Caller ID Spoofing Can Also Include Equifax Data Breach Fraudsters

You recently saw our blog post about Caller ID Spoofing, a new scam where fraudsters fake a company phone number and pretend they are a representative from that organization. This scam can also include fraudsters posing to be Equifax representatives who are calling to confirm stolen information or gain your personal financial information in the wake of the scam.

Ring, ring. “This is Equifax calling to verify your account information.” Stop. Don’t tell them anything. They’re not from Equifax. It’s a scam. Equifax will not call you out of the blue.

That’s just one scam you might see after Equifax’s recent data breach. Other calls might try to trick you into giving your personal information. Here are some tips for recognizing and preventing phone scams and imposter scams:

  • Don’t give personal information. Don’t provide any personal or financial information unless you’ve initiated the call and it’s to a phone number you know is correct.
  • Don’t trust caller ID. Scammers can spoof their numbers so it looks like they are calling from a particular company, even when they’re not.
  • If you get a robocall, hang up. Don’t press 1 to speak to a live operator or any other key to take your number off the list. If you respond by pressing any number, it will probably just lead to more robocalls.

If you’ve already received a call that you think is fake, report it to the FTC.

If you gave your personal information to an imposter, it’s time to change any compromised passwords, account numbers or security questions.

Still wondering what to do if you think your personal financial information may have been compromised in the Equifax Data Breach?

Review your credit report. Once a year, you can get a credit report for free by visiting annualcreditreport.com. This will include information from all three credit bureaus: Equifax, Experian, and TransUnion.

Consider a Credit Freeze. If you aren’t applying for any new loans, consider freezing your credit. This prevents fraudsters from applying for new accounts in your name – while preserving access for lenders you already use. To place a freeze on your credit, you must submit to all three bureaus:

Create a fraud alert. If you opt against a credit freeze, consider putting a fraud alert on file. This will warn creditors that your information was compromised, and require them to verify your identity before establishing any new accounts. Instructions are available here.

Consider a Credit Monitoring Service. If you’re concerned about identity theft, enroll in Sherpa identity theft protection from First Financial. The best part? You can enroll right online, 24/7. You can trust in First Financial and Sherpa to help keep your personal information protected. Packages begin at just $5.99 per month – so click here to enroll today!

More information is available from the Consumer Financial Protection Bureau here.

Article Sources: https://www.consumer.ftc.gov/blog/2017/09/equifax-isnt-calling?utm_source=govdelivery and https://www.menendez.senate.gov/

 

Important Alert: New Jersey Jury Duty Scam

The FBI is warning residents in New Jersey of a phone scam that involves callers impersonating law enforcement officials who demand money, telling the intended victim they failed to appear for jury duty.

According to the FBI’s Philadelphia and Newark divisions, the scammers say they’re with one of several law enforcement agencies, including the U.S. Marshals Service or a county sheriff’s department.

They accuse the call recipient of failing to appear for federal or local jury duty and warn that an arrest warrant has been issued. They tell the intended victim they need to pay a fine through a prepaid debit card, then tell them to provide them with the card information, according to information from the FBI.

“Recent reports indicate these scammers have been targeting New Jersey residents; variations of the ‘jury duty’ scam have been documented in numerous other states, as well,” the FBI said.

The FBI offered the following tips to avoid being victimized by this scam:

  • Never give money or personal information to someone with whom you don’t have ties and did not initiate contact with first.
  • Trust your instincts: if an unknown caller pressures you, or says things that don’t sound right, hang up.
  • If concerns remain about the caller’s claims, verify the information with the appropriate law enforcement agency or court officials.

If you are a victim of a phone or online scam, you should file a complaint with the FBI’s Internet Crime Complaint Center here.

If at anytime you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: Kara Seymour for Patch.com

New Scam Alert: Caller ID Spoofing

Scammers are now using fake caller ID information to trick you into thinking they’re someone who can be trusted. The practice is called caller ID spoofing, and scammers can basically fake anyone’s phone number and allow you to think they are a representative from a company.

There are even reports that scammers are spoofing the FTC’s Consumer Response Center phone number (877-382-4357). But don’t let that stop you from reporting scammers — it’s still safe to call the FTC Consumer Response Center, and it’s also safe to report scammers online.

If you’ve submitted a report or request to the FTC’s Consumer Response Center, the FTC might call you for additional information. But they won’t call you from 877-382-4357. And the FTC will never ask for money or for sensitive information such as your Social Security Number, date of birth, or bank account information.

Scammers are constantly picking new phone numbers to spoof. Here are a few tips for staying ahead of scammers and their unexpected calls:

  • If you get a strange call from a government phone number, hang up. If you want to check it out, visit the official (.gov) website for contact information.
  • Don’t give out or confirm your personal or financial information to someone who calls.
  • Don’t wire money or send money using a reloadable card. In fact, never pay someone who calls out of the blue, even if the name or number on the caller ID looks legit.
  • Feeling pressured to act immediately? Hang up. That’s a sure sign of a scam.

If you’ve gotten a call from a scammer, with or without fake caller ID information, report it to the FTC.

If at anytime you feel any of your First Financial accounts may have been compromised in a similar scam, contact our Member Relationship Center right away at 732.312.1500. If your First Financial credit or debit cards were compromised in a scam, call the 24/7 toll-free number on the back of your card to report the incident and replace your card. Remember that First Financial will never call and ask you for any sensitive information over the phone. All important phone numbers for members can be found on our website: https://www.firstffcu.com/contact-us.htm

Article Source: https://www.consumer.ftc.gov/blog/2017/10/call-877-382-4357-hang?utm_source=govdelivery

 

Online Dating Scams are Actually a Thing, and They’re Breaking Hearts & Bank Accounts

It’s happening all over, and closer to home than you may think. Scammers are continuing to fake online dating profiles using photos of other people to lure their victims. Once connected, the scammers often say they are from the U.S., but are temporarily traveling or working overseas. The scammers quickly profess their love and tug at the victim’s emotions with fake stories and their need for money. The victims often send the scammers money or provide online banking login credentials.

How exactly does the scam work?

  • The scammers start by stealing a photo from an internet site. The photos are usually of beautiful people and the quality of the photo is high. The photos are usually stolen from modeling sites with reports that 90% of them are being taken from a site called Focus Hawaii. If you think you are being scammed, go to this site and browse the photos to see if the person you are communicating with has a photo on this site. They also use photos taken from profiles of other people on dating sites.
  • They then post ads with fake profiles on online dating sites. They also lurk in chat rooms and social networking sites, as well as Christian and other religious-based dating sites. They spend months chatting up and luring their targets with online intimacy.
  • The scammers often pretend to be foreign specialists temporarily working in Nigeria or other overseas countries. A slight twist is when the scammer pretends to live in the same country as the victim, and once a relationship has developed, then advise them they are required to go to another country on an assignment. Some of the sophisticated scammers send flowers or candy (from stolen credit cards) to capture hearts.
  • The fraudsters then choose one of two approaches: 1) They either state that their employer pays them with money orders and they can’t cash them in Nigeria or are having trouble cashing them. Then they convince their “soul mate” to bank this deposit into their bank account and wire them the money via Western Union. They are often told to keep some of the money for their trouble (which helps to build trust and also helps make them an accessory to the crime!). After a few weeks the bank will tell the victim that the money orders are fraudulent and then the victim is often responsible for paying the money back to the bank, and in some cases face charges of passing a counterfeit instrument. 2) The alternative is to say their wallet has been stolen, the hotel owner is holding their passport, customs officials need to be bribed, new plane tickets are needed, they have been victimized and put in jail and need money to get out, or they need money for some sort of medical reason, etc. The reasons for needing the money will sound plausible. Regardless of the story, the end result is the same – the cyber “soul mate” is asked to send money!

Other romance scam variations include:

  • Victims are duped into providing online banking login credentials to the scammers under the guise that the scammers do not have access to financial services in the foreign country in which they are traveling or working. The scammer logs into the account and uses the account-to-account external transfer feature to initiate debits against accounts at other institutions pulling funds into the victim’s account for deposit. The victim is instructed to send the funds to the scammer by Western Union or MoneyGram. The debits are subsequently returned to the financial institution as unauthorized up to 60 days later.
  • The scammer logs into the victim’s account and accesses the mobile remote deposit capture service, or requests access if it isn’t already set-up. The scammer transmits images of fraudulent checks via mobile deposit to the victim’s account. Again, the victim is instructed to send the funds to the scammer by Western Union or MoneyGram. The checks are subsequently returned unpaid.

How to spot an online dating scam:

  • The person is new to the website or hasn’t logged in many times.
  • The photo looks like a model or looks “too good to be true.”
  • The profile is not well written.
  • You are asked to go straight from on-site messaging to off-site messaging such as regular email or instant messaging (to prevent the dating site administrators seeing the evidence of the scam and kicking them off the site).
  • The scammer will find ways to get out of live video chat because the profile photo is fake. The excuse they will give is their lack of technology overseas. They will usually hire someone with an appropriate accent for the phone calls.

Follow these specific safeguards for online dating:

  • Research the person’s photo and profile using online searches to see if the material has been used elsewhere.
  • Go slow and ask lots of questions.
  • Beware if the individual seems too perfect or quickly asks you to leave a dating site or Facebook to go “offline.”
  • Beware if the individual attempts to isolate you from friends and family, or requests inappropriate photos or financial information that could later be used to extort you.
  • Beware if the individual promises to meet in person, but then always comes up with an excuse why he or she can’t. If you haven’t met the person after a few months, for whatever reason, you have good reason to be suspicious.
  • Never send money to anyone you don’t know personally!

What to do if you suspect someone you are communicating with is an online scammer:

  • Once the scammer has asked for money, stop all communication with them.
  • Report them to the dating site.
  • No matter how trustworthy they may seem, DO NOT SEND THEM MONEY!
  • If you have already sent them money – your chances of getting it back are probably zero, but you should report the incident to your local police and the FBI’s Internet Crime Complaint Center (IC3).

T.H.I.N.K First because There’s Harm INot Knowing!

Article Sources:

https://www.fbi.gov/news/stories/romance-scams

http://www.watchforscams.com/nigerian-dating-scams.html

 

A Credit Freeze Won’t Help With All Equifax Breach Threats

If you’ve placed a security freeze on your credit reports at Equifax, Experian, TransUnion, and Innovis, that will help prevent fraudsters from opening new credit accounts in your name.

Freezing your credit report specifically at Equifax will also prevent crooks from registering as you at the government website “my Social Security,” and block them from attempting to steal your Social Security benefits. *Note: Setting up a credit freeze with Equifax will stop identity thieves from setting up a “my Social Security” account in your name.

But taking these steps won’t protect you against every identity fraud threat arising from the Equifax data breach.

With the information that hackers got, including access to Social Security numbers, birth dates, and an unspecified amount of driver’s license numbers, you need to take other steps to help lock down your finances.

Here are three important ways you can protect yourself.

Tax Refunds

With your Social Security number, crooks can file false income tax returns in your name, take bogus deductions, and steal the resulting refund. More than 14,000 fraudulent 2016 tax returns, with $92 million in unwarranted refunds, were detected and stopped by the Internal Revenue Service as of last March.

Though you are generally not liable for such fraud, if a criminal manages to change your tax records and receive your refund, it can take months to straighten out the mess.

How to protect yourself. The best defense is to obtain an Identity Protection PIN from the IRS, which is a code that must be filed with your legitimate return for it to be accepted. An identity thief can’t file the fraudulent return without your PIN.

But you can get a PIN only if a fraudulent return has previously been filed in your name, if the IRS determines that you’re an ID fraud victim, or if you live in a high tax-related identity theft locale such as Washington, D.C.; Florida; or Georgia.

The IRS did not yet say whether those affected by the Equifax breach would qualify for a PIN.

Andrew Mattson, a tax partner at the Moss Adams tax firm in Silicon Valley, recommends that taxpayers who don’t officially qualify for a PIN request one anyway, by filing a Form 14039, Identity Theft Affidavit (PDF). “Even if the IRS says no, your account will generally be flagged for additional monitoring for suspicious activity,” he says.

Mattson also recommends that you periodically view your IRS account information, which shows when returns were filed and which refund payments were made. Activity there—if it’s not yours—can be a sign of fraud. The balance updates every 24 hours, usually overnight, but there is a one- to three-week lag in the time it takes for refund payments to show up.

If you suspect fraud, contact your local IRS office using the Taxpayer Assistance Center Office Locator.

Health Insurance

Data from the Equifax breach can be used to steal your benefits from private health insurance, Medicare, or Medicaid when the identity thief uses your coverage to pay for their own medical treatment and prescriptions.

Many health insurers have internal special investigation units and anti‐fraud personnel to root out medical identity fraud, and if suspicious activity is detected, they’ll send email alerts to the policyholder, says Cathryn Donaldson, a spokeswoman for America’s Health Insurance Plans, the trade association of health insurers.

How to protect yourself. Get copies of your medical records from providers to establish the baseline of your health before your records are compromised. Increasingly, online patient portals make this easy to do. Check back regularly to see whether providers you didn’t use are listed and whether you’ve been charged for treatments you never received.

In addition, review your free annual MIB Consumer File, which contains medical and personal information about you reported by health, life, disability, and other member insurers. Do the same for your Milliman Intelliscript report, which tracks your history of prescription drug purchases.

The Federal Trade Commission also says consumers should ask each of their health plans and medical providers for the “accounting of disclosures” related to their medical records. That tells who got copies of your records from the provider. The law allows you to order one free copy from each medical provider every year.

If available, sign up for your insurer’s secure online portal, and regularly review the explanation of benefits, which shows which treatments you received when and from which providers. While there, sign up for fraud alerts via email or text message, which will keep you apprised of benefit payments.

Regularly review your credit report for medical collection accounts that don’t belong to you.

Your Driver’s License

Using your driver’s license number, identity thieves can create bogus driver’s licenses and hang their moving violations on you. With more work and information from phishing or further hacking, identity thieves can create bogus checks to pay a cashier, who “verifies” the shopper’s identity by writing your license number on the bad check.

If this happens to you, you may not discover how your license has been used until a police officer tells you, or perhaps, until a bank closes your account because of too many bounced checks.

How to protect yourself. Ask the motor vehicle department to give you a copy of your driving record; most states charge for this, usually about $10. To find out whether any bad checks are attributed to your driver’s license, request your free annual consumer report from each of the big three check verification companies: ChexSystems, Certegy, and TeleCheck.

If you find that your driver’s license is being used fraudulently, you can file a police report at your local police department and ask the motor vehicle department to flag your license number, which will alert law enforcement officers to be extra careful in identifying people they pull over with your license number. You should also request a new driver’s license number.

If you’re arrested or find criminal charges on your record, go to the Identity Theft Resource Center for advice on clearing criminal identity theft; if you find fraudulent checks on your record, follow the ITRC for advice on resolving checking account fraud. You can also call 888-400-5530 for free assistance.

Don’t wait until it’s too late! Be sure to enroll in First Financial’s Identity Theft Protection Program from SherpaThe best part? You can enroll right online, 24/7. You can trust in First Financial and Sherpa to help keep your personal information protected. Packages begin at just $5.99 per month – so click here to enroll today! Learn more about safeguarding your identity with our consumer identity theft protection guide.

Article Source: Jeff Blyskal for Consumer Reports