Online Threat Alerts (OTA) - Alerting you to scams and frauds.

RBFCU Scams - How They Work and How to Protect Yourself
RBFCU Scams - How They Work and How to Protect Yourself

Randolph-Brooks Federal Credit Union (RBFCU) members are being targeted by highly sophisticated impersonation scams. Criminals are successfully spoofing the credit union's official phone numbers and short-code text lines to drain member accounts. Hundreds of members have reported severe financial losses due to these attacks.

How the Scam Works

  • Number Spoofing: Criminals mask their caller ID to display the official RBFCU number (210-945-3300).
  • Pre-Stolen Data: Scammers often already know your username, password, or the last four digits of your Social Security Number, making them sound entirely legitimate.
  • Fake Urgency: The caller claims to be from the "fraud department" regarding an urgent "unauthorized transaction".
  • Text Hijacking: They text from the exact 5-digit short-code number RBFCU uses for normal alerts. They then trick you into replying "YES" to a transaction or authorizing a new "trusted device" to gain complete access to your online banking portal.
  • AI Voice Cloning: Some attacks utilize AI voice cloning to impersonate bank representatives or loved ones to pressure victims.

A Sample Scam

RBFCU Text Scam

What RBFCU Will NEVER Do

The credit union emphasizes that its employees will never contact you to ask for:

  • Online banking usernames or passwords.
  • One-time passcodes (OTP) or Multi-Factor Authentication (MFA) codes.
  • Answers to your security questions.
  • Moving funds to a "secure account" or withdrawing cash to protect it.
  • Approving a device sign-in request on your behalf.

Immediate Steps to Take

If You are Currently on a Suspicious Call

  1. Hang Up Immediately: Do not trust caller ID.
  2. Call Separately: Dial RBFCU directly at 210-945-3300 or 1-800-580-3300 to verify the claim.

If You Already Shared Information

  1. Secure Your Account: Immediately log in and change your Online Banking password.
  2. Remove Unknown Devices: Navigate to "Profile Settings" > "Security Center" > "My Devices" in the mobile app and deactivate any devices you do not recognize.
  3. Contact Fraud Operations: Report the breach directly to RBFCU at 210-945-3300.
  4. Report External Agencies: Take screenshots of scam texts and send them to abuse@rbfcu.org. File official fraud reports with the FTC ReportFraud portal and the FBI's Internet Crime Complaint Center (IC3).
0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0

waiting