Recent Scam Alerts from TTCU
What to do if you replied to a fradulent email:
If you have replied to a phish email and provided confidential information to the scammer, please contact the nearest branch location so that The Tennessee Credit Union can take steps to help you protect your Credit Union account. If you provided information about any account you have with another credit union, you must contact them to safeguard that account.
Archived List of Scams Relevant to TTCU Members:
Scam messages via text! 10/29/11 Watch out for text messages received on your phone or by email supposedly from “NACHA”. A new one, with a message that your direct deposits have been disallowed, directs you to a bogus link where the scammer will ask for confidential information or possibly install malware on your computer or phone. The National Automated Clearing House Association is a professional organization associated with the ACH payment systems. It does not process transactions or in any way touch payments that flow through the system. NACHA would never send emails or texts directly to a consumer. If you receive one of these messages, do not follow any link; just delete the message. As always, call us if you have a question. If you have provided information to one of these scam messages, let us help you take steps to protect your account. Contact our Fraud Department immediately at 800-622-2535.
VISA/Mastercard Caller Scam 7/26/11 This one is a new twist on phone scams targeting credit cards.
You receive a call from a person who indicates they are with the security department of VISA or Mastercard and gives a badge number. Then the person says your card has been flagged due to unusual purchases and they are calling to verify the transactions. When you say that you did not make the purchase, they indicate they will start a fraud investigation and will credit your account. But then the person says they need to verify that you are in possession of your card. Could you turn it over and look for certain numbers. These numbers are the security codes you are asked for sometimes when making online purchases. If you give this person those numbers, real fraudulent charges will be made to your account, most likely online.
Many times we can avoid being a fraud victim just by using common sense. Yes, at times you may receive a call from your card processor. The real processors do watch for unusual transactions and may try to call you to confirm. But there is one big difference: the real processor would never ask for the security codes from the back of the card! Remember, fraudsters try to gain your confidence by appearing legitimate, so staying aware of the real security practices involved in protecting your debit or credit card can keep you from becoming a victim.
Increase in debit credit card fraud in Gallatin area 7/20/11 We have seen an increase in plastics fraud coming out of Florida affecting our Gallatin members. Gallatin police believe that it could be the work of a skimmer. We urge our members to pay close attention to ATMs and gas pumps when using them. Anything appearing abnormal should be reported to the Gallatin Police Department at 615-452-1313. Any suspicious activity on the member's account should also be reported immediately to the TTCU Fraud Department at 615-780-7728.
Bogus Email Alert from NACHA 5/24/11NACHA (the National Automated Clearing House Association) is alerting businesses and consumers about an ongoing (since February) fraudulent email that appears to be from NACHA. NACHA is a trade organization associated with the businesses that send/receive certain types of automated electronic payments. It does not actually process or touch business or consumer financial accounts, so it would never send any type of email regarding a transaction. The fraudulent emails appear to be from NACHA and typically makes reference to an ACH transfer, payment or transaction and contains a link or attachment that will infect the computer with malicious code when clicked on by the recipient. Some even contain a counterfeit logo and NACHA’s physical mailing address and phone number.
April 4, 2011
Here’s yet another reason to take extra care in opening and responding to emails. This one does not affect TTCU members as we do not use the targeted company, but it definitely pays to know which people and companies would have a legitimate reason to send you an email. Epsilon, which is the world’s largest distributor of permission-based emails serves over 2500 clients worldwide, including JP Morgan Chase, Citigroup, Capital One, Barclay’s Bank, Best Buy, Walgreens and Kroger. Epsilon is reporting that email addresses provided by its clients were exposed in an attack on the company’s email system. Although no personally identifiable information associated with emails was exposed, consumers should be aware of the potential for receiving phishing emails that try to obtain personal information for the purpose of committing fraud. If you have done business with, and provided your email address to one of the affected companies, you should receive a legitimate email from them regarding this issue. As always, just remember that companies with which you do business would not solicit an account number from you, and do not respond to any company’s request if you haven’t done business with them recently. You can always call the company in question (using phone number you’ve looked up- not one in an email message) about any suspicious email.
March 4, 2011
MasterCard Scam Alert: Please be aware of a current phishing scam that is supposedly from MasterCard. An automated system is calling members stating that they represent MasterCard and your card has been locked. The system prompts you to enter your 16 digit card number, expiration date, and PIN number. But remember, TTCU will never call, email, or send text messages requesting your card number, expiration date, and expecially not your PIN number. If you have received this call and provided your information, please immediately call to report your card as lost/stolen at 1-800-449-7728 or contact your local branch.
March 2011
Be advised that fraudsters will be working hard to trick flood victims, as well as those of us who were fortunate enough to have escaped unscathed, into providing your private financial information to them in an attempt to fraudulently use your account with The Tennessee Credit Union. Scammers tend to prey on those who are in a vulnerable state, as many in the mid-state are right now. We have already received reports of phish attempts via telephone. Some of the attempts have consisted of an automated call to the targeted victims' phones that states that debit cards or accounts have been blocked. The automated system then directs the victim to enter card numbers, account numbers, social security numbers, as well as other personal financial information. In some cases, our members have even received personal phone calls from live scammers. Above all else, remember that if the Tennessee Credit Union calls you about your account with us, we vill verify the information with you. We will not ask you to provide us with your information.
August 28, 2009
Bogus Federal Reserve Solicitation
The Federal Reserve Board on Wednesday warned consumers about fraudulent solicitations that appear to be made with the approval or involvement of the Federal Reserve, Federal Reserve officials, or other U.S. government officials. The solicitation promises bogus financial services or large sums of money in exchange for either payment or personal information that can then be used to access a consumer's bank account.
The Federal Reserve is advising consumers that it has no involvement in these solicitations. Consumers are strongly urged to verify the legitimacy of potential service providers before entering into a business transaction. Individuals seeking help with repairing their credit history, avoiding home mortgage foreclosure, finding mortgage refinance options, or managing their credit card debt should do business only with reputable service providers. Information related to these issues may be found on the Federal Reserve Board's website at: http://www.federalreserve.gov/consumerinfo.
Individuals who have or suspect they have been a victim of a scam should contact local law enforcement agencies. Information related to how to identify a fraud or scam may be found on the Federal Reserve Board's Consumer Help Center website at: http://www.federalreserveconsumerhelp.gov/.
July 30, 2009
Mystery Shopper Employment Scam
“Mystery Shopper” scams are on the rise again in Tennessee! A new recent report is a letter from a company called Manpower, which asks people to be mystery shoppers—claiming to pay $200 for the assignment.
The fraudsters posing as Manpower include a fraudulent check and asks the person to contact them immediately for detailed instructions. The assignment is to go to Walmart/Moneygram to complete a transaction within 48 hours. The mailing also includes a page with questions the individual is supposed to complete and fax to a toll free number. At the bottom of the letter they have placed logos of their “affiliates,” which include Macy's, Circuit City, Sams, Walmart, Best Buy, JC Penney and TJ Maxx. The individual is instructed to keep $200 for being a mystery shopper, use $50 to make a purchase, and is required to use the rest of the check (usually in the $3,000.00 to $4,000.00 range) for the Moneygram purchase and fees.
Mystery shopper scams have any number of variations and may seem legitimate with the logos of their alleged “affiliates” on the letter. Don’t be a victim! Just remember that ANY work-related offer that sends you an advance check and asks you to send part of it back (or to a third party) is suspect, and you will be liable for repayment of the funds to your financial institution when the check is returned as counterfeit.
March 26, 2009
HUD Scam Reported March 26, 2009
Please be aware of the following scam targeting borrowers who may be having trouble paying their mortgages.
A credit union reports that a member received a postcard with the title "Notices of HUD Rights" at the top. The postcard lists a toll-free foreclosure line to call (1-888-568-6026). It also indicates that "time is running out" to enter into a repayment plan. The back of the postcard has the following statement:
"As of January 19, 2001, the U.S. Department of Housing and Urban Development
(HUD) mandated that all borrowers who had loans governed by their loss mitigation
guideline be informed as to their rights to repayment programs. There may be other
options for those not governed by these guidelines. If you qualify, these programs
will allow the foreclosure to be stopped and the past due payments to be placed
at the end of the loan or paid over time. For information on what options may be
available to you, call the toll-free hotline as soon as possible."
The victim called the number and signed up for some sort of service that required them to send in $2,000. After the money was taken out of the member's account, the member brought the postcard in to the credit union.
The postcard does reference HUD, but a few indications exist that the sender is not affiliated with HUD. The front of the postcard states, "Courtesy of Foreclosure Relief Specialists," and in small print on the back is a disclosure that the company is not associated with HUD or their lender.
As always, be cautious of such companies that initiate contact with you. Check out the company before providing any confidential information or paying a fee. You can obtain information about legitimate HUD programs (by State) from HUD’s website at www.hud.gov.
February 11, 2009
Alert from CUNA Mutual Group about Economic Stimulus Scams
Identity thieves posing as representatives of the Internal Revenue Service are sending spam e-mails promising government economic stimulus packages.
One scam message asks the user to download an attachment that is masked as a form they must fill out and send to the IRS to receive their check. However, the document really is an identity theft tool that steals the personal information entered in the form.
Another scam promises more information on how to get “economic stimulus grants,” and tempts users with fake testimonials such as, “I found the grant I needed, filled out the forms and sent them in, and in about two weeks I received a check in my hand for $100,000.” This leads to a marketing-type site in which personal information such as salary range, e-mail address, mailing address, and date of birth is collected. The site purportedly claims that the user will get a free CD containing instructions for how to claim one of these grants, and credit card information must be entered for postage and handling costs. The only thing a site user will receive is a stolen identity.
The threat of fraud due to phishing attempts continues to be very active and fraudsters are increasing in sophistication. This type of activity shows no sign of slowing down. In these economic times, it is even more critical for all consumers to be educated on the various ways fraudsters try to obtain their personal information for financial gain and to always be on guard!
January 30, 2009
New Text Message and Email Scams
Credit Union National Association has reported a number of text message and email scams currently circulating under many subjects, including but not limited to:
• “Account Deactivation”
• “Account Status Alert”
• “Changes to Terms and Conditions”
• “Irregular Activity”
These e-mails and text messages ask that the customer call a number in order to have their account reactivated. Some may request that you leave callback information or provide your financial information directly. The message may indicate that your account is restricted, and if via phone, open with “Welcome to Credit Union Card Services.” You may be asked to follow directions to enter your account number, expiration date, and/or PIN.
All of these e-mails are fraudulent. Please do not respond to these messages.
The Credit Union National Association is the trade association for credit unions in the U.S. and does not maintain any type of customer/member financial information. Your financial institution would never solicit your personal identification information via email. If you did respond to such a solicitation, you should contact your financial institution directly using the local phone number provided by your financial institution.
January 23, 2009
New Trojan Attack Masquerades as News Report
There is a new trojan that might be received as an email message. The message claims to
be a CNN news report. The message prompts you to update the Adobe Flash Player to view the video. If you follow the prompt, it downloads a password-stealing Trojan and installs it to search for security credentials used for online banking or other financial accounts.
It is crucial for all consumers to be aware of the methods used by perpetrators to gain information. As usual, use caution before opening or viewing any email or attachment received from an unexpected source. If you suspect an item to be bogus, simply delete it.
January 20, 2009
Urgent Fraud Alert From National Credit Union Administration (NCUA)
A fraudulent email seeking credit card information (known as a "phishing fraud") has been circulating nationwide since 2 p.m. EST on Friday, January 16, 2009. This fraudulent phishing email appears to be from NCUA and contains a link purportedly to obtain a subscription for the NCUA Express Subscription Service. When that link is used, the recipient is directed to a "clone" of the NCUA Express Service site that seeks credit card information from those to whom the phish was sent. If you receive such an email, please ignore it, as it is fraudulent. The NCUA does NOT charge for the Express Subscription Service and does NOT solicit credit card information over the Internet. If you have questions or comments, please contact the NCUA Fraud Hotline at (800) 827-9650 or, during off duty hours, at (703) 728-0700.
December 22, 2008
CUNA Mutual Group reports phishing scam affecting member credit unions
The scam is a fraudulent attempt to capture card numbers. It is done via an email to direct cardholders to call an automated telephone service. The message indicates the member’s card has been deactivated. In order to activate the card, the message asks the member to call the provided “Card Activation Line” phone number and enter their 16-digit card number, expiration date and PIN.
Perpetrators attempt to get personal information in many ways, including the use of auto-dialers and text messages. Cardholders should remember to limit the release of personal information in order to protect themselves from fraud. If CO-OP Financial Services’ Card Member Security actually calls to verify activity, it limits questions to birth date, and the last 4 digits of card numbers and social security numbers as a means to confirm the identity of a member.
As always, you should remember that while the Credit Union’s card processor may call to verify unusual activity, they will not ask for critical information such as card numbers, expiration dates, or PIN. Please contact the financial institution that issued your card if you have any questions, or believe you have released inappropriate information to a scammer.
November 26, 2008
Bogus Airline Ticket Confirmation Phish Scam
A new email phishing scam seeks to plant malicious software on the computers of recipients who open an attachment purportedly related to the purchase of an airline ticket, using the names of various U.S. airlines including Northwest Airlines, Continental Airlines, Sun Country Airlines, US Airways, Allegiant Air, Delta Air Lines, Alaska Airlines, Midwest Airlines, and Hawaiian Airlines.
The email asks the recipient to confirm a ticket purchase they never ordered, by clicking on an attachment and printing the invoice and ticket. However, when the recipient clicks on the email, a malicious software program is downloaded onto the computer. The "malware" enables the fraudster to gain confidential information such as credit card access codes, Social Security numbers, and net banking passwords by allowing them remote access to the computer.
Airlines say there are a couple of things inside the mail that should warn people of the scam. The emails contain mistakes in spelling and grammar, and the formats in which the itineraries are presented are different than those used by the airlines.
Members should be aware that these emails are not coming from the airline. If the format does not look familiar to you, and you have not recently purchased a ticket, do not open the attachment. Delete the email immediately.
November 5, 2008
Fradulent Loan Solicitations
The Federal Reserve has issued an alert for consumers in regard to a fraudulent loan scheme in which consumers are being solicited for a non-existent Federal Reserve lending program. Under this scheme, the consumer is told that they can work through a broker to get access to a Federal Reserve program that extends large secured loans to consumers. They are required to deposit a large sum of money into a bank account as a “security” deposit in order to receive the loan.
The Federal Reserve does not directly sponsor consumer lending programs and has no involvement in this solicitation. Consumers are urged to verify the legitimacy of any potential service providers before entering into a transaction; do business only with reputable lenders and shop for most favorable terms.
Questions or concerns about this fraudulent solicitation may be addressed to the Federal Reserve Board Consumer Help Center at www.federalreserveconsumerhelp.gov or by calling (888) 851-1920.
October 31, 2008
Text Message Phishing Scam
CO-OP Financial Services has notified participating credit unions about a new phishing scam recently reported by a number of consumers.
The fraudulent attempt to capture card numbers is done with an automated text message in which the perpetrator(s) refer to themselves as “CO-OP Services Credit Union Customer Services Department” from a four digit phone number of 3693. The text message indicates that the member’s credit or debit card has unusual activity on their account, and in order to restore the member’s account access, the member should call 813.600.1551 and enter their 16-digit credit or debit card number along with three additional pieces of information linked to the member’s account.
CO-OP Financial Services would never refer to themselves as CO-OP Services Credit Union Customer Services Department, and would not send text messages to cardholders about their accounts. If they make or receive calls from cardholders, they identify themselves as the Card Member Security Department.
Use of text messaging is yet another way perpetrators attempt to get personal information. Do not respond to such messages; simply delete them. If you have responded and provided information related to your TTCU credit or debit card, please contact your local branch as soon as possible to take steps to protect your account.
October 10, 2008
TTCU Members Phished
Several of TTCU’s branches have received phone calls from members reporting a phish attempt to obtain credit card account information. The members had received phone calls from an automated system stating that their credit card with The Tennessee Credit Union had been revoked due to suspicious activity. The members were then instructed to enter their 16-digit card number.
The Tennessee Credit Union will never contact members requesting account numbers. If you have received a similar phone call asking for personal account information, call your local branch to report the attempt. Your branch can help you take the steps necessary to protect your accounts if a compromise is suspected.
In addition, if you have entered your credit card account information in response to this fraudulent phish call, immediately report your credit card as stolen by calling (800) 449-7728.
August 21, 2008
Representative Debra Maggart alerts seniors in community to TennCare fraud
HENDERSONVILLE, TN (August 21, 2008) – Representative Debra Maggart (R-Hendersonville) announced today that she has been contacted regarding a TennCare fraud scheme that has apparently been reported in several communities. The fraudulent misrepresentation of TennCare was reported to the Office of the Inspector General (OIG) and the Tennessee Bureau of Investigation (TBI). Representative Maggart said she wanted to alert seniors in her community and district to the fraudulent activity, and encourage those with information to report it.
Representative Maggart was notified that a person (or persons) posing as representatives of TennCare are going into the homes of seniors who are preparing to enter nursing homes and assisted living facilities, and are advising them that they must sign their homes over to the state.
They present a nameless TennCare business card, and asked the individuals to sign documents that would release their home to the state. TennCare stressed in an email, warning representatives about the fraudulent activity, that TennCare does not ever ask people to sign over their homes in order to receive services.
“Seniors need to be aware of these criminals who are trying to take advantage of their fragile situation,” stated Rep. Maggart. “If someone approaches you about this, please do not sign any documents, and report it immediately to local law enforcement, the TBI or the OIG.”
If you have any information or are approached by anyone, contact the OIG to report the incident at 1-800-433-3982 or visit http://www.tncarefraud.tennessee.gov/.
August 7, 2008
New Phish Email: "Your Credit Union Rewards You."
CUNA reports a new phishing email in circulation that references a new service, "Your Credit Union Rewards You." The email contains a link for the recipient to visit to collect a reward. Neither CUNA nor CUNA Strategic Services offers such a program. Do not provide any information to these sites.
The Credit Union National Association is the trade association for credit unions in the US. CUNA does not maintain any type of customer/member financial information. Additionally, your financial institution would never request personal identification information over the phone or via an email solicitation.
If you responded to this email, please contact your local TTCU branch directly to take steps to protect your account.
July 18, 2008
Bogus CO-OP Network Phish Email
If you receive an email that purports to be from CO-OP Network asking for cardholder information, please note that the email is fraudulent. CO-OP Network never contacts credit union members directly and never requests personal account information. The email should be considered a deceitful attempt to obtain cardholder information with the intent of committing fraudulent activity against your account.
CO-OP Financial Services has taken the necessary steps to immediately shut down the fraudulent phish activity. If you have provided confidential information in response to the email, please contact your local branch to take necessary steps to prevent fraud.
May 27, 2007
Bogus Customer Survey Email
A bogus phish email surfaced on May 27, 2008. This email looks as if it is from The Tennessee Credit Union and asks the recipient to take part in a customer satisfaction survey. The email also promises that the member will receive an instant $80.00 account credit for participating. This email and link are bogus, and TTCU is taking the appropriate steps to notify law enforcement.
If you receive this email, simply delete it. TTCU does not currently send member surveys via email nor would we ever ask you to verify credit union account numbers, including debit card or credit card information, by way of an email to deposit an incentive. If you did respond to this email and gave your account information, please report your debit or credit card as “stolen” by calling the phone number on the back of your card. Also, please contact your local branch for additional steps to protect your account.
March 20, 2008
Tax Rebate Scam
A Credit Union in Michigan reported that a member received a telephone call, part automated and part live person, about the George W. Bush Tax Rebate. The call suggested that the member was randomly selected as one of the 50,000 taxpayers to receive $1,000.00 from the George W. Bush Tax Rebate (Economic Stimulus Package) in May or June depending on the first tax filer's social security number. The only information that the caller required was the member’s institution routing and account numbers.
All stimulus rebates will be issued under the same form as elected on the individual’s federal tax return, either electronic or check. The IRS website (www.irs.gov) features a designated section on the stimulus package that explains when an individual’s rebate is scheduled (based on last two digits of the primary filers Social Security number) and has a calculator to determine the amount expected based on the individual’s filing.
February 21, 2008
“Teacher of the Year” Phish
CUNA Mutual has alerted credit unions to a new phishing attempt in which the phishers are targeting nominees for “Teacher of the Year”. The recipients are notified by mail that they have been nominated by a former student as “teacher of the year”. The letter gives them a number to call, and they are asked for information regarding a home equity line of credit. Supposedly they are entitled to a cash benefit from an individual who gives 10% of his yearly income to teachers worldwide in appreciation for teachers who ensured he received a good education after losing his parents as a young child. The recipient is to be issued an ATM card that can be used to withdraw their funds, with an alternative of crediting their “revolving home line of credit account”. This is an attempt to gain account information from the victim. As with all phish attempts, do NOT respond. If received by email, simply delete the email without opening. Consumers may inquire about this phish at abuse@cuna.org . Individuals who have compromised any account information should contact the affected financial institution immediately to take steps to protect the account.
August 28, 2007
Bogus Customer Survey Email
A bogus “phish” email surfaced 8/28. This email appears to be an invitation from TTCU for you to take a customer satisfaction survey and receive a credit of $25.00 to your account. The link on this fraudulent email leads to a bogus questionnaire which also asks for credit card information in order to deliver your reward. The Credit Union is aware of this scam email, and has taken the appropriate steps to report it to law enforcement. If you receive this email, simply delete it. TTCU does NOT send member surveys via email, and would never ask for credit card information to deposit any reward. If you did respond to this email and supply your TTCU credit card information, please call the phone number on your card to report the card as ‘stolen’, and notify the Credit Card Department of your actions.
August 27, 2007
Bogus Security Alert Email
A new phish email targeting The Tennessee Credit Union went out on August 27. This email, which was sent by the fraudster(s) to individuals using university email systems (.edu) appears to come from "The Tennessee Credit Union reactivation@ttcu.org”, with subject line "Message: Security Alert!". The text indicates that “Your Account has been limited. Click to Resolve” The link leads to a bogus site where the potential victim is asked for debit card information.
Please do not reply to this email as it as a “phish”; an attempt by a fraudster to get victims to reveal confidential information. The Tennessee Credit Union does not send security alerts via email, and would not ask for account or card information. Simply delete this email without responding. If you did compromise your information, please contact your local branch for steps you need to take to protect your account.
June 13, 2007
Bogus Official Update Notification Email
A BOGUS email that appears to be from “service” at ttcu.org with the subject “The Tennessee Credit Union Official Update Notification” simply tells the recipient that they have an email from the Credit Union provided a link to follow to read the email. The link goes to a spoof of the website and asks the recipient for a credit card number and PIN. This email appears to have targeted email addresses within university lists (.edu). As a reminder: TTCU would never send email to its members asking for the entry of confidential information. Do not respond to any email of this type or follow any links in the email. If you did follow the link, please contact your nearest branch regarding the steps needed to protect your account information. This incident has been reported to the appropriate authorities.
April 2007
Phish Email at CUSC
Phish Email - CUSC (Credit Union Service Corporation)- April 2007. CUSC, the company which shared branch transactions are conducted, has reported the circulation of a phish email that portrays itself as being a “$50 Reward Survey” from the company. The recipient supposedly gets a $50 reward for completing a short online survey, and is asked to provide sensitive account information (including account numbers, user id/password, credit/debit card numbers, expiration dates and PIN) in order to receive payment of the ‘reward’. CUSC alerts that this IS a bogus email. Like all other financial institutions/companies, CUSC would never send an email asking members to submit sensitive information. CUSC does have a message about the email on its website. If you received this email and provided any account information about your TTCU account, please contact your local branch to take steps to protect your account.
April 2007
Phish Email at NCUA
PHISHING EMAIL - April 2007- The National Credit Union Administration warns of an email being received by both consumers and credit unions that attempts to have the recipient ‘register’ their ‘sensitive information for an additionally created free security service to prevent any fraudulent activity’ as part of a security improvement. The sensitive information being requested includes credit or debit card numbers. The NCUA has made all credit unions aware of this phishing attempt, and reminds that like credit unions, NCUA would never send consumer emails asking for account numbers or other sensitive information.
If you have received this email NCUA asks that you forward it in its entirety to Phishing@NCUA.gov. If you responded to the email by providing a TTCU debit or credit card number, please contact our fraud department at 615-780-7647 or 1-800-755-8828, x 7647.
February 5, 2007
Bogus Smart Branch Alert Email
A new phish email, falsely purporting to be from The Tennessee Credit Union, may have been received by consumers on 2/5/07. This email is supposedly from the TTCU alert center, as a notification of unsuccessful attempts to log on to Smart Branch from a foreign IP address. It asks the recipient to follow a link to confirm the sign-ins. It also gives a legitimate TTCU toll-free number to call. If you have received this email, PLEASE simply delete it. Do not follow the link provided in the email as it may contain information that would be harmful to your computer. The Credit Union has reported this phish email to the appropriate authorities and is in process of getting it shut down. If you are a TTCU member and have provided information to the fraudster who sent the email, please contact our Fraud Specialist at 615-780-7647.
November 2006
Phish Email at the Social Security Administration
The Social Security Administration has issued a warning about a new e-mail scam being circulated with the subject "Cost-of-Living for 2007 Update". This message appears to be from the Social Security Administration and provides information about the benefit increase for 2007. The text contains the following information: “NOTE: We now need you to update your personal information. If this is not completed by November 11, 2006, we will be forced to suspend your account indefinitely.” The reader is directed to a Web site that appears to be the SSA Web site.
Once directed to the phony Website, the individual is asked to register for a password and to confirm their identity by providing personal information such as Social Security number, bank account information, and credit card information.
If you receive this email, do NOT respond to it. You can report this or other suspicious activity to Social Security Office of Inspector General by calling the OIG Hotline at 1-800-269-0271 or by reporting it online at OIGs Website.
November 20, 2005
Bogus ID Theft Alert Email
On November 20, a scammer sent a phishing email supposedly from The Tennessee Credit Union, claiming that the Credit Union suspects the recipient’s account may have been accessed by unauthorized parties, and that the account has been restricted as a preventative measure. The email may contain a copy of a photo of the Main Office location and copyright information the scammer has copied from the legitimate website. The email instructs the recipient to follow a link to sign on to “Internet Banking” to check for unauthorized activity. This bogus link will lead to a spoof (unauthorized copy) of the Smart Branch sign in page where one signs in with username and password. However- look closely…This spoof does NOT have any indication of being a secured site (which you should ALWAYS verify before using any online site). It has ‘http’ instead of ‘https” in the address, and it does NOT have the Verisign® secured logo.
If you are a nonmember and have received this phish email, simply delete it. If you are a member and actually responded to this scam, please contact your local branch so that we can take steps to secure your account.
November 18, 2005
Bogus Subscription Email
A scammer sent a phishing email trying to get the recipients to confirm a charge to their accounts for a year’s subscription to “Adultfriend Finder”. The attempt asks the accountholder to follow a link (which looks legitimate) that leads to a spoof (unauthorized copy) of the Smart Branch sign in page where one signs in with username and password. However- look closely…This spoof does NOT have any indication of being a secured site (which you should ALWAYS verify before using any online site). It has ‘http’ instead of ‘https” in the address, and it does NOT have the Verisign® secured logo.
If you are a nonmember and have received this phish email, simply delete it. If you are a member and actually responded to this scam, please contact your local branch so that we can take steps to secure your account.
July 2005
Bogus Smart Branch Email
TTCU joined the ranks of financial institutions targeted by fraudsters ‘phishing’ for your information. A scammer sent a spam email (both members and nonmembers received it) attempting to have the consumer sign on to the online banking service and confirm information in order to help prevent identity theft. However, the link in the email led to a ‘spoof’ (bogus copy) of the online banking front page. Savvy users of computer services immediately noticed that the bogus site did not contain the Verisign® seal/lock, etc. and did not proceed with the request for information.
The Credit Union took immediate action, placing alerts on the authorized website and online service alerting consumers/members to the existence of the bogus email. Our security department took the appropriate steps to report the incident to the federal authorities and to get the bogus site shut down.
Should you receive this email, or any similar to it in the future, please do report it to us, but do not respond by following the links in the email. TTCU does NOT send email requesting that you confirm information confidential account information.
The Federal Reserve Board on Wednesday warned consumers about fraudulent solicitations that appear to be made with the approval or involvement of the Federal Reserve, Federal Reserve officials, or other U.S. government officials. The solicitation promises bogus financial services or large sums of money in exchange for either payment or personal information that can then be used to access a consumer's bank account.
The Federal Reserve is advising consumers that it has no involvement in these solicitations. Consumers are strongly urged to verify the legitimacy of potential service providers before entering into a business transaction. Individuals seeking help with repairing their credit history, avoiding home mortgage foreclosure, finding mortgage refinance options, or managing their credit card debt should do business only with reputable service providers. Information related to these issues may be found on the Federal Reserve Board's website at: http://www.federalreserve.gov/consumerinfo.
Individuals who have or suspect they have been a victim of a scam should contact local law enforcement agencies. Information related to how to identify a fraud or scam may be found on the Federal Reserve Board's Consumer Help Center website at: http://www.federalreserveconsumerhelp.gov/.