Fraud Prevention
Learn how to protect yourself online and from identity theft.
Your online security is our highest priority
Ensuring your online security is our top concern at Via Credit Union. We've compiled essential information to safeguard you against various forms of financial fraud and identity theft. Please navigate through the topics in the tabs to discover ways to secure your personal information, recognize frauds or scams, and understand the steps to report if you are a victim of fraud.
Windows Defender Pop-ups
There have been a number of tech support scams regarding Microsoft Windows. The latest scam consists of criminals sending a fake error message on a website, saying there is a virus on your computer. These fake error messages aim to scare you into calling their “technical support hotline,” and they will likely ask you to install applications that give them remote access to your device.
Please follow the tips below for recognizing these types of tech support scams:
- Microsoft error and warning messages never include phone numbers. If a pop-up or error message appears with a phone number, do not call the number.
- If you didn’t ask for support, Microsoft will not call you to offer support. “Microsoft does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information, or to provide technical support to fix your computer.”
- Microsoft will never ask you to pay for support using cryptocurrency or gift cards.
Source
If you’ve been scammed and paid by credit or debit card, contact ViaCU or credit card company to report the fraudulent transaction. If you paid with a gift card, immediately contact the company that issued the card , and tell them you paid a scammer.
You should also report any tech support scams to the Federal Trade Commission at reportfraud.ftc.gov .
For more information on fraud and scams, download the CFPB and FDIC’s Money Smart for Older Adults resource guide.
Call Spoofing: members receiving fake calls using a local number
Several members recently reported receiving phone calls from either a live person or an automated call from ViaCU. The calls were not made by ViaCU employees, the scammer spoofed the number (765.674.6631). The scammers are attempting to obtain member's card number and then texting/emailing a verification code. Please do not respond to these types of calls/text/emails! ViaCU will NEVER call/text/email you to ask for personal information, validation codes or card numbers. If you are contacted requesting this information, hang up and contact ViaCU directly by calling 765.674.6631.
Be mindful of incoming text messages or voice calls and follow these precautions:
- Do not respond to SMS text messages, voice calls, or messages that appear to be about your accounts.
- Instead, call ViaCU directly at 765.674.6631 (the number listed on your monthly statement) to question any SMS text messages or voice calls allegedly from ViaCU or about your accounts.
- Never provide personal information, credit/debit card, account details, validation codes or online banking credentials in response to incoming text messages, emails or phone calls.
- Avoid clicking on links or calling a telephone number contained within text messages received.
- Never fall victim to selecting a number to stop getting calls, instead just hang up. Scammers often use this trick to identify potential targets.
Fraud Blocks
For your protection, there are lists of 'high risk' countries where ViaCU credit and debit cards are not accepted.
- View list of countries that do not accept the ViaVISA® Credit Cards.
- View list of countries that do not accept the MasterCard® Debit Cards.
In addition, when ViaCU is notified of card disputes, we have the ability to completely "shut down" countries or states where fraudulent activity is happening. We also have the option to modify dollar amounts and/or restrict signature based transactions so only PIN (personal identification number) based transactions are accepted.
Before traveling, please contact ViaCU with your travel dates and if possible provide a mobile number that you will have with you. Without notification of travel, your card may be blocked when transactions outside your normal spending habits are identified.
What to do if you're part of a data breach:
Any time there is a data breach for a company there is a call for concern. Therefore, ViaCU would like to remind you of steps to take to protect yourself if you've been affected by a breach.
- Accept credit monitoring services often offered by the company that has been breached immediately.
- Call one of the credit bureaus and put a "Fraud/Security Alert" on your SSN. You only need to call one, by law they are required to contact the other two to ensure they also set up a fraud watch on your behalf. It is free, but only lasts for 90 days, so set a reminder to have it refreshed.
Equifax: 1.800.349.9960
Experian: 1.888.397.3742
TransUnion: 1.888.909.8872
Innovis: 1.800.540.2505
- Get a free credit report every 4 months. Each credit bureau is required to provide a free credit report once a year. So stagger each of the three so you can spot any fraud. Visit www.annualcreditreport.com to get started.
- Watch for phishing scams; emails designed to look like they are from the breached company that attempt to get you to click on a link, download a file or enter login credentials. The criminals will attempt to deliver malware that can have a number of different effects.
- Watch for a noticeable increase in credit card offers. If someone attempts to get a credit card in your name, that information is picked up by all the credit card companies and they will send you offer.
What ViaCU is doing to protect our members:
Replacement Cards
Once ViaCU is notified of fraud on your account, you will be contacted and a replacement card is ordered. We want to ensure you receive your replacement card as soon as possible, however our plastic supplier is also the provider of cards for other financial institutions that are also affected by fraud.
We thank you for your patience as your card is being replaced. We sincerely apologize for an inconvenience this may cause you. Please be assured that your financial security is our priority!
Protect your identity
Identity theft occurs when someone uses your name, Social Security number or other personal information without your permission to commit fraud or other crimes in your name. Many online threats can lead to having your personal information stolen and used for fraudulent activities. There are several steps you can take to minimize the potential damage from identity theft.
Fraud Alert on Credit Reports
You can contact any one of the three nationwide credit reporting companies and ask them to place a fraud alert on your credit report. Any of the companies you call, must then call the other companies for you and have fraud alerts placed on their credit reports as well. The fraud alert stays on your credit report for at least 90 days. You can create an "Identity Theft Report", that can allow you to extend the length of time the alert stays on your credit report (See the section below titled: Identity Theft Report).
- Equifax: 1.800.525.6285
- Experian: 1.888.397.3742
- TransUnion: 1.800.680.7289
- Innovis: 1.800.540.2505
Review Credit Reports
After you have a fraud alert placed on your credit report, you are able to obtain one free copy of your credit report from each of the credit reporting bureaus. You should review the reports to make sure that all of your personal information is correct (name, address, SSN, accounts, etc...). If the report has accounts listed that you did not open or debts that are not yours, contact the credit reporting companies to report the fraudulent account and have them corrected. You may want to contact the security or fraud department for each of the companies listed in the credit report where an account was opened without your permission. You should ask the company to send you written proof that they have corrected or closed the fraudulent account. They should provide this information to you on company letterhead, if at all possible.
Identity Theft Report
You can have an Identity Theft Report created that will help you to handle problems with credit reporting companies, debt collectors and any business that allowed the fraudster to open up new accounts in your name. This report can help to get fraudulent information removed from your credit report permanently, prevent debt collectors from collecting on debts resulting from identity theft and extend the fraud alert on your credit report.
You must perform three steps to obtain an Identity Theft Report:
- Contact the FTC and file an identity theft complaint (FTC website or call toll-free 1.877.438.4338)
- Get a copy of the FTC affidavit that contains the details of your identity theft complaint.
- Take the completed FTC affidavit to your local police, or to the police station where the identity theft occurred, and file a police report. Make sure to get a copy of the police report or at least the police report number.
The FTC affidavit and the police report make up the full Identity Theft Report. You can then send copies of the Identity Theft Report to any of the companies you need to report the fraud too. You should ask them to remove or correct the fraudulent information on your accounts and send you written proof of the actions taken on the fraudulent accounts.
Identity Theft Resource Websites
Use these tips to keep your information safe online
We live in a digital era. It seems that nearly everything we use in our lives is connected to the internet and has access to our personal information. Below are some steps and resources you can use to help make sure you are protecting yourself and your information from those that would try to steal and misuse your personal information.
Security Software
There are many groups and individuals that work daily to develop new ways to attack your computer and mobile devices and you need security software that is up to the task of combating these new and emerging threats. Via Credit Union does not recommend any specific security software solution, but there are plenty of free and pay solutions available. Below are some of the most important features to look for when picking your Security Software:
- Updates automatically and provides updates at least daily
- Full computer/device scanning
- Ability to setup scheduled scans
- Real-time monitoring and protection
- Detects and removes viruses, spyware, rootkits, bots, trojans, keyloggers, and other types of malware
Do not purchase security software from any type of pop up message or email, especially those that claim to have scanned and discovered malware or other bad programs on your computer. These are fraudulent messages that use scare tactics (referred to as Scareware) to try and get you to buy their "product". These types of programs will often simply do nothing, but they can also give the criminal your credit card information and direct access to break into your computer and install their own malicious programs.
Protect your Personal Information
Your Social Security number, credit card numbers, account numbers can be used to allow a criminal to impersonate you and steal your money or open new accounts in your name. You should think carefully every time you enter your personal information online, give information to someone over the phone or provide information through email. You should be absolutely certain that you trust the company and website you are providing this information too. Look closely at all aspects of the site and the website address you are on. There is malware out there that can perform man-in-the-middle attacks on what appears to be a legitimate website. If you ever feel nervous about entering data on a website (or App on your mobile device), you should stop and do more research to find out if what is being asked of you is legitimate or not.
Remember to always check to make sure you are on a secure site that uses encryption to protect any information you are providing. No matter what internet browser you are using, secure sites will always start with https. This means that the site is secure and encrypted.
Protect your Passwords
Avoid writing passwords down, but if you do write down your passwords, you should keep them in a secure, locked place that is out of plain site. If you store your passwords on your computer, you should avoid using any program to store those passwords that is not encrypted and password protected. You should never give out passwords over the phone, in text messages or through email.
You should use strong passwords. Here are some keys to a strong password:
- The longer the password the harder it will be for a criminal to try and crack. Using at least 10 characters makes it much harder for someone to be able to guess the password.
- You should use a mix of letters, numbers and special characters. You should try to pick something out of the ordinary. Never use your name, birth date, common words/passwords like: pass, password, or 123456. Here is an example of a strong password: iCanB$ecure2.
Mobile Device Security
When it comes to protecting your mobile devices, here are some key security tips:
- Password protect your phone - this could be a password, pin, or even a complex swipe pattern (offered on some mobile devices)
- Stay off public wi-fi networks - this goes for any mobile device (phones, tablets, laptops, etc...)
- Be careful of the apps you download - be sure to read the "fine print" on Apps you download, especially what you are giving the app access to on your mobile device. There are many apps available for download that are malicious in nature.
- Keep up with updates - mobile operating system and app updates often provide enhancements or patches to the security of the program.
- Log off when you are done - Many apps, like our ViaMobile app, will automatically log you off after a period of time, but you should always make it a habit to manually log out whenever you are done using an app. By staying logged in, you could leave yourself vulnerable if your phone is lost or stolen.
Computer Security Information Websites
Scams and Fraud
Avoid financial scams, recognize fraud and protect yourself against identity theft with the CFPB's free tools and resources.
Gift Card Scams
There has been a recent rise in gift card scams according to the Federal Trade Commission (FTC). Someone might ask you to pay for something by putting money on a gift card, like a Google Play or iTunes card, and then giving them the numbers on the back of the card. If they ask you to do this, they’re trying to scam you. No real business or government agency will ever insist you pay them with a gift card. Anyone who demands to be paid with a gift card is a scammer. Don’t be a victim, learn more about the scam and how to avoid it!
Protecting Yourself from Scams
Here are some steps you can take to help protect yourself from becoming the victim of a scam, including a scam related to the coronavirus pandemic:
- Don't click on suspicious or unfamiliar links in emails, text messages, social media feeds and instant messaging services.
- Don't answer a phone call if you don't recognize the phone number — let it go to voicemail and check later to verify the caller.
- If you are unsure the message is legit, contact the company using a phone number or website you know is correct. Never use contact information from suspicious message.
- Never download email attachments unless you can verify that the sender is legitimate.
- Keep device and security software up-to-date.
- Maintain strong passwords and use multi-factor authentication whenever possible.
- Never share personal or financial information via email, text message, or over the phone.
- Do not give into pressure that caller may be pushing to take immediate action.
If you receive a fraudulent email, text or phone call, report it to the appropriate government agency such as the Federal Trade Commission or Internal Revenue Service and your local police department.