Home >

Don't fall prey to phishing scams masquerading as Ohio credit unions

Information for Consumers:
On Aug. 26, a fraudulent e-mail survey began circulating. The e-mail purports to be from “Credit Union of Ohio [mailto:notice@cuofohio.org]” and includes a link to the survey. The link in the e-mail is fake and actually directs visitors to the scammers’ Web site. (If you hover your cursor over the link, you’ll see the actual address it routes to). At the bottom of the survey, the recipient is asked to input their account number in order to receive the $99.99 deposit. However, they have actually just submitted their account number to the scammers.

Key clues/red flags to help spot these kinds of scams:

--   When you click on the link, the URL is not consistent with the institution’s Web address. For example, Credit Union of Ohio’s Web site is www.CUofOhio.org. The link actually takes visitors to: http://216.119.238.198.nw.nuvox.net:84/cuofohio/index.htm or http://113226.ntpu.edu.tw:84/ohi/index.htm.

-- Most importantly, whenever you are submitting account or credit card numbers online, make sure that it is through a secure Web site. Look for the little lock icon in the lower right-hand corner of the screen and https:// in the Web address.

On Aug. 19, multiple phishing scams posing as various Ohio credit unions began circulating. Ohioans are receiving e-mails, cell phone text , and voice mail/answering machine messages informing them that their credit union accounts have been suspended. Recipients are given a phone number to call to re-instate their accounts (this is how the fraudsters steal their account information and potentially withdraw funds).

The following are known phishing messages being circulated:

• Text and e-mail messages saying, "Your CME F-C-U services was suspended for suspicious activity, call us at 6197934823"

• Text and e-mail messages saying, "Your Credit Union of Ohio services was suspended for suspicious activity, call us at 3054337563"

• Text and e-mail messages from service1@superior.com advising Superior FCU members that "we have been unable to contact them concerning a compromise of their VISA card" to call 800-466-1728

• An auto dialer is calling Central Ohio phone numbers leaving a message stating that they are from "Credit Union of Ohio" and advising their credit card account has been compromised. They are directed to call 614-448-1303.

If you receive any of these messages, disregard them and do not call the phone number -- Even if you have an account with CME Federal Credit Union, Credit Union of Ohio, or Superior Federal Credit Union. Report the message to your credit union or other financial institution. For a list of credit union phone numbers, click here.

CME Federal Credit Union and Credit union of Ohio have posted information about the scams on their Web sites, www.cmefcu.org, www.cuofohio.org, and www.superiorfcu.com, for consumers.

Information for Credit Unions:
The Ohio Credit Union League is encouraging all credit unions to post information on their Web sites reminding members how the credit union will and will not communicate with them, and how to spot a phishing scam.

Credit union that have been phished are encouraged to:
-- Notify their members immediately. Post a notice warning members of the scam prominently on your credit union’s Web site. Consider sending a broadcast e-mail to your members alerting them to the scam. Prepare your front-line and call center staff to answer members’ questions.

-- Report the phishing scam. Report the phishing scam to regulator and insurer. Contact the Ohio Division of Financial Institutions at (614) 728-8400 and the National Credit Union Administration Region III office at (678) 443-3000. Contact American Share Insurance/Excess Share Insurance at (614) 764-1900.

-- Alert anti-phishing groups. Report the scams to the Federal Bureau of Investigation’s Internet Crime Compliance Center at www.ic3.gov, and the Anti-Phishing Workgroup at reportphishing@antiphishing.org.

-- Take downs. For phishing scams directing recipients to call a specific phone number: If possible, determine the phone carrier of the suspicious phone number using a reverse search Web site, such as www.411.com. Contact the carrier and them to investigate and shut down the number. Experts at CUNA Mutual Group also suggest that credit unions contact their phone carrier and ask them to investigate the suspicious phone number. You can also hire companies, such as Perimeter eSecurity (800-356-9655, ext. 4340) or Cyvellience (888-243-0097)  to conduct the take downs for you.

If you have any questions or need assistance, do not hesitate to contact the League at (800) 486-2917 or oculmail@ohiocul.org. 

The Ohio Credit Union League, with offices in Dublin, is a state trade association representing 438 credit unions. Credit unions are not-for-profit financial institutions owned and democratically controlled by their members. Ohio credit unions provide savings, loans, and other consumer financial services to their 2.6 million members. To learn more, visit www.OhioCreditUnions.org.