Current Fraud Alerts

Vishing Attack Underway

August  4, 2010

Members and non-members are receiving vishing calls from an automated system in an attempt to gain access to debit and credit card numbers and PINs.

Vishing attacks are originating from numbers 603.659.9999 and 703.965.7660.

Recording states calls relate to federal credit cards or that the call is from a federal credit union. Call instructs recipient to enter card number and PIN.

Do NOT enter any information when requested, end the call immediately. Frontier CCU will never call to request personally identifying information or card information.

DO contact Frontier CCU at 913.651.6575 or email Fraud@FrontierCCU.coop and report the vishing attempt. We will report to appropriate agencies.

Criminals are Email Phishing in Order to Commit Unauthorized ACH Fraud

July 28, 2010

NACHA (The Electronic Payments Association) has alerted the financial services industry of a recent phishing attack where the email is purportedly sent by NACHA. The subject line of the email states, “Unauthorized ACH Transaction.” The email contains a link to a fake web page infected with malware. Credit unions should advise employees and members to not click on the link. The email and the related website are fraudulent.

Phishing emails frequently contain links to fake websites infected with malware (malicious software), such as Trojan keyloggers. Do not click on links contained in unsolicited emails from unknown parties, or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.

NACHA itself does not process ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that credit unions originate or receive.

Sample Email

From: Information
Sent: Thursday, July 22, 2010 9:27 AM
To: Doe, John
Subject: Unauthorized ACH Transaction
Dear credit union/bank account holder,
The ACH transaction, recently initiated from your credit union/bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:

End, Sample Email

Phishing Attack ALERT

July, 2010

A phishing attack is targeting First Data clients in an effort to steal account log-in credentials. First Data is Frontier CCU's ATM and Check Card processor. Please email Fraud at Frontier CCU or call 913.651.6575 if you receive a phishing email that appears to be from First Data.

Phishing attacks use email or malicious websites to solicit personal information by posing as a trustworthy organization. Attackers may send emails seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts.

In this case, the emails in question purport to be First Data system communications and direct recipients to a fraudulent website with the First Data logo. Two specific examples of the e-mails received are below:

Example 1:
From: FIRST DATA [mailto:gateway-support@secure-linkpt-firstdata.com]
Sent: Tuesday, July 13, 2010 9:05 AM
To:
Subject: FDMS ALERT
Dear First Data Merchant Solutions Customer,
Your account is locked due to unusual activity.
Please click to verify your online information, and unlock it.

Example 2:
From: "FIRST DATA"
Date: July 12, 2010 12:12:35 PM PDT
To:
Subject: EXPIRED PASSWORD
Dear First-Data Customer,
Your online account password has expired, and needs to be renewed.
Please click to update your password, and prevent account suspension.

In an attempt to avoid becoming a victim of phishing attacks, do not use the links in an email, instant message, or chat to get to any web page if you suspect the message might not be authentic or you do not know the sender or recognize the user's handle/name. Instead, call the company on the telephone or log onto the website directly by typing in the Web address in your browser.

Please note that any communication coming from First Data will comply with strict standards for grammatical accuracy and that any communication displaying obvious errors, as in the examples above, should be treated with suspicion.

First Data is working tirelessly with various hosting entities, domain registrars, and law enforcement agencies to eliminate these fraudulent websites and apprehend the perpetrators of this phishing attack.

FBI Issues Haitian Relief Fraud Alert

January 14, 2010

WASHINGTON (1/14/10)--Internet users who receive appeals to donate funds in the aftermath of Tuesday's earthquake in Haiti need to perform their due diligence before responding to the requests, said the Federal Bureau of Investigation (FBI).

Credit unions are advised to warn members that past tragedies and natural disasters have prompted criminals to solicit contributions that they claim are for a charitable organization or a good cause.

Before making any donation, consumers should use these guidelines, said the FBI.

•Do not respond to any unsolicited (spam) incoming e-mails, including clicking links contained within the messages;
•Be skeptical of individuals representing themselves as surviving victims or officials asking for donations via e-mail or social networking sites;
•Verify the legitimacy of nonprofit organizations by using Internet-based resources to assist in confirming the group's existence and its nonprofit status rather than following a purported link to the site;
•Be cautious of e-mails that claim to show photos of the disaster areas in attached files because these files may contain viruses. Only open attachments from known senders;
•Make contributions directly to known organizations rather than relying on others to make the donation on your behalf to ensure contributions are received and used for intended purposes; and
•Do not give personal or financial information to anyone soliciting contributions; providing that information may compromise your identity and make you vulnerable to identity theft.

 

Craigslist Scam Targets Credit Union Members Nationwide
January 8, 2010
Advertisements have been posted on Craigslist as part of member recruitment scams nationwide. The ads solicit current credit union members and offer $75.00 or more for their assistance in gaining membership for ineligible individuals. This scam is targeting credit unions and members across the country.

The following are samples of Craigslist ads target credit union members for this recruitment scam:
If your a ABC Credit Union Member MAKE SOME EXTRA $$
This is NOT a scam! I am willing to call you and discuss extensively! I need a ABC Credit Union Member to sponsor me into the credit union. I am willing to pay $100 USD for this service. Please email me and we can discuss this in detail. This is a 1 day process and I want to become a member for investment account/interest rate purposes.

Need to find a XYZ Credit Union Member
I was just approved for a visa credit card with XYZ Federal Credit Union and they called me and said that they can not process the application if I do not know any existing member or if I am not employed at one of the list of companies they have. To become a member you have to know a member. So now my app is on hold until I can find someone who is already a member. If you know someone, please tell them to contact me. I am willing to pay $500. And all they ask for is the members name and member number. Thanks.

ABC and XYZ Members Needed!!!
If you are a ABC or XYZ Federal Credit Union member we will pay you $75.00 per member to sponsor other that would like to join the credit union but do not meet the membership requirements. Please email for details.

ACH FRAUD Alert URGENT, November 13, 4 p.m. CST
 
On Thursday, November 12, 2009, an email was distributed impersonating the NACHA - The Electronic Payments Association, a non-profit association that oversees the Automated Clearing House (ACH) Network. The e-mail subject line reads "Rejected ACH Transaction". The link in the e-mail directs you to a fraudulent website.
 
Do not open this e-mail.

NACHA's legitimate website has posted a sample of the fraudulent email at http://www.nacha.org/.
 
As a reminder, when in doubt, for ANY suspicious email, do not click on embedded links. Open a new browser window and type in the address directly. Frontier CCU will never send you an email that requires you to respond by providing any personally identifying information, such as name, account number(s), or PIN information.

Please report all fraud to Fraud@FrontierCCU.coop, or call us directly at 913.651.6575.

FRAUD  ALERT 07.02.09
Fake NCUA Email Circulating in Kansas

Clay Center, Kansas. Member reported receiving an email message, supposedly from NCUA that read:

“This is an automated message from National Credit Union Administration. Your ATM card has been deactivated. To reactivate call 415-354-1098. We apologize for any inconvenience. Sincerely, NCUA Online Department.”

If you receive a phishing email, do NOT reply. Do NOT call any number listed. Please do forward to Fraud@FrontierCCU.coop and report the fraud to NCU on their website at http://www.NCUA.gov/FraudInfo.

Just a reminder that Frontier CCU or NCUA will never send you an email or text message asking for any personally identifying information such as your account or PIN number. Do not reply to these type of scams and phishing or vishing attempts.

FRAUD  ALERT 06.29.06
Scammers Find Lucrative Business from Funerals, Foreclosures

While you're pinching pennies during the recession, scammers keep finding innovative ways to pick your pocket.

The foreclosure mess is turning into a lucrative business for crooks who promise to "help people" avoid foreclosure--for a price (nytimes.com June 21). While there are many legitimate nonprofit agencies providing free, confidential help to borrowers, con artists convince desperate homeowners who are behind on their payments to fork over $1,500, $3,000, or even up to $8,000 in fees for services that typically are free.

Before you seek help, ask the credit union for advice or for referrals to legitimate counselors. Also, visit www.findaforeclosurecounselor.org, which allows you to enter your zip code to access information about local agencies affiliated with the federal government's National Foreclosure Mitigation Counseling (NFMC) Program, a collaboration with NeighborWorks America.

Be on the lookout for yet another scam source that's less well-known: online guest books for deceased individuals. This is a site where family and friends can share stories about the deceased, leave messages of support for each other, and upload pictures. But Consumer Reports (June 15) warns that scammers have easy access to the e-mail addresses some visitors post on the guest book site. Crooks then send phony messages, stating that a long-deceased relative owes them money that will be released as soon as fees are paid to an overseas bank account. In some cases, the letter writers claim to be officials of foreign governments. Many people have been fooled--even when they aren't distracted by grief.

Avoid becoming a victim of online guest books:

• Refuse to respond to anyone or any company that requests an advance payment of fees.
• Add the e-mail address of the sender to your "block address" list.
• Notify your local or state consumer protection office of the scam so they can pass the information on to authorities and warn others.
• If you receive a check, take it to your credit union to verify authenticity before you cash it. If you deposit it, you may be liable for repaying any funds you withdraw against it. 

FRAUD  ALERT 04.159
New Credit Card Scam
Click here for Snopes’ extensive details

This one is pretty slick since they provide YOU with all the information, except the one piece they want. Note, the callers do not ask for your card number; they already have it.
This information is worth reading. By understanding how the VISA & Master Card Telephone Credit Card Scam works, you'll be better prepared to protect yourself.

One of our employees was called on Wednesday from 'VISA', and I was called on Thursday from 'Master Card'. The scam works like this: Caller:  'This is (name), and I'm calling from the Security and Fraud Department at VISA. My Badge number is 12460. Your card has been flagged for an unusual purchase pattern, and I'm calling to verify. This would be on your VISA card which was issued by (name of bank). Did you purchase an Anti-Telemarketing Device for $497.99 from a Marketing company based in ?

A reminder:  Frontier CCU will never ask your card number, PIN, or the security code on the back of your card. We have that information when we call to verify a transaction. We will ask your name to verify who we’re speaking with.

When you say 'No', the caller continues with, 'Then we will be issuing a credit to your account. This is a company we have been watching and the charges range from $297 to $497, just under the $500 purchase pattern that flags most cards. Before your next statement, the credit will be sent to (gives you your address), is that correct?'

You say 'yes'. The caller continues - 'I will be starting a Fraud investigation. If you have any questions, you should call the 1- 800 number listed on the back of your card (1-800 -VISA) and ask for Security. You will need to refer to this Control Number. The caller then gives you
a 6 digit number. 'Do you need me to read it again?'

Here's the IMPORTANT part on how the scam works. The caller then says, 'I need to verify you are in possession of your card'. He'll ask you to 'turn your card over and look for some numbers'. There are 7 numbers; the first 4 are part of your card number, the next 3 are the security numbers that verify you are the possessor of the card. These are the numbers you sometimes use to make Internet purchases to prove you have the card. The caller will ask you to read the 3 numbers to him. After you tell the caller the 3 numbers, he'll say, 'That is correct, I just needed to verify that the card has not been lost or stolen, and that you still have your card. Do you have any other questions?' After you say No, the caller then thanks you and states, 'Don't hesitate to call back if you do, and hangs up.

You actually say very little, and they never ask for or tell you the Card number. But after we were called on Wednesday, we called back within 20 minutes to ask a question.. Are we glad we did! The REAL VISA Security Department told us it was a scam and in the last 15 minutes a new purchase of $497.99 was charged to our card.

Long story - short - we made a real fraud report and closed the VISA account. VISA is reissuing us a new number. What the scammers want is the 3-digit PIN number on the back of the card Don't give it to them. Instead, tell them you'll call VISA or Master card directly for verification of their conversation. The real VISA told us that they will never ask for anything on the card as they already know the information since they issued the card! If you give the scammers your 3 Digit PIN Number, you think you're receiving a credit. However, by the time you get your statement you'll see charges for purchases you didn't make, and by then it's almost too late and/or more difficult to actually file a fraud
report.

What makes this more remarkable is that on Thursday, I got a call from a 'Jason Richardson of Master Card' with a word-for-word repeat of the VISA scam. This time I didn't let him finish. I hung up! We filed a police report, as instructed by VISA. The police said they are taking several of these reports daily! They also urged us to tell everybody we know that this scam is happening.

FRAUD  ALERT April 9, 2009
Oprah Millionaire Contest a Scam
MADISON, Wis. (4/9/09)--Credit unions should warn their members about a new scam that involves fraudulent e-mails telling recipients they've been nominated for the "Oprah Millionaire Contest Show."

Recipients are asked to provide their contact information, including address, telephone phone and e-mail, though no mailing address is provided. Recipients also are told they need to purchase transportation and a ticket to attend the show and complete another contest form with personal questions.

The Federal Bureau of Investigations (FBI) warns consumers not to open unsolicited e-mails or embedded links because they may contain viruses or malware. Providing personal information also will compromise one's identity, the FBI said in a press release.

FRAUD  ALERT February 12, 2009
Scams Mimic Government Stimulus Package
Identity thieves posing as representatives of the Internal Revenue Service are sending spam e-mails promising government economic stimulus packages. The message tells the user to download an attachment that is masked as a form they must fill out and send to the IRS to receive their check. However, the document really is an identity theft tool that steals the personal information entered in the form.

Another scam being used promises more information on how to get “economic stimulus grants.” They tempt users with fake testimonials such as, “I found the grant I needed and filled out the forms and sent them in, and in about two weeks I received a check in my hand for $100,000.” It leads to a marketing-type site in which you enter personal information such as salary range, e-mail address, mailing address, and date of birth purportedly to get a free CD that shows you how to claim one of these grants. To order the CD, you must enter credit card information for the postage and handling costs. You never get the CD—only a stolen identity.

Unfortunately, the threat of fraud due to phishing attempts continues to be very active. Fraudsters are increasing in sophistication, and this type of activity shows no sign of slowing down.

FRAUD  ALERT January 12, 2009, 11:00 a.m. CST
Occurring in the Leavenworth area
An automated dialer is requesting member and non-members provide MasterCard information. The fraudulent call shows these caller ID numbers:  888-291-7574, 303-662-1041, 214-231-5349. One message states that either Frontier Community Credit Union or Fort Leavenworth Frontier Community Credit Union has had a security breach. One dialer states their name as At Last Fulfilment and requests information related to Frontier Community Credit Center Magazines. One dialer appears as Screen Check North America, caller ID 214-231-5349.

These automated calls do NOT originate from Frontier CCU. They are scams seeking personal information.

Frontier CCU will never call, email, or text and request any personally identifying information. Do not reply or respond to any inquiries whether by phone, email or text and never provide any personally identifying information.

Please report all fraud to Fraud@FrontierCCU.coop, or call us directly at 913.651.6575.

Text Phishing
01.07.09
A credit union in Dodge City reported that a member received a text message on her cell phone Sunday evening, January 4, from danny@printertek.com. The message read:

“Dear NCUA member, your account has been closed due to unusual activity. Call us @ 1-408-465-7403 or use our web site:  danny@printertek.com”

When a call was placed to the 408 number, the recording indicated it was the National Credit Union Administration customer service department and requested the member’s debit card number.

This is a fraudulent text message. Frontier  CCU, KCUA or NCUA will never contact you by text message, email, or by phone to request any personally identifying information. If you receive any communication that asks for your PIN, social security number, or account number, do not call, reply, or respond in any way. Immediately report the activity to us at Fraud@FrontierCCU.coop

Fake CUNA Phishing Email
12.30.08
A fraudulent email that appears to be from CUNA is circulating. The fake email uses the America’s Credit Union logo and states that your card has been deactivated. Do NOT call the number listed in the email. Forward the email to Fraud@FrontierCCU.coop then delete from your inbox.

Sample FRAUDULENT email below:

From: Credit Union National Association
Sent: Tuesday, December 30, 2008 12:42 PM
Subject: Your card has been deactivated

Your card has been deactivated

For your secuirty, we have disabled your card and PIN.
To activate your card and PIN please call our “Card Activation Line” at 1-800-340-5377.
If you have any questions, we are available 24 hours a day, 7 days a week at 1-800-340-5377.
Please do not reply to this email.

Sincerely,
Customer Service

Fraud ALERT, 12.26.08
Non-members have been reporting a phishing attack that is underway against a Nevada credit union with a similar name. Frontier Financial Credit Union is aware of the attacks and is working with local authorities and credit union organizations. Frontier Community Credit Union is also assisting the Nevada credit union in it’s tracking efforts. Click here for complete details.

Eudora, Kansas residents also being targeted by similar scams. Complete article at LJWorld.com.

If you receive a text message, phone call, or email notifying you of unusual account activity, a closed account or any other account-related issue:  Do not reply, respond, or provide any personally identifying information such as passwords, credit card numbers, social security number, or personal identification numbers (PINs).

Frontier CCU will never contact you in an unsolicited email, text message, or phone call and request personal information. Any such request is fraudulent and does not originate with Frontier CCU. 

Please report all suspicious activity to Fraud@FrontierCCU.coop.

Questions or Concerns, call 913.651.6575