Question 1

Callers Pretending to be Space City CU

Accepted Answer

Fraudsters have started to spoof numbers to make the call appear legitimate, be very cautious. If you were not expecting the call, hang up and call us directly.

It has been brought to our attention that some members have been receiving fraudulent phone calls and/or text messages regarding their accounts at Space City CU. If you receive one of these calls or texts, please contact Space City CU directly, especially if you provided any personally identifiable information.

Fraudulent emails, phone calls, and text messages are rapidly increasing. Unfortunately, they are hard to spot since fraudsters are imitating the likeness of companies. Therefore, it is good to remember never to share any personally identifiable information with someone who has contacted you unsolicited, whether by phone, email, or social media. Fraud is a very real thing, and we want to help mitigate your risk. Review the tips below to help safeguard your card information.

Do not provide your online banking or mobile login credentials to anyone. Space City CU will never ask you for this information via phone or e-mail.
Fraudsters have started to spoof numbers to make the call appear legitimate, be very cautious. If you were not expecting the call, hang up and call us directly.
Fraudsters are also sending fake fraud text alerts. Again, be doubtful and check your account online before replying to a text, or call us with questions.
Set up alerts on your account through your online banking and mobile banking app to stay current with your deposits and withdrawals. Check out all the new tools available to you including balance alerts, debit card controls, and free credit report alerts.

To set up debit card controls and alerts, visit https://spacecitycu.com/mobile-app/ and scroll to the bottom of the page to learn how.

If you have any questions or concerns, or receive any suspicious text messages, always contact us directly via e-mail at memberservices@spacecitycu.com or by calling us at 713-222-1244. Don’t respond to suspicious texts or calls.

Question 2

Artificial Intelligence Scams

Accepted Answer

Fraudsters utilize artificial intelligence to replicate voices and mimic individuals. An example of this deceptive tactic involves creating clones of loved ones’ voices to make phone calls, feigning urgent situations that require quick financial assistance. This manipulation can be highly persuasive.

Scammers create lifelike AI voices by using a short audio snippet of a person’s voice and processing it through an AI program to mimic the voice accurately. Therefore, exercise caution when receiving sudden calls from friends or family members in urgent need. To protect yourself, hang up and call them back on a number you know to be theirs, or call someone else who knows them. You may also want to think twice before sharing a video on social media, as scammers could readily obtain a recording of your voice.

Question 3

Police and Government Scams

Accepted Answer

Scammers impersonate officials like the police, IRS, immigration, or Social Security. They often use some of your personal information to make it seem even more authentic. Then they try to scare or intimidate you into sending money.

Scammers excel at sounding authoritative and fabricating scenarios that create a sense of urgency. Frequently, a group of scammers will work together to make their narrative sound more real. Do not place trust in unexpected contacts from law enforcement, government agencies, utility providers, banks, or any other organization, particularly if they resort to threatening tactics. End the call and find a number for the organization yourself on their website and call them directly.

Question 4

Two-Factor Authentication Scams

Accepted Answer

As fraud controls get smarter, fraudsters are shifting their attack patterns to bypass controls. Fraudsters have been using automated phone calls to try to steal consumers’ two-factor authentication codes and hack into banking, merchant, and third-party payment accounts. These include Apple, Amazon, PayPal, and bank accounts.

An example of these calls states: “In order to secure your account, please enter the code we have sent your mobile device now.” Financial institutions and valid merchants will ask cardholders to enter this code on their website or app, not via text or automated phone calls. A communication like this indicates the fraudster has tried to access an account and has run into a two-factor challenge from the merchant or institution. This call is an attempt to secure the code sent to a phone number or email on file at the merchant or institution. Usually, something like the enter code that has popped up on your phone. Once entered, the automated message will say: “Thank you, your account has been secured and this request has been blocked.” Sometimes, the call will say don’t worry about any payments or fees; we will refund it and then state, “you may now hang up.”

Scams like these require a hacker to already know several details about a cardholder, such as email address, phone number, and password. Personal data like this is often found on the dark web, collected from previous breaches and hacks, sold by POS merchants to marketers, or given out by cardholders themselves.

Question 5

Phishing/Smishing Attacks

Accepted Answer

Phishing and smishing (phishing by SMS texts) are attempts to trick cardholders into providing sensitive, confidential information in order to perpetrate fraud. Its variants and frequency continue to be on the rise. Phishing schemes such as “spear-phishing,” which is more targeted and difficult to identify, are becoming even more sophisticated than in the past. Instead of using only suspicious links in poorly designed emails, phishing emails mimic websites and appear to be legitimate and credible. The use of web address-shortening tools, such as TinyURL, makes detection of suspicious links more difficult, even by savvy online users.

It is important to safeguard your financial data and your online banking credentials against criminals trying to harvest them. It is also a good idea to avoid clicking on links that appear in random emails and instant messages. Some phishing emails will start with “Dear Customer,” so you should be on the alert when you come across these emails. When in doubt, go directly to the source rather than clicking on a potentially dangerous link.

In general, never give out full card numbers, passwords (either to bank or merchant accounts), full social security numbers, or other sensitive information over the phone.

Question 6

Securing Digital Devices

Accepted Answer

Avoid storing confidential card information in unencrypted format on digital devices unless it is stored using a Digital Wallet or secure password management application. Security concerns include:

Unencrypted card information on digital devices is susceptible to malware attacks.

Sensitive information, such as PIN, Social Security number, or answers to security questions, can also be stolen by way of malware and remote access applications downloaded to a digital device.

Choose reputable and secure applications to store passwords and other sensitive data on digital devices. Avoid installing applications from alternative online “stores” that are not reviewed for security prior to being published.

Fraud Prevention

How to Report a Fraudulent Message:

Please take note of these recent scams below.

Sign Up For Our Newsletter

You are leaving our website now!

You are leaving our website now!