Fraud Alerts

eNFACT Case E-mail Scam

---

BFSFCU members have reported receiving a new scam e-mail claiming that the member's ATM, debit or credit card was blocked due to fraudulent overseas activity. While the Credit Union does employ a sophisticated fraud monitoring system, members will be contacted via telephone in instances where possible fraudulent transactions are detected. The Credit Union will never contact members via e-mail in these cases. An example of the fraudulent e-mail is below--if you receive it, please simply delete it and do not provide any personal information. If you believe you have fallen victim to this scam, or if you have questions or concerns, please contact BFSFCU's Financial Intelligence Unit.




"Gameover" Malware

---

The FBI has issued a warning about a new malware attack targeting bank accounts. The malware is called Gameover and the FBI says it is able to defeat several forms of dual-factor authentication. The FBI suggests that consumers and businesses pay attention to suspicious emails purporting to come from NACHA, The Electronic Payments Association. Please note that NACHA does NOT traditionally send emails directly to businesses or consumers. Receipt of a direct email from an organization such as NACHA should raise a red flag. If you receive any emails appearing to come from NACHA please delete them. Do not open or click on any links contained in the message.

If you have questions or concerns about the Gameover malware attack, or if you believe you have become a victim of this scam, please contact BFSFCU's Financial Intelligence Unit.

 Canceled ACH E-mail Scam

---

Members and non-members have been receiving fraudulent e-mail messages that have the appearance of having been sent from the NACHA and signed by a non-existent NACHA employee. Specifically, these e-mails claim to be from the "Electronic Payments Association" and state that there is some type of problem with the member's account. There are several variations of this hoax. Please visit the NACHA web site: http://www.nacha.org/news/newsDetail.cfm/RecentBusinessNewsID/207 for more information about this scam. Below is an example of the type of fraudulent e-mails being sent.

If you have questions or concerns about this fraudulent e-mail scam, or if you believe you have become a victim of this scam, please contact BFSFCU's Financial Intelligence Unit.

SMiShing Scam

---

Some BFSFCU members are currently receiving fraudulent text messages from “Customer Service Electronic Verification Services” instructing them to call the number in the message to remove a restriction from their card. They are asked to enter their credit card number, expiration date, PIN, and three digit security code.

Please note that BFSFCU will never ask you to provide your PIN through email, over the phone, or in person. If you have fallen victim to this scam, please contact Member Services immediately in order to cancel any affected cards and have them reissued.

No credit union or financial services institution would ever ask a member for this type of information using non-secure text messaging services.

Counterfeit IFC Checks

---

Members and non-members have been receiving counterfeit checks in the mail that appear to be issued from the IFC and drawn on BFSFCU. These checks are fraudulent and have not been issued by the IFC. Please note that these checks are not negotiable and will be returned as fraudulent.

If you have received a fraudulent check, please do not attempt to negotiate it. If you have additional questions or concerns, please contact BFSFCU's Financial Intelligence Unit.

"Vishing" Fraud Alert

---

"Vishing" is a term used to describe a fraudulent scam that uses telephone calls and voice mail messages to trick members into giving out personal financial information via telephone. Please be aware that many BFSFCU members have recently received phone calls with a recording stating that “Federal Credit Union” had a card compromise and that they should enter their card number and PIN.

Please remember that BFSFCU will never ask you to provide your PIN to a staff member through any means of communication. If you receive this call, please do not enter any information. If you have any questions, please contact BFSFCU immediately.