Menu

Security News

Security is a primary concern for Austin Telco Federal Credit Union. In order to help educate and safeguard our members, we have implemented this page to keep you up-to-date on current fraudulent schemes, scams and general security alerts. Please check back frequently as we plan to update this page as information is provided to us.

Scams and Fraud

Austin Telco Number Spoofing Scam

A recent scam involving number spoofing has seen a rise in the last few months. A member has brought it to our attention that they were contacted by what appeared to be Austin Telco's number only to discover that it was a fraudster attempting to get information from their account.

Scammers have used number spoofing before, but now they are finding out whom your financial institute is and spoofing their number to try and get personal information from you. Below is how the scam usually works:

Fraudsters clone (or spoof) the actual number of the financial institute you are currently with; on your caller ID, the number will appear just as if you were getting a call from them. When you answer, the fraudster will usually mention working for your financial institution and that there has been unusual activity on your account. They'll then try and persuade you to give out private account information such as your PIN or password to your account.

In some cases, to ensure they have your trust, the fraudster will mention calling the number on the back of your card or your financial institute directly. Instead of hanging up to allow you to do this, they act as if they terminated the line and will even play a fake dial tone on their end. Once you dial the number for your financial institute, they will resume the call as if it were you initiating it.

Remember, Austin Telco will never call you and ask for your Online Banking password nor will we ever have you input your Debit Card PIN into the phone. If you ever have any doubt of who is on the line, terminate the call yourself and contact us immediately. Along with this, you can also ensure your account safety by:

  • Setting up Account Alerts to let you know when a transaction occurs or someone logs into it.
  • Keep a password lock on your phone and Online Banking App
  • Do not use public WiFi networks to log in to Online Banking.
  • Change your Online Banking password often.
  • When checking Online Banking in a public place, be sure to watch for shoulder surfers trying to see you put in your password.
Anatomy of a Fake Check Scam

Fake check scams are everywhere, and they are slowly becoming more common and causing members of financial institutes to lose more money each year. The Federal Trade Commision (FTC) published an article with an Infograph that better explains how these fake check scams work and how to avoid them. To see this article, please click here.

Felony Lane Gang

Recent activity from a fraudster ring called the “Felony Lane Gang” has been reported in the Austin area. Since 2004, the FLG has defrauded US financial institutions out of millions of dollars by cashing stolen checks and making fraudulent withdrawals using stolen identity documents. These individuals steal personal information by taking purses and personal items left in cars. They then attempt to cash stolen checks. Authorities note that gyms, stores, and daycare parking lots have been specific targets. Always take purses and valuables with you when exiting your vehicle, even for short stops. If you witness the break in, you should not attempt to apprehend the subjects; instead, you should immediately contact the local police department and notify Austin Telco if your cards, checks, or any form of identification has been stolen.

Equifax Cybersecurity Breach

Equifax announced a breach potentially impacting approximately 143 million U.S. consumers. Below is the link to the Equifax site with more information on the breach as well as a link to see if you were impacted by this breach. To see if you were impacted, go to the site below and click "Potential Impact" then "Check Potential Impact" and follow the prompts.

Equifax Security 2017

Text Alert Scam

It has been brought to our attention that members are receiving fraudulent text messages stating that their debit card has been put on hold and to call a number provided to reactivate it. Do not call this number or give anyone your debit card information. This text message is not from Austin Telco. The text fraud alerts sent from Austin Telco look like the following:

Example of Visa Fraud Text Alerts
(32874) FreeMsg: Austin Telco FCU: Possible unauthorized txn on acct ending in 1234: $53.94 processed by Foods Inc. If authorized reply YES, otherwise reply NO. To Opt Out of alerts, reply STOP.

 If you have any doubt that a text message you have received is from Austin Telco, please call our card services department during regular business hours at 512-407-3181.

Video Scam Targets Consumers

Consumers are falling victim to a scam promoted via online videos claiming bills can be paid online using routing numbers belonging to a Federal Reserve Bank (FRB) or other financial institutions. The scam suggests electronic payments will be generated through the ACH network using FRB accounts touted as "secret accounts" or "Social Security trust accounts." in exchange for personal information like Social Security Numbers.

Details

A scam focused on misleading consumers to pay their bills online using routing numbers belonging to Federal Reserve Banks has been reported by the Federal Reserve Bank of New York, The Regional Payments Association, and the Federal Trade Commission. The scam appears to be another way for fraudsters to collect personal information from consumers, in which they can sell or use to commit fraud.

How the Scam Works

Using social media, such as YouTube, fraudsters promote the scam by claiming consumers can pay bills online using secret accounts or Social Security trust accounts held at Federal Reserve Banks. Some online videos also refer to these accounts as Treasury Direct Accounts. Through an online payment service, consumers are instructed to use a Federal Reserve Bank's routing number and the consumer's Social Security Number as the account number in paying bills. These payments are being rejected and returned unpaid - often leading to service fees charged to the consumber by the merchant or vendor. In addition, these consumers become prime candidates for risks associated with identity theft.

Please note that any video, text, email, phone call, flyer, or website that describes how to pay bills using a Federal Reserve Bank or another institution's routing number or secret account is a scam. If you witness this scam or have been targeted by it, please report it to RTN.fraud@ny.frb.org.

DocuSign Breach

DocuSign, a major provider of electronic signature technology has confirmed that a series of malware and phishing emails targeting it’s users was the cause of a data breach in their system. DocuSign stresses that only user email addresses were stolen, however, they noted that this could potentially be a very dangerous situation as these customers may be expecting a DocuSign email and unknowingly click on a link that would allow the malware into their system.

The information was enough to allow attackers to craft specially targeted e-mail campaigns at users featuring doctored branding and headers that make messages appear to contain legitimate DocuSign attachments. Many of the phishing e-mails contains the following in the header: “Completed: docusign.com – Wire Transfer Instructions for recipient-name Document Ready for Signature.” The message contained a link to a downloadable Microsoft Word document that harbored malware.

DocuSign recommends anyone receiving the suspicious e-mails to forward them to the company at spam@docusign.com and then delete the message.

The emails may appear suspicious because the sender isn't recognized, you weren’t expecting a document to sign, it contain misspellings (like “docusgn.com” without an ‘i’ or @docus.com), it contains an attachment, or it directs you to a link that starts with anything other than https://www.docusign.com or https://www.docusign.net.

If you have reason to expect a DocuSign document via email, don’t respond to an email that looks like it’s from DocuSign by clicking a link in the message. When in doubt, access your documents directly by visiting docusign.com, and entering the unique security code included at the bottom of every legitimate DocuSign email. DocuSign says it will never ask recipients to open a PDF, Office document or ZIP file in an email.


Common Fraud Against Seniors

Telemarketing Fraud

If you are age 60 or older—and especially if you are an older woman living alone—you may be a special target of people who sell bogus products and services by telephone. Telemarketing scams often involve offers of free prizes, low-cost vitamins and health care products, and inexpensive vacations. There are warning signs to these scams. If you hear these—or similar—“lines” from a telephone salesperson, just say “no thank you,” and hang up the telephone:

  • “You must act now, or the offer won’t be good.”

  • “You’ve won a free gift, vacation, or prize.” But you have to pay for “postage and handling” or other charges.

  • “You must send money, give a credit card or bank account number, or have a check picked up by courier.” You may hear this before you have had a chance to consider the offer carefully.

  • “You don’t need to check out the company with anyone.” The callers say you do not need to speak to anyone, including your family, lawyer, accountant, local Better Business Bureau, or consumer protection agency.

  • “You don’t need any written information about the company or its references.”

  • "You can’t afford to miss this high-profit, no-risk offer.” 

Tips for Avoiding Telemarketing Fraud

  • Don’t buy from an unfamiliar company. Legitimate businesses understand that you want more information about their company and are happy to comply.

  • Always ask for and wait until you receive written material about any offer or charity. If you get brochures about costly investments, ask someone whose financial advice you trust to review them. But, unfortunately, beware—not everything written down is true.

  • Always check out unfamiliar companies with your local consumer protection agency, Better Business Bureau, state attorney general, the National Fraud Information Center, or other watchdog groups. Unfortunately, not all bad businesses can be identified through these organizations.

  • Obtain a salesperson’s name, business identity, telephone number, street address, mailing address, and business license number before you transact business. Some con artists give out false names, telephone numbers, addresses, and business license numbers. Verify the accuracy of these items.

  • Before you give money to a charity or make an investment, find out what percentage of the money is paid in commissions and what percentage actually goes to the charity or investment.

  • Before you send money, ask yourself a simple question. “What guarantee do I really have that this solicitor will use my money in the manner we agreed upon?”

  • Don’t pay in advance for services. Pay services only after they are delivered.

  • Be wary of companies that want to send a messenger to your home to pick up money, claiming it is part of their service to you. In reality, they are taking your money without leaving any trace of who they are or where they can be reached.

  • Always take your time making a decision. Legitimate companies won’t pressure you to make a snap decision.

  • Don’t pay for a “free prize.” If a caller tells you the payment is for taxes, he or she is violating federal law.

  • Before you receive your next sales pitch, decide what your limits are—the kinds of financial information you will and won’t give out on the telephone.

  • Be sure to talk over big investments offered by telephone salespeople with a trusted friend, family member, or financial advisor. It’s never rude to wait and think about an offer.

  • Never respond to an offer you don’t understand thoroughly.

  • Never send money or give out personal information such as credit card numbers and expiration dates, bank account numbers, dates of birth, or social security numbers to unfamiliar companies or unknown persons.

  • Be aware that your personal information is often brokered to telemarketers through third parties.

  • If you have been victimized once, be wary of persons who call offering to help you recover your losses for a fee paid in advance.

  • If you have information about a fraud, report it to state, local, or federal law enforcement agencies.

Reverse Mortgage Scam

The FBI and the U.S. Department of Housing and Urban Development Office of Inspector General (HUD-OIG) urge consumers, especially older citizens, to be vigilant when seeking reverse mortgage products. Reverse mortgages, also known as home equity conversion mortgages (HECM), have increased more than 1,300 percent between 1999 and 2008, creating significant opportunities for fraud perpetrators.

Reverse mortgage scams are engineered by unscrupulous professionals in a multitude of real estate, financial services, and related companies to steal the equity from the property of unsuspecting older citizens or to use these citizens to unwittingly aid the fraudsters in stealing equity from a flipped property.

In many of the reported scams, victim citizens are offered free homes, investment opportunities, and foreclosure or refinance assistance. They are also used as straw buyers in property flipping scams. Older citizens are frequently targeted through local churches and investment seminars, as well as television, radio, billboard, and mailer advertisements.

A legitimate HECM loan product is insured by the Federal Housing Authority. It enables eligible homeowners to access the equity in their homes by providing funds without incurring a monthly payment. Eligible borrowers must be 62 years or older who occupy their property as their primary residence and who own their property or have a small mortgage balance.

Tips for Avoiding Reverse Mortgage Scams:

  • Do not respond to unsolicited advertisements.

  • Be suspicious of anyone claiming that you can own a home with no down payment.

  • Do not sign anything that you do not fully understand.

  • Do not accept payment from individuals for a home you did not purchase.

  • Seek out your own reverse mortgage counselor.


Sign in to Online Banking