Important Member Alert: Publishers Clearing House Scam

Who wouldn’t love to be that winner you see on TV holding a great big sweepstakes check? That’s what con artists are counting on when they claim to be Publishers Clearing House. This trick is an oldie but goodie for scammers.

The scam starts with a call or letter saying you’ve won the Publishers Clearing House sweepstakes. But to collect your prize, they say, you need to send money to pay for fees and taxes. Typically you’ll be asked to send money by Western Union or MoneyGram, or by getting a reloadable card or gift card. Scammers ask you to pay these ways because it’s nearly impossible to trace the money — and you’ll almost never get it back.

But that’s not the only way scammers get your money with this scam. Some will send you a realistic-looking fake check in the mail. You’re told that, to claim your prize, you need to deposit the check and send some of the money back for made-up expenses. But when the check you deposit bounces — even after it seemed to clear, you may be on the hook for the money you sent.

If you think you’ve won a prize, here are a few things to know:

  • Never send money to collect a prize, sweepstakes check, or lottery winnings. If you have to pay, it’s a scam.
  • Never deposit a check and send back money, even if the funds appear in your account. That’s a sure sign of a scam.
  • If anyone calls asking you to pay for a prize, hang up and report it to the FTC.

Still think this sweepstakes is real? The real Publishers Clearing House says it will never ask you to pay a fee to collect a prize.

If at any time you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: Emma Fletcher for FTC.gov

Important Member Alert: Mobile Phone Port-Out Scams

Fraudsters are impersonating mobile phone users to have phones transferred to a different carrier – effectively stealing the user’s mobile phone number. This is being coined as a port-out scam. Once transferred to a different carrier, the fraudster receives all calls and texts that were intended for the user – including those that can be used to takeover a member’s account via online banking. Fraudsters have successfully intercepted one-time passcodes used to authenticate members logging into their account or to initiate transactions within online banking.

How can you prevent this scam from happening to you?  You can place a “port validation password” on your mobile phone account to help prevent having your phone fraudulently transferred to a different carrier.

Call your wireless carrier and ask for PIN authentication for your accounts. Sprint requires customers to create a PIN when they open a new account. Here’s what to do with the other major carriers.

  • AT&T: Log into your ATT.com account, go to your profile by clicking your name, and under the wireless passcode drop down menu, click on “manage extra security.”
  • T-Mobile: Call 611 from your cellphone or (800) 937-8997 to speak with customer service.
  • Verizon: Visit vzw.com/PIN or call (800) 922-0204.

Scam Levels and Details

Mobile phone users switch carriers for a variety of reasons, and can carry their phone number with them to the new carrier. Meanwhile, fraudsters are exploiting this capability by impersonating mobile phone users to have the mobile phones ported to a different carrier. The fraudsters harvest the user’s personally identifiable information and use this information to impersonate users in having the mobile phones transferred to a different carrier.

The port-out scam can take place at a wireless store or online, but in both cases, the imposters have enough information to convince the phone company that they are who they claim to be and have that person’s phone service transferred to their mobile device.

“And with a smartphone, if you’re on Wi-Fi, everything’s going to work except the actual calling and texting, so you may not even notice right away that something’s wrong with your phone — which can give the scammers a few hours of lead time,” said Katherine Hutt, director of communications for the Council of Better Business Bureaus. “If that ever happens, if you can’t make calls or receive calls, immediately contact the phone company and see if your number has been ported.”

Online Banking Fraud: A fraudster often ports a user’s mobile phone to a different carrier after the fraudster has stolen the user’s account login credentials. This could increase the risk of account takeovers through online banking, which involves sending a one-time-passcode via text message for login attempts as well as to validate transactions initiated within online banking. Members must enter the one-time-passcode to complete the login or transaction. By transferring a member’s mobile phone to a different carrier, the fraudster would receive the one-time-passcode intended for the member.

Card Fraud: This scam could also result in fraudulent transactions using credit and debit cards. A fraudster, who has ported a cardholder’s mobile phone to a new carrier, could use a counterfeit or stolen credit or debit card belonging to the cardholder to conduct fraudulent transactions. If a card processor’s fraud management system detects a suspicious transaction, a fraud analyst could attempt to contact the cardholder to confirm the legitimacy of the transaction by calling the cardholder’s mobile phone. However, the call is made to the fraudster who confirms the transaction as legitimate.

Card fraud could be worsened when, after confirming a suspicious transaction as legitimate, the card is suppressed for a period of time – usually seven days. It is common practice for card processors to suppress a card when the fraud management system identifies a suspicious transaction that a cardholder confirms is legitimate. When a card is suppressed, transactions on the card are not monitored by the fraud management system.

Email Fraud: Many public email service providers also offer out-of-band authentication using one-time passcodes that are sent via text message to user’s mobile phones. This could easily lead to a compromise of a member’s personal email account after a fraudster ports the member’s mobile phone to a different carrier.

Read more about mobile port-out scams from NBC News.

If at any time you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: CUNA Mutual Risk Alert, and Herb Weisbaum for NBCNews.com

 

Important Member Alert: Tax Scams

We are in the midst of tax season, and you guessed it – the fraudsters are at it again! Please be on the lookout for the following tax scams, where the scammers have been posing as the IRS via phone or email. The most important thing to remember here is that the IRS will never contact you via phone or email.

Click here to watch a short video from NBC Nightly News, which explains some of the recent tax scams.

In the first tax scam scenario, fraudsters will have already obtained an individual’s non-public personal information (name, SSN, date of birth) and bank account information. They may have obtained this information in many different ways (dumpster diving, computer hacking, stolen wallet, pretext calling). They will then file a false tax return using the individual’s name and information. Once they receive confirmation that the tax return has been deposited into the individual’s bank account, they will contact the individual via telephone posing as an employee of the IRS. They will state the funds were deposited to their account in error and order them to pay the funds back or suffer penalties.

In the second tax scam scenario, a fraudster will contact an individual via phone or email, again posing as a representative from the IRS. They will state that they owe back taxes and demand payment from the individual. They will attempt to obtain the individual’s checking account/bank routing number or credit card information to directly debit their account, or they may instruct them to mail a check.

Once again, the IRS will never contact anyone via phone or email – they will only use regular US postal mail. If you receive a phone call or email from the “IRS” – it is not the IRS.

Have you received a tax refund you didn’t file for yet?

  • Contact your financial institution immediately.
  • Have your financial institution return anything direct deposited into your account to the IRS, and then call the IRS at 1-800-829-1040
  • For an actual check received in the mail, write VOID across the front of the check and mail it to the IRS location closest to you by entering your zip code at IRS.gov
  • If you cashed the check, you will need to reimburse the IRS with a personal check.
  • For further instructions, visit the tax fraud section of the IRS’ website here.

If you feel that any of your First Financial accounts may have been compromised as a result of a tax scam, please contact Member Services at 732-312-1500 Monday through Friday 8am-6pm EST, or Saturday 8:30am-1pm.

Article Sources: NBC Nightly News and IRS.gov

Caller ID Spoofing Can Also Include Equifax Data Breach Fraudsters

You recently saw our blog post about Caller ID Spoofing, a new scam where fraudsters fake a company phone number and pretend they are a representative from that organization. This scam can also include fraudsters posing to be Equifax representatives who are calling to confirm stolen information or gain your personal financial information in the wake of the scam.

Ring, ring. “This is Equifax calling to verify your account information.” Stop. Don’t tell them anything. They’re not from Equifax. It’s a scam. Equifax will not call you out of the blue.

That’s just one scam you might see after Equifax’s recent data breach. Other calls might try to trick you into giving your personal information. Here are some tips for recognizing and preventing phone scams and imposter scams:

  • Don’t give personal information. Don’t provide any personal or financial information unless you’ve initiated the call and it’s to a phone number you know is correct.
  • Don’t trust caller ID. Scammers can spoof their numbers so it looks like they are calling from a particular company, even when they’re not.
  • If you get a robocall, hang up. Don’t press 1 to speak to a live operator or any other key to take your number off the list. If you respond by pressing any number, it will probably just lead to more robocalls.

If you’ve already received a call that you think is fake, report it to the FTC.

If you gave your personal information to an imposter, it’s time to change any compromised passwords, account numbers or security questions.

Still wondering what to do if you think your personal financial information may have been compromised in the Equifax Data Breach?

Review your credit report. Once a year, you can get a credit report for free by visiting annualcreditreport.com. This will include information from all three credit bureaus: Equifax, Experian, and TransUnion.

Consider a Credit Freeze. If you aren’t applying for any new loans, consider freezing your credit. This prevents fraudsters from applying for new accounts in your name – while preserving access for lenders you already use. To place a freeze on your credit, you must submit to all three bureaus:

Create a fraud alert. If you opt against a credit freeze, consider putting a fraud alert on file. This will warn creditors that your information was compromised, and require them to verify your identity before establishing any new accounts. Instructions are available here.

Consider a Credit Monitoring Service. If you’re concerned about identity theft, enroll in Sherpa identity theft protection from First Financial. The best part? You can enroll right online, 24/7. You can trust in First Financial and Sherpa to help keep your personal information protected. Packages begin at just $5.99 per month – so click here to enroll today!

More information is available from the Consumer Financial Protection Bureau here.

Article Sources: https://www.consumer.ftc.gov/blog/2017/09/equifax-isnt-calling?utm_source=govdelivery and https://www.menendez.senate.gov/

 

Important Alert: New Jersey Jury Duty Scam

The FBI is warning residents in New Jersey of a phone scam that involves callers impersonating law enforcement officials who demand money, telling the intended victim they failed to appear for jury duty.

According to the FBI’s Philadelphia and Newark divisions, the scammers say they’re with one of several law enforcement agencies, including the U.S. Marshals Service or a county sheriff’s department.

They accuse the call recipient of failing to appear for federal or local jury duty and warn that an arrest warrant has been issued. They tell the intended victim they need to pay a fine through a prepaid debit card, then tell them to provide them with the card information, according to information from the FBI.

“Recent reports indicate these scammers have been targeting New Jersey residents; variations of the ‘jury duty’ scam have been documented in numerous other states, as well,” the FBI said.

The FBI offered the following tips to avoid being victimized by this scam:

  • Never give money or personal information to someone with whom you don’t have ties and did not initiate contact with first.
  • Trust your instincts: if an unknown caller pressures you, or says things that don’t sound right, hang up.
  • If concerns remain about the caller’s claims, verify the information with the appropriate law enforcement agency or court officials.

If you are a victim of a phone or online scam, you should file a complaint with the FBI’s Internet Crime Complaint Center here.

If at anytime you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: Kara Seymour for Patch.com

New Scam Alert: Caller ID Spoofing

Scammers are now using fake caller ID information to trick you into thinking they’re someone who can be trusted. The practice is called caller ID spoofing, and scammers can basically fake anyone’s phone number and allow you to think they are a representative from a company.

There are even reports that scammers are spoofing the FTC’s Consumer Response Center phone number (877-382-4357). But don’t let that stop you from reporting scammers — it’s still safe to call the FTC Consumer Response Center, and it’s also safe to report scammers online.

If you’ve submitted a report or request to the FTC’s Consumer Response Center, the FTC might call you for additional information. But they won’t call you from 877-382-4357. And the FTC will never ask for money or for sensitive information such as your Social Security Number, date of birth, or bank account information.

Scammers are constantly picking new phone numbers to spoof. Here are a few tips for staying ahead of scammers and their unexpected calls:

  • If you get a strange call from a government phone number, hang up. If you want to check it out, visit the official (.gov) website for contact information.
  • Don’t give out or confirm your personal or financial information to someone who calls.
  • Don’t wire money or send money using a reloadable card. In fact, never pay someone who calls out of the blue, even if the name or number on the caller ID looks legit.
  • Feeling pressured to act immediately? Hang up. That’s a sure sign of a scam.

If you’ve gotten a call from a scammer, with or without fake caller ID information, report it to the FTC.

If at anytime you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. Remember that First Financial will never call and ask you for any sensitive information over the phone. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: https://www.consumer.ftc.gov/blog/2017/10/call-877-382-4357-hang?utm_source=govdelivery