FRB Federal Credit Union Security Brief

NEW ALERT: Customer survey phishing scam

A spam e-mail--supposedly a customer survey from a financial institution--has recently been reported. The message begins, "The Online department kindly asks you to take part in our quick and easy 5 question survey. In return we will credit $50.00 to your account--just for your time!" The e-mail, which looks authentic, then says that the survey takes just two minutes and that your answers will be helpful. Of course, the spam doesn't really take you to a credit union or bank web site. It takes you to a scammer's site in a different country, and the web page looks quite authentic.

The promise of a $50 reward can be an effective phishing lure. The catch, of course, is you are told that in order to credit your account with the $50 reward, they need your credit union or bank user ID and password, Social Security number, ATM PIN number, zip code, mother's maiden name, and e-mail address, as well as your credit card number, expiration date, and three-digit security number.

Tips for Preventing Loss

• Remember that the credit union will never solicit personal, private information by e-mail.
• Never click on the link provided in an e-mail that you believe is fraudulent.
• Do not open an attachment to an unsolicited e-mail unless you have verified the source.
• Do not be intimidated by an e-mail or a caller suggesting dire consequences if you do not immediately provide or verify information.
• If you believe the contact is legitimate, go to the company's web site by typing in the site address directly or using a page you have previously bookmarked. Do not follow a link provided in the e-mail.
• Go to the federal government's OnGuardOnline web site and take the interactive quizzes designed to educate you about identity theft, phishing, spam, and online-shopping scams. Also, read the detailed guidance on how to monitor your credit history, use effective passwords, and recover from identity theft.