Fraud & Security

Identity theft occurs when someone uses your personal information to open new accounts, to obtain access to your existing accounts or open credit lines in your name. Thieves may gain access to your personal information in a number of ways.

• Personal information stolen from your purse or wallet
• Home break-in
• Automobile theft
• Dumpster diving (stealing trash with personal information from a residential or business trash receptacle)
• Personal information on your checks
• Medical or school records that are accessed by an untrustworthy employee
• Information you provide to a fraudulent telemarketer
• Information you supply over the Internet

You can avoid becoming a victim of identity theft by considering the following:

• Do not print unnecessary information on your personal checks (e.g. phone number, driver’s license number).
• Never print your Social Security number on your checks.
• Maintain an unlisted home phone number. This listing is just one more source of information for someone who has a desire to defraud you. You may also consider listing just your name and telephone number without an address.
• Review your credit reports from the three credit reporting agencies at least once a year.
• Opt out of pre-approved credit card offers by calling 888-5-OPTOUT. This is effective for two years. For permanent opt-out status, put your request in writing and send it to the three credit reporting agencies listed on this page.

The websites below provide more information about how to avoid becoming a victim of identity theft, and what to do if you are a victim.

• Federal Trade Commission
• Privacy Rights Clearinghouse
• Better Business Bureau

Firewalls, virus protection software, network intrusion detection systems and encryption are just some of the ways the credit union protects your account information from unauthorized access. But how you protect your personal computer is just as important.

• Anti-virus software. A virus is a computer program that replicates itself and can harm other programs and files on your computer. Anti-virus software is designed to protect your computer against known viruses. There are many anti-virus software programs available. Keep in mind that with new viruses emerging daily, the program needs regular updates to recognize and prevent new viruses from infecting your computer.
• Firewall. A firewall is a barrier that protects your computer from unauthorized access when you are connected to the Internet. If you don’t have a firewall installed on your computer, you should do so soon for your own protection.
• Spam. Spam is unwanted and unsolicited e-mail. You didn’t ask for it, but there it is. Some Internet service providers have filters built into their e-mail programs to catch the spam before it reaches your e-mail inbox. Check with your provider to see if they offer this service. If you receive a spam e-mail, don’t respond. Responding or clicking the “unsubscribe” link simply verifies your e-mail address so the sender can continue sending spam. Delete the spam and consider using a filter.
• Spyware. Spyware is a program installed on your computer, without your knowledge, that is used to “spy” on you as you navigate the Internet. The spyware tracks your web site visits and then sends you advertisements it thinks may appeal to you. Some spyware may even capture user ID and password information you provide when accessing accounts or placing online orders.

• If you do not have a mailbox with a lock, be sure to pick up your incoming mail every day. Or consider using a P.O. Box.
• Take outgoing mail to the post office.
• Shred all credit card offers before disposing of them.
• Make a list of bills and statements you receive and the dates you normally receive them. If you’re expecting a bill and you do not receive it, contact the issuer right away.

• Do your research. Select a reputable online company.
• Use common sense. If you feel uneasy about the online transaction, don’t do it.
• Get as much information about the seller and the merchandise as possible when buying online. If a picture isn’t available, ask the seller to send one via email or postal service. Ask for the seller’s address and phone number in case you need to contact him/her at a later date.
• Select a payment option that you feel most comfortable with. Many online auction houses have payment protection programs. Do your research before making a decision.
• Familiarize yourself with the online auction site’s security, privacy, and online buying and selling policies.

Another form of Phishing, Smishing is a criminal activity that uses social engineering techniques to obtain personal information such as credit card numbers, etc. via text messages. The name is derived from “SMs phISHING”. SMS (Short Message Service) is the technology used for text messages on cell phones*.

*Definition taken from Wikipedia

Many of us have done away with land lines at home and are now providing our cell phone number as our main phone number. By doing this, we increase the risk of being solicited through our cell phones. Receiving a phone call from a number we don’t know isn’t that big of a deal (caller identity + ignore button = awesome!). However, receiving a startling text message (“URW: Your account has been suspended. Call ###.###.#### immediately to reactivate” or “URW: is confirming your purchase of $2000 for a Sony TV”) is sometimes hard to delete without responding. With industry standard services like eAlerts!, these messages can be very misleading and hard to distinguish between legitimate and criminal.

Go with your gut reaction!

If you have any suspicions about a text message, e-mail or phone call, do not trust it! If you want to know for sure, find the number of the financial institution/company yourself (from their website or other means) and call them to confirm the message is a scam. Never trust the links to websites, phone numbers to call, etc.

Do not respond to anything that asks for your personal information, and do not click on any link in a suspicious messages. Delete it or forward the information to the Federal Trade Commission (FTC) at uce@ftc.gov.

Four actions to take if you are a victim of phishing

1. Contact the credit union (and the company represented in the e-mail) immediately.
2. Review all credit card and other account statements for unauthorized transactions immediately upon receipt. Take note of when your statements arrive every month and if any of them are more than a day or two late, notify the appropriate companies.
3. If you’ve disclosed personally identifying information, contact the three major credit reporting agencies. They will help you determine if a fraud alert should be placed on your file, which will help prevent thieves from opening accounts in your name.
   • Experian
   • TransUnion
   • Equifax
4. If your response to a smishing attack results in your becoming a victim of identity theft, file complaint with the Federal Trade Commission and the Internet Crime Complaint Center.

Remember the old saying, “If it sounds too good to be true, it probably is”? This is especially true of phone calls or mail solicitations offering instant wealth through foreign lotteries.

Here’s an example of a lottery scam:
“Congratulations! You may receive a certified check for up to $400,000,000 U.S. CASH! One lump sum! Tax free! Your odds to WIN are 1-6.”

Of course, all you need to do is provide your credit card number or financial institution account number to purchase the lottery tickets. And when you do, the lottery hustlers will make unauthorized withdrawals or run up charges on your credit card.

The Federal Trade Commission (FTC) warns that if you play a foreign lottery – through the mail or over the telephone – you’re violating federal law. There are no secret systems for winning foreign lotteries.

If you purchase one foreign lottery ticket, expect many more bogus offers for lottery or investment “opportunities.” Your name will be placed on “sucker lists” that fraudulent telemarketers buy and sell.

The bottom line, according to the FTC: Ignore all mail and phone solicitations for foreign lottery promotions. If you receive what looks like lottery material from a foreign country, give it to your local postmaster.

Other lottery scams proclaim that you are a winner in a foreign lottery that you never entered. All you have to do to collect your winnings is send a “contest fee” to cover expenses. You’re also instructed not to tell anyone that you have won the lottery – especially bank or credit union employees – or you will lose your winnings. If you send the fee, whether by mail or through a wire transfer, you’ll never see your money or the lottery winnings again.

Never give private information, such as your Social Security number, account or credit card numbers, passwords, etc., over the phone unless you initiated the call.

If you receive an automated call or a call from someone claiming to be a credit union employee and they ask for your account information (such as your credit card number, account number, etc.) do not give them any information. Even if the caller has one identifying piece of information (such as your Social Security number), the call is not legitimate. Do not provide any additional account information or any sensitive or personal information. The credit union will not call you and ask for this information.

Don’t agree to any offer or prize where you have to pay a registration or shipping fee, or send money, to claim the “prize.” Don’t be pressured to make an immediate decision.