IDENTITY THEFT & FRAUD AWARENESS

We're here to help you stay one step ahead of fraudsters by making sure you're in the know. Below you'll find information on types of fraud, common scams, prevention tips, and what to do if you find yourself a victim of identity theft.

Identity Theft

Identity theft is the fraudulent use of personal identifying information. Identity thieves will use this information to open new credit cards, charge existing credit cards, open accounts, or obtain new loans.

How it works

These fraudsters are looking for information such as:

• Social Security Number
• Mother's Maiden Name
• Date of Birth
• Account Number

How to protect yourself

You can significantly reduce the risk of becoming a victim of identity theft and protect your personal information from fraudsters by doing the following:

Safeguard Personal Information

• Do not share your Social Security Number (SSN) unless absolutely necessary
• Be cautious about sharing your date of birth, mother's maiden name, or account numbers

Monitor Financial Statements

• Regularly review your bank and credit card statements for any unauthorized transactions
• Set up alerts in online or mobile banking to be notified of any suspicious activity

Use Strong Passwords

• Create complex passwords that include a mix of letters, numbers, and special characters
• Avoid using easily guessable information such as birthdays or common words
• Use different passwords for different accounts and update them

Enable Two-Factor Authentication (2FA)

• Whenever possible, enable 2FA for an added layer of security. This requires a second form of verification beyond just your password.

Secure Your Devices

• Keep your computer and mobile devices secure by using antivirus software and keeping your operating system and apps updated
• Avoid using public Wi-Fi for accessing sensitive information

Shred Documents

• Shred any documents containing personal information before disposing of them (we offer two Shred Day member events per year!)
• This includes bank statements, medical records, and any paperwork with your SSN

Check Your Credit Reports

• Regularly check your credit reports from the three major credit bureaus (Equifax, Experian, and TransUnion) for any signs of unauthorized accounts or activity
• You can obtain a free credit report from each bureau once a year at AnnualCreditReport.com

Use a Credit Freeze or Fraud Alert

• Consider placing a credit freeze on your credit reports to prevent new accounts from being opened in your name
• Alternatively, you can place a fraud alert on your credit reports to notify creditors to take extra steps to verify your identity before opening new accounts

Phishing

Phishing attempts come in the form of emails or text messages that try to get your personal information.

How it works

Phishing attempts are often combined with spoofing attacks. Thieves send emails or texts that appear trustworthy, and include links to websites.

How to protect yourself

Phishing messages are designed to make you panic or respond without thinking. They often contain a false sense of urgency. Be sure to take these precautions:

• Never click on a link in an email or text. If you are not sure about the originating website address, Google it
• Be wary of unexpected text messages reporting to include some variety of 'activation code'
• Call first, but don't use the number in the email. It could be fake as well. Look up the contact info online
• Be guarded, especially if you are asked to respond right away with your full Social Security Number or date of birth
• Stay informed. Agencies such as the Federal Trade Commission's Bureau of Consumer Protection offer news and information on what to do and how to report suspicious emails

Vishing

 Vishing, short for 'voice phishing', is a variation on typical phishing schemes which uses the phone instead of fake websites. As with phishing, they are attempting to get you to reveal your personal information. 

How it works

Vishing attacks can start with a text message or a call out of the blue. In some cases, the message might appear to be from your bank or credit union, if the spammer has spoofed a recognized number.

• As with phishing, identity thieves are sending spam or placing a call that warns victims that their credit union/bank account or PayPal accounts were supposedly compromised.
• However, unlike typical phishing emails, there is no website address in these phishing messages.
• Instead, the victim is urged to call a phone number to verify account details.

How to protect yourself

As with phishing, vishing scams are designed to make you panic or respond without thinking. 

• Never trust that a phone number you're given in a manner like this is legitimate. If you are not sure if it is valid, Google it or contact your financial institution directly.
• Be wary of unexpected text messages reporting to include some variety of 'activation code'
• Keep in mind that SF Fire Credit Union will never contact you directly to ask you to confirm your PIN and/or a full card number.
• Be guarded, especially if you are asked to respond right away with your full Social Security Number or date of birth
• Stay informed. Agencies such as the Federal Trade Commission's Bureau of Consumer Protection offer news and information on what to do and how to report suspicious emails and scams.

Credit or Debit Card Fraud

Credit or debit card fraud happens when your card data are compromised at the point of sale, such as at a gas station or grocery store. Or when your personal information is hacked online.

How it works

• Fraudsters steal your information from unsecured websites you visited
• Scammers have a device capable of duplicating your card
• Card skimmers are installed at gas pump or self-checkout machines

How to protect yourself

• When purchasing online, buy only from a credible merchant
• Take extra precaution when dealing with an overseas merchant
• You may want to check online reviews about the merchant
• At gas stations or self-checkout counters, make sure the card reader doesn't look tampered
• Protect your mobile devices (phones, tablets) with a password
• Use the Card Management feature in Online & Mobile Banking to set up real-time authorization notifications for your debit or credit card and turn your card(s) off  with immediate effect if you see something unusual.*

*Please note that turning your cards off won't stop existing authorizations from posting, but will block future activity until you turn the card on again.

Check Fraud

Check fraud can happen in a number of ways, such as forgery, altering or reproducing checks.

How it works

• Fraudsters forge your signature to take money from your account
• Scammers intercept your mail that contains a check and cash it themselves
• If they know your checking and routing numbers, scammers can reproduce your checks

How to protect yourself

• Avoid having checks sent by mail
• Set up electronic payments with trusted merchants
• Shred your old checks. The Credit Union hosts Shred Days twice a year.

If You're a Victim

If you find out you've been a victim of identity theft, here's what you should do:

• If your accounts have been compromised or if your wallet is lost/stolen, notify us as soon as possible. Our Contact Center can be reached at 888-499-FIRE (3473), or via Live Web Chat.
• Report fraud or scams to the Federal Trade Commission.
• Place a verbal password on your accounts to prevent thieves from calling in and finding out more about your financial transactions.
• File a police report and maintain a copy in your file for future reference
• Keep an eye out for future attempts. Identity thieves will often lay low for months and then strike again, hoping to catch you off guard.