Phishing is a fraudulent method in which the fraudster sends out a legitimate-looking email in an attempt to gather personal and financial information from recipients. The scammer sends an email to an unsuspecting customer that may look just like a legitimate email. If the customer falls for the bait (thus the "fishing" reference), the thief could get credit card numbers, PINs, account passwords, expiration dates, credit card/bank account numbers and even Social Security numbers.
Tips to Avoid This Scam
- Never provide personal information in response to an unsolicited request, whether it is over the phone or internet. A trusted company will never ask a customer for highly sensitive information during a call they initiated. A financial institution may ask for the account holder’s partial Social Security Number for verification, but they will never ask for the entire Social Security Number, account number or PIN.
- Do not respond to any suspicious looking email, automated calls, or text messages.
- Don’t trust the Caller ID. Fraudsters can manipulate the Caller ID to have it display a legitimate business’ name. To be safe, you can check to see if the phone number matches the number that appears on your bank statement, credit/debit card, or on their official website.
- Avoid fraudulent sites by entering web addresses directly into the browser yourself or by using bookmarks you create. Do not click on links in emails that you did not directly request from a company or that look suspicious.
- If you have fallen victim to such a scam, contact your financial institution immediately to protect your accounts.
Don't respond or reply to an email, phone call, or text message that:
- Requires you to supply personal or account information directly in the email
- Requires you to click on a link to provide more personal or account information
- Threatens to close or suspend your account if you do not take immediate action
- Invites you to answer a survey that asks you to enter personal or account information
- States that your account has been compromised or that there has been third-party activity on your account, then asks you to enter or confirm your personal or account information