Protect Yourself AgainstPhishing

The good news:

The number of US adult victims of identity fraud decreased from 9.3 million in 2005, to 8.4 million in 2007.

Total one year fraud amount decreased from $55.7 billion in 2006 to $49.3 billion in 2007

The bad news:

Even though the number of victims and dollar amounts are down, it’s still a significant problem. The crooks committing the crimes are becoming smarter making it more difficult to isolate attempts at identity theft.

What is identity theft?

Someone uses your personal identifying information to

commit fraud or theft.

How can someone steal my identity?

• Dumpster diving

• Shoulder surfing

• Pretext calling

• Mail theft

• Workplace

• Skimming

• Theft

• Change of address

• Phishing

What is phishing?

Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication.

http://en.wikipedia.org/wiki/Phishing

What is phishing?

How to identify a phishing email:

• Typically use a generic greeting

• Frequently the messages will refer to an urgent problem

•May ask for personal account information such as:

– Account numbers– Date of birth– Internet passwords and user names

How to identify a phishing email (cont):

• Provide links that include a legitimate company’s name or web address, but the legitimate company has been spoofed.• Fraudulent emails will disguise or forge the sender’s email address so they look legitimate.• E-mails & pop-up websites may include incorrect grammar.

SCU examples:

The following slides are actual examples of phishing emails members and non-members have received.

What steps should you take?

• Call or visit your local SCU branch office

• Call 1-800-936-7730

• Email us at security@servicecu.org

Remember . . .

Service Credit Union will NEVER ask for your account information, PIN,password, or other personal information in an unsolicited request via email.

If you’ve received a phishing email:

• If you’ve opened the email, don’t follow the link.

• Don’t reply to the email.

• Don’t email personal or financial information.

If you’ve received a phishing email (cont.):

• Forward the email to spam@uce.gov• Forward any SCU emails to security@servicecu.org• Report the incident to the Internet Crime complaint Center at www.ic3.gov•File a complaint at www.ftc.gov or call toll free

–1-877-382-4357, –TTY: 1-877-653-4261

Protect yourself!

• Install and update current virus software

• Install firewall software to partially guard against spyware

• Use a secure browser

More information?

For more information on how to protect yourself and additional links to sites dedicated to protecting yourself against phishing, visit:

• servicecu.org• scambusters.org• antiphishing.org

Questions?

nlayton@servicecu.org

security@servicecu.org