Fraud Awareness Center

While the internet and computers offer many opportunities and advancements for business and individuals, it also opens your door to predators and crooks. It is important to pay attention to who you are giving your confidential information to and make sure it is someone you know and trust.

You should NEVER be asked for your confidential information over e-mail. E-mail is not a secure method of transmitting information and the messages can be tapped into and information stolen. If you feel that you have received an e-mail or are suspicious of someone trying to commit Identity Theft, it is very important that you report the scam quickly so that law enforcement agencies can shut the fraudulent operations down.

General Fraud Information

Take the Fraud Awareness Quiz-

Are you protecting yourself against fraud?

  • Target Data Breach Update as of January 16, 2014 New light has been shed on the Target breach, which may now include 110 million people. It appears that someone managed to distribute malware onto Target’s Point-of-Sale terminals. The malware parses data briefly stored in the terminals (stripe data) and then stored on the target servers for download. The username and password used to access ...
  • July 9, 2012 – Phishing Scam UKFCU has been made aware that a number of people in the Central Kentucky area have received a letter that claims to inform the recipient that they are a “Customer Service Evaluator”. The letter says that the recipient is to evaluate Western Union by performing a wire transfer. It also states this is paid training at ...
  • October 17, 2011 – Phishing Scam UKFCU is receiving phone calls from members concerning a phishing scam. The phone calls members are receiving are automated and state it is from the CU, that their account has been deactivated and in order to reactive the account they must enter their 16 digit debit card number. Do not enter your debit card number! Once they enter ...
  • September 26, 2011 – Phishing Scam UKFCU has received notice of a phishing attempt. Some members are reporting receiving a text message like the following: “18599083268@creditunionaccess.com// a pending alert has been placed on your credit union card. Call toll free 1-859-908-3268 for more information.” Please delete and ignore any such text message. If you have responded to the text message, please ...
  • July 8, 2011 – Phishing Scam UKFCU has received notice of a phishing attempt involving text messages. The text messages are being received from the number 404-956-0917 claiming to be from Greater KY CU. The message typically states that a debit card has been compromised and to contact 859-215-0089. This message was not sent by UKFCU and is indeed a scam. ...
  • May 4, 2011 – Phishing Scam UKFCU has received notice of a phishing attempt involving text messages. The text messages are being received from the number 331-442-5288 and inform the recipient that it is supposedly from the UK F.C.U. informing them that their card has been canceled. The text then says to call 502-352-8499 and enter their card information to reactivate ...
  • April 19, 2010 – Phishing Scam UKFCU has received word that there is a phishing email that tries to look like it was sent by excessshare.com or americanshare.com, that states access to your account has been temporarily prevented. The email has an attached file and asks you to run the file. DO NOT RUN THE ATTACHED FILE. The attached file could ...
  • March 2010 – Awareness Members: Please be advised that another website, UKFCU.com, does exist but it is not your credit union’s site! The University of Kentucky Federal Credit Union is not affiliated with, nor has control over the content of the .com site whatsoever. Please be careful when entering domain information.
  • November 17, 2008 – Phishing Alert We have received notification from our CURewards™ merchandise vendor, Hinda Incentives, regarding an investigation of a potential systems breach. While Hinda has not fully completed their investigation of this incident, we have received the following information from them: NO ACCOUNT NUMBER INFORMATION IS AT RISK AND NO MEMBER PASSWORDS ARE AT RISK. ALL ACCOUNT NUMBER INFORMATION ...

Thieves are creating "Phishing" emails and false websites in an effort to "phish" for account information from trusting individuals.  Because these emails and websites have what appear to be actual logos from financial intuitions, payment companies (i.e. Paypal), and other organizations (i.e. NCUA), trusting individuals provide their account information.  Within a short period of time, members who have provided their account information may have unauthorized credit and ATM transactions on their accounts.

The University of Kentucky Federal Credit Union will never request that you update your account information via online methods.  We encourage our members to disregard any emails or websites requesting personal and/or account information.

To learn more about "Phishing" Scams or what to do if you have fallen victim, check out the following websites:

Anti-Phishing Working Group

FTC Consumer Alert - How Not to Get Hooked by a 'Phishing' Scam

Phishing information video from Microsoft.com

Counterfeit Postal Money Orders

US Postal Service Money Order Scam: Click to Enlarge

An alarming number of counterfeit U.S. Postal Money Orders have surfaced in the Lexington area. The counterfeit money orders most commonly surface from Internet activities, such as in the selling of merchandise or even searching for a roommate. Often, a member will sell an item on the internet and the buyer will mail, or ship via UPS, FedEx, or DHL, four (4) or more counterfeit U.S. Postal Money Orders. Typically the individual money orders are in denominations ranging from $700 to $1,000. The combined total of the money orders far exceeds the purchase price of the item sold. The buyer will then request that the member wire the overage back to them. Once the member has wired the excess money back to the buyer and shipped the merchandise, within a few days the member's account will be debited for the amount of the counterfeit money orders. Thus, the member incurs losses for the loss of the merchandise and the total combined amount of the U.S. Postal Money orders. The losses are typically in the thousands of dollars.

Please use caution when conducting activities on the internet involving the exchange of money. If you receive any questionable form of payment, please call us at (859) 264-4200. For more information on counterfeit money orders please click on the websites below:

U.S. Postal Inspectors website

Display the security features of authentic U.S. Postal Money Orders

You Have Been Caught: Where To Go For Help!

If you suspect you’ve been hooked by a phisher, act immediately. If you provided account numbers, passwords or PINs to a phisher, notify the companies with whom you have the accounts right away. For information about how to put a “fraud alert” on your files at the credit reporting bureaus and other advice for ID theft victims, contact the Federal Trade Commission’s ID Theft Clearinghouse by clicking here or call toll-free 877-438-4338. The TDD number is 202-326-2502.

Even if you didn’t get hooked, you should report phishing by contacting the National Fraud Information Center/Internet Fraud Watch. Log onto www.fraud.org to report phishing incidents or call toll-free 800-876-7060, TDD 202-835-0778. You should also tell the company or agency that the phisher was impersonating. The information you provide helps to stop identity theft.

Other identity theft help sites:

http://www.identitytheft.org/

www.usdoj.gov/criminal/fraud/idtheft.html

www.idtheftcenter.org/index.htm

For this article and more information on phishing go to: http://www.phishinginfo.org/