Fraud Prevention Help Center | 1st Community Credit Union

Spot and Stop Attacks - Clues To Look For:

• Urgency: If the message creates a sense of urgency, it's because the sender is trying to trick you into rushing a decision, taking quick action, or making a mistake. An example of Urgency would be a sender/caller claiming that your debit card will be deactivated if you don't give them your card number and validate the card information immediately.
• Fear Tactics: If someone is threatening to arrest you, sue you, or subject you to other consequences if you don't pay them, it's likely a scam. 
• Pressure: An example of an attacker applying pressure would be someone claiming to be from the company you work for, pressuring you to ignore or bypass company security policies to give them access to information.
• Unusual Payment Methods Requested: If you are asked to send a prepaid card, gift card, cryptocurrency, or other unusual form of payment, or even a wire transfer, don't do it. Payment methods that are nearly untraceable are preferred by scammers, and once the money leaves your hands, it's usually gone for good.
• Pre-Payment Requested Or Required:  Anyone who offers you a prize or debt relief if you pay an upfront fee or shipping costs is scamming you.
• You Need To Keep It A Secret: If you have been asked to keep a financial transaction secret, you're likely being scammed. Scammers don't want you to talk to friends, family members, or your financial institution's employees because they are afraid the scam will be detected.
• Curiosity: Any message that generates a tremendous amount of curiosity or seems too good to be true, such as an undelivered UPS package or a notice that you are receiving an Amazon refund, is suspicious and likely a cyber attack.
• Tone:  When you receive an email or phone message from someone claiming to be your friend, family member, or coworker, but the "tone" of the message is wrong (the wording or phrasing doesn't sound like them).  Don't fall for it. If you feel that you need to double-check the validity of the message, do NOT call a number or click a link in the message. It can even be risky to call them directly, as their phone may have been stolen and the cyber attacker could answer it. 
• Sensitive Information: Any message requesting sensitive information, account numbers, or passwords and other login credentials is a scam.
• Generic:  You may receive a message from a trusted organization, but the message is generic such as starting with "Dear Customer". This is likely a phishing attack.
• Personal Email Address: Any email that appears to come from a legitimate organization, merchant, or co-worker, but is using a personal email address like @gmail or @hotmail is not legitimate.

The security of today's technology can be overwhelming, especially for family members who may be new to using mobile devices and apps, such as grandparents or young teens. 

The best way to help your family stay secure is by making security as simple as possible for them. It is important to also share information on scams with older family members, college students, and friends. Scammers prefer to prey on the elderly and young people who are managing their own finances for the first time, often resorting to harassment if they feel it will get them the information they desire. Work together to come up with a plan of what to say and do if they are contacted with requests for sensitive information. Taking a few steps can have a big impact:

• Explain that scammers and con artists have been around for hundreds of years, they are just using the Internet now to try to fool their victims. 
• Give examples of how scammers target their victims by pretending to be a government agency, financial institution, utility company, etc.  
• Be sure that family members understand the importance of never giving out sensitive personal information, account numbers, passwords, or remote access to their computer.  
• Explain that the more urgent the message seems (whether it is a text, phone call, or email) the more likely it is a scam. 
• Let your family members know about romantic scams also, explaining that con artists prey on people who are lonely and longing for love by pretending to be their match made in heaven.  
• Let your loved ones know that they can contact you any time they are unsure about an email or phone call.
• Emphasize that scammers also still utilize phone and mail scams. They can still become victims if they don't know the warning signs. It's important to always be cautious of any unsolicited contact, even if the call or letter appears to be coming from a legitimate company or organization. 
• When setting up Home Wi-Fi access for anyone who is new to technology, take the time to make sure their wi-fi is password-protected. Consider using a secure form of DNS service that can help stop people from visiting infected websites. For younger family members, restrict websites that you don't want them to have access to.
• Help your less tech-savvy family members keep their devices and systems updated and current. This makes it harder for scammers and hackers to compromise them. The simplest solution is enabling automatic updates.
• Inform family members about the importance of using secure passwords that are unique, and coach them to not use the same password across multiple sites.
• Mistakes can happen. Make sure reliable backups are in place and be sure that your loved ones know what to do and who to contact if they fall victim to a scam.

Beware Of These Recent Scam Tactics

1. AI Scams:  AI stands for Artificial Intelligence, and cybercriminals have discovered just how convincing AI can be in helping them trick you into sending them money.
   • Scammers can fake an entire Video Call
     • Imagine receiving an email claiming to be from your company's Chief Financial Officer asking you to do a financial transaction for the company.  You are wary, but you join a video call to discuss the request. The video call looks and sounds exactly like the CFO, so after the meeting you feel convinced that the financial request is genuine and you send the payment as requested.  However, it turns out scammers have used AI Technology to create believable video and audio of the Chief Financial Officer. This is called a deepfake.
   • Scammers can Clone Voices of Loved Ones
     • With "voice cloning" tools a scammer can use a simple snippet of your loved one's voice (lifted from a video on your loved one's social media account, collected from a voice mailbox recording, or obtained by recording a spam call made to the loved one). The audio sample is run through an AI program that replicates the voice, including laughter, fear, or emotions. This allows the scammer to enter text of anything they want the voice to say, and you end up getting a panicked phone call from your loved one asking you to do a cash app transfer to cover an emergency medical bill or auto repair.
   • How can you protect yourself?
     • Be suspicious of any unexpected phone calls. 
       • If you receive a call from an unknown number, don't answer it.
       • If you do answer, let them speak first. Be aware that anything you say can be recorded.
       • Never give out any information.
     • Beware of Caller ID spoofing, which creates a fake Caller ID on your phone.
       • The scammer's number could show up as a number that you recognize, such as a government agency or a well-known company.
     • Hang up if you're suspicious, then look up the legitimate phone number of the person, agency, or company and call them directly to verify the authenticity of the caller.
     • Never wire money or pay with a gift card. Legitimate companies will not ask you to do this.
     • Be careful what information you share online. Social media is a fun way to connect, but it's essential to protect yourself from scammers, hackers, and identity thieves.
     • Educate older and younger family members so they can protect themselves, too.
2. Cybercriminals posing as Amazon support and sending notifications claiming your Amazon account is on hold due to billing errors. The scam email includes a link to 'resolve the issue' by updating your billing info.
3. Cybercriminals use Facebook Messenger to ask you about your business. The message includes an attachment, which installs malware if you download or select the attachment.
4. Per the FBI, Callback Phishing Attacks are on the rise. Cybercriminals send an email claiming you have a pending charge on one of your accounts, but if you call the number provided in the email the cybercriminal will guide you on how to connect with them through a legitimate system management tool (i.e. remotely connecting to your computer or device and controlling your device). Once the legitimate software has been installed, cybercriminals can use it to sneak ransomware onto your device, resulting in your sensitive information being stolen or used to extort you or your organization.

Be suspicious of unexpected emails, particularly if they include an attachment or link, or if they ask for personal or financial information, OR if you are asked to call a number.  If you are concerned that the claims in the email may be true, always navigate directly to the secure website of the company to find the best contact number and make a direct call instead of trusting the phone number in the email.

More Scams To Be Aware Of

More information about these types of scams can be found on the Federal Trade Commission website: consumer.ftc.gov

• Password theft or Online Banking Login Credentials theft
• Fake shopping websites
• Free trial offers
• Scam texts or emails claiming debit or credit card is blocked
• Scam phone calls claiming security check
• Fake fraud alerts
• Amazon phone scam
• Paypal invoice scam
• Netflix (or other streaming) scam
• Online lending scams
• Gift card scams
• Fake work-from-home scam
• Fake CDC or World Health Organization emails for new vaccines
• Government check scams
• Phishing emails, texts or phone calls
• Fake investment scams
• Fraudulent check/Mobile Deposit scam
• Grandparent scam
• Law enforcement or Hospital emergency phone call scam
• IRS scams
• Payday Lender scam
• Zoom Installer scam
• Computer Tech Support or Computer Takeover scam
• Microsoft scam
• Fake letter from lawyer claiming inheritance
• ATM Skimming device scams
• Utility company scam
• Fake smart phone apps
• Fake charity or holiday-related websites
• Fake delivery notices
• Fake Facebook “new friend request” messages
• Online Romance scams
• Auction site fraud

Bottom line, be vigilant and protect your hard-earned funds at all times.  If something doesn’t seem right, end it.  Log off the computer, delete the email or text, stop responding to phone calls…do what you need to do to protect yourself, your identity, your accounts, and your sensitive personal information.