| What You Should
Know About “Smishing”
What is smishing?
The term smishing is short for SMS (short message service) phishing, which is a mobile text scam intending to trick a consumer into downloading malicious software such as a Trojan horse virus or to request them to provide personal information. The text message may direct the recipient to a website URL or a phone number that connects to an automated voice response system where personal information is collected.
How does smishing work?
The smishing message usually contains something that wants the consumer’s "immediate attention” such as reactivating a suspended credit card. It may direct them to a legitimate looking website that will ask them to “confirm” their personal financial information, such as their Credit/Debit Card number or CVV code (on the back of their credit card). If a phone number is given, an automated voice response system will ask the consumer for the same information. Once obtained, the fraudsters will use this information to create new cards to make unauthorized purchases or withdrawals.
Here is an example of a smishing message:
"Notice - this is an automated message from (a local credit union), your ATM card has been suspended. To reactivate call urgent at
866-###-####."
In many cases, the smishing message will show that it came from "5000" instead of displaying an actual phone number. This usually indicates the SMS message was sent via email to the cell phone, and not sent from another cell phone.
Note: MSGCU will never ask you for personal information via text message. However, we may contact you via the telephone to verify suspicious credit card activity and may ask you to confirm your address, birth date, and the last four digits of your social security number to verify your identity. You will never be asked to provide your full social security number, VISA card number, account number, or PIN.
What can you do to protect yourself?
• Be suspicious of all unknown text messages. You should be just as suspicious of text messages as you are of e-mails asking for personal information.
• Register your number. Visit the National Do Not Call registry at www.donotcall.gov. If you are on the list and receive a text message from a suspected number, this could be a tip that the message is fake.
• Report incidents. Report smishing text messages to www.ftc.gov or call 888.382.1222. The FTC prefers to know the number that appeared on your caller ID, as well as the time of day and the website address or telephone number listed.
•Contact the Credit Union using published telephone numbers from your statement or via secure email within our Internet Home Banking service. Our telephone number is 586.263.8800 or toll free at 866.674.2848.
|
