  Following the steps below but you should do this quickly:

From the Federal Trade Commission’s web site (http://www.ftc.gov/bcp/edu/microsites/idtheft/) print and complete the ID Theft Affidavit. 

Notify your local law enforcement agency (local or state police).  Complete and file a written incident report.  Remember to get a copy for yourself.

Submit both the completed FTC affidavit and a copy of the incident report to GCU.

If you suspect the e-mail or telephone call is not legitimate, DO NOT RESPOND!!!! 

Helpful website:

National Credit Union Administration (www.ncua.gov).