Member Security and
Fraud Prevention
Recent Fraud
Alerts
URGENT
FRAUD ADVISORY as of 28-Dec-06
FRAUD
ALERT (December 28, 2006); The Federal Bureau of Investigation (FBI) is
recommending that credit unions alert their staff and members
to inaccurate e-mails circulating a rumor among
consumers. An e-mail indicates that if a person is being robbed
while at an ATM, that entering their personal identification number
(PIN) backward will summon the police. The FBI advises that this is completely false
and could lead to a robber becoming impatient and
angry, potentially leading to violence. Credit unions are being
asked to assist in dispelling the rumor by informing their members.
FRAUD
ALERT (September 22, 2006); IHECU has received notification that some
members may have received bogus emails from Card Services for Credit
Unions (CSCU). This email asks members to take a brief survey. When a
member clicks on the link in the email, it takes the member to a site
that looks like the CSCU web site and asks for personal account
information as well as credit/debit/atm card information.
CSCU
DID NOT SEND ANY EMAILS DIRECTLY TO CARDHOLDERS/MEMBERS AND DOES NOT
HAVE CARDHOLDER/MEMBER DATA. CSCU WILL NEVER COMMUNICATE DIRECTLY WITH
CARDHOLDERS/MEMBERS.
Below you find the wording of the phishing email for your reference:
Dear Card Services for Credit Unions, Inc. Cardholder,
You
have been chosen by the Card Services for Credit Unions, Inc. Survey
Department to take part in our quick and easy 5 question survey. In
return we will credit $50.00 to your account, just for your time.
With
the information collected we can decide to direct a number of changes
to improve and expand the online services. The information you provide
us is all non-sensitive and annonymous. No part of it is handed down to
any third party groups. It will be stored in our secure database while
we process the results of this nationwide survey.
We kindly ask you to spare two minutes of your time in taking part with this unique offer!
You must click the link below and fill in the form on the following page to complete the Reward Survey process.
Be
aware that clicking the link will take you to a phishing form where
personal and financial information will be gathered and exploited.
FRAUD ALERT (May 17, 2006); IHECU
has received notification that some members have received fraudulent
emails purportedly from Credit
Union WARNING with the subject of Account Information.
The message states...
Case ID Number: KL-129GP32-11-D821
Credit Union
National Association is committed to maintaining a safe environment for
its community of buyers and sellers. To protect the security of your
account Credit Union National Association employs some of the advanced
security systems in the world and our anti-fraud teams regularly screen
the Credit Union National Association system for unusual activity.
In accordance
with Credit Union National Association's User Agreement and to ensure
that your account has not been compromised, access to your account was
limited. Your account access will remain limited until this issue has
been resolved. In order to secure your account and quickly restore full
access, we may require some specific information from you for the
following reason: we encourage you to log in and restore full access as
soon as possible. Please follow the link below and renew your account
information:
Click here to login
Thanks for your
patience as we work together to protect your account.
Regards,
Customer Support
Center.
Notice that the "Click here to login"
link appears to be legitimate. Clicking on the link however redirects
the user to a phishing website.
Be aware that IHECU will NEVER request that
you provide account or personal information online.
FRAUD ALERT (April 28, 2006); IHECU
has received notification that some members have received fraudulent
emails purportedly from CreditUnions.com Inc. The
email
claims to be an Online Services - Security Notice. The message states...
"You
have received this email because you or someone had used your account
from different locations or you or someone failed to login for several
times. For security purposes we are required to open an investigation
into this matter and lock your account.
In order to unlock your online account, we require that you confirm
some of your online account details. To help speed up this process,
please access our website following the link bellow. This way we can
complete the verification of your CreditUnions.com
Account and have your account unlocked. "
A link is provided that appears to be legitimate.
Clicking on the link however redirects the user to a phishing website.
Please be aware that IHECU will NEVER request that
you provide account or personal information online.
FRAUD ALERT (February 6, 2006); IHECU
has received
notification that MoneyGram International, Inc. (formerly Travelers
Express Company, Inc.) states that fraudulent money orders have
recently been circulating.
Counterfeiters are
creating fraudulent money orders drawn from various department stores
that issue MoneyGrams. Fraudsters have found that MoneyGrams offer an
efficient and speedy way to send money throughout the world.
Unfortunately, the fraud perpetrators also have learned how to dupe
consumers with a variety of scams that suggest that the consumer send
back money using MoneyGram. Fraud perpetrators will typically pick up
the money as soon as it is sent. Once the money has been paid out,
there is no way for the sender to get it back.
In order to
protect the credit union and our members, IHECU offers the following
suggestions:
- Members
are advised to be very suspicious if they receive a telephone call
telling them that they have won prize money and that they need to send
money for taxes, customs fees, etc. to an organization or individual.
Many of these scams ask for money to be sent to Canada. You should
contact the Better Business Bureau, AARP or local Attorney General
before sending or receiving any money. For more information, MoneyGram
recommends that consumers visit www.consumer.gov/sentinel.
- Most
fraudulent MoneyGrams do not list a phone number for authentication on
the back. If you receive a MoneyGram or Travelers Express money order,
please call 800/542-3590 to validate the authenticity of the item.
- Valid
MoneyGrams contain an area labeled "To Authenticate, Rub Here." On
valid money orders, this area will change colors when rubbed.
FRAUD
ALERT (January 26, 2006): New official-looking scam hitting Ohioans.
Ohio's Division of Unclaimed Funds issued an identity theft alert
Tuesday warning people to be on guard if they get a call or letter from
the "Department of Unclaimed Funds" of Columbus. "The so-called
'Department of Unclaimed Funds' is not a government entity and has no
relationship" to the Ohio agency, said Superintendent David Moore. The
bogus organization contacts Ohioans saying they have unclaimed funds
waiting to be claimed. It asks for a credit card number to charge $80
to receive a claim form. It also asks for copies of driver's licenses
and Social Security cards.
|