Recent Smishing Alerts
Text Message Security
What You Should Know About “Smishing”
What is smishing?
The term smishing is short for SMS (short message service) phishing, which is a mobile text scam intending to trick a consumer into downloading malicious software such as a Trojan horse virus or to request someone to provide personal information. The text message may direct the recipient to a website URL or a phone number that connects to an automated voice response system where personal information is collected.
How does smishing work?
The smishing message usually contains something that requires the consumer’s "immediate attention” such as reactivating a suspended credit card. It may direct them to a legitimate looking website that will ask them to “confirm” their personal financial information, such as their credit/debit card number or CVV code (on the back of their credit card). If a phone number is given, an automated voice response system will ask the consumer for the same information. Once obtained, the fraudsters will use this information to create new cards to make unauthorized purchases or withdrawals.
Here is an example of a smishing message:
"Notice - this is an automated message from (a credit union or bank), your ATM card has been suspended. To reactivate immediately call 866-###-####."
In many cases, the smishing message will show that it came from "5000" instead of displaying an actual phone number. This usually indicates the SMS message was sent via e-mail to the cell phone, and not sent from another cell phone.
Note: Michigan Schools and Government Credit Union will never ask you for personal information via text message. However, we may contact you via the telephone to verify suspicious credit card activity and may ask you to confirm your address, birth date, and the last four digits of your social security number to verify your identity. You will never be asked to provide your full social security number, VISA card number, account number, or PIN.
Setting things right for yourself on the path to financial success includes protecting your account information. What can you do to protect yourself?
- Be suspicious of all unknown text messages. You should be just as suspicious of text messages as you are of e-mails asking for personal information.
- Register your number. Visit the National Do Not Call registry at www.donotcall.gov. If you are on the list and receive a text message from a suspected number, this could be a tip that the message is fake.
- Report incidents. Report smishing text messages to www.ftc.gov or call 888.382.1222. The FTC would like to know the number that appeared on your caller ID, as well as the time of day and the website address or telephone number listed.
- Contact the Credit Union using published telephone numbers from your statement or via secure e-mail within our Internet Account Access. Our telephone number is 586.263.8800 or toll-free at 866.674.2848.
