Phishing

Phishing Attacks Increase Nearly 600% in 2009; Prevention Starts with Members

The following are examples of phishing requests purporting to be from your financial institution:

“Your account has been temporarily suspended because of a security breach at our credit union.  Please provide your information to our security department to reactivate your account.”

“Your credit card was suspended. Our customer service department needs your information to reinstate your card.”

“Your loan is delinquent.  Payment is needed ‘immediately’ (over the phone).”

“You can receive a reduced interest rate on your loan.  We need to confirm your information.”

This type of socially-engineered breach of personal or financial information is a potentially costly and devastating crime that can impact you.  Fortunately, losses can often be prevented through awareness combined with sensible everyday practices. 

Tips to protect yourself:

• Never respond directly to e-mails, text messages or telephone calls asking for personal or financial information
• Don't reply to email or pop-up messages that ask for personal or financial information, and don't click on links in the message
• If you believe the contact is legitimate, go to the credit union's or the company’s website by typing in the site address directly or using a page you have previously book marked, instead of a link provided in the e-mail
• Be cautious about opening any attachment or downloading any files from emails you receive regardless of who sent them.  Do not open an attachment to an unsolicited e-mail unless you have verified the source
• If you are concerned about your account, contact the credit union using a phone number you know to be genuine, or open a new Internet browser session and type in the company's correct Web address yourself
• Use anti-virus and anti-spyware software, as well as a firewall, and update them all regularly
• Do not be intimidated by an e-mail or caller who suggest dire consequences if you do not immediately provide or verify information
• Review your account statements as soon as you receive them to check for unauthorized activity
• Forward spam that is phishing for information to spam@uce.gov and to the company, credit union, or organization impersonated in the phishing email
• Report phishing email to reportphishing@antiphishing.org. The Anti-Phishing Working Group, a consortium of ISPs, security vendors, financial institutions and law enforcement agencies, uses these reports to fight phishing
• If you've been scammed, visit the Federal Trade Commission's Identity Theft website at www.consumer.gov/idtheft.