MEMBER ALERT April 13, 2007
PHISHING ATTEMPT USES "NCUA" NAME
TO GET YOUR INFORMATION
Educational Community Credit Union has been notified about a phishing attempt purportedly from the NCUA that is currently being conducted by e-mail and targeting both consumers and credit union members.
This is an apparent phishing attempt designed to gather credit and debit card information from individuals and organizations.
The National Credit Union Administration (NCUA) is aware of this attempt and has directed all impacted individuals to report any incidents to phishing@NCUA.gov or call
the Member Service Call Center at (800) 772-2243.
The content of the FRAUDULENT EMAIL follows:
From: NCUA mailto:aw-confirm@hawaii.gov
To: undisclosed-recipients:
Sent: Wednesday, April 11, 2007 8:44 PM
Subject: Official information for all Federal Credit Union
Dear Sir/Madam,
National Credit Union Administration always look forward for the high security of our clients. Some customers have been
receiving an email claiming to be from NCUA advising them to follow a link to what appear to be a NCUA web site, where they
are prompted to enter their personal Online Banking details. NCUA is in no way involved with this email and the web site does not
belong to us.
Actually, we are performing security improvements of our banking community and enforce customers to register their sensitive
information for an additionally created free security service to prevent any fraudulent activity against their assets and savings. We,
hereby ask you to respond within few hours of current notification and Confirm Your Credit or Debit Card via our SSL protected
website to apply for this service absolutely for free, otherwise your account(s) may not process posted transactions correctly and
on time.
Please visit us to Confirm Your Credit or Debit Card
http://www.NCUA.org/Hawaiiusafcuhb.us/Security/Login.cfm
J. S. Smith
Security Advisor
NCUA PLC.
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your FCU or CU Online Bank account and choose the "Help" link on any page.
NCUA Email ID # 1127
Remember Educational Community Credit Union will never request or solicit sensitive member information like member name, address, telephone number, social security number, personal identification number (PIN) or password, account number, or any other identifying number that would permit access to your member account via email, via pop ups on the Internet or via phone. If we suspect any form of compromise, we will ask you to come into a branch and work personally with a Member Representative on site to resolve the issue.
A couple of suspicious items to clue you that this email is fraudulent: 1) The grammar is not quite correct, 2) There is the pressure
of a timeframe by which you must act, 3) They ask you to go to their website to confirm information, 4) It specifically says "Please
do not reply to this email"--- no one takes responsibility for the correspondence.
Member Alert 1.25.07
Regarding Compromised Visa Debit and/or Credit Cards
Breach associated with the TJX Company
Educational Community Credit Union has been notified that your Debit and/or Visa Credit Card may have been compromised by an outside vendor not affiliated with us. You may have heard or read about this recently.
On January 15th or 16th you received a letter from us asking you to monitor any unauthorized activity on your accounts. After further consideration, Educational Community Credit Union has decided to re-issue compromised Debit and/or Visa Credit Cards. Keeping your privacy secure is our greatest priority.
For our Debit Card holders:
To protect against the possibility of a fraudulent transactions, we are, as a precautionary measure, ordering you a new card and PIN. You may continue to use your old card until February 9, 2007 at which time it will be blocked. Once you receive your new card and PIN, please begin using it and destroy the old card immediately. If you wish to customize your Debit Card PIN, bring your Debit Card to any of our local branches.
For our Credit Card Holders:
To protect against the possibility of a fraudulent transactions, we are, as a precautionary measure, ordering you a new card and PIN. Your current card has been blocked for your protection. We apologize for any inconvenience this may cause you. In about 10 days, once you receive your new card and PIN, please begin using it and destroy the old card immediately. If you wish to customize your Credit Card PIN, bring your Credit Card to any of our local branches.
Any re-occurring charges set up on your card will require you to notify the
merchant/payee of your account number change.
This breach is directly associated with the TJX Company and not the result of a security breach at Educational Community Credit Union. TJX has established a toll-free helpline (866-484-6978) for any questions.
If you have any questions, please contact your local branch and visit our web site at www.edcomcu.org, click on the "Member Alert" button for further information.
Local: 425.385.3888
Long Distance: 800.247.7072
Silver Lake Main Office - 10520 19th Ave. S.E. - Everett, WA 98208
Marysville Branch - 8825 34th Ave. N.E., Suite K - Marysville, WA 98271
Monroe Branch - 371 Butler Street - Monroe, WA 98272
P.S. Please be sure your neighborhood mailbox is secure, it is wise to monitor and protect the
contents of your mailbox.
Member Alert 8.15.06
PHISHING
The Bushel of Benefits is Discontinued
Do Not Respond To a Survey Associated with the Bushel of Benefits.
Educational Community Credit Union is presently experiencing a phishing scam. Members and non members are being asked to fill out a five question survey for the Bushel of Benefits Bonanza. If you click on the link Bushel of Benefits Survey you will see a fraudulent Educational Community Credit Union Online Banking & Bill Pay page. This page is a "spoof" or copy of our on line banking page - you can tell it's fraudulent by the following text in the center of the page:
Welcome to EDCOM@home!
To login, please use your ATM PIN NUMBER
DO NOT PROVIDE YOUR ATM PIN NUMBER!
Educational Community Credit Union does not request or solicit sensitive member information like name, address, or telephone number, or social security number, or personal identification number (PIN), password, or account number via email, via pop ups on the Internet or by phone.
If you did complete the requested survey, please call Educational Community Credit Union immediately for instructions or go into our legitimate Online Banking & Bill Pay PAGE and change your LOGIN ID and PASSWORD immediately.
In addition, call VISA at 1-800-325-3678 to close your VISA Card and have a new one reissued. If you use your ATM/Debit Card, call 1-800-854-6219.
If you believe you have been phished via email contact Educational Community Credit Union immediately at 425-385-3888 or 1-800-247-7072.You can also contact the Federal Trade Commission by emailing spam@uce.gov or the Internet Crime Complaint Center of the FBI at www.ic3.gov.
When forwarding fraudulent email include the entire email with the original header information.
For complete information on this subject go to the National Credit Union Administration (NCUA) site.
