Avoid Phishing, Vishing and SMiShing

It’s all over the news: Phishing, Vishing, and SMiShing scams are quickly becoming commonplace. As a First Tech member, you probably have a good handle on these scams and can avoid them. But as a refresher, and to keep up with the latest scams, it’s a good idea to visit our up-to-date scam page at least once a week. There you’ll get all the information you need on the latest fraud alerts. For more information on phishing attacks and trends visit the Anti- Phishing Working Group at http://www.antiphishing.org/.

Phishing is probably the most common scam. Emails and phony websites that realistically mimic the branding of a company are used to trick you into giving out your account numbers, passwords and more.

Vishing is when you receive a call with a recorded message that states your credit card has been breached and to call the following phone number immediately. When you call the number, another message tells you to enter your 16-digit card number. If you enter those digits, you’ll find yourself a victim of credit theft.

SMiShing is a phishing attack sent by Short Message Service (SMS). SMS is a service that allows the transmission of text messages between mobile phones and handheld devices. The message includes a link that, when accessed, takes you to a phishing site where you are prompted to download a program—a Trojan horse that may give the criminals access to your personal information.

Tips to safeguard yourself from Phishing, Vishing and SMiShing:

• Never respond to unsolicited e-mails or text messages; especially coming from people or companies that you do not have a relationship with or regarding services for which you have not contracted. Contact the financial institution or merchant via the regular channels you use to communicate with them.
  
• Remember, for privacy and security, financial institutions do not arbitrarily solicit non-public information from you. Typically they would already have information based on the relationship you have previously established with them.
  
• When you are accessing any accounts online, make it a habit to check for the small yellow lock in the bottom right of your screen. If it’s unlocked – you are not in a secure area of the Website.
  
• If you receive a Vishing message, and you do want to check your account, disregard the recorded number and contact your financial institution through the customer service phone number on your statement or credit card.
  
• Pay attention to the URL. Fraudsters cannot exactly mimic a company’s website URL, but will often insert one letter or symbol to make it appear legitimate.
  
• Keep a record of services you sign up for on your mobile devices. If you receive a SMiShing message for a service you don’t think you signed up for…you probably didn’t. Disregard the message.
  
• When in doubt, do not respond to an email, voicemail or text message regarding an account. Contact your financial institution through regular channels.
  
• If you receive multiple phishing, vishing or SMiShing messages from a financial institution, bring it to their attention to help them uncover the fraud.