Subscribe to our RSS feed

Security and Fraud Alerts

To report a lost or stolen Visa Checkcard,
please call 1-800-554-8969

Text Message & Telephone Scam (8/15/2011):

Please be advised that we have been notified of a text messaging debit card scam. If you receive a text message from “First Citizens” with the telephone number showing as 1-404-891-1102 or any other number, which when called, answers as Customer Service Electronic Verification Services asking for your First Citizens’ Credit Card Number, Expiration Date and PIN #, please DO NOT furnish them with this information.

If you gave any personal, CheckCard or account information over the phone, please contact us at 1-800-642-7515 IMMEDIATELY, so we can protect your account information.

First Citizens’ will NEVER request any personal information (such as account numbers, passwords, PINS, or Social Security Numbers, etc.) through a text message, over the phone or through an unsecured email.

Telephone Debit Card Scam (7/15/2011):

Please be advised that we have been notified of a telephone debit card scam. If you receive a phone call from a "First Citizens" automated system claiming there has been fraudulent activity on your account and asking for your card number, expiration date, and PIN, please DO NOT furnish them this information.

If you gave any personal, CheckCard or account information over the phone, please contact us at 1-800-642-7515 IMMEDIATELY, so we can protect your account information.

First Citizens’ will NEVER request any personal information (such as account numbers, passwords, PINS, or Social Security Numbers, etc.) through a text message, over the phone or through an unsecured email.

E-mail Scam Alert (6/6/2011):

First Citizens’ Federal Credit Union has received reports that individuals and/or companies have received a fraudulent email that has the appearance of being sent from info@FirstCitizens.org.

The subject line of the email states: “YOUR ATM CARD IS APPROVED”.

Be aware that phishing emails frequently have links to Web pages that host malicious code and software.Do not follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.First Citizens’ does not send emails regarding the Approval of ATM/Debit cards so please be very diligent before responding to such emails.

You are the first line of defense in protecting yourself against e-mail and Internet-related fraud. Learning to properly detect scams and phishing attempts is the best way to keep your information secure and avoid fraud. Here are some helpful tips regarding email scams:

• Never respond to or act upon e-mails, or select Web links from any unknown source that requires you to provide, update, or verify personal, financial, or other confidential information.

• Be wary of any suspicious e-mails or phone calls asking for you to validate account information, even if it appears to be from a reputable business.

• Use a secure Internet browser.

• Change your passwords regularly.

• Create strong passwords by using a combination of letters and numbers.

• Always use up-to-date virus protection software and consider using spyware detection programs.

• Equip your computer with either a software or hardware firewall.

• Do not access confidential information at Internet cafes, public libraries, etc.

• If you are using a wireless device, be sure to follow the manufacturer's instructions on establishing the services and settings to ensure a protective level of security.

Scam artists target your tax returns

As they finish preparing their tax returns, taxpayers also must be careful not to lose money to a scam artist.

Federal taxes are due Monday, while state taxes are due Tuesday because of Patriots Day. (The Monday holiday does not provide an extra day on federal taxes, since returns are no longer processed in Andover, according to the Internal Revenue Service.)

As tax deadlines fast approach, consumer advocates warn of potential scams taking advantage of taxpayers around this time of year.

Scam artists will either call taxpayers or send official-looking emails, claiming to represent the IRS or other agencies, in order to get unsuspecting victims to divulge personal and financial information.

Read Full Article

Dartmouth Police Advise Residents About Scam (12/16/2010):

DARTMOUTH — Police are warning residents, after a local man recently learned he "won" a customer appreciation drawing from a company in Tampa, Fla., which turned out to be a scam.

Detective Robert Levinson, public information officer for the Dartmouth Police Department, said the resident received a letter Dec. 4 from the company, saying he won a cash prize of $125,000.

The resident was asked to deposit a "check" he received for $3,980 into his personal bank account and also to mail taxes and fees, totaling $2,980, to the Tampa company.

He was told he would later receive his $125,000 prize, after the company received payment of the taxes and fees.

Levinson said the resident wisely did nothing and instead brought it to the attention of police in hopes of alerting others.

If the resident had deposited the "check," it would have bounced and the bank would have recovered its money from the "winner," police said.

The "winner" would also be out the $2,980 he paid in taxes and fees, Levinson said.

If a resident receives one of these checks, Levinson advises not to deposit it and to contact police.

He said most banking institutions will hold a depositor liable for the full amount of a check if it is later found to be fraudulent.

http://www.southcoasttoday.com/apps/pbcs.dll/article?AID=/20101216/NEWS/12160360/-1/rss17

Identity theft happens to other people, until it happens to YOU.

To ensure you have the best tools to lock down your identity, protect your personal information and maintain control of your life First Citizens’ is now offering an advanced protection solution with IdentitySecure, comprehensive coverage you can count on.

These are just some of the benefits you receive when you join IdentitySecure:

Triple-Bureau Credit Reports and Scores
Receive up-to-date credit reports and scores from all three major credit reporting agencies—Experian, Equifax and TransUnion.

Triple-Bureau Daily Credit Monitoring
Enjoy the security of daily credit monitoring and be alerted of certain activities to your credit bureau files, which could be a sign of potential fraud.

Credit/Debit Card & Social Security Number Internet Fraud Monitoring
Be alerted of potential compromises to your credit/debit card information or Social Security number.

Identity Fraud Support
Obtain personalized assistance in resolving a case of identity fraud.

Gain peace of mind with IdentitySecure today.

Prevention, Detection, Resolution...
Sign up today, and receive your Personal Credit Report online in seconds!

for enrollment details, disclosures, & more information

Email Scam Alert (09/03/2010):

Recently, a new batch of emails have been circulating that appear to come from UPS / Fed Ex / DHL but are actually fraudulent, and an attempt to lure you into opening virus-launching attachment. Many fraudsters use recognized and reputable service providers whether they be retail companies, financial institutions or delivery services as a method for gaining your trust.

You are the first line of defense in protecting yourself against e-mail and Internet-related fraud. Learning to properly detect scams and phishing attempts is the best way to keep your information secure and avoid fraud. Here are some helpful tips regarding email scams:

• Never respond to or act upon e-mails, or select Web links from any unknown source that requires you to provide, update, or verify personal, financial, or other confidential information.
• Be wary of any suspicious e-mails or phone calls asking for you to validate account information, even if it appears to be from a reputable business.
• Use a secure Internet browser.
• Change your passwords regularly.
• Create strong passwords by using a combination of letters and numbers.
• Always use up-to-date virus protection software and consider using spyware detection programs.
• Equip your computer with either a software or hardware firewall.
• Do not access confidential information at Internet cafes, public libraries, etc.
• If you are using a wireless device, be sure to follow the manufacturer's instructions on establishing the services and settings to ensure a protective level of security.

Over the Phone "Member Security Protection" Scam Alert
(07/28/2010):

It has come to our attention that a First Citizens’ member may have recently received an phone call from a company identfying themselves as IDP. The representative stated that they are affiliated with First Citizens' and that First Citizens' is offering a Security Protection Program to our members. They proceeded to state that they need to confirm the following information:

Our routing number, account number printed on their checks, members name, date of birth and their last four digits of their social security number.

After they receive this information they gave the following telephone number to call if they have any further questions 866-447-6093. This is an automated phone system where you can leave a message and is located in Glasgow District Columbia.

This organization is not in any way affiliated with First Citizens'. This is a scam to capture your personal information! Please do not respond to such a phone call as you are putting yourself in serious danger of identity theft.

First Citizens’ will NEVER request any personal information (such as account numbers, passwords, PINS, or Social Security Numbers, etc.) through a text message, over the phone or through an unsecured email.

If you gave any personal, CheckCard or account information over the phone, please contact us at 1-800-642-7515 IMMEDIATELY, so we can protect your account information.

NACHA Phishing Alert (7/22/2010) Email Claiming to be from NACHA

NACHA – The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent email that has the appearance of having been sent from NACHA. See sample of email below.

The subject line of the email states: “Unauthorized ACH Transaction.” The email includes a link that redirects the individual to a fake Web page and contains a link that is almost certainly an executable virus with malware. Do not click on the link. The text, email, and the related website are fraudulent.

Be aware that phishing emails frequently have links to Web pages that host malicious code and software. Do not follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.

NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.

If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system.

Always use anti-virus software and ensure that the virus signatures are automatically updated.

Ensure that the computer operating systems and common software applications security patches are installed and current.

Be alert for different variations of fraudulent emails.

= = = = = Sample Email = = = = = =

From: Information

Sent: Thursday, July 22, 2010 8:27 AM

To: Doe, John

Subject: Unauthorized ACH Transaction

Dear bank account holder,

The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:

Unauthorized ACH Transaction Report

http://www.nacha.org/news/newsDetail.cfm/RecentBusinessNewsID/178

----------------------------------------------------------------

Malware, Trojan Attack Alert (06/18/10)

Krebs on Security, a security news and investigation service, has reported that criminals have launched a major e-mail campaign to deploy the malicious malware ZeuS Trojan via spam messages. The messages are disguised as fraud alerts from the Internal Revenue Service, Twitter account hijack warnings, and salacious Youtube.com videos. The fake IRS e-mails contain the subject line "Notice of Underreported Income" and encourage the recipient to click a link to review their tax statement. All of the latest e-mails use a variety of URL shortening services.

Read full article

NCUA warns of fraudulent e-mail activity (05/26/10):

May 26, 2010 – NCUA yesterday said e-mails from simulated NCUA e-mail boxes to members of credit unions may be an attempt to obtain members’ confidential data.

The e-mails solicit credit union members’ participation in an online survey or member survey and promise compensation of $40 for responding. “The emails are fraudulent,” NCUA said. “NCUA does not solicit such information from credit union members. This is a phishing activity with no NCUA activity or approval.”

Read full article

Beware of fraud in the wake of floods

(02/02/2010):

QUINCY, Mass. -- Investigators say two people are posing as FEMA workers and attempting to get into flood-damaged homes in Quincy.

According to police, a man and woman are driving van with Florida plates are knocking on people’s doors claiming to be with the federal government.

Read full article

Over the Phone Gift Card Scam Alert (01/29/2010):

It has come to our attention that some First Citizens’ members may have recently received an automated phone call asking that you key in your Visa CheckCard number, expiration date and three digit code (from the back of the card) in order to be eligible to receive a gift card from Wal-Mart. Once this information is entered the automated number asks that you say "Yes" to accept the terms of the offer or "No" to decline. In some instances, if a "No" response is given, a live operator comes on the line to encourage you to say "Yes" in order to receive the gift card, thus agreeing to the terms of the offer. They may also urge you to make a deposit into your account, and give additional personal information such as social security number, date of birth or address information over the phone.

This is a scam to capture your personal information! Please do not respond to such a phone call as you are putting yourself in serious danger of identity theft.

If you gave any personal, CheckCard or account information over the phone, please contact us at 1-800-642-7515 IMMEDIATELY, so we can protect your account information.

Phone Calls and Text Messaging Fraud Alert (01/21/2010):

It has come to our attention that some First Citizens’ members may have recently received text messages on their cell phones or calls to their home, from people claiming to be from the credit union informing you that we have locked out or deactivated your account or debit card and that you need to call a specific number to re-activate your account.

These are fraudulent messages and an attempt to capture your personal information. Please do not respond to such a text message or phone call because you will soon find that your account has been hit by criminals.

If you did call the number or gave any personal or account information over the phone, please contact us at 1-800-642-7515 IMMEDIATELY, so we can protect your account information.

If you receive a text message or phone call that appears to be from First Citizens’ but suspect that it is not legitimate, you should file a police report and you may also file a complaint with the Federal Trade Commission www.FTC.gov

Protecting your personal information: How to avoid /detect common online scams

As the use of the Internet in our daily lives continues to grow, the various forms of scams, identity theft and schemes designed to take advantage of honest people continue to increase as well. This article contains information on some of the new and most prevailing scams on the Internet. Remembering a few simple rules when dealing with email or Internet information requests can save you from falling prey to these types of schemes. In addition, through our Security and Fraud Alerts webpage and our Online Education Center, you can review the latest information on email/internet scams and Identity Theft and can learn tips and information that will help you from having your Identity and/or credit history compromised.

First Citizens’ is committed to keeping your money and personal information safe. We will never solicit your personal information through email. We want to give you the resources you need to protect yourself on the Internet as well! If you have questions concerning your account and possible fraudulent activity, please contact us at 1-800-642-7515.

Examples of Common Email Scams

Most email scams end up involving requests to send money, cash checks, establish business relationships or requests for information.

Nigerian Letter

This scam has been used for decades and has migrated from mail to faxes to email. An email will often start off with an introduction indicating that a government official (or some other person that would appear to have access to large amounts of funds) has died and left a large amount of money that is available to be transferred. The message then encourages the recipient to participate in the transfer in return for a share of the funds. Over time, the sender may ask for funds to cover taxes, bribes to others and legal fees that will be reimbursed once the funds are transferred.

Over the years, the deceased individual has been described as a minister of mining or natural resources, successful business owners and royalty. The locations have also changed over time.

In fact, there is no deceased official and no funds available to be transferred. The scam appeals to an individual’s need for quick cash and a willingness to skirt foreign laws.

Canadian, South African, Netherlands, United Kingdom, “You Name It” Lottery

An email will arrive notifying the recipient that they have won a lottery. The email may even mention a legitimate lottery organization, but just because the email includes that name, it does not mean the email is from the organization. There is usually a request to keep the winning secret. The email then asks that a claims agent (or some other official sounding person) be contacted to arrange for payment. Once those conversations start, there is typically a request for funds to cover taxes, legal fees or other processing costs.

There are several things that should make one very suspicious:

Unless you bought a lottery ticket, you are not going to win.

Generally, taxes on lottery winnings are withheld from the payments and not paid up front.

Legitimate lottery organizations do not charge fees.

Most of these emails come from free email accounts like Yahoo, Hotmail, Gmail, MSN or those provided by an Internet service provider.

Check Cashing Schemes

These may take the form of an email indicating that the sender wants someone to cash checks in return for keeping a portion. “I will send a check made payable to you drawn on XYZ Bank in the amount of $10,000. All you have to do is deposit it. In return for doing this, you can keep $1,000 and wire $9,000 back to me.”

This scam is usually promoted through emails but may also be found on job listing sites. The original check and the scam artist have traditionally been from overseas, but are not always.

The check may look real, but in reality, there is no account or the account has insufficient funds to cover the check. In this scam, the victim sends money to the thief only to find out later the check is a fraud. This results in a loss of funds sent out and in some cases money owed to the financial institution where the victim negotiated the check.

Refund Scams

These schemes can take many forms, but usually involve an email indicating that the recipient has a refund due, but needs to provide information to speed the processing of the refund. The scam artists may claim to represent the IRS, state tax officials or even stores where someone may have purchased something.

The email directs the recipient to a website that may look legitimate but is a faked or spoofed site. Once there, the person will be requested to provide various personal information such as Social Security number, credit card number or specific account information so the refund can be directly deposited.

Providing this information is dangerous! Once in the hands of a fraudster, it can lead to credit card fraud, unauthorized access to your financial accounts or identity theft.

The IRS and most state taxing authorities usually do not use email to correspond about refunds. Commercial establishments may use email but you should be very wary of emails like this. Before providing the information online, contact the establishment by phone to make sure the request for information is legitimate.

Financial Account Confirmation Scams

Emails that request sensitive information are often called phishing emails. They often take the form of a message from a financial institution asking for the recipient to provide their account information due to a computer error, as part of a system upgrade or even as part of an enhanced Internet security initiative.

The recipient is usually directed to website that may look real, but is not. The information requested may include account numbers, user names, access codes and passwords. All of this information is dangerous in the hands of scam artists. Financial Institutions do not request that you provide personal information through the email.

If you have questions concerning your account and possible fraudulent activity, please contact us at 1-800-642-7515.

Work-at-Home Internet Scam - Mail Assistants

The latest scam to hit the Internet has just arrived: Jobs for people seeking parttime positions called “mail assistants” for work done at home. Vacancies are posted on Craigslist.com under the name of ABS Consulting. Based in the country of Luxembourg, ABS purports to have facilities throughout Europe, referred to as “Forward Luxembourg.” It claims to be a leading global provider of risk-management services.

Job seekers, typically college students looking for summer work, are told they will provide mail forwarding services for expatriates, international travelers, and seasonal workers around the world. They are asked to perform simple tasks:

• Receive mail at home.
• Scan the front of each envelope received.
• E-mail scanned images to the company.
• Ship accumulated mail biweekly, using prepaid UPS or FedEx postage
labels provided via e-mail.

After two weeks on the job, assistants get an e-mail promising an $800 paycheck, plus an extra $200 bonus. But to test their “integrity,” they’re told they’ll get a check for $2,800, and must mail a check back to return the extra money.

The $2,800 check may look legitimate but, big surprise, it’s bogus. So instead of getting paid, the college student now has to pay the bank the full amount. Worse, the scammer now has access to the student’s checking account. And the student is committing a criminal violation by scanning victims’ mail.
The Postal Inspection Service is working to quickly shut down this scheme by attacking the problem from several angles.

If you have information on this or similar scams, report it online at https://postalinspectors.uspis.gov/ or
call 1-877-876-2455, option 3.

Debit Card Fraud Alert:

First Citizens’ has been informed of a security compromise to Heartland Payment Systems, a major U.S. based processor of retail transactions. Published reports indicate information that may have been compromised includes debit and credit card numbers and expiration dates. The intrusion is reported to have occurred between May 2008 and November 2008. To date First Citizens’ has identified relatively few customer accounts that may be at risk, and has taken action to prevent fraudulent activities to selected accounts. First Citizens’ will be contacting cardholders whose cards may have been compromised in this breach. However, the security breach is considered to be a significant one rivaling some of the largest such occurrences to date, and you should be alert to possible fraudulent use of your card information.

We would ask all of our debit card customers to review your account activity for possible unauthorized transactions and immediately report any such occurrences to us at 1-800-642-7515. As always, be on the lookout for signs of potential identity theft, especially over the next 12 to 24 months. If at any time you notice any discrepancies between your statements and your own records, please notify us immediately. Our risk management and operations team of professionals has been monitoring the compromise on a constant basis and are taking any and all actions possible to protect your account. We will keep you informed of the progress of this breach as important information becomes available.

In addition, always keep in mind the following safeguards:

1. Check your monthly statements to ensure they match your recollection and your other records. If you have online access, check them frequently. If at any time you notice any discrepancies between your statements and your other records, please notify us immediately.

2. Never give out account numbers or other personal financial information, unless you can validate the authenticity of the requestor.

3. Always shred personal and financial information before discarding it.

4. Review your credit report, at least annually. You’re entitled to a free credit report annually. Simply contact one of the three main credit-reporting bureaus:

Equifax®

Experian®

TransUnion®

800-525-6285

equifax.com

888-397-3742

experian.com

800-680-7289

transunion.com

As with all possible fraudulent situations, you are encouraged to take appropriate measures if a scam is suspected. Note that an excessive number of attempts at small dollar pre-authorizations may be an indication of intent to commit fraud.

If you have questions concerning your account and possible fraudulent activity, please contact us at 1-800-642-7515. For more information regarding security issues, please click here to visit our online education center.

Fraud Warning:

It has come to our attention that some First Citizens’ members may have recently received e-mails claiming to be from card@creditunionaccess.com. The subject line is Account Status Alert, the e-mail tells you that this is not a promotional email and instructs you to call a toll free number regarding a recent restriction placed on your account.

This is a fraudulent e-mail and an attempt to capture your personal information. It was not sent by First Citizens’ and none of First Citizens’ information systems were compromised. Please do not call this number, and give them any personal information. To protect your identity, First Citizens’ will never request personal account information through email.

If you did call the number and gave any personal information, please contact us at 1-800-642-7515 IMMEDIATLEY, so we can protect your account information.

Below is a copy of the fraudulent email:

Dear CU Member:

This is not a promotional e-mail. Please call us immediately at (877) 898-7930 regarding recent restriction placed on your account. We're available 24/7 to take your call.

Please disregard this e-mail if you've already call us since the date this e-mail was sent.

We appreciate your prompt attention to this matter.

Thank you

CU Fraud Prevention Security Department

Telephone Scam:

First Citizens’ has recently learned of a telephone scam attempting to obtain cardholder information.

The details are as follows:

Event Characteristics

Cardholders have received computer-generated calls claiming to be from their financial institution. The calls claim their accounts have been frozen and then direct the cardholder to call a toll-free number to leave their debit card information in order to reactivate any cards. The toll-free number includes a recorded message that asks the customer to key their account number, card expiration date, and PIN.

Recommendations

Your awareness is key in combating fraud. Should you receive any questionable calls, please make sure you do not provide your personal information.

In addition, here are a few tips and/or characteristics of a fraudulent call:

Make sure you [i.e. cardholder] initiate the contact, and the institution verifies your identity with questions only you would know.
To verify whether a call is legitimate, call the credit union or visit our website, using phone numbers or internet addresses from your statement or account documentation. Do not call back a number provided over the phone or click on a link in an email.
Most communications will include something that will concern or excite the victim.

If you have been the victim of a scam, file a complaint with local law enforcement.

Notify us as soon as possible.

As with all possible fraudulent situations, you are encouraged to take appropriate measures if a scam is suspected. Note that an excessive number of attempts at small dollar preauthorizations may be an indication of intent to commit fraud.

If you have questions concerning your account and possible fraudulent activity, please contact us at 1-800-642-7515. For more information regarding security issues, please click here to visit our online education center.