Security

Member Fraud Alert: Phishing Attempt

Mail Theft Increase Leads to Check Fraud*

Mail theft and armed robberies against U.S. Postal Service carriers have increased substantially throughout the country. The criminal's focus is to gain access to the master keys of the blue USPS mailboxes –ultimately in search for checks that can be altered, counterfeited, or sold online.

According to the U.S. Postal Service Office of Inspector General, mail theft complaints more than doubled from March 2020 to February 2021. The criminals rob mailboxes and mail carriers of the master keys to the blue mailbox drops to gain access to the mail. The criminals then sift through to locate checks that can be altered, counterfeited, or sold online. The checks can also be used to open fraudulent new accounts and loans using the name and address information for stolen identities.

What can you do?

• Sign up for estatements so you can electronically receive your account statements and notices
• Pay bills online or use our online banking Bill Pay service
• If your only option is to mail a check, do so inside the Post Office lobby rather than using blue mailboxes
• Log into your accounts frequently to review transaction history – looking for unfamiliar transactions
• Report unfamiliar and unauthorized transactions immediately to the credit union

• Fraudsters pose as the credit union and send a text to the member about a suspicious debit card transaction.
• Once someone responds to the text, they will follow up with a call claiming to be the fraud department. They spoof the credit union’s phone number to make it appear legitimate. Spoofing is when criminals masquerade as a trusted entity to get you to do something beneficial to the fraudster. For example, they will copy a trusted business’ phone number or email address.
• The fraudster asks for the members username for online banking claiming that it is a form of authentication.
• Next, they tell the member that they will receive a passcode via text or email. They state that this code must be given to them to verify the member’s identity. In reality, they have initiated a forgot password feature and used that passcode to pass two-factor authentication.
• The fraudster logs in the member’s online banking and changes the password.
• Then, they begin to use Zelle to initiate fraudulent transfers to others.

• They inform the member that they will be receiving a text containing details of a Zelle transfer.
• They instruct the member to authorize the transfer claiming that this is how the refund of the previously mentioned “suspicious” transactions will occur.
• The member authorizes the transfer, and the funds go to another account/person.

• Be wary of calls or texts that appear to come from the credit union. If you are unsure or suspicious, hang up and call the credit union using a reliable number (520-887-5010).
• Never provide personal information in response to a text or phone call.
• No credit union employee will ask for personal information such as usernames, passwords, and passcodes.

• Remain aware of your surroundings, particularly at night. If you observe or sense suspicious person or circumstances, do not use the machine at that time.
• Prepare your transaction before you approach to minimize time spent at the ATM. Get down to business at the ATM. Fumbling for your card in front of the machine makes you vulnerable and takes your attention away from what is happening in the vicinity.
• If an ATM is hidden from public view (including overgrown shrubbery or landscaping), poorly lit, or ATM lights are not working; don’t use it and go to another ATM.
• Avoid using ATMs at night or take a companion with you if necessary. Park as close as possible to the ATM walk-up. When you have completed your transaction, leave the ATM as quickly as possible.
• If anyone or anything seems suspicious, cancel the transaction and leave immediately. Do not accept assistance from strangers when using an ATM.
• Do not count or visually display cash; instead, pocket it immediately when you complete the transaction, and take your card and receipt. Verify the cash when safe to do so.
• If anyone follows you after making an ATM transaction, go immediately to a crowded, well-lit area and call the police.
• If you are involved in a robbery situation while using the ATM, do not resist. Give the money to the suspect immediately. Contact the police when safe to do so.
• Protect your PIN and the privacy of your transaction by shielding the keypad while standing close to the ATM to prevent others behind you from observing your transaction detail.
• Always check your ATM receipt against your statements to identify any unauthorized transactions.
• Immediately report a lost or stolen ATM, debit, or credit card.

• The government will not ask you to pay anything up front to get this money. No fees. No charges. No nothing.
• The government will not call to ask for your Social Security number, bank account, or credit card number. Anyone who does is a scammer.
• These reports of checks aren’t yet a reality. Anyone who tells you they can get you the money now is a scammer.

• Regularly monitor your account statements and immediately report any suspected fraud.
• Before inserting your card, check any merchant or gas pump terminal carefully for skimming devices. If the card reader appears to have been tampered with, immediately report it to that organization’s management.
• Sign up for Debit Alerts, such as the service offered by Pima Federal.
• Be wary of utilizing ATMs not owned or affiliated with a financial institution.
• Utilize available tools and technology such as the Pima Federal mobile banking app or online banking site to have instant access to account activity and information.