-- Scam Alerts --
July 22, 2010
NACHA Phishing Alert -
*Email Claiming to be from NACHA*
The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent e-mail that has the appearance of having been sent from NACHA. See sample below.
The subject line of the e-mail states: "Unauthorized ACH Transaction."” The e-mail includes a link that redirects the individual to a fake Web page and contains a link which is almost certainly an executable virus with malware. *_Do not click on the link._* Both the e-mail and the related website are fraudulent.
Be aware that phishing e-mails frequently have links to Web pages that host malicious code and software. Do not follow Web links in unsolicited e-mails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.
NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.
If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system. Always use anti-virus software and ensure that the virus signatures are automatically updated.
Ensure that the computer operating systems and common software applications security patches are installed and current.
Be alert for different variations of fraudulent e-mails.
= = = = = Sample E-mail = = = = = =
*From:* Information *Sent:* Thursday, July 22, 2010 8:27 AM *To:* Doe, John
*Subject:* Unauthorized ACH Transaction
Dear bank account holder,
The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:
Unauthorized ACH Transaction Report < http://destek.yesilbeyaz.com.tr/ccc.html >
------------------------------------------------------------------
Copyright ©2009 by NACHA - The Electronic Payments Association
- - - - - - - - - - - -
Please contact Laurie Appelbaum, AAP at laurie.appelbaum@theclearinghouse.org < mailto:laurie.appelbaum@theclearinghouse.org > or 212-613-9855 if you have any questions.
*/ /*
To Unsubscribe, click here < mailto:laurie.appelbaum@theclearinghouse.org?subject=Please%20unsubscribe%20me%20from%20your%20EPN%20and%20Pay%20U%20mailing%20lists >.
/Copyright, 2010. The Clearing House Payments Company, LLC/
June 7, 2010
A new fraudulent "phishing" scam has been identified. The scam involves members receiving an automated phone message stating there was a fraud alert on their debit or credit card.
The message requests they call back, 909-457-0900 or 616-669-7483, 231-921-2345 and enter in their 16 digit card number.
TFCU will never contact members via phone, email, text message or cell phone to request personal information such as account numbers, passwords, debit or credit card numbers, expiration dates or (PIN) personal identification numbers.
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
June 1, 2010
A new fraudulent "phishing" e-mail has been identified by The National Credit Union Administration (NCUA). The e-mail, being sent from a fraudulent NCUA e-mail box, attempts to entice credit union members with the promise of $40 compensation for participating in an online survey or member survey.
The emails are fraudulent, and may be an attempt to obtain confidential member information. NCUA does not solicit such information from credit union members.
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
May 6, 2010
A SMS phishing attack has been reported. The "smishes" (SMS phishes) are being distributed by phone and SMS text message.
The SMS text message claims to be from Teachers FCU and reports that your account has been restricted. The number provided to regain access is 1-866-350-0629.
* Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.*
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
January 8, 2010
An identity theft scam is being initiated through an advertisement on craigslist.org. The scam is attempting to solicit current credit union members across the country with a monetary offer in an effort to assist ineligible individuals with gaining membership.
* Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. *
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
December 2, 2009
A SMS phishing attack is in progress, The "smishes" (SMS phishes) are being distributed by phone and SMS text message.
The SMS text message says something similar to:
"This is an automated message from Teachers FCU. Your ATM card has been suspended. To reactivate call urgent at 1800-821-4362"
*Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.*
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
October 1, 2009
A SMS phishing attack is in progress, The "smishes" (SMS phishes) are being distributed by phone and SMS text message.
The SMS text message says something similar to:
"Your Credit Union debit card has beed locked. Please call 1-845-765-9464 for assistance"
*Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.*
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
September 2009 - TFCU
Counterfeit official checks claiming to be drawn on Teachers Federal Credit Union are being distributed in the amount of $4535.00. If you are in receipt of one of these checks please contact the Fraud Loss Prevention Dept. at 631-698-7000 ext. 3310 or ext. 3032.
Click to enlarge
Click to enlarge
August 2009 - CLAMPI Virus on the Rise...
Clampi, also known as Ligats, Ilomo, or Rscan, infects computers when people visit Web sites hosting malicious code that exploits vulnerabilities in browser plug-ins Flash and ActiveX.
When the infected computer is used to access a targeted banking or other site, the log-in and other information is stolen.
Tips for safer computing:
- Keep your antivirus up to date
- Do Not access personal or financial information on public or shared systems
- Regularly monitor your account for fraudulent activities
July 2009 - Account Reactivation Email
Teachers Federal Credit Union is aware of phone calls, text messages, and emails being made about:
- Account De-activation
- Account Status Alert
- Changes to Terms and Conditions
- Irregular Activity
These e-mails and text messages ask that the customer call a number in order to have their account reactivated. Some may request that you leave callback information or provide your financial information directly. All of these messages are fraudulent. Please do not respond to these messages.
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
June 2009 - SMS Text Message Scam Alert
A SMS phishing attack is in progress, The "smishes" (SMS phishes) are being distributed by phone and SMS text message.
The SMS text message says something similar to:
"ALERT Credit Union has deactivated your ATM-Debit- Card. To reactivate call 888-323-2313".
*Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.*
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
May 22 2009 - Phone Phishing Scam Alert
Several credit unions are being hit with a Phone Phishing scam.
The message says something similar to:
"This is an automated message from [name of Credit Union]. There has been suspicious activity on your account".
The voice messages are also automated requesting that the credit union member enter sensitive information, account number, PIN, CVC, , etc.
*Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.*
Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
March 30 2009 - Internet Crime Complaint Center (IC3) Intelligence Note -
Scheme Purportedly Announcing a Millionaire Contest
The IC3 has been alerted to the circulation of a fraudulent e-mail, purportedly from the "The Oprah Winfrey Show", notifying recipients of their nomination for the "Oprah Millionaire Contest Show." To participate, recipients are requested to mail their contact information such as full name, address, telephone number, and e-mail address. Verified contestants are then required to purchase airfare and a ticket to attend "The Oprah Winfrey Show," as well as complete a forthcoming contest form containing personal questions. The contestants are then promised a seat for "The Oprah Winfrey Show" in April and asked to provide their responses to the personal questions for a chance to win a million dollars.
Consumers always need to be alert to unsolicited e-mails. Do not open unsolicited e-mails or click on any embedded links, as they may contain viruses or malware. Providing your personally identifiable information will compromise your identity!
Individuals who receive such e-mails are encouraged to file a complaint at
www.IC3.gov.
February 2009 - Phishing Scam Alert - Unauthorized account scam
Attention TEACHERS FEDERAL CREDIT UNION MEMBERS: There is a possible unauthorized account scam circulating around the internet. This phishing scam asks for you to verify your account at http://securedtfcu.com. The unauthorized website prompts members to enter their credit card information. PLEASE DO NOT ENTER ANY INFORMATION ONTO THE WEBSITE. This illegal activity is being resolved immediately. Please feel free to contact us at 631-698-7000 ext. 6780 should you have any questions.
January 2009 - Phishing Scam Alert - NCUA Express Service
A fraudulent "phishing" e-mail seeking credit card information has been circulating nationwide since January 16, 2009 at 2pm EST. This fraudulent phishing email appears to be from NCUA and contains a link purportedly to obtain a subscription for the NCUA Express Subscription service. When that link is used, the recipient is directed to a "clone" of the NCUA Express Service site that seeks credit card information from those to whom the phish was sent.
If you receive such an email, please ignore it, as it is fraudulent. The NCUA does NOT charge for the Express Subscription service and does NOT solicit credit card information over the Internet. If you have questions or comments, please contact the NCUA Fraud Hotline at 800-827-9650 or, during off duty hours, at 703-728-0700.
Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.
January 2009 - SMS Text Message & Phone Phishing Scam Alert - Teachers Federal Credit Union, Bank Fund Staff Federal Credit Union, & others...
A SMS phishing attack is in progress, representing Teachers Federal Credit Union and Bank Fund Staff Federal Credit Union, among others. At least 4 credit unions in the northeast are being misrepresented.
The "smishes" (SMS phishes) are being distributed by phone and SMS text message.
The SMS text message says something similar to:
"This is an automated message from Teachers Federal Credit Union. Your ATM card has been suspended. To reactivate call 1-410-910-0787."
Some variations of the message have these phone numbers: 1-800-587-9804 & 1-877-343-693...
The voice message caller ID's are coming from Florida, Ohio, Texas, and Maryland.
The voice messages are also automated suggesting that the credit union member's account has been suspended and requesting the listener to press 1 for more information.
Pressing 1 transfers to a request for the account number, PIN, authorization code, etc.
The SMS message ID is coming from number 5000, not providing an actual return number.
Of course, responding to these requests may result in the theft of your identity. Do NOT provide this information. Legitimate financial institutions will not contact members through these means to verify information.
November 2008 - TFCU
Counterfeit official checks claiming to be drawn on Teachers Federal Credit Union are being distributed in the amount of $1920.00 via the US Mail. If your are in receipt of one of these checks please contact the Fraud Loss Prevention Dept. at 631-698-7000 ext. 3310 or ext. 3032.
Click to enlarge
Click to enlarge
November 2008 Telephone Phishing (Vishing) Scam Alert - Suffolk FCU
Some members of TFCU have reported they have received phone calls from an automated service claiming to be Suffolk Federal Credit Union. The message claims to be alerting members that their credit card has been compromised.
Do NOT respond to this message or provide any of your personal information. Doing so could result in the theft of your identity or fraudulent activity on your accounts.
For more information about PHISHING or other types of scams see the links to the right on this page.
If you feel you may have given away your information, please contact the TFCU Information Call Center immediately at (631) 698-7000 ext. 6780.
November 2008 Phishing Scam Alert - TICFCU
Some recent phishing attacks have been targeted at TIC Federal Credit Union. TFCU members may receive e-mails concerning their TICFCU account.
Do NOT click on the links within this e-mail. Doing so could result in the theft of your identity or fraudulent activity on your accounts.
REMEMBER: Legitimate organizations will NEVER initiate contact with their members or customers to verify sensitive personal or financial information by ANY means. The best thing to do is delete these e-mails. You may report it if you would like.
For more information about PHISHING or other types of scams see the links to the right on this page.
If you feel you may have given away your information, please contact the TFCU Information Call Center immediately at (631) 698-7000 ext. 6780.
October 2008 SMS Text Message Phishing Scam Alert - NCUA
More recent phishing attacks have been targeted at all credit unions through NCUA (National Credit Union Association), but these are sent to cell phones via text messaging. Members may receive a text message that reads:
Your National Credit Union Administration account is closed due to unusual activity, call us now at 1-800-5**-****.
Do NOT respond to this text message. Doing so could result in the theft of your identity or fraudulent activity on your accounts.
For more information about PHISHING or other types of scams see the links to the right on this page.
If you feel you may have given away your information, please contact the TFCU Information Call Center immediately at (631) 698-7000 ext. 6780.
October 2008 Phishing Scam Alert - NCUA
Some recent phishing attacks have been targeted at all credit unions through NCUA (National Credit Union Association).
Members may receive e-mails to allegedly alert to possible fraud attempts on your account. The email goes on to explain that NCUA will open an investigation. Of course, none of this is true.
Do NOT click on the links within this e-mail. Doing so could result in the theft of your identity or fraudulent activity on your accounts.
REMEMBER: Legitimate organizations will NEVER initiate contact with their members or customers to verify sensitive personal or financial information by ANY means. The best thing to do is delete these e-mails. You may report it if you would like.
For more information about PHISHING or other types of scams see the links to the right on this page.
If you feel you may have given away your information, please contact the TFCU Information Call Center immediately at (631) 698-7000 ext. 6780.
August 2008 - IRS
Please be advised that the IRS is warning that scam artists, posing as IRS representatives, are trying to trick individuals into revealing personal information by advising them that their information needed in order to process their rebate (Economic Stimulus payment). Individuals are being approached by phone and email. Please remember that the only way to receive a stimulus payment is by filing a 2007 tax return. Please visit
www.irs.gov for more details.
July 2008 - TFCU
Counterfeit official checks claiming to be drawn on Teachers Federal Credit Union are being distributed by a company called Insider Mystery Shopping via the US Mail. If your are in receipt of one of these checks please contact the Fraud Loss Prevention Dept at 631-698-7000 ext 3310.
Click to enlarge
Click to enlarge
