
A phony e-mail message, targeting the Social Security
Administration (SSA), is circulating, and credit unions should
warn members not to fall for its "Cost-of-Living for 2007 update."
An e-mail message purports to be from SSA under the subject
line, "Cost-of-Living for 2007 update." The message provides
information about a 3.3% benefit increase for 2007 and advises
recipients to update their personal information by using the link
to an SSA website look-alike. It warns that if they don't, the SSA
will suspend their account indefinitely.
Once directed to the phony website, recipients are asked to
register for a password and to confirm their identity with their
Social Security number, bank account information and credit card
information.
Never give out personal identification and account information
in unsolicited e-mails and unsolicited phone calls, and DO NOT
follow unsolicited web links received in e-mail messages.
Phishing is the act of sending out spoof
e-mails and setting up fake Web sites that imitate legitimate,
trusted companies, such as financial institutions. The goal is to
deceive members into giving up personal information for fraudulent
use.
The Anti-Phishing Working Group offers several
tips on how to avoid becoming a victim of phishing scams,
including:
-
Be suspicious of any email with urgent requests
for personal financial information
-
Don't use the links in an email to get to any
web page, if you suspect the message might not be authentic
-
Avoid filling out forms in email messages that
ask for personal financial information
-
Always ensure that you're using a secure website
when submitting credit card or other sensitive information via
your Web browser
-
Consider installing a Web browser tool bar to
help protect you from known phishing fraud websites
-
Regularly log into your online accounts and
regularly check your account statements to ensure that all
transactions are legitimate
-
Ensure that your browser is up to date and
security patches applied
-
Always report "phishing" or spoofed e-mails to
the necessary agencies including the Federal Trade Commission
and the Internet Crime Complaint Center of the Federal Bureau of
Investigation (FBI).
More information can be found at the Federal Trade
Commission's website on Identity Theft at
http://www.consumer.gov/idtheft/.