November 13, 2009 ~ On Thursday, November 12, 2009, an e-mail blast was distributed impersonating the NACHA – The Electronic Payments Association, a non-profit association that oversees the Automated Clearing House (ACH) Network.  The e-mail subject line is “Rejected ACH Transaction”.  Both the link in the e-mail and the related website are fraudulent.  Do not open this e-mail.

If someone clicks on the link it directs them to a website that looks similar to the NACHA website, but is fake. The links on the website will automatically execute a virus that contains malware.

~ Previous Alerts ~    Scroll down to the bottom of the window for helpful links

September 3, 2009  ~ Midland CU was notified by a member that an email message was received from 7 @ T Mobile.net recently, informing them that their credit union account was frozen. The email instructed them to dial a toll free 888 number.  The message is a "phishing" scam. The fraudsters are trying to gain access to your personal account information. Please do not respond to such requests. Midland CU does not send such emails or text messages. If you receive any emails or text messages that you are concerned about, please don't hesitate calling the credit union. If you have responded to an phishing attempt, please call us as soon as possible so that we are able to take measures to protect your accounts.  515-278-1994 or 1-800-747-1994.

New FRAUD "VISHING" Attempt 
Our card transaction processor SHAZAM has informed us that they have been alerted to the resurgence of a "vishing" fraud attack we were notified about in November. The attack consists of an automated telephone call in which a prerecorded voice advises the cardholder that the call is on behalf of SHAZAM and that the cardholder must reactivate his or her card by entering information immediately. These calls are fraudulent and have not been authorized by SHAZAM.

This attack differs from traditional vishing attacks because there is no telephone number provided for the cardholder to call back and release the information. Because there is no call-back number given and the origination source of the fraudulent calls has been masked by the perpetrators, closing down the origination point of the attack is extremely difficult.

If you have released information as a result of receiving one of these calls, please call us immediately so that we may take the necessary measures to protect your account.   

Text Message Scam: 
February 6, 2009 - Members are reporting being hit by a text message scam recently coming from Midland Credit Union or addressed to "Dear Credit Union Member".  Please note: These text messages are NOT originated by Midland Credit Union. These texts are instructing members to call a certain number because their account "has been frozen".  This is a new form of the latest phishing scams, and the thieves are trying to acquire your credit or debit card number. Please do NOT give any account information over the phone to anyone. We do not call and ask you to disclose your account number to us ever. PIN numbers are your secret information and should not be given to anyone at any time.  If you have responded to one of these messages, please call the credit union immediately to assist us in protecting your account.    

Please note, our fraud protection center may call you to verify transaction AMOUNTS.  You may call (800) 377-1809 to contact our fraud protection center. 

MasterCard Fraud Attempt
A number of VISA and MasterCard cardholders are reporting telephone scams where fraudsters are portraying themselves as calling from the security department at VISA or MasterCard.

Here is how it works:

The fraudsters state, "I am calling from the Security and Fraud Department at VISA/MasterCard. My badge number is 12345. Your card has been flagged for an unusual purchase pattern and I'm calling to verify your transactions. This would be on your VISA/MasterCard issued by (name of financial institution). Did you purchase an Anti-Telemarketing Device for $497.99 from a marketing company based in Arizona?"

 When the cardholder indicates no, the fraudster states that they will then issue a credit to the cardholder's account. The fraudster then verifies the cardholder address by giving the address to the cardholder. They also go as far as giving them a case number to refer back to when calling VISA/MasterCard. However, at the end of the call, the fraudster indicates they need to verify the cardholder is in possession of their card and asks for the security code on the back.   

Within minutes, charges start to appear from a marketing firm in Arizona.  

The calls closely resemble legitimate calls made in true fraud detection efforts. The big difference is that we will never ask for the security code on the back of the card. If you should fall victim to this scam, please call 800-234-5354 to have your card shut down, and report it to your local police department.

• Don't carry Social Security cards with you.
• Don't leave sensitive documents out in the open.
• Avoid sensitive information being left in your mailbox by taking advantage of home banking services such as bill pay and eStatements.
• Never provide or confirm personal information, such as card numbers, PIN numbers or your SSN unless you know who your are dealing with, or you initiated the contact.
• Know your billing cycles. If you have a bill due and haven't seen the statement, call the issuer to investigate.
• You are entitled to one free credit report per year. Use your credit report to check if anything seems suspicious. Visit www.annualcreditreport.com to receive your free report. Beware of other organizations offering free credit bureau reports, as most will want to sign you for a monetary membership.

Have you had your identity stolen? Here are some steps to get your life back on track:

1. Place a fraud alert on your credit reports.
   1. This will prevent any other accounts from being opened.
   2. Request a report to see if any charges seem suspicious.
2. Close the accounts you think could be affected.
   1. Contact your Credit Union or other financial institution's fraud department.
   2. Follow up in writing with copies of any supporting documents.
   3. If any accounts have been opened, ask your Credit Union or other financial institution for the proper paperwork to dispute them.
3. File a complaint with the Federal Trade Commission (FTC).
   1. When you file with the FTC, you are providing information to help law enforcement officials track down thieves.
4. File a Report with the local police department
   1. Filing a report, along with a complaint to the FTC, can give you certain protections to ensure your identity can be protected and restored.

Please remember! Do not give out your account number, expiration date or CVV2/CVC2 without knowing who you are talking to.

See these links listed below to learn out to avoid becoming a victim of fraud.  

• National Consumers League warning on consumer check scams
• http://www.nclnet.org/news/2004/fake_check.htm
  http://www.nclnet.org/news/2006/check_overpayment_scams_03232006.htm 
• http://www.fakechecks.org
• Tips to help educate members on avoiding these scams:
  http://www.fraud.org/tips/internet/fakecheck.htm
• OnGuardOnline.gov provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud. http://onguardonline.gov/crossborder.html
• FBI fraud poster: http://www.fbi.gov/majcases/fraud/fraud_alert.pdf

• Money Orders:
  http://www.usps.com/missingmoneyorders/security.htm