Phishing
New information - Please be advised! 11/13/2009
It has been brought to our attention by NACHA (The Electronic Payments Association) a Malicious Email that may have been sent to our customers (details listed below). Please be aware that at this point we are not sure if any of our customers have received this email from NACHA but to be pro‐active and alert our customers. If you have any questions please contact your banker.
Random individuals and/or companies may have received a falsified e‐mail with the subject title “Rejected ACH Transaction.” This e‐mail appears to be from NACHA – The Electronic Payments Association telling them that there is a problem with an ACH transaction they have originated. The e‐mail includes a link which redirects the individual to a fake web page which appears like the NACHA website and contains a link which is almost certainly executable virus with malware. See sample below. Please be aware that the alert did not originate from NACHA, the website does NOT belong to NACHA’s, and please do not click on the link.
For additional information, please go to: www.nacha.org.
Sample email:
Dear bank account holder,
The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below: Unauthorized ACH Transaction Report (this is the how the link is presented)
Protect Yourself Against Phishing
Phishing usually comes in the form of fraudulent emails that appear to come from legitimate sources. These ask customers to verify personal information or link to counterfeit websites that appear real.
Watch for emails that:
- Urge you to act quickly because your account may be suspended or closed, or to update your personal information.
- Don't address you by name, but use a more generic one like "Dear valued customer."
- Ask for account numbers, passwords, Access IDs, or other personal information.
The Bank will NEVER ask for sensitive information, such as account numbers, Access IDs or passwords, via e-mail.
Tips for safeguarding your information from the American Bankers Association:
- Don’t give your Social Security number or other personal credit information about yourself to anyone who calls you.
- Tear up receipts, bank statements and unused credit card offers before throwing them away.
- Keep an eye out for any missing mail.
- Don’t mail bills from your own mailbox with the flag up.
- Review your monthly accounts regularly for any unauthorized charges.
- Order copies of your credit report once a year to ensure accuracy.
- Do business with companies you know are reputable, particularly online.
- Don’t open email from unknown sources and use virus detection software.
- Protect your PINs (don’t carry them in your wallet!) and passwords; use a combination of letters and numbers for your passwords and change them periodically.
- Report any suspected fraud to your bank and the fraud units of the three credit reporting agencies immediately.
TransUnion: (800) 916-8800
Experian: (800) 301-7195
Equifax: (800) 525-6285
If you become a victim, contact:
- The fraud departments of the three major credit bureaus (listed above)
- The creditors of any accounts that have been misused
- The local police to file a report
- The bank to cancel existing accounts held in your name and re-open new accounts with new passwords