NEW FRAUD ALERT! UPDATED DECEMBER 3, 2009 Smishing Scam Targets E&A Members Several reports have been made to the Credit Union in which members have received text messages that indicate their Credit Union account has been deactivated or frozen. A telephone number is listed in the text message which victims are supposed to call. Once the telephone number has been called, the victim is then instructed to input their debit card number, expiration date of the card, and PIN. DO NOT REPLY TO THIS TEXT MESSAGE. It is a scam! A sample of the text message is below: Your Credit Union account is deactivated. Call Electronic Banking Services at 1-888-328-5115 for assistance. “Smishing” is a social engineering technique very similar to “phishing” or “vishing” in which fraud artists attempt to get victims to divulge personal data such as bank account or debit card numbers. The name is derived from "SMS phISHING". SMS (Short Message Service)is the technology used for text messages on cell phones. Smishing uses cell phone text messages to deliver the "bait" to get you to divulge your personal information. The "hook" (the method used to actually "capture" your information) in the text message may be a web site address, however it has become more common to see a phone number that connects to automated voice response system. If a website link is included in the text message, when accessed, the link may cause a virus to be installed on the cell phone. The Credit Union will never ask you for your debit card or account number. More specifically, the Credit Union will not text message you regarding suspicious activity on your account. Follow these steps to protect yourself: If a message is received by someone claiming to be your financial institution asking for confidential information, NEVER respond unless you initiated the request If you have doubts about who the message came from, call back the number of record for the financial institution or credit card company Be wary of any message received from an unknown sender - In many cases, the smishing message will show that it came from "5000" instead of displaying an actual phone number. This usually indicates the the SMS message was sent via email to the cell phone, and not sent from another cell phone Do not open unsolicited e-mails or text messages Do not click on any links provided in unsolicited e-mails or text messages Deploy “blockers” on emails, text messaging, phone numbers, both land line and VoIP. In addition, consider “extra” caution when using “text messaging”. You may want to disable the “text messaging” feature on your mobile device if you are not using it Don’t display your wireless phone number or e-mail address in public. This includes newsgroups, chat rooms, Web sites, or membership directories If you become a victim of this type of fraudulent scam: Report it to your financial institution or credit card company immediately Close any compromised cards or accounts Review account history and look for unauthorized transactions Report the incident to a credit bureau Order a credit report and analyze for any unauthorized activity Report suspicious Internet sites and emails to the government and for additional protection tips visit www.ic3.gov or the Federal government's information center at www.consumer.gov/Tech.htm For more information regarding “smishing”, “vishing” and “phishing”, please visit these sites: http://www.antiphishing.org/index.html http://www.fbi.gov/page2/feb07/vishing022307.htm http://www.consumeraction.gov/caw_telemarketing_vishing.shtml http://www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.shtm http://www.onguardonline.gov/topics/phishing.aspx

What is Identity Theft?

Identity theft is when someone uses your name, social security number or any other piece of personal information without your permission or knowledge. According to the Federal Trade Commission, an estimated 9 million Americans have their identity stolen every year.

Types of Scams

Phishing - Thieves attempt to get personal information by luring victims to a replica webpage or email that resembles a real webpage.

Spamming - An email is sent to a large list of recipients. These emails sometimes contain viruses or spyware.

Pharming - The victim is redirected to an illegitimate website instead of the one the victim wants.

Vishing - A type of phishing done over the phone. The victim is asked to call a phone number or visit a website and enter sensitive information.

Dumpster-Diving - The old-fashioned, yet still used, method where thieves sift through garbage or open a mail box to find old documents or receipts that contain sensitive information.

New scams are always being invented that attempt to trick you into giving out your information. Please keep in mind that E&A Credit Union will never request personal information in the form of an email. Never reply to an email asking for sensitive account information. If you receive an email asking for your E&A account information, please immediately call us at 1-800-356-EACU so that we can be made aware of such occurances.

Online Resources

Special Video:

Your Security: Our Priority

Get your Free Credit Report:

www.annualcreditreport.com

Resources Available to E&A Members:

Identity Theft Shield - Independent Associate of Pre-Paid Legal Services, Inc.

Info from the Federal Trade Commission:

Counterfeit Check Scams

Identity Theft

Phishing Scams

Info from the Credit Union National Association:

Consumer News

Internet Fraud Info

If You're a Victim

If you are a victim of Identity Theft or Fraud, download our Fraud Contact Sheet for a list of agencies that you should get in contact with.