Fraud Education Center

Scammers will call a member and advise they are from the credit union. The caller claims they need to discuss an important matter, but they must first confirm the member’s identity and ask for the members online banking username. The scammer is already on the credit union’s online banking website and informs the member they will receive a passcode, and the member must provide it over the phone to the fraudster for additional identity verification purposes. In reality, the fraudster uses the username with the “forgot password” feature, which triggers a two-factor authentication passcode to the member. The fraudster uses the passcode to reset the member’s password, logs into the account and transfers funds to an external account.

Individuals and businesses that mail physical checks need to be aware of the increasing events of mail theft. After stealing checks from the U.S. Mail, fraudsters and organized criminal groups may alter or “wash” the checks, replacing the payee information with their own or fraudulent identities or with business accounts that the criminals control. During check washing, these illicit actors also often increase the dollar amount on the check, sometimes by hundreds or thousands of dollars. Washed checks may also be copied, printed, and sold to third-party fraudsters on the dark web and encrypted social media platforms in exchange for convertible virtual currency. Click here to learn more about Mail Theft.

Members receive a pop up on their computer warning them of a virus infecting their device. The members call the number for help and believe they are talking to tech support. Once on the phone, the scammers scare members into sending money. They use different tactics such as saying their bank accounts are compromised and to give cash to federal agents for safe keeping, saying the members have been identified in a criminal investigation and need to pay to clear their names.

What might seem like a dream come true, can quickly turn into a nightmare if you're not careful. If it's too good to be true, then it's best to ignore it. Fraudsters are using eMail, phone calls, social media and even text messages to let you know you've won a prize or giveaway. Today we're seeing these fraudsters create duplicate profiles that mirror the business or entity giving away a prize. They are then sending out a message to your account asking for you to claim your prize by clicking on a link or providing payment for shipping. These are both giant red flags, especially if this is a contest that you did not enter!