Tag Archives: Important Alerts and Scams

Paying a Bill Online? Watch Out for Bill Pay Impersonators

Posted on by
Reply

Paying a bill online should be simple. You search for the biller, find their payment page, enter your information, and you’re done. But that quick online search could take you somewhere you didn’t mean to go.

Bill pay impersonators and misleading third-party payment services can use online search results to make their websites appear to be an official payment option for a utility company, medical provider, government agency, or other organization. If you aren’t paying close attention, you could give sensitive information to the wrong company or pay unexpected fees.

Before you click “Pay,” take a few extra seconds to make sure you’re in the right place.

How Do Bill Pay Impersonators Work?

Imagine you need to pay a utility bill. Instead of typing the company’s website address into your browser, you instead search online.

The first result looks legitimate, so you click on it.

The catch? That result may be a paid advertisement from a company that isn’t actually affiliated with your utility provider.

According to the Federal Trade Commission, some companies have used paid search ads to make consumers believe they were using an official payment channel when they were actually visiting a separate third-party service.

The website may prominently display the biller’s name or otherwise look convincing enough that you don’t realize you’ve left the company’s official website.

You may only discover the difference after you’ve submitted your payment, encountered an unexpected fee, or had trouble confirming whether your bill was paid.

A Search Result isn’t Necessarily an Official Website

One of the biggest challenges is that paid advertisements can appear above regular search results.

Seeing a familiar company name at the top of Google, Bing, or another search engine doesn’t automatically mean the link is from that company.

Before clicking, check for labels like “Sponsored” or “Ad.” These labels don’t necessarily mean the advertiser is fraudulent, but they do indicate that the result was paid for rather than appearing organically.

Take a moment to check the website address as well. Scammers and misleading services may use web addresses that resemble a legitimate company’s domain but include extra words, unusual spellings, or other subtle differences.

Safer Ways to Pay Bills Online

A few simple habits can help you avoid ending up on the wrong payment site.

Go directly to the biller’s website.
If you already know the company’s website address, type it directly into your browser rather than searching for it each time.

Use a trusted bookmark.
After verifying a company’s official website, bookmark its payment page for future use.

Use the company’s official app.
If the organization offers a mobile app, download it from your device’s official app store and verify the developer before signing in.

Check the web address before entering any information.
Look at the full URL and make sure you’re on the site you intended to visit before entering account, card, or banking information.

Be cautious with sponsored search results.
Scrolling past paid advertisements is usually a smart idea.

Review payment details before submitting.
Check the biller’s company name, payment amount, and any added service fees before authorizing the transaction.

Consider Paying Bills Through Your Financial Institution

One of the safest ways to pay eligible bills online is through your financial institution’s online bill pay service.

Members of First Financial can utilize our Online Bill Pay, add billers, schedule payments and set up future or recurring payments through Online Banking or the First Financial Mobile App.*

Using a familiar, trusted platform can also save you time from repeatedly searching online for various bill payment websites.

What if You’re Not Sure You Used the Right Payment Website?

If you realize you may have entered payment or financial information on a suspicious website, act quickly.

Contact the company you intended to pay using contact information from a trusted source, such as a previous statement or its verified website, to confirm whether your payment was received.

You should also review your bank or credit card activity for unfamiliar transactions. If you shared financial information or notice suspicious activity, contact your financial institution or card issuer as soon as possible.

If you believe you encountered a scam or deceptive business practice, you can also report it to the Federal Trade Commission at ReportFraud.ftc.gov.

Pause Before You Pay

Online bill payment is convenient, but that convenience can sometimes make it easy to click the first search result without taking a closer look.

Before entering your account or payment information, verify the website, check the URL, and make sure you’re dealing directly with the company you intended to pay.

Those few extra seconds can help protect both your money and your personal information. For more ways to stay a step ahead of scams, visit the Important Alerts & Scams section of our First Scoop Blog.

First Financial members can securely manage eligible bill payments through Online Banking and the First Financial Mobile App. Visit our Digital Services page to learn more about Online Bill Pay and other convenient ways to manage your finances online.*

*You must have an account at First Financial Federal Credit Union (serving Monmouth and Ocean Counties in NJ), and be enrolled in online banking, to use our mobile app or online banking services. Data rates may apply. Check with your mobile phone carrier for details. A First Financial membership is available to anyone who lives, works, worships, volunteers or attends school in Monmouth or Ocean Counties. A $5 deposit in a base savings account is required for credit union membership prior to opening any other account. Other terms & conditions may apply, see credit union for details.

Protect Your Business from an Email Compromise Scam

Posted on by
Reply

Email keeps your business moving. You use it to talk with employees, work with vendors, approve purchases and manage payments. Scammers know it too, and they build their scams around that trust.

Business email compromise or BEC, is a scam where criminals send messages that appear to come from a trusted source, then use that trust to get you to send money or share sensitive information.

According to the FBI, these scams take on many forms. You might receive what looks like an updated invoice from a longtime vendor. An employee might get an urgent request that seems to come from a company executive. A scammer might even insert themselves into an existing conversation about a payment or invoice.

The message may seem legitimate initially. Knowing the warning signs can help safeguard your business.

Understand How Business Email Compromise Works

Business email compromise succeeds because scammers make their messages look familiar. They may create an email address or website that closely resembles a legitimate one, sometimes changing only a letter or two. They may also use phishing emails to gain access to company accounts, calendars, or other information that makes a future scam more convincing.

The FBI also warns that criminals can use malicious software to access legitimate email conversations about billing and invoices. That access lets them time fraudulent payment requests to fit naturally into an existing conversation.

A suspicious email will not always come from someone you have never heard of. It may appear to come from someone or a company you work with regularly.

Look Closely Before You Click or Pay

Small details can reveal a fraudulent message. Before responding to an unexpected email, look closely at the sender’s full email address, any URLs in the message, and the spelling throughout. Scammers often utilize small changes that are easy to miss when you are moving quickly.

Be especially cautious with messages asking you to:

  • Change an account number or payment method
  • Send a wire transfer or other payment
  • Purchase gift cards
  • Update or verify account information
  • Open an unexpected attachment
  • Act immediately or keep the request confidential

Urgency should slow you down, not speed you up. The FBI advises extra caution whenever someone pressures you to act quickly.

Verify Payment Changes Another Way

One of the most important steps your business can take is verifying changes involving money independently.

If a vendor emails new payment instructions, or someone requests an unusual purchase or transfer, do not rely on the email alone. Contact the person or business using a phone number you already have on file, not one included in the message.

Make that extra verification step part of your normal process. It helps employees feel comfortable slowing down, even when a request appears to come from a manager, executive, or longtime business partner.

Protect Your Business Accounts

Good account security adds another layer of protection. Enable multi-factor authentication (MFA) on all accounts that support it. This adds an extra verification step during login, rather than relying only on a password.

Be careful about the information you and your employees share publicly too. Personal details posted online or on social media can give scammers what they need to guess passwords, answer security questions, or make a fraudulent message look more convincing.

When an unsolicited email or text asks you to update or verify your account information, do not click the link. Go directly to the company’s website or contact the company using information you already trust.

Be Careful with Attachments

Treat an unexpected attachment with the same scrutiny as an unexpected payment request. Avoid opening attachments from people you don’t know, and stay cautious even when a familiar contact forwards one. If something feels off, confirm with the sender before opening it.

A quick check takes a few minutes. Recovering from a fraudulent payment or a compromised business account can take much longer.

If You Think Your Business Has Been Targeted, Act Quickly

If you believe your business sent money because of a business email compromise scam, contact your financial institution right away.

Report business email compromise scams to the FBI’s Internet Crime Complaint Center at IC3.gov as well.

Even if a suspicious email does not lead to a payment, use it as a chance to review what happened and make sure everyone involved knows what to watch for next time.

If you believe your First Financial business account has been targeted in a BEC scam, contact us directly at 732-312-1500.

A Few Extra Minutes Can Protect Your Business

Email is an essential business tool, but convenience should not replace verification. Take a closer look whenever a request involves money, account information, or an unexpected change in procedure. Verify unusual requests through a separate communication method, protect your accounts with multi-factor authentication, and stay cautious when someone pressures you to act immediately.

When something doesn’t look or feel right, slowing down and confirming the request is one of the simplest ways to protect your business. For more on the tactics scammers are using right now, visit the Important Alerts & Scams page of our First Scoop Blog.

Received a Text About Unpaid Tolls? It’s a Scam

Posted on by
Reply

Cash-free toll lanes have improved driving convenience, but they also have led to a surge in text message scams. If you’ve gotten a message claiming an unpaid toll, you’re not alone. Many drivers nationwide, including in New Jersey – have reported similar suspicious texts.

How the Scam Works

Scammers will send a text pretending to be from a toll collection service such as E-ZPass, claiming you owe a balance and that your account will be suspended if you don’t pay immediately. The message usually includes a link that leads to a fake payment site designed to steal your personal and financial information.

These messages can sometimes make you feel a false sense of urgency, encouraging you to act quickly without giving yourself time to think. That’s exactly what they want. Scammers rely on panic so you’ll click before you even question the message.

Where do scammers get your number in the first place? Often from data breaches, people-search websites, or lists purchased on the dark web. They also rely on caller and sender ID spoofing to make a text look like it’s coming from a legitimate short code, so the fact that a message appears to come from “E-ZPass” tells you nothing about who actually sent it. Because these lists are typically bought in bulk and sent out to thousands of numbers at once, you may get a toll scam text even if you don’t own a car, don’t have an E-ZPass account, or have never driven through the state named in the message.

What a Scam Text Might Look Like

Below are two examples of the kind of unpaid toll scam texts you might receive. Details like the agency name and link will vary, but the pattern typically stays the same:

“E-ZPass: Your account has an unpaid toll of $6.99. To avoid a late fee and possible suspension of driving privileges, pay now: ezpass-nj-tollpay.com. Reply within 24 hours.”

“Toll Services: Final notice. Outstanding balance on your account will be sent to collections and may affect your credit if unpaid. Settle now: tollpay-notice.net”

Notice the pressure tactics in both message examples: A small, believable dollar amount, a countdown, and a threat if you don’t act. The link is also the giveaway. A genuine E-ZPass New Jersey link will appear as ezpassnj.com, not a lookalike domain.

Red Flags to Watch Out For

  • Receiving a text at all. Most toll agencies don’t text final payment reminders – they typically will bill through your account, email, or regular mail.
  • The message threatens fines, legal action or license suspension if you don’t pay right away.
  • The link looks slightly off. Scammers often use web addresses that are close to, but not quite – the real toll agency’s website.
  • The sender’s number looks unusual, such as an international number, or the greeting is generic (“Dear Customer”) instead of using your name.
  • You’re asked to pay through an unusual method, like a gift card or wire transfer.

Other Toll Scam Variations to Know

E-ZPass is the most commonly impersonated toll brand in our region, since it covers tolls throughout New Jersey and much of the Mid-Atlantic and Northeast. However, it isn’t the only one scammers borrow. Similar scam texts have circulated using the names of FasTrak in California, I-PASS in Illinois, SunPass in Florida, and Peach Pass in Georgia. If you receive a “toll violation” text referencing a state or toll system you’ve never used, that alone is a strong sign the message is fraudulent.

What to Do if You Get One of These Texts

  • Don’t click the link or reply to the message, even to say “stop.”
  • Check your account directly. Login to your toll account through the official app or website, or call the customer service number listed there – not one included in the text.
  • Block the sender to help prevent future attempts.
  • Report the scam to the Federal Trade Commission at https://reportfraud.ftc.gov/, or file a complaint with the FCC.
  • If you already clicked the link and entered any personal or financial information, contact your financial institution right away.

Quick Questions, Quick Answers

Will E-ZPass text me about payment collection? No. E-ZPass and most other toll agencies don’t send final payment reminders by text. If your account is genuinely past due, you’ll typically see it reflected in your account balance, an email or physical mail. Learn more about NJ E-Z Pass text scams from the NJ Turnpike Authority.

How do I check if I actually owe a toll? Go directly to your toll agency’s official website or app and login to check your balance. Don’t use a link or number provided in a text message that you weren’t expecting.

I already clicked the scam link. What now? Don’t panic, but do act quickly. If you entered any account numbers, card details, or your Social Security Number – contact your financial institution right away. You may also want to consider placing a fraud alert or credit freeze with the three major credit bureaus. If you only clicked the link but didn’t enter information – it’s still a good idea to run a security scan on your device, since some phishing links attempt to install malware in the background.

The safest scam prevention habit is a simple one: Treat any unexpected text asking you to click a link and pay immediately as suspicious by default, whether it claims to be about a toll, a package delivery, or an account alert. Verifying independently through an app, website or phone number you already trust – takes an extra minute, but closes the door on nearly every version of this scam.

At First Financial, keeping your accounts and personal information safe is always top priority. If you ever receive a suspicious message referencing one of your First Financial accounts, give us a call at 732.312.1500 or stop by your local branch.

For more tips on spotting scams, check out our Important Alerts and Scams collection on our First Scoop Blog.

Don’t Get Scammed by Fake Airline Customer Service

Posted on by
Reply

A canceled flight or last-minute schedule change can leave you scrambling for help. Scammers know travelers are stressed and looking for a fast solution, so they have been known to create fake airline customer service numbers that appear in online searches, advertisements and deceptive websites.

The person who answers may sound professional, use the airline’s name and ask for details that seem connected to your reservation. Before you share personal information or make a payment, take a moment to confirm that you have reached the airline through an official channel.

How the Scam Works

The scam often begins when a traveler searches online for an airline’s phone number after a delay, cancellation or booking problem. A fraudulent number may appear near the top of the results, including in a sponsored listing. The traveler calls and reaches someone pretending to represent the airline.

The scammer may ask for your booking confirmation, credit or debit card number, passport details or other personal information. They might claim you need to pay a fee immediately to rebook your flight, protect your seat or receive a refund. Some scammers also direct travelers to a fake website or ask them to download software that gives the scammer remote access to a phone or computer.

Watch for These Warning Signs

  • The representative may pressure you to pay immediately or tells you that your reservation will be lost if you don’t.
  • You are asked to pay by gift card, wire transfer, cryptocurrency or a peer-to-peer payment app.
  • The caller requests your online banking password, PIN or one-time security code.
  • You are told to download an app or remote-access software, so the representative can “help.”
  • The person cannot confirm basic reservation details, but continues asking you for sensitive information.
  • The website address is misspelled, contains extra words or does not match the airline’s official domain.

A legitimate airline may need information to confirm your reservation and may charge a valid fare difference or service fee. The key is to verify that you are communicating with the airline before sharing information or approving a payment.

How to Contact an Airline Safely

Use the Airline’s Official App or Website: Open the airline’s mobile app or type its known website address directly into your browser. Avoid clicking a search advertisement simply because it appears first.

Check Your Travel Documents: Your confirmation email, boarding pass or original booking receipt will typically include verified contact details. Be cautious with messages that arrive unexpectedly and direct you to a new phone number or link.

Ask for Help at the Airport: When you are already at the airport, visit the airline’s customer service desk or ask a uniformed employee where to get assistance.

Be Careful on Social Media: Scammers also create fake airline profiles and contact travelers who post publicly about delays or cancellations. Do not move the conversation to a private message or share reservation details until you verify the account through the airline’s official website.

What to Do if You Shared Information

End the conversation and contact the airline through a verified channel. If you provided financial information or approved a suspicious payment, act quickly.

  1. Contact your financial institution or card issuer and explain what happened.
  2. Lock or turn off the affected card and review recent transactions.
  3. Change compromised passwords from a trusted device and enable multifactor authentication.
  4. Report unauthorized activity and keep copies of related messages, receipts and call details.
  5. Consider a fraud alert or credit freeze if you exposed sensitive information.

First Financial members can use First Financial Wallet to lock eligible First Financial cards, set transaction controls, and dispute transactions.* You can also review our fraud prevention guide and additional identity theft information in our online resources, or visit the Important Alerts & Scams section of our First Scoop blog to stay up to date on the latest scams.

If you notice suspicious activity involving a First Financial account, call 732-312-1500 or visit your local branch. A few minutes spent verifying contact information can help keep a frustrating travel problem from becoming a financial one.

*Data rates may apply. Check with your mobile phone carrier for details. First Financial Wallet is available through the First Financial Mobile App and Online Banking.

Article Sources: Consumer Affairs | Federal Trade Commission 

Advance Fee Scams: Warning Signs and How to Protect Yourself

Posted on by
Reply

An advance fee scam typically involves a promise of a loan, credit card or cash advance in exchange for an upfront payment. Once the fee is paid, the promised funds never arrive.

According to data from the Federal Trade Commission (FTC), consumers lose billions of dollars to fraud each year. As scammers become increasingly sophisticated, understanding common warning signs can help protect your finances and personal information. Understanding how these scams work can help you protect your finances and avoid becoming a victim.

What is an Advance Fee Scam?

An advance fee scam occurs when a person or company claims they can provide a loan, credit card or financial service, but requires payment before delivering the promised funds.

The fees may be described as:

  • Loan processing fees
  • Insurance fees
  • Application fees
  • Security deposits
  • Administrative costs

In many cases, scammers claim the payment is required to guarantee approval, even if you have poor credit or limited borrowing history. Once the fee is paid, the promised money never arrives.

What are Some Warning Signs of an Advance Fee Scam?

Recognizing these common red flags can help you avoid fraudulent offers.

Guaranteed Loan Approval: Be cautious of any “lender” that guarantees approval without reviewing your financial information. Legitimate financial institutions evaluate several factors such as income, credit history, and repayment ability before making lending decisions.

Requests for Upfront Payment: One of the most common indicators of an advance fee scam is a request for payment before receiving loan proceeds. Remember this simple rule: Never pay money to receive money.

Pressure to Act Quickly: Scammers often create a sense of urgency by claiming an offer is available for a limited time or that immediate action is required. Pressure tactics are designed to prevent consumers from researching the offer or asking questions.

Unsolicited Loan Offers: Unexpected emails, text messages, social media messages or phone calls offering guaranteed loans should be treated with caution.

Requests for Unusual Payment Methods

Be wary if someone asks you to pay using:

  • Gift cards
  • Wire transfers
  • Cryptocurrency
  • Peer-to-peer payment apps

These payment methods can make it difficult to recover lost funds.

How Can You Protect Yourself from Loan Scams?

Before applying for any loan or cash advance, take these precautions:

Verify the Lender: Research the company online and confirm that it has a legitimate website, physical address and customer service contact information.

Read Reviews and Check Credentials: Look for independent reviews and verify that the lender operates legally in your state.

Protect Personal Information: Do not provide sensitive personal or financial information to unsolicited callers, emails or text messages.

Review Loan Terms Carefully: Take time to understand the loan terms, fees, and repayment requirements before signing any agreements.

What Should You Do if You Suspect a Scam?

If you believe you’ve encountered a loan scam:

  1. Stop communicating with the individual or company.
  2. Do not send additional money or information.
  3. Monitor your financial accounts for suspicious activity.
  4. Change passwords if personal information may have been compromised.
  5. Report the incident to the appropriate consumer protection authorities, such as the FTC.

Taking action quickly can help limit financial losses and protect your personal information.

Frequently Asked Questions

Are Upfront Loan Fees Legal? Some legitimate loans may include fees that are disclosed within the loan agreement. However, lenders generally do not require consumers to send money before receiving loan funds.

Can Scammers Use Fake Lender Websites? Yes. Fraudsters often create professional-looking websites, emails, and advertisements that mimic legitimate financial institutions. Always verify a lender’s contact information and reputation before sharing personal information or applying for a loan.

What is the Biggest Warning Sign of an Advance Fee Scam? A request for payment before receiving a loan is one of the most common warning signs. If a lender asks for money upfront, take time to verify the legitimacy of the offer before proceeding.

How Can I Verify a Lender is Legitimate? Before applying for a loan, research the lender’s website, verify contact information, read customer reviews and confirm that the company is authorized to operate within your state. Legitimate lenders are transparent about their products, fees, and lending requirements.

Protecting Your Financial Future

Financial scams continue to evolve, making awareness one of the most effective tools for protecting yourself.

Before accepting any loan offer, take time to verify the lender, review the terms, and ask questions. If an offer seems too good to be true, it may be worth taking a closer look.

At First Financial, we’re committed to helping our members make informed financial decisions and protect themselves from fraud through education, trusted financial guidance, and responsible banking practices.

Remember: Legitimate financial institutions will clearly explain their products, disclose applicable fees, and give you time to review your options before making a decision.

To continue learning about financial wellness and protecting yourself from fraud, visit our Tools & Publications page or explore related articles on our First Scoop Blog, including resources on financial security, identity theft protection, and smart money management. If you have questions about our financial products, account security, or potential scams, our team is here to help – contact us today.