Security

PHISHING,VISHING, AND NOW SMISHING

Americans are increasingly reliant on cell phones and other mobile devices. And scammers are taking note.

In addition to sending phony emails (phishing) and phone calls (vishing), indentity thieves are now using text messages to gain information and spread malware, viruses and trojan horses. This scam is called "smishing" because text messages are also known as SMS messages.

July 20, 2009

It has been brought to our attention that there have been several attempts to direct our members and NON-members to either a bogus phone number or fake (spoofed) web site in efforts to extract information, in particular credit or debit card information. This does NOT mean our actual website or your account have been compromised. Please be extremely vigilant when in receipt of any messages from an unknown source or one that may appear familiar.

The credit union will never ask for you to contact us via e-mail or text message.

If you have received a request for information and have responded to that request please notifiy us at (310) 816-0440 IMMEDIATELY.

Examples of e-mails and text messages received:

EMAIL:

First Scenario:
* Please login to your Harbor Federal Credit Union Online Banking and visit the Message Center section in order to read the message. To login, please click on the link below:

Harbor Federal Credit Union Online Banking - This is not our site. When you click on the link you are directed to the following URL: jgo.ch - This is a fraudulent site.

Second Scenario:
You have 1 New ALERT message please login to your Harbor Federal Credit Union Online Login and visit the message Center section in order to read the message. To login, please click below:

Harbor Federal Credit Union Online Banking - This is not our site. When you click on the link you are directed to the following URL: harborfcu-signin.com - This is also a fraudulent site.

Unfortunetly there are many spoof sites out there. Please make sure you sign on to www.harborfcu.org to access our website. When you sign on to Harbor FCU's Home Banking our URL is:

https://hb.harborfcu.org/cgi-bin/mcw000.cgi?MCWSTART.
THIS IS OUR HOMEBANKING PAGE.

Always make sure you read the URL to verify that you are on the correct page, on our website and any others you may use.

TEXT:

* Message from Harbor Federal Credit Union: please contact our security department today at (XXX) XXX-XXXX.

Both of these example are asking your for your debit and credit card information. DO NOT RESPOND TO THESE TEXTS OR E-MAILS.

How can you protect yourself?

Do not respond to text messages asking for any type of personal or financial information.
If you think the message might be valid, contact the company or financial institution directly, using a phone number or website you know is legitimate.
Treat your cell phone with the same level of concern you apply to your laptop or home computer.

Don't Make Yourself An Easy ID Theft Target

An estimated 3.6 million American consumers annually have their identities stolen, according to consumer experts, with the average loss per theft amounting to around $2,500. While there is no guarantee that you won't be one of the victims, there are some basic precautions you can take to avoid being an easy target:

* Do not carry your Social Security card - keep it in a safe place.

* Release your Social Security number only when necessary - for example, on tax forms and employment records, or for banking, stock, and property transactions.

* Do not give account information or personal information over the phone unless you initiate the call.

* Do not respond to e-mails from service providers asking to verify your account information for "security" purposes or in response to "possible suspicious activity" on your account. If in doubt, go to the provider's secure Web site, log in with your user ID and password, and see if there is a legitimate message concerning your account. If still in doubt, call or visit the provider directly.

* Invest in a crosscut paper shredder and destroy all receipts, credit card offers, statements, and pay check stubs before throwing them away.

* Keep track of your mail. Review your monthly statements to ensure all credit and debit activity is correct. Unauthorized charges should be dealt with immediately. Missing statements should be reported to your account provider at once.

* Send bill payments from a secure mailbox (one that can be opened only by U.S. Postal Service employees).

* Review your credit reports annually to make sure they're accurate.