Premier America Spotlight Q3 2024

Cybersecurity Activity: Identifying Scams in Email, Online Banking, and Phone Interactions

Scenario 1: Email Scam

1. Sender’s Email Address: The email address ([email protected]) may look legitimate but can easily be spoofed. Always check for slight variations or inconsistencies in the sender's email address.
2. Urgency and Threats: Scammers often create a sense of urgency or threat, such as account suspension, to prompt immediate action without careful consideration.
3. Suspicious Links: The link provided does not lead to a legitimate website. Hover over the link to see the actual URL, which in this case is a fake URL (http://securebanking.fakeurl.com).
4. Generic Greeting: The email uses a generic greeting (“Dear Customer”) rather than addressing you by name, which is a red flag.
5. Poor Grammar and Spelling: Look for any grammatical errors or awkward phrasing that may indicate the email is not from a professional source.

Scenario 2: Online Banking Account Takeover

Your Secure Access Code is: 123456
 

1. Suspicious Links: Similar to email scams, the link provided in the text message should be scrutinized. Hovering over or examining the link (http://secureCUlogin.fakeurl.com) reveals it is not legitimate.
2. Request for Secure Access Code: Legitimate financial institutions will never ask you to enter a secure access code in response to a message. They might send a code for you to use on their official app or website, but not through a suspicious link.
3. Urgency and Alarm: The message creates a sense of urgency by mentioning “suspicious activity” to prompt immediate action without proper verification.
4. Unusual Communication Method: Be wary if you receive unexpected texts regarding account verification. Financial institutions typically use secure communication channels.

Scenario 3: Spoofing Call Script

1. Unsolicited Call: Receiving an unexpected call claiming to be from your credit union is a red flag. Financial institutions usually do not ask for sensitive information over the phone.
2. Request for Sensitive Information: Legitimate financial institutions will never ask for secure access codes, passwords, or PINs over the phone.
3. Caller ID Spoofing: Scammers can spoof the caller ID to make it appear as though the call is coming from your credit union. Verify the caller by hanging up and calling the credit union using the official number from their website.
4. Creating Panic: The caller tries to create a sense of urgency by mentioning “suspicious activity,” pressuring you to act quickly without verification.

Conclusion

Scammers use various tactics to trick victims into revealing sensitive information. By paying attention to the details and staying vigilant, you can protect yourself from these schemes. Remember to always verify the authenticity of any communication claiming to be from your financial institution and never share your secure access codes or passwords with anyone. Stay safe!