Spoof Credit Union E-Mails Could Ruin Consumers’ Holidays
A new, dangerous identity theft scheme is targeting credit union customers across the country. According to consumer and credit union groups, spoof e-mails are directing credit union customers to call a telephone number and confirm their personal information. Consumers who make the call do not reach their credit union, but instead end up on the telephone with a scam artist who wants to steal their identity.|
Savvy consumers have increasingly learned to identify and delete spoof e-mails that falsely appear to originate from legitimate banks or credit card companies. Known as “phishing,” these e-mails direct consumers to a decoy Web site that allows the scammers to collect all the information they need to empty the customers’ bank accounts and ruin their credit.
“Phishing” scams have been around for years, but increasingly sophisticated criminals now send e-mails instructing consumers to call a telephone number instead of clicking on a link. This tactic, known as “vishing,” can be especially effective because consumers who encounter a live person are much more likely to let down their guard.
The latest “vishing” scam immediately disarms consumers by specifically warning about similar schemes. One recently circulated e-mail reads:
Dear Credit Union Customer,
The e-mail provides a telephone number with a U.S. area code, adding to its air of legitimacy. In an especially brazen move, the e-mail offers identity theft tips and links to the Federal Trade Commission’s identity theft prevention Web site. Consumers who think the e-mail is legitimate call the number and furnish sensitive information to a person they believe is a trusted credit union employee. Only when their identity is stolen do they realize it was all a scam.
These “vishing” scams combine the “phishing” ploy with a Web-based telephone scheme. The telephone numbers that appear in these e-mails are set up through VoIP, which is an Internet-based telecommunications service. Even though the phone number appears to be based in a familiar U.S. area code, the scammers are most likely in other countries and impossible to track down.
Consumers who receive this or any other unexpected e-mail or phone call seeking personal information should not respond. Consumers who have concerns about their account should contact their credit union by calling the telephone number that appears in the local directory or on their periodic statements. Never click on a link or call a telephone number that appears in an unexpected e-mail.
Individual con artists generally fall under the jurisdiction of a criminal prosecutor -- in Texas, this is the district or county attorney. But even when they are charged and convicted, these individuals usually have spent the money as fast as they have stolen it. A person who is the victim of fraud should report the incident to the police or sheriff. But by far the best thing is for consumers to be aware of fraud, so they are not swindled in the first place. For this reason, the Office of the Attorney General posts these Consumer Alerts about possible scams and schemes that come to our attention through citizen contacts to our office or other sources.