Fraudulent text messages appearing to come from the credit union are being sent to members. The links lead to spoofed websites that are made to look like the credit unions\u2019 legitimate websites and members are enticed to click on the link and share confidential information such as username, passwords, as well as 2-factor authentication passcodes. These fraud attempts have resulted in losses from account takeovers.<\/p>\n
SMiShing (SMS text message phishing) is quickly becoming a preferred choice of fraudsters to lure members into giving up their credentials or sensitive information. The text messages have the following themes:<\/p>\n
\u2022 Member\u2019s account has been locked or suspended due to suspicious or fraudulent transactions.
\n\u2022 Unusual\/suspicious transactions at Walmart.
\n\u2022 Unusual\/suspicious transactions at cryptocurrency exchanges.
\n\u2022 Suspicious Zelle transfer.<\/p>\n
The fraudsters immediately use the credentials to login to the member\u2019s accounts. Since the fraudsters used unregistered devices to login to the accounts, a 2-factor authentication passcode is generated and delivered to the member who, in turn, enters the passcode on the spoofed website. The fraudsters immediately use the passcodes to complete the login to the member accounts.<\/p>\n
Once logged into the members\u2019 accounts, the fraudsters change the member\u2019s contact information and then remove funds using Zelle\/P2P or ACH transfers. In other instances, the fraudster calls or texts the member in which they claim to be from the credit union and need the one-time passcode.<\/p>\n
The primary institutions that have been used to move funds to have included Metabank; Green Dot; Bancorp Bank; or Coastal Community Bank. However, there may be more financial institutions being used.<\/p>\n
Members should consider these risk mitigation tips:
\n\u2022 Don\u2019t reply to suspicious text messages and refrain from calling the number
\n\u2022 Don\u2019t click on links or open attachments contained in suspicious text messages and emails
\n\u2022 Report suspicious credit union-themed text messages and emails to the credit union<\/p>\n
<\/p>\n
<\/p>\n
This blog is brought to you by TruStage<\/p>\n
Disclaimer: This article is for informational purposes only. For advice regarding your specific financial situation, please consult a financial planner or a trusted financial professional<\/em><\/p>","protected":false},"excerpt":{"rendered":" Fraudulent text messages appearing to come from the credit union are being sent to members. The links lead to spoofed websites that are made to look like the credit unions\u2019 legitimate websites and members are enticed to click on the link and share confidential information such as username, passwords, as well as 2-factor authentication passcodes. These fraud attempts have resulted … Continue reading