Be Crime Smart---Security and Fraud Tips from the FBI

Internet Security Information

Protecting Yourself From Identity Theft

Emails purporting to be from financial institutions continue to be a significant problem on the world wide web. These scams, usually referred to as "phishing", bait unsuspecting users into clicking on links to allegedly update or verify their information. In fact, you are not connecting to the financial institution's site at all if you use the supplied link. Instead, you are going to a site the scammer has set up to get your personal information, such as social security numbers, bank account numbers, passwords, etc.

A recent scam has been aimed specifically at Credit Union members. It usually comes from an organization claiming to be the National Credit Union Administration and will begin the email by saying something like this:

This notice informs you that your Credit Union bank has joined our Federal Credit Union(FCU) network.

It will go on to request you visit a website to "activate" your PIN or other account info. This email is fraudulent and the directions should not be followed. The real NCUA has posted info on their website concerning this phishing scam. Read it here.

Watch for the telltale signs

The big problem is that the fake "phishing" e-mails look so official, so real: They appear to be from trusted banks, retailers or other companies. The e-mail often says the company needs to verify your information, such as account numbers or passwords, for supposed security purposes. They often use scare tactics, like the example above, threatening to suspend your account. They're slick and well-designed, using official-sounding language and real company logos to make them look and feel authentic. 

How can you protect yourself from phishing scams?

Never provide your personal information in response to an unsolicited request, whether over the phone or over the Internet. E-mails and internet pages created by Phishers may look exactly like the real thing. They may even have a fake padlock icon that is used ordinarily to denote a secure site. If you did not initiate the communication, you should not provide any information. Hint: look on the address bar to confirm whether a site is secure, the web address will begin with https. If you believe the contact may be legitimate, contact the financial institution yourself. You can find phone numbers and websites on the monthly statements you receive from your financial institution, or look them up in the phone book. The key is that you should be the one to initiate the contact, using contact information that you have verified yourself. Do not be intimidated by an e-mail or caller who may suggest dire consequences if you do not immediately provide or verify financial information. Never click on a link provided in the e-mail you believe is fraudulent. It may contain a virus that could contaminate your computer. Never provide your password over the phone or in response to an unsolicited Internet request. A financial institution would never ask you to verify your account information online. Thieves armed with this information and your account number can help themselves to your savings. Review account statements regularly to ensure that all charges are correct. If you account statement is late arriving, call your financial institution to find out why. You may even view your account activity online periodically to catch suspicious activity.

If you fall victim to an attack, act immediately to protect yourself. Alert your financial institution. Place fraud alerts on your credit files. Monitor your account statements and credit files closely. 

Report suspicious e-mails or calls to the Federal Trade Commission through the Internet at www.consumer.gov/idtheft, or by calling 1-877-IDTHEFT.

While you can't completely eliminate the risk of someone fraudulently obtaining and using your personal information, here are some ways to minimize the risk:

• Don't put outgoing mail in an unsecured personal mailbox. Recently two CRFCU Members have been victims of this type of theft. The mailboxes were raided and checks duplicated – it's happening in our own backyard!
• Don't give out social security numbers or account information over the phone or by Internet or mail unless you know who's requesting it.
• Keep items with personal information on them in a safe place. Tear up credit card, check card and ATM receipts, old account statements and unused credit card offers before throwing them out.
• Get your credit report from each of the three credit bureaus at least once a year and make sure all entries actually belong to you.
• Don't store personal or financial information on a laptop computer unless absolutely necessary.
• Delete personal information before disposing of any computer.
• Protect your personal identification numbers and other passwords. Don't use passwords that are easy to figure out such as your date of birth or the last four digits of your social security number.
• Don't carry around your social security card.
• Keep your purse or wallet in a safe place at work.
• Pay attention to your accounts' billing cycles. If your bills don't arrive on time, it could mean that someone changed the billing address.

If you think your personal information has been stolen:

• Notify all three major credit bureaus. Order your credit report to see if any fraudulent accounts have been opened.
• Close any accounts that have been tampered with or opened fraudulently and stop payment on any stolen checks.
• File a report with the local police or in the community where the theft occurred. Keep a copy of the police report – you'll need it later.
  Call the FTC at 877-438-4338.
• If it appears that someone is using your social security number, contact the Social Security Administration at 800-772-1213 to verify the accuracy of your reported earnings.

Credit Bureaus
Equifax – www.equifax.com
To order your report, call 800-685-1111. To report fraud, call 800-525-6285.
Experian – www.experian.com
To order your report, call 888-397-3742. To report fraud, call 888-397-3742.
TransUnion – www.transunion.com
To order your report, call 800-888-4213. To report fraud, call 800-680-7289.

For more information about identity theft visit the Federal Trade Commission's Identity Theft Page. To learn more about internet fraud or to file a complaint, visit the Internet Fraud Complaint Center’s (IFCC) website. The IFCC is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center (NW3C).