Phishing is accomplished by sending fraudulent email messages to a user and falsely claiming to be a legitimate organization in an attempt to scam the user into surrendering confidential information that will be used for identity theft. The e-mail directs the user to visit a website where they are asked to update personal information, such as the user’s Social Security number, passwords, credit card numbers, bank account numbers, etc. The website, however, is bogus and set up only to steal the user’s information. SAC FCU urges you to practice good security habits.
- Do not reply to an unsolicited email. And don’t click on the link in any email if you aren’t sure of its source.
- Never disclose any personal or financial information by way of an unsolicited email. This includes your Social Security number, account numbers, credit card numbers, and Personal Identification Numbers (PIN). Do not e-mail personal or financial information. E-mail is not a secure method of transmitting personal or financial information.
- Only provide your ID and password when your browser shows a connection that is encrypted.
- Phishers are able to forge BOTH “https://” and authentic looking addresses. These forged websites can also be found in scam e-mails. It is recommended to enter the address of websites from e-mails, instead of relying on displayed links or, better yet: perform your own independent web search to confirm the company’s web address.
- Phishers have also forged the yellow lock which is typically located near the bottom of your screen indicating a secure website. When this lock is double clicked it should display a security certificate, but if warnings are displayed that the address of the site recently viewed does not match the security certificate, do not continue.
If you receive an e-mail requesting personal and/or financial information and it appears to be from your credit union, do not reply. Call and let us know that you received an email requesting such information. Remember, we don’t ask for person or financial information by email.