Fraud & Security Center

Protect Yourself From Fraud & Identity Theft

Homebase Credit Union will never contact you by email or phone to request personal information such as your account number, social security number, etc. If you think you have become a victim of fraud, please contact us immediately.

Tips to Protect Your Accounts

Create separate passwords for each online account.
Check your online accounts regularly for suspicious activity.
Be extremely skeptical of communication received from sources you are not familiar with.
Never respond to any request for personal information that arrives via e-mail.
Never click on a link embedded within any potentially suspicious e-mail.
If you are concerned about an automated message, do not respond to the call, text, or email. Contact the company in question using the official customer service number on your card or contact information listed on the company’s legitimate website. Do not contact any number provided by the fraud call or message and do not click on links in text messages.
Work from the most current versions of web browsers and be sure to install and run all available firewalls.
Keep two-factor authentication codes private. Do not provide them via phone, text, or email.

Type of Fraud Schemes

Skimming and Malware

Skimming and deployment of POS terminal malware continue to be widespread methods for stealing data. Smaller, local merchants are now more likely to be compromised than in years past. Stolen data, which is collected using POS malware, is passed to criminal networks through remote, wireless technologies with increasing speed.

Phishing

Phishing consists of getting a member to enter their user ID and password into a false, but official looking, website. What actually happens is that this information is getting logged for thieves to obtain and use however they wish. Many times, after the member enters their log-in information, they are taken to another well-crafted website asking for personal information such as full name, date of birth, mother’s maiden name, social security number, etc. The unsuspecting member has provided thieves the data needed to login and deplete current accounts but as well as open new accounts in that member’s name.

Vishing and Smishing

Smishing and Vishing schemes use sophisticated methods combined with social engineering to deceive cardholders into revealing critical information and disregarding legitimate fraud warnings. Smishing is the fraudulent practice of sending text messages claiming to be from reputable companies to induce individuals to reveal personal information, such as passwords or credit card numbers. Vishing is the fraudulent practice of making phone calls or leaving voice messages claiming to be from reputable companies to induce individuals to reveal personal information, such as bank details and credit card numbers. Cardholders may be sent a voice or text message with transaction details and requesting the cardholders confirm. When they respond, they may be questioned for account details, or they may be asked to call back a number to provide account information. In some instances, they are sent a one-time passcode (OTP). The caller or text message then instructs the cardholder to reply “No Fraud” to text/voice messages.

It is important to be on the lookout for these kinds of fraudulent messages that disguise themselves as legitimate fraud notifications. These schemes use sophisticated methods combined with social engineering to deceive cardholders into revealing critical information and disregarding legitimate fraud warnings. Additional red flags of note include hyperlinks and grammatical and punctuation mistakes.

Card Security

Be Vigilant

Beware of individuals calling you stating they believe your credit card has been compromised. Ask them for their phone number and call them back to verify they are a legitimate company.