Security Is Our Top Priority
Ways to keep your account safe
Be Cautious With Email
Familiarize yourself with the potential risks of phishing emails, which include criminals sending emails to you that look legitimate but contain links, attachments, or instructions that could ultimately lead to the compromise of your computer, mobile device, or even your corporate network. You should never click on links, or open attachments from emails you weren’t expecting – even if you recognize the sender! Always verify with the sender that the email is legitimate before opening or clicking.
The Federal Communications Commission gives five tips to avoid phishing:
- Don’t respond, even if the message says you can “Unsubscribe” to end messages.
- Never click links or call numbers you don’t recognize.
- Delete all suspicious emails.
- Make sure your devices and security software are up to date.
- Consider installing anti-malware software for added security.
Be Cautious With Texts
Scammers send fake text messages to trick you into giving them your personal information – things like your password, account number, or Social Security number. If they get that information, they could gain access to your financial accounts, or other sensitive data.
Scammers send fake messages that say they have some information about your account or a transaction. The scammers may:
- say they’ve noticed some suspicious activity on your account
- claim there’s a problem with your payment information
- send you a fake invoice and tell you to contact them if you didn’t authorize the purchase
- send you a link to a website that looks real but isn't and if you log in they can steal your username and password.
If you receive a text you weren’t expecting and it asks you to give some personal information, don’t click on any links. Legitimate companies won’t ask for information about your account by text.
If you think the message might be real, contact the company using a phone number or website you know is affiliated with the company, not the number listed in the text. Use caution when dealing with customer support centers and be sure not to share any personal, confidential information. They don’t need that information to assist you.
Use Strong Passwords
Always ensure that you are using a strong, unique password, regardless of what you’re entering for login credentials. A strong password will include both upper and lowercase letters, at least one number, and at least one special character such as an exclamation point or asterisk.
To keep the password unique, you need to make sure that you never use the same password for more than one website or application. The use of a password manager can help you maintain all your unique passwords.
Turn On Two-Factor Authentication
Many websites offer the option to enable two-factor.
Often this added authentication will include sending you an email or text message with an access code.
By adding this layer, in the event a criminal discovers your login and password, they still won’t be able to access your account because they won’t have access to see the two-factor authentication code that has been emailed or texted to you.
Be Aware of Phone Fraud
Phone fraud is real and criminals are adapting to security policies put into place to detect them. Scammers can make any name or number show up on your caller ID. That’s called spoofing. So even if it looks like it’s a government agency like the Social Security Administration calling, or like the call is from a local number, it could be a scammer calling from anywhere in the world. As with most types of social engineering attacks, the goal of these criminals is to get you to act quickly without having time to thoroughly think about the actions requested.
If you have any doubt or are unsure the call is legitimate, hang up, find a correct phone number for the company, call and verify. Do not give personal, confidential information over the phone unless you initiate the call to conduct business.
Be Aware of Fraudulent Text Messages
We have been informed by members that they are receiving fraudulent text messages to verify transactions on their debit card, and then to verify their online banking username and password. These may appear to be from DuGood, but are not. We will NEVER ask for your online banking information, as this is private and should not be shared with anyone.
For your protection, please DO NOT give out your online banking credentials, full social security number, or card numbers to anyone.
If you recently received messages like this and have given out any information, please contact us immediately at 409-899-3430.
Current Scams
Payment Scams
Zelle Payment Scam
The latest social engineering scam exploiting Zelle, a mobile payment transfer service, used by millions of consumers. Fraudsters are posing as legitimate financial institution employees to steal money from innocent victims.
The scammers are contacting victims by phone or text message stating there was fraud on their account, and they need to take steps to secure their funds.
In some cases, the scammers have knowledge of the victim’s personal information like name, date of birth. In some cases, as you may have seen reported on the national news, the scammers even knew the victim’s account numbers. They are instructing victims to set up a new Zelle profile to secure their funds, but the money is being transferred to the thief’s account.
We will NEVER ask to secure your account by using a Zelle transfer. We will never ask you to share your username, password, or authentication codes.
If something doesn’t seem right, the best thing to do is hang up immediately.
Pay Yourself Scam
The “Pay Yourself Scam” begins with a text message from a scammer that looks like a fraud alert from your bank. If you respond to the text message and engage the scammer, you’ll receive a call from a number that appears to be your bank. The scammer pretends to be a representative from your financial institution and offers to stop the alleged fraud by transferring your money into a “safe” account. In reality, the scammer is actually tricking you into sending money to their own bank account.
Avoid being scammed by using official contact information to call and verify with the bank or credit union they’re claiming to be, not the contact details provided in the suspicious message.
We will NEVER ask you to secure your money by making a transfer. We will never ask you to share your username, password, or authentication codes.
Phone Fraud
Imposter Scams
A scammer pretends to be someone you trust — a government agency like the Social Security Administration or the IRS, a family member, a love interest, or someone claiming there’s a problem with your computer. The scammer can even have a fake name or number show up on your caller ID to convince you.
To avoid being scammed, never give out your personal confidential information to anyone – even if they sound convincing. Hang up and call the person or company they’re claiming to be to verify. Even if it’s a legitimate call, you should not give out this type of information. Companies you do business with will already have the information on file.
Debt relief and credit repair scams
Scammers trying to take advantage of people dealing with debt will offer to lower your credit card interest rates, fix your credit, or get your student loans forgiven if you pay their company a fee first. But you could end up losing your money, ruining your credit, or being forced into bankruptcy.
A legitimate debt relief company can’t legally make you pay up front. No one can improve your credit over night or guarantee that your creditors will forgive your debts.
Charity Scams
Scammers like to pose as charities and request donations for disaster relief efforts. This is a very common phone scam. Always do your research on a charity before you give, and don’t feel pressured to give immediately over the phone. Before you do, ask them to mail you the information to review the validity of their request.
Extended Car Warranties
Scammers find out what kind of car you drive and when you bought it so they can urge you to buy overpriced — or worthless — service contracts. You may receive calls or texts warning that your vehicles warranty is about to to expire.
The companies behind the messages may give the impression they represent your car dealer or manufacturer. They use phrases like “Motor Vehicle Notification,” “Final Warranty Notice,” or “Notice of Interruption” to make the offer seem urgent — and to get you to respond. They’re likely trying to sell you a service contract, although they may call it an extended warranty.
Check with your lender or dealer and compare pricing before purchasing extended warranties that you may not need.
Prize and lottery Scams
In a typical prize scam, the scammer informs a victim that he/she has won a large award or is entitled to a large inheritance from a deceased relative. However, before the victim can receive the money, he/she must supposedly pay taxes or fees. The victim ends up wiring funds to the scammer to pay the taxes or fees but never hears from the scammer again.
If someone tells you to pay a fee for taxes, shipping and handling charges, or processing fees to get your prize, you’re dealing with a scammer. And if they ask you to pay by wiring money, sending cash, or paying with gift cards or cryptocurrency to get your prize, don’t do it. Scammers use these payments because it’s hard to track who the money went to. And it’s almost impossible to get your money back.
VIN Cloning
Vehicle cloning is a sophisticated crime that involves criminals gathering legitimate vehicle identification numbers (VINs) from legitimately registered vehicles from parking lots, dealerships, and even on the streets. They take a digital photo of the VIN plates under the windshield or the driver’s side doors, then create counterfeit VIN plates for stolen vehicles illegally sold. The stolen vehicles are typically the same model, year, and often-times color.
The counterfeit VIN plates are used to replace the stolen vehicles original plates. In some cases, the criminals grind out the VIN stamp on the engines of the stolen vehicles and re-stamp with the legitimate vehicles’ VINs. Authorities will seize the stolen vehicles upon discovery and eventually return them to their rightful owners, leaving the innocent member with no vehicle and an unsecured loan.
When members are scammed through car cloning, they are still liable to make payments for the loan.
Romance Scams
Using fake online dating profiles with photos of other people to lure their victims, scammers often say they are from the U.S. but are temporarily traveling or working overseas. The scammers quickly profess their love and tug at the victim’s emotions with fake stories and their need for money. The scammers often request money for reasons such as a plane ticket, other travel expenses, and customs fees – all needed to get back into the country. The victims often wire the scammers money never hearing from their “sweetheart” again. Use caution with online dating apps and do not send money to people you don't truly know.
Elderly Scams
Elderly scams target seniors where the scammer will call an elderly person, often a grandparent, pretending to be a grandchild or other relative. They will indicate they have been arrested and need bail money or are at the border and trying to get back into the country and they need money wired to them, usually by Western Union. When receiving these calls, the grandparent is anxious to help their grandchild, but if they call the grandchild at a number of record or other relatives for assistance this scam should be discovered rather quickly.
Variations on this scam include an “attorney” calling on behalf of the person in trouble, and instead of wiring funds the request is to purchase gift cards and provide the account numbers. Always verify the person you are talking to is indeed them and not someone pretending.
Secret Shopper Scams
People looking to earn extra cash are frequently tricked into participating in the secret shopper scam. If a person accepts the job, he/she receives a counterfeit cashier’s check ranging from $2,000 to $5,000. They are instructed to cash the check and purchase money orders and gift cards and send them to the scammers. For their efforts they will keep a percentage of the check they receive. The counterfeit check is subsequently returned unpaid and charged back to the member’s account. Even if you deposit a fraudulent check unknowingly, you will be responsible to pay it back.
Utility Scam
Someone calls claiming to be from your gas, water, or electric company. They say your service will be cut off if you don’t pay them immediately. Real utility companies don’t do this. But these scammers want to scare you into paying before you have time to confirm what they’re telling you.
The caller goes on, telling you to pay by wiring money through a company like Western Union or MoneyGram, giving the caller the numbers of a reloadable card or gift card, or paying them with cryptocurrency. Scammers tell you to pay this way because it’s hard to track that money, and almost impossible to get it back.
Support Specialist Scam
Support specialist scammers want you to believe you have a serious problem with your computer, like a virus. They want you to pay for tech support services you don't need, to fix a problem that doesn’t exist. They often ask you to pay by wiring money, putting money on a gift card, prepaid card, cash reload card, cryptocurrency, or a money transfer app because they know those types of payments can be hard to reverse.
Be cautious of unsolicited calls, texts, or emails that try to use high-pressure tactics to create a sense of urgency. Take a minute to think and independently verify any info before taking action, and never send money to people you don't truly know.
Email phishing
Generic Phishing
Phishing involves an email being sent out, often to thousands or even hundreds of thousands of people at one time (otherwise known as spam). The email may appear to be sent on behalf of a well-known organization such as PayPal, eBay, Microsoft, or Apple, among many other well-known brands. In other cases, the email may appear to be sent from a bank or credit union, government agency such as the IRS, or even from a service company such as FedEx.
Keep in mind that no matter who the email appears to be sent from, it may look very legitimate and trustworthy, but it may not actually be that. It also will usually include a link or attachment that the sender intends for you to click on. Clicking on a link can lead the scammer to stealing login credentials, personal information, or install malicious software on your device giving the scammer access to your data.
Spear Phishing
Spear-phishing is often far more difficult to detect. In this type of attack, cybercriminals will go to great lengths and do research ahead of time about the victims they are planning to target using social media and other public postings. By doing this, it allows them to send a message that looks like it was sent on behalf of a colleague, manager, or even a friend. In addition, the email will often be very cleverly crafted to cover a topic that would be logical to send and receive at your place of work, often with the sense of urgency. Don’t hesitate to verify the email request with a phone call or separate email, especially if it seems out of place.
CURRENT FRAUD ALERT: DEBIT CARD TRANSACTIONS
We have been made aware that some members have received fraudulent calls appearing to be from the credit union. Fraudsters are then attempting to convince members that their debit cards have been compromised by asking them to verify phony transactions. Members are then asked for their card numbers, PIN numbers, and the three-digit security code on the back of their card. The calls may appear to be a legitimate number from DuGood, but are not.
As a reminder, we will NEVER ask for your card number, PIN, or three-digit security code over the phone. We will also NEVER ask for your Online Banking username, password, or security code. If you suspect fraud, hang up immediately and contact the credit union.
If you recently received a call like this and have given out any information, please contact us immediately at 409-899-3430.
If something doesn’t seem right, the best thing to do is hang up immediately. As always, feel free to call us with any questions or concerns at
409-899-3430.
Ways we Help Keep Your Money Safe
CardValet
CardValet allows you to monitor your account with immediate text alerts each time your debit or credit card is used. You can turn your cards on and off with a click of a button, limit where your card can be used, establish spending limits and so much more.
text Notifications
This convenient service is a one-way communication channel that allows us to send automated text messages to inform you about information that may affect your account, disaster recovery efforts, branch emergency closings, and more.
Account Alerts
Don't miss a thing when it comes to your money. We've got many alert options to keep you in the know. Set up account alerts through Money Management, Online Banking and CardValet.
Fraud Detection
With our Fraud Detection Program, we monitor your debit card transactions for potential fraudulent activity and will call or notify you by text if suspicious activity is detected.
The Latest Notifications on Security
Related Articles
Nearly all of us these days have some type of mobile device that is essentially a part of us. It is filled with all kinds of personal information,...
Every day hackers prowl social media networks looking for victims. They use spyware to remotely access your phone, laptop, iPad or computer through...
Recently, a friend posted on Facebook: "Really tired of my debit card getting hacked. What gives?" We'll call her… Sally. The names have been...