LATEST SCAMS

Keeping yourself safe online and protecting your personal information is becoming more and more important in today's world. Click here for helpful tips on online shopping safety, creating secure passwords, avoiding viruses/worms, child safety online, and more.

We hear about fraud attempts, primarily via e-mail (known as "Phishing"), all the time.  Here are the latest scams we've seen.

Text messaging scam (2/2/09).  Members have received a text message on their cell phones that says their credit/debit cards have been compromised.  Members were then given a number to call, which has an automated system that asks for members' credit union card number.  As usual, don't give your card information out to such a request and contact the credit union at 766-5600 or 1-800-342-8298 if you feel your card data has been compromised.

E-mail Virus (1/27/09).  An e-mail purportedly from the Federal Reserve Bank is circulating that directs recipients to two Web pages that attempt to load malicious Trojan horse programs onto end users' computers.  The e-mail mentions new directives concerning online wire payments and gives links to the two Web pages.  If you receive such an e-mail, do not click on the links. 
 
E-mail Scam Seeking Credit Card Information (1/16/09).  This fraudulent phishing email appears to be from NCUA (National Credit Union Administration) and contains a link purportedly to obtain a subscription for the NCUA Express Subscription service. When that link is used, the recipient is directed to a "clone" of the NCUA Express Service site that seeks credit card information from those to whom the phish was sent. If you receive such an email, please ignore it, as it is fraudulent. The NCUA does NOT solicit credit card information over the Internet. If you receive such an e-mail, contact the NCUA Fraud Hotline at 800-827-9650. 

E-mail Scam - Card Deactivated Message (12/22/08).  CUNA (Credit Union National Association) has recently reported a phishing scam they are experiencing.  This is an attempt to capture card numbers and is done with an e-mail which directs cardholders to call an automated telephone service.  The message indicates the member's card has been deactivated.  In order to activate the card, the message asks the member to call the "Card Activation Line" phone number and enter their 16-digit card numer, expiration date and PIN.  If you get this e-mail, do not respond and do not call the phone number given.

Albuquerque/Santa Fe Area Telephone/Text Messaging Scam (Updated 12/18/08).  Local credit unions (including FFCU) have reported a telephone/text messaging scam occurring in the Albuquerque/Santa Fe areas. Members have been called or texted by someone claiming their plastic cards were compromised or that their accounts were closed due to "unusual activity." Members were then given a number to call and were asked for their card numbers and PINs. Remember, don't reveal your personal information like card numbers, social security numbers, passwords, etc. to callers. CU staff would never call for such information from you. If you feel your personal and/or card information may have been compromised, call us 24/7 at (505) 766-5600 or 1-800-342-8298.

Another NCUA Phishing Scam (9/30/08).  We had a First Financial member receive an e-mail purportedly from the National Credit Union Administration (NCUA), indicating that NCUA thought the member's account may have been accessed by a third party.  The e-mail asked the member to update his personal records, noting that failing to do so would result in "account suspension."  If you receive an e-mail from NCUA asking for your personal account information, do not respond.  NCUA does not have access to member account data and they, along with your credit union, would never ask for your membership number/security codes.  If you do receive such an e-mail, please forward the entire e-mail message to Phishing@ncua.gov. 

NCUA Phishing Scams (6/10/08).  Recently, there have been multiple fraudulent e-mails and telephone calls directed to the general public and credit union members that appear to be from the National Credit Union Administration (NCUA). False e-mails ask recipients to click on a link to confirm, verify or approve financial account information. If the recipient proceeds, the link directs them to a false website to verify or re-submit confidential information such as account and credit card numbers, Social Security number, password, and personal identification number, or to complete a member satisfaction survey and receive $80

NCUA does not ask credit unions members for personal information. Anyone who receives an supposed e-mail or phone call from NCUA that asks for account information should consider it a fraudulent attempt to obtain their personal account data for an illegal purpose and should not follow the instructions in the e-mail or phone call.

If you inadvertently respond and provide confidential account information, please notify your credit union immediately. You should change affected accounts and PINs, and take any additional action recommended by your credit union to protect your account.

If you feel that you have received a fraudulent NCUA phishing e-mail, please forward the entire e-mail message to Phishing@ncua.gov.  Additionally, you can file formal complaints concerning any suspected fraudulent e-mail with the Internet Crime Complaint Center (IC3).  The IC3 is a partnership between the Federal Bureau of Investigation, the National White Collar Crime Center, and the Bureau of Justice Assistance.

New type of fraudulent activity:  Vishing (2/13/08).  Consumers are become more aware of e-mail fraud, so crooks are trying another avenue - "Vishing."  Vishing (a combination of voice and phishing) uses traditional phone services to attempt to obtain your account information.  An example of vishing:  You may receive a call with a recorded message, telling you your credit card or savings/checking account has been breached and to immediately call a number provided in the recorded message.  The phone number leads you to a "fraudulent call center" with  representatives who attempt to obtain your account/personal information for fraudulent purposes.  

Vishing is hard for authorities to monitor or trace (it often uses Voice over Internet Protocal technology).   Consumers are advised to be highly suspicious when receiving messages (telephone, e-mail or otherwise) directing them to call and provide personal/account information.  If you get such a message, instead of calling the number provided, you should contact your financial institution or credit card company directly to verify the validity of the message - using the phone number you know to be legitimate for that institution.

Get more information on the latest scams (online as well as other forms) at the National Consumer League's Fraud Center.  Visit their check fraud site for more details on check fraud.