New Trends Among Identity Thieves: "Pharming", "Vishing" and "Phishing"

Pharming
With pharming, a scam artist takes over a server computer that is used to host a website. The victim types in the name of a familiar website such as eBay or Google and, with no warning signs, is invisibly directed to a fake copy of that website. The unsuspecting victim believes that the website is legitimate and may enter personal information such as passwords, Social Security numbers, and credit card numbers. This information is then collected by “pharmers” and used for identity theft.

What You Can Do:

• Watch for unusual log-in processes that appear different from the ones on a legitimate website.
  
• Be wary if the website asks for personal information.
  
• If you have doubts about a website, check to see if it offers evidence of third-party security such as Hacker Guard or VeriSign.

Vishing
A scam called ‘vishing” (short for voice phishing) has become increasingly popular among identity thieves. The thieves use a new computer technology called VoIP (Voice over Internet Protocol), which enables them to use a computer to call your phone and inform you that your credit card account is compromised. You’re asked to call a fake toll-free number to ‘confirm” or “update” your credit card number or provide other private information.

What You Can Do:

• If you get an unexpected phone call where someone asks you to “confirm” or “update” private financial information and offers you a toll-free number to use that does not match the phone numbers on the back of your card, do not provide this information.
  
• Do not reveal the three-digit security code on the back of your card to anyone who calls you on the phone, unless you have contacted them first.
  
• Phone numbers can be faked with VoIP or with Caller ID. Before returning a call, check their phone numbers in a phone book or with directory assistance.
  
• if you receive an email that asks you to call a toll-free number to “confirm” your financial information, do not use it.

Phishing
Phishers may use e-mail, your home phone, your cell phone text messages, instant messaging or websites to contact you. They will say anything to convince you to tell them your personal information.

What You Can Do:

• Unless you initiate a phone call, don’t give out account numbers, credit card numbers or passwords over the phone.
  
• Shred old financial papers or other papers that contain information about you with a cross-cut shredder before putting them into the trash.
  
• Check your credit report at least once a year to make sure there are no errors and to prevent identify thieves from opening fake accounts in your name. By law, you may order one FREE credit report each year from each of the major credit reporting bureaus (TransUnion, Equifax and Experian). Visit www.annualcreditreport.com for details.
  
• If you provide personal details online at social networking websites such as MySpace or Facebook, keep the details very general.
  
• Check Web addresses carefully and look for security icons (unbroken padlock or key) in the corner of your browser’s screen before entering log-in information such as a username and password, and vary the usernames and passwords you use for online accounts.
  
• Do not respond to any e-mails or instant messages that ask for private information.
  

GSA FCU will never ask you to give ANY private financial information to us by e-mail or telephone. If you think you may have been the victim of an identify theft scam, please contact the Credit Union as soon as possible at 866-820-0105 to report the incident.