Paying a Bill Online? Watch Out for Bill Pay Impersonators

Paying a bill online should be simple. You search for the biller, find their payment page, enter your information, and you’re done. But that quick online search could take you somewhere you didn’t mean to go.

Bill pay impersonators and misleading third-party payment services can use online search results to make their websites appear to be an official payment option for a utility company, medical provider, government agency, or other organization. If you aren’t paying close attention, you could give sensitive information to the wrong company or pay unexpected fees.

Before you click “Pay,” take a few extra seconds to make sure you’re in the right place.

How Do Bill Pay Impersonators Work?

Imagine you need to pay a utility bill. Instead of typing the company’s website address into your browser, you instead search online.

The first result looks legitimate, so you click on it.

The catch? That result may be a paid advertisement from a company that isn’t actually affiliated with your utility provider.

According to the Federal Trade Commission, some companies have used paid search ads to make consumers believe they were using an official payment channel when they were actually visiting a separate third-party service.

The website may prominently display the biller’s name or otherwise look convincing enough that you don’t realize you’ve left the company’s official website.

You may only discover the difference after you’ve submitted your payment, encountered an unexpected fee, or had trouble confirming whether your bill was paid.

A Search Result isn’t Necessarily an Official Website

One of the biggest challenges is that paid advertisements can appear above regular search results.

Seeing a familiar company name at the top of Google, Bing, or another search engine doesn’t automatically mean the link is from that company.

Before clicking, check for labels like “Sponsored” or “Ad.” These labels don’t necessarily mean the advertiser is fraudulent, but they do indicate that the result was paid for rather than appearing organically.

Take a moment to check the website address as well. Scammers and misleading services may use web addresses that resemble a legitimate company’s domain but include extra words, unusual spellings, or other subtle differences.

Safer Ways to Pay Bills Online

A few simple habits can help you avoid ending up on the wrong payment site.

Go directly to the biller’s website.
If you already know the company’s website address, type it directly into your browser rather than searching for it each time.

Use a trusted bookmark.
After verifying a company’s official website, bookmark its payment page for future use.

Use the company’s official app.
If the organization offers a mobile app, download it from your device’s official app store and verify the developer before signing in.

Check the web address before entering any information.
Look at the full URL and make sure you’re on the site you intended to visit before entering account, card, or banking information.

Be cautious with sponsored search results.
Scrolling past paid advertisements is usually a smart idea.

Review payment details before submitting.
Check the biller’s company name, payment amount, and any added service fees before authorizing the transaction.

Consider Paying Bills Through Your Financial Institution

One of the safest ways to pay eligible bills online is through your financial institution’s online bill pay service.

Members of First Financial can utilize our Online Bill Pay, add billers, schedule payments and set up future or recurring payments through Online Banking or the First Financial Mobile App.*

Using a familiar, trusted platform can also save you time from repeatedly searching online for various bill payment websites.

What if You’re Not Sure You Used the Right Payment Website?

If you realize you may have entered payment or financial information on a suspicious website, act quickly.

Contact the company you intended to pay using contact information from a trusted source, such as a previous statement or its verified website, to confirm whether your payment was received.

You should also review your bank or credit card activity for unfamiliar transactions. If you shared financial information or notice suspicious activity, contact your financial institution or card issuer as soon as possible.

If you believe you encountered a scam or deceptive business practice, you can also report it to the Federal Trade Commission at ReportFraud.ftc.gov.

Pause Before You Pay

Online bill payment is convenient, but that convenience can sometimes make it easy to click the first search result without taking a closer look.

Before entering your account or payment information, verify the website, check the URL, and make sure you’re dealing directly with the company you intended to pay.

Those few extra seconds can help protect both your money and your personal information. For more ways to stay a step ahead of scams, visit the Important Alerts & Scams section of our First Scoop Blog.

First Financial members can securely manage eligible bill payments through Online Banking and the First Financial Mobile App. Visit our Digital Services page to learn more about Online Bill Pay and other convenient ways to manage your finances online.*

*You must have an account at First Financial Federal Credit Union (serving Monmouth and Ocean Counties in NJ), and be enrolled in online banking, to use our mobile app or online banking services. Data rates may apply. Check with your mobile phone carrier for details. A First Financial membership is available to anyone who lives, works, worships, volunteers or attends school in Monmouth or Ocean Counties. A $5 deposit in a base savings account is required for credit union membership prior to opening any other account. Other terms & conditions may apply, see credit union for details.

Protect Your Business from an Email Compromise Scam

Email keeps your business moving. You use it to talk with employees, work with vendors, approve purchases and manage payments. Scammers know it too, and they build their scams around that trust.

Business email compromise or BEC, is a scam where criminals send messages that appear to come from a trusted source, then use that trust to get you to send money or share sensitive information.

According to the FBI, these scams take on many forms. You might receive what looks like an updated invoice from a longtime vendor. An employee might get an urgent request that seems to come from a company executive. A scammer might even insert themselves into an existing conversation about a payment or invoice.

The message may seem legitimate initially. Knowing the warning signs can help safeguard your business.

Understand How Business Email Compromise Works

Business email compromise succeeds because scammers make their messages look familiar. They may create an email address or website that closely resembles a legitimate one, sometimes changing only a letter or two. They may also use phishing emails to gain access to company accounts, calendars, or other information that makes a future scam more convincing.

The FBI also warns that criminals can use malicious software to access legitimate email conversations about billing and invoices. That access lets them time fraudulent payment requests to fit naturally into an existing conversation.

A suspicious email will not always come from someone you have never heard of. It may appear to come from someone or a company you work with regularly.

Look Closely Before You Click or Pay

Small details can reveal a fraudulent message. Before responding to an unexpected email, look closely at the sender’s full email address, any URLs in the message, and the spelling throughout. Scammers often utilize small changes that are easy to miss when you are moving quickly.

Be especially cautious with messages asking you to:

  • Change an account number or payment method
  • Send a wire transfer or other payment
  • Purchase gift cards
  • Update or verify account information
  • Open an unexpected attachment
  • Act immediately or keep the request confidential

Urgency should slow you down, not speed you up. The FBI advises extra caution whenever someone pressures you to act quickly.

Verify Payment Changes Another Way

One of the most important steps your business can take is verifying changes involving money independently.

If a vendor emails new payment instructions, or someone requests an unusual purchase or transfer, do not rely on the email alone. Contact the person or business using a phone number you already have on file, not one included in the message.

Make that extra verification step part of your normal process. It helps employees feel comfortable slowing down, even when a request appears to come from a manager, executive, or longtime business partner.

Protect Your Business Accounts

Good account security adds another layer of protection. Enable multi-factor authentication (MFA) on all accounts that support it. This adds an extra verification step during login, rather than relying only on a password.

Be careful about the information you and your employees share publicly too. Personal details posted online or on social media can give scammers what they need to guess passwords, answer security questions, or make a fraudulent message look more convincing.

When an unsolicited email or text asks you to update or verify your account information, do not click the link. Go directly to the company’s website or contact the company using information you already trust.

Be Careful with Attachments

Treat an unexpected attachment with the same scrutiny as an unexpected payment request. Avoid opening attachments from people you don’t know, and stay cautious even when a familiar contact forwards one. If something feels off, confirm with the sender before opening it.

A quick check takes a few minutes. Recovering from a fraudulent payment or a compromised business account can take much longer.

If You Think Your Business Has Been Targeted, Act Quickly

If you believe your business sent money because of a business email compromise scam, contact your financial institution right away.

Report business email compromise scams to the FBI’s Internet Crime Complaint Center at IC3.gov as well.

Even if a suspicious email does not lead to a payment, use it as a chance to review what happened and make sure everyone involved knows what to watch for next time.

If you believe your First Financial business account has been targeted in a BEC scam, contact us directly at 732-312-1500.

A Few Extra Minutes Can Protect Your Business

Email is an essential business tool, but convenience should not replace verification. Take a closer look whenever a request involves money, account information, or an unexpected change in procedure. Verify unusual requests through a separate communication method, protect your accounts with multi-factor authentication, and stay cautious when someone pressures you to act immediately.

When something doesn’t look or feel right, slowing down and confirming the request is one of the simplest ways to protect your business. For more on the tactics scammers are using right now, visit the Important Alerts & Scams page of our First Scoop Blog.

Avoid Debt Collection Scams: Know the Red Flags Before You Pay

Getting a call, text or email saying you owe money can be stressful, especially when the person contacting you demands immediate payment or threatens serious consequences if you don’t comply. That’s exactly the reaction scammers want.

Debt collection scams often involve fraudsters pretending to represent legitimate collection or government agencies, or lenders. They may claim you owe a debt that doesn’t exist, exaggerate the amount you owe, or try to collect information they can use for identity theft. The Office of the Comptroller of the Currency (OCC) warns that these scammers often rely on threats and intimidation to pressure consumers into paying before they have time to ask questions.

A call about a debt doesn’t automatically mean it’s a scam. But before you pay or share personal information, take a few steps to verify who’s contacting you and whether the debt is legitimate.

Red Flag #1: You Don’t Recognize the Debt

Don’t assume you simply forgot about it. Ask for the creditor’s name, the amount owed and how you can dispute it. A legitimate collector generally must provide this validation information during the initial communication or within five days. Don’t share additional personal details just because the caller already knows your name or address, scammers often gather that information from data breaches or social media.

Red Flag #2: They Threaten to Have You Arrested

Scammers often create urgency by claiming police are on the way, a warrant will be issued, or you’ll be arrested if you don’t pay immediately. That’s a major warning sign. The OCC identifies threats involving arrest, lawsuits, or immediate wage garnishment as common tactics used in debt collection fraud. Federal law prohibits legitimate collectors from using abusive or deceptive practices to collect a debt.

Red Flag #3: They Won’t Give You Details in Writing

A legitimate collection process should come with information you can review. If a caller refuses to provide validation information, becomes evasive, or claims you aren’t entitled to documentation, stop the conversation. If you receive validation information and believe the debt isn’t yours, you generally have 30 days to dispute it in writing, and the collector must stop collection activity until they have a response. Keep copies of letters, emails and notes from any phone conversations.

Red Flag #4: They Demand an Unusual Form of Payment

Be especially cautious if someone insists you pay using gift cards, person to person payments (aka: Zelle, Venmo), prepaid cards, or wire transfers. The OCC identifies these payment demands as a common warning sign, since scammers prefer methods that are difficult to reverse or trace. Do not pay via these payment methods.

Red Flag #5: They Ask for Sensitive Information You Weren’t Expecting to Provide

Never give an unsolicited caller your Social Security Number, online banking password, PIN or other sensitive financial information, even if they claim they need it to “verify your identity.” Look up the company using a trusted source rather than a number or link the caller provides, or contact a creditor you recognize directly using information from a past statement or its official website.

Before You Pay, Slow Down and Verify

Scammers count on creating panic. Giving yourself time to verify the situation can be one of your strongest defenses. If someone contacts you about a debt:

  1. Ask who is calling. Get the collector’s name, company name and contact information.
  2. Ask for validation information. Review the creditor’s name, amount owed and your right to dispute the debt.
  3. Check your own records. Compare the claim with statements, payment records and your credit report.
  4. Contact the original creditor when appropriate. Ask whether the account was sent or sold to the collection agency.
  5. Don’t pay because of a threat. Take time to determine whether the request is legitimate.
  6. Keep records. Save letters, emails, texts and notes in case you need to dispute the debt or report it.

What About Companies Offering to “Erase” Your Debt?

Fake debt collectors aren’t the only debt-related scam to watch out for. The Federal Trade Commission warns consumers to be skeptical of companies that guarantee they’ll settle all of your debt or promise fast loan forgiveness, especially if they demand payment before providing service. Research an organization and understand its fees before enrolling, and consider speaking with a reputable credit counseling organization if you’re exploring debt relief options.

What to Do if You Suspect a Debt Collection Scam

Don’t send money or share additional personal information. You can report suspected debt collection fraud to the Federal Trade Commission, the Consumer Financial Protection Bureau or your state’s attorney general. If you already shared banking or account information with a suspected scammer, contact your financial institution right away.

Protect Your Information and Your Finances

A demand for money can feel urgent, but you don’t have to make a financial decision on someone else’s timeline.

  • Pause.
  • Ask questions.
  • Verify the debt.
  • Confirm who you’re dealing with before sharing information or making a payment.

First Financial offers additional resources to help members recognize scams, prevent identity theft and protect their financial information. Visit our First Scoop Blog for the latest on scams targeting consumers.

If you believe information associated with one of your First Financial accounts has been compromised or you notice suspicious account activity, contact First Financial directly at 732.312.1500.

What to Do if You’re a Victim of Check Fraud

Finding out you’ve been a victim of check fraud can feel overwhelming. Maybe a check was stolen from the mail. Maybe your account shows a payment you never authorized. Or maybe you deposited a check that turned out to be fake.

No matter how it happened, one thing is true: acting quickly matters. The sooner you respond, the better your chance of limiting financial loss, protecting your account, and preventing further fraud. If you think you’ve been a victim of check fraud, here are the steps to take.

Step 1: Contact Your Financial Institution Immediately

Your first call should be to your financial institution. Tell them:

  • What happened.
  • Which transaction appears suspicious.
  • When you noticed it.

Your financial institution may be able to place a stop payment on a check, freeze your account, open an investigation, and provide information needed to file a report with the authorities. Don’t wait – time matters.

Step 2: Review Your Account for Other Fraud

Fraud may not stop at one transaction. Look through your recent account activity for:

  • Other unfamiliar checks.
  • Unusual withdrawals.
  • Account changes you did not make.

Review at least the last 30–60 days of account activity, if possible. If your account information was stolen, criminals may attempt additional fraudulent transactions – sometimes even weeks later when they think you are no longer paying attention.

Step 3: Document Everything

Keep records of:

  • Suspicious transactions.
  • Check numbers.
  • All related communications including calls, emails or text messages related to the fraudulent activity.
  • Police or fraud reports.

Write down dates, names, and case numbers. This documentation can help if you ever need to dispute charges or file reports.

Step 4: File a Fraud Report

Depending on the situation, you may need to report the fraud to local authorities or other agencies. This can be especially important if:

  • Mail was stolen.
  • Identity theft is involved.
  • A scammer targeted you online.

Ask your financial institution what reports they recommend and keep copies of everything.

Step 5: Secure Your Account

If your account information has been compromised, it may be recommended that you open a new account. Take additional steps like:

  • Changing online banking passwords.
  • Updating PINs.
  • Reviewing linked payment accounts and payment methods.

If you use the same password elsewhere, update those too.

Step 6: Replace Compromised Checks

If physical checks were stolen:

  • Report the missing check numbers to your financial institution.
  • Store remaining checks securely.
  • Order new checks if needed.

Do not continue using compromised check numbers.

Step 7: Watch for Identity Theft

A stolen check contains personal information. Watch for:

  • Unfamiliar credit activity.
  • Unexpected bills.
  • Collection notices.
  • New account openings.

Continue monitoring your financial accounts regularly – even months down the road.

If You Deposited a Fake Check

If you deposited a fraudulent check as part of a scam, contact your financial institution immediately and explain what happened. Even if the money appeared in your account, it may later be removed if the check turns out to be fake.

Remember: If someone asks you to send money back after depositing a check, that is a major warning sign of a check fraud scam.

How to Protect Yourself Going Forward

After check fraud happens, it’s normal to feel cautious. Moving forward:

  • Monitor your account at least weekly.
  • Use account alerts.
  • Mail any checks securely.
  • Keep checks stored safely.
  • Be cautious with unexpected payments.
  • Ask questions before acting.

Fraud can happen to anyone. What matters most is how quickly you respond by taking the necessary steps to put a stop to it.

Final Takeaway

As we’ve been featuring these weekly articles all month long, you probably know by now that check fraud can be frustrating and stressful – but you are not powerless. Quick action can help protect your money and reduce impact. Knowledge is one of your strongest tools.

Should you ever suspect fraudulent activity within any of your First Financial accounts, please contact us right away.

Check yourself – stop check fraud before it starts.

Article Source: Made in partnership with the American Association of Credit Union Leagues, America’s Credit Unions, and TruStage

How to Detect Check Fraud Early

This month, we’re continuing to focus on preventing check fraud scams with weekly articles. Whether a check was stolen from the mail, altered, forged, or used in a scam – the sooner you notice suspicious activity, the better your chances are of limiting financial loss and protecting your account.

The challenge? Check fraud is not always obvious right away. A payment may seem delayed. A check might clear for the wrong amount. Or you may notice a transaction you don’t recognize – weeks later. That’s why regular account monitoring matters. Here’s how to spot the warning signs of check fraud and what to do if something doesn’t look right.

Warning Signs of Check Fraud

Fraud often leaves some clues. Knowing what to look for can help you act quickly.

  • A Check Hasn’t Been Cashed When You Expected

If you mailed a payment and it has not been processed within the normal timeframe, it is worth checking on. This does not always mean fraud, but it could mean the check was delayed, lost, or intercepted.

What to do: Start by contacting the person or company you wrote the check out to, and confirm whether they’ve received it or not.

  • A Check Clears for the Wrong Amount

One of the clearest warning signs of check fraud is a check clearing for more (or less) than you wrote it for. This may happen in cases of check washing or altered checks.

What to do: Compare your check register or payment records to your account statement, and review the check image. Most financial institutions provide check images through online and mobile banking, or you can request them at your local branch or contacting customer service.

  • You See a Payment to Someone You Don’t Recognize

If your account shows a check made out to a person or business you did not authorize, that is a sign of fraud. This may happen with forged or altered checks.

What to do: Review the transaction details immediately, and contact your financial institution right away.

  • Missing Checks or Mail

If checks from your checkbook are missing or you notice missing mail, it may signal theft. Stolen blank checks can be used fraudulently.

What to do: Secure your remaining checks, report missing checks to your financial institution, and any missing mail to the post office.

  • Unfamiliar Withdrawals or Account Activity

Not all fraud appears as a check image. Sometimes check fraud starts with stolen account information and shows up as other account activity.

What to do: Watch for small test transactions, unusual withdrawals, or multiple failed payment attempts.

Simple Ways to Monitor Your Accounts

The best way to catch fraud early is to make account monitoring a regular habit.

  • Set Up Account Alerts

Most financial institutions allow you to set up alerts for withdrawals, deposits, low balances, and large transactions. These alerts can help you spot suspicious activity quickly.

  • Review Your Account Weekly

A quick weekly review of your account can help you catch issues before they grow. Look for payments you don’t recognize, checks clearing for the wrong amount, or missing expected transactions.

  • Look at Your Cleared Check Images

Most financial institutions allow you to view images of checks that have cleared. Look for the correct payee, amount, and your actual signature. This can help spot altered or forged checks.

  • Keep a Simple Record of Checks You Send

Whether it’s a checkbook register, a notebook, or a note on your phone – tracking helps. Record the date you sent the payment, the amount, and the recipient’s information. This will make it easier to compare later if you need to.

  • Be Careful with Unexpected Checks

If you receive a check you were not expecting, especially tied to a job, prize, or payment request – pause! Ask questions before depositing the check. Unexpected money is often a big warning sign of fraud.

What to Do if You Notice Something Suspicious

If you think something may be wrong, act quickly.

Step 1: Contact Your Financial Institution 

Review what you’ve noticed with your financial institution. They can assist with freezing or flagging the account and any transactions, place a stop payment on checks, or investigate the issue further.

Step 2: Gather Your Records

Collect check numbers, account statements, payment records, and any related emails, texts, or messages. Having information ready can speed up the investigation and account protection process.

Step 3: Monitor Closely

After reporting suspicious activity, keep watching your account. Fraud sometimes happens in more than one transaction and on various dates (sometimes with weeks in between – in the hopes that you don’t catch it).

Step 4: Change Account Security if Needed

Depending on the situation, it may be recommended that you close your account and open a new one, update passwords, or add extra account protections.

Early Action Can Make a Big Difference

Check fraud can be stressful, but early detection gives you more options:

  • Review your account regularly.
  • Pay attention to missing or unusual transactions.
  • Act quickly if something feels off.

Small habits can help protect your money. Check yourself – stop check fraud before it starts.

Article Source: Made in partnership with the American Association of Credit Union Leagues, America’s Credit Unions, and TruStage

Received a Text About Unpaid Tolls? It’s a Scam

Cash-free toll lanes have improved driving convenience, but they also have led to a surge in text message scams. If you’ve gotten a message claiming an unpaid toll, you’re not alone. Many drivers nationwide, including in New Jersey – have reported similar suspicious texts.

How the Scam Works

Scammers will send a text pretending to be from a toll collection service such as E-ZPass, claiming you owe a balance and that your account will be suspended if you don’t pay immediately. The message usually includes a link that leads to a fake payment site designed to steal your personal and financial information.

These messages can sometimes make you feel a false sense of urgency, encouraging you to act quickly without giving yourself time to think. That’s exactly what they want. Scammers rely on panic so you’ll click before you even question the message.

Where do scammers get your number in the first place? Often from data breaches, people-search websites, or lists purchased on the dark web. They also rely on caller and sender ID spoofing to make a text look like it’s coming from a legitimate short code, so the fact that a message appears to come from “E-ZPass” tells you nothing about who actually sent it. Because these lists are typically bought in bulk and sent out to thousands of numbers at once, you may get a toll scam text even if you don’t own a car, don’t have an E-ZPass account, or have never driven through the state named in the message.

What a Scam Text Might Look Like

Below are two examples of the kind of unpaid toll scam texts you might receive. Details like the agency name and link will vary, but the pattern typically stays the same:

“E-ZPass: Your account has an unpaid toll of $6.99. To avoid a late fee and possible suspension of driving privileges, pay now: ezpass-nj-tollpay.com. Reply within 24 hours.”

“Toll Services: Final notice. Outstanding balance on your account will be sent to collections and may affect your credit if unpaid. Settle now: tollpay-notice.net”

Notice the pressure tactics in both message examples: A small, believable dollar amount, a countdown, and a threat if you don’t act. The link is also the giveaway. A genuine E-ZPass New Jersey link will appear as ezpassnj.com, not a lookalike domain.

Red Flags to Watch Out For

  • Receiving a text at all. Most toll agencies don’t text final payment reminders – they typically will bill through your account, email, or regular mail.
  • The message threatens fines, legal action or license suspension if you don’t pay right away.
  • The link looks slightly off. Scammers often use web addresses that are close to, but not quite – the real toll agency’s website.
  • The sender’s number looks unusual, such as an international number, or the greeting is generic (“Dear Customer”) instead of using your name.
  • You’re asked to pay through an unusual method, like a gift card or wire transfer.

Other Toll Scam Variations to Know

E-ZPass is the most commonly impersonated toll brand in our region, since it covers tolls throughout New Jersey and much of the Mid-Atlantic and Northeast. However, it isn’t the only one scammers borrow. Similar scam texts have circulated using the names of FasTrak in California, I-PASS in Illinois, SunPass in Florida, and Peach Pass in Georgia. If you receive a “toll violation” text referencing a state or toll system you’ve never used, that alone is a strong sign the message is fraudulent.

What to Do if You Get One of These Texts

  • Don’t click the link or reply to the message, even to say “stop.”
  • Check your account directly. Login to your toll account through the official app or website, or call the customer service number listed there – not one included in the text.
  • Block the sender to help prevent future attempts.
  • Report the scam to the Federal Trade Commission at https://reportfraud.ftc.gov/, or file a complaint with the FCC.
  • If you already clicked the link and entered any personal or financial information, contact your financial institution right away.

Quick Questions, Quick Answers

Will E-ZPass text me about payment collection? No. E-ZPass and most other toll agencies don’t send final payment reminders by text. If your account is genuinely past due, you’ll typically see it reflected in your account balance, an email or physical mail. Learn more about NJ E-Z Pass text scams from the NJ Turnpike Authority.

How do I check if I actually owe a toll? Go directly to your toll agency’s official website or app and login to check your balance. Don’t use a link or number provided in a text message that you weren’t expecting.

I already clicked the scam link. What now? Don’t panic, but do act quickly. If you entered any account numbers, card details, or your Social Security Number – contact your financial institution right away. You may also want to consider placing a fraud alert or credit freeze with the three major credit bureaus. If you only clicked the link but didn’t enter information – it’s still a good idea to run a security scan on your device, since some phishing links attempt to install malware in the background.

The safest scam prevention habit is a simple one: Treat any unexpected text asking you to click a link and pay immediately as suspicious by default, whether it claims to be about a toll, a package delivery, or an account alert. Verifying independently through an app, website or phone number you already trust – takes an extra minute, but closes the door on nearly every version of this scam.

At First Financial, keeping your accounts and personal information safe is always top priority. If you ever receive a suspicious message referencing one of your First Financial accounts, give us a call at 732.312.1500 or stop by your local branch.

For more tips on spotting scams, check out our Important Alerts and Scams collection on our First Scoop Blog.