Text Messaging/SMiShing Scams
09.10.2009
Several credit unions have had their members report receiving suspicious text messages stating that their debit card has been 'cancelled or suspended, to reactivate please call 1-877-649-7635' and the sender is '1234 CDC FCU'
State Employees Credit Union does not currently offer text banking or text notifications. If you are receiving a text message stating it is from State Employees Credit Union, call us directly, DO NOT RESPOND TO THE TEXT. Thus far, no one has reported any fraudulent text messaging from SECU.
About SMiShing:
Text messaging fraud is a new form of phishing known as SMiShing. The idea behind this type of phishing is to persuade victims to provide personal information such as card number, CVV2, date of birth, social security number and PINs. The text may contain either a website address or more commonly, a phone number that connects to an automated voice response system, which then asks for personal information.
Examples of SMiShing:
- Text message originating from either notice@jpecu or message@cccu:
- ABC CU- has- deactivated-your-Debit_card.
To-reactivate-contact:210957XXXX
- This is an automated message from ABC Bank. Your ATM card has been suspended. To reactivate call urgent at 1-866-215-XXXX
- Text message originating from sms.alert@visa.com:
- sms.alert@visa.com/VISA. (Card Blocked) Alert. For more information please call 1-877-269-XXXX.
NEW SECU Debit Card Restrictions:
Due to the recent increase in fraudulent debit card transactions occurring overseas, we're taking additional safety precautions to protect your money and personal information. SECU Debit Cards will no longer work overseas, unless you contact us to active your card for oversea privileges. To active your card overseas, please contact Sharon Craft at (404) 657-8505 or Rita Hendrix at (404) 657-4194. Thank you for your cooperation. |
Internet & E-mail Phishing Scams
Reports of internet e-mail and phishing scams have recently been increasing.
Several members have been contacted via email by would-be thieves in an attempt to defraud them. The scams usually try to collect your personal information – account numbers, debit card numbers, PINs, etc in order to access your account and steal your money. Another common technique is to say that you'll receive a huge amount of money in return for sending a relatively small amount to them to "cover processing."
What can you do to protect yourself? Never give out personal or account information over the internet unless you initiate the contact.
The list below includes some common techniques that are used. However, the criminals are constantly coming up with new ideas – so if something is not on the list don't assume it's legitimate.
- "Irregular Account Card Activity" email: This email appears to be from CUNA and states that your card has been deactivated due to irregular activity or some version of that statement. The message in these e-mails includes a statement that "CUNA would never solicit personal identification from you in an e-mail or over the web, therefore, we have de-activated your card, for your own safety." The e-mail then goes on to direct the recipient to a phone number to call for re-activation of the card. Callers are instructed to enter their account number and then their pin (twice) and then enter the CVV number as well. After a short pause, they are told that their card has been re-activated. These emails are changing on a daily basis and they are playing on the "we will not solicit you over the web" message that has been used with previous phishing scams. To date, 10 versions of these e-mails currently are in circulation. For updated information visit the SECU News blog by clicking here.
- Readers Digest Scam: Email notifies you that you have won a Readers Digest sweepstakes and asks for your bank account info to wire your winnings into.
- Lottery Winner Scam: You are notified that you have won an "overseas lottery" and asked to wire a nominal amount of money to cover "processing costs" in order to send you prize money.
- Counterfeit Cashiers Checks: Frequently used when a member is selling a car or other large item. You are paid with a counterfeit Cashiers Check that's a little higher than your selling price, and asked to "send back the extra." Counterfeit checks have been drawn against hundreds of financial institutions. Please be aware that just because a check says 'cashiers check' doesn't mean that funds are good.
- Bank Grant Scam: You receive an email regarding available grants: financial aid, debt relief, low-income subsidies, etc. After you "apply" for your grant, you are sent a check for you to cash, and then send back to cover processing for your next, larger, check.
- Customer Satisfaction Survey Scam: You receive an email offering cash in return for taking a survey. In order to receive your compensation, the scammers ask for your account number, PIN, etc, in order to "direct deposit your payment."
- Job Opportunity Scam: Often related to a "secret shopper" job, this scam will ask you to "evaluate" a wire transfer service. They send you a check that you are supposed to wire back to another "tester."
- Nigerian Scam: You are contacted by a "high ranking government official" or "former CEO" from a third-word country (usually in Nigeria) who asks for your help to get money out of the country.
- IRS Scam: This email says the IRS has "received complaints" about your business practices and asks you to click on a link. Doing so, however, downloads a "Trojan Horse" program that allows someone else to take over your computer and steal personal information.
- Possible Fraud Scam: You receive an email from your bank or credit union that says there has been fraud on your account or that you are suspect of committing fraud. It asks you to click a link to "verify your information."
- Verification Update Scam: You receive an email from your bank or credit union that asks you click a link as part of a "regular security update."
- Social Security Update Scam: An email claims to be from the SSA, instructing you to "register for passwords" and provide personal information.
- FDIC scam: An email claims that your bank account has been closed by the FDIC for violations of the Patriot Act
- eBay or PayPal scam: An email asks you to provide your log-in and password for these popular websites in order to access the credit card information stored there.
|