Recently, there have been multiple fraudulent e-mails and telephone calls directed to the general public and credit union members that appear to be from NCUA. False e-mails ask recipients to click on a link to confirm, verify or approve financial account information. If the recipient proceeds, the link directs them to a false website to verify or re-submit confidential information such as account and credit card numbers, Social Security number, password, and personal identification number, or to complete a member satisfaction survey and receive $80.
A variant, “vishing” uses telephone systems. A vishing scam occurs when a consumer receives a recorded message telling them a credit card and/or financial institution account has been breached and to immediately call a number provided in the message. The phone number leads the consumer to a fraudulent call center where people are asked to supply or verify pertinent financial account, social security or credit card information.
NCUA does not ask credit unions members for personal information. Anyone who receives an supposed e-mail or phone call from NCUA that asks for account information should consider it a fraudulent attempt to obtain their personal account data for an illegal purpose and should not follow the instructions in the e-mail or phone call.
If you inadvertently respond and provide confidential account information, please notify your credit union immediately. You should change affected accounts and PINs, and take any additional action recommended by your credit union to protect your account.
If you feel that you have received a fraudulent NCUA phishing e-mail, please forward the entire e-mail message to Phishing@ncua.gov
Additionally, you can file formal complaints concerning any suspected fraudulent e-mail with the Internet Crime Complaint Center (IC3) at www.ic3.gov. The IC3 is a partnership between the Federal Bureau of Investigation, the National White Collar Crime Center, and the Bureau of Justice Assistance.
Mobile Phones & Text Messages
- If you are an AT&T, T-Mobile, Verizon, Sprint or Bell subscriber, you can report spam texts to your carrier by copying the original message and forwarding it to the number 7726 (SPAM), free of charge.
- Delete text messages that ask you to confirm or provide personal information: Legitimate companies don’t ask for information like your account numbers or passwords by email or text.
- Don’t reply, and don’t click on links provided in the message: Links can install malware on your computer and take you to spoof sites that look real but whose purpose is to steal your information.
- Treat your personal information like cash: Your Social Security number, credit card numbers, and bank and utility account numbers can be used to steal your money or open new accounts in your name. Don’t give them out in response to a text.
- Place your cell phone number on the National Do Not Call Registry.
- Review your cell phone bill for unauthorized charges, and report them to your carrier.