Fraud Prevention
Protect your finances. Stay ahead of fraud.
Fraud Prevention Best Practices
Stay one step ahead of scammers by following these simple but powerful habits:
• Never share your Social Security number, user IDs, passwords, PINs, passcodes, or account numbers with anyone you don’t trust.
• Don’t respond to unexpected requests for personal or financial information—even if they seem official.
- If something feels “off” or too good to be true, it probably is.
- Take your time. Just because someone says they’re from your bank doesn’t mean it’s true—verify before you act.
- Use strong, unique passwords with a mix of letters, numbers, and symbols.
- Consider biometric options like Face ID or fingerprints for added security.
- Shred sensitive documents before discarding them.
- Enroll in eStatements to minimize the risk of mail fraud.
- Enable transaction alerts through Seattle Credit Union Online Banking.
- Use Credit Sense (available in online banking) to monitor your credit and detect suspicious activity.
- Don’t open links in texts or emails unless you’re expecting them and they’re from a known sender.
- Block unwanted calls and texts.
- Add your number to the Do Not Call Registry (see our Resources section).
Current Trending Scams
The scam: Occasionally, members of Seattle Credit Union are targeted by scammers who pretend to be employees to trick others into handing over their hard-earned money. In these scenarios, the fraudster makes a convincing argument that they work for the credit union (to be clear: they do not work here) and pressure a member to withdraw or transfer funds from their account to an account the fraudster has control over. Their only goal is to get their hands on your money.
How it works: Fraudsters use various tactics to deceive members. They might spoof our phone number and call or send text messages claiming to be from our fraud team. In some cases, they claim they’re investigating a complex situation and need a member’s help by performing a transaction for which they’ll be reimbursed. The messages often contain urgent alerts regarding suspicious activity on your account, prompting you to take immediate action. This type of scam usually targets members by using fear tactics, pressure, and a strong application of urgency. Please do not fall for this scam. Stop, hang up the phone, and ignore their email or text message. Instead, contact Seattle Credit Union using our official phone number (206) 398-5500 or by calling the number on the back of your debit card. Seattle Credit Union does occasionally send text messages from our transaction monitoring team. To be sure you’re speaking with a real representative of Seattle Credit Union, you are encouraged to call the number on the back of your debit card and speak with us directly.
The scam: You receive a text which seems to be sent by your financial institution, asking if you attempted a large dollar Zelle® transfer. You respond ‘NO’, and they immediately call you and ask you to recover the stolen funds by transferring the funds to yourself using your phone number. You are then instructed to disable your phone number associated with your Zelle® account and provide the 2-factor authentication passcode you receive over the phone.
How it works: The fraudster may have previously opened an account and established Zelle® that links to the member’s phone number. By attaining the 2-factor authentication passcode, they activate the phone number on their Zelle® account. While they instruct you to transfer funds to yourself, the transfer actually goes to the fraudster.
The scam: You meet someone online and start a relationship by emailing and/or texting. This may continue for weeks if not months. You may able unable to meet this individual in person because he/she is in the military, overseas, or he/she indicates some other reason. However, this person has won your trust and you may have provided some personal information about yourself. Maybe you have provided him/her with your login credentials so they can remotely deposit a check into your account. Or, they may have a check sent to you to deposit. Either way, they will ask you to help them and wire funds to him/her.
How it works: The check is a counterfeit. The person you are conversing with is a scammer. They want you to deposit the check into your account so that they can receive cash on the other end of that wire. Once you have deposited the check and wired the money (to the scammer) the check may take several days to be returned as a counterfeit. Unfortunately, if you have already wired the funds, you will suffer the loss.
Skimming is a method of obtaining personal data from ATM, debit, or credit cards while they are used at an ATM or a merchant location. People can alter equipment on legitimate ATMs in an effort to steal both the magnetic stripe data from the cards being used and the PINs that are assigned to those cards.
More recent technology allows the culprit to remain nearby receiving the information wirelessly from equipment they installed on the ATM. The thieves can then copy the cards and use the PINs to withdraw money from many accounts in a very short time directly from an ATM or anything with a card reader, like gas pumps and vending machines.
Equipment is installed on the front of the original ATM card slot. The false slot holds an additional card reader called a “skimmer.” The skimmer captures and copies the card information. Then a camera that reads the card PIN is housed in an innocent looking pamphlet holder. The camera inside pamphlet holder is angled to view monitor and keypad.
What can you do to protect yourself?
- Be vigilant and inspect the ATM before using it. Skimming devices that are placed on or near the ATM’s actual card reader are often difficult to detect, but if anything about the card reader or PIN pad looks different, unusual or seems loose to the touch, don’t use it. If possible, report this to Seattle Credit Union or the owner of the ATM as soon as possible.
- If you suspect a skimming device has been place on a Seattle Credit Union ATM, do not use it or try to remove the device. Speak to branch personnel as quickly as possible or call our Contact Center at 206-398-5500.
Phishing
In 2024, there were over 194,000 individuals who reported encountering a phishing attack in the United States.
Phishing is a technique that uses fake emails or fraudulent websites to gain personal information for purposes of identity theft. The fraudulent email messages and/or websites are designed to trick recipients into divulging personal financial data such as credit card numbers, online banking login credentials, social security numbers, etc.
Sometimes, phishers will create a fake website that looks legitimate and attach a link to the fake website in an email. Unsuspecting recipients that click on this link will find that the website that opens up will resemble the correct website. However, the computer user does not know that they have been redirected to a fake website which can be designed to collect personal information (such as account numbers and social security numbers.)
- Be suspicious of any email that requires an urgent response from you and that seems alarming or exciting. Phishers will send emails that require your immediate attention or to “verify their records.” They usually ask for information such as usernames, passwords, account numbers, social security numbers, etc. Emails from phishers are generally not personalized and may appear to be sent in mass distribution.
- Do not click on links sent in an email that is asking for information. Emails suggesting to “click here” in order to enter personal information may end up redirecting you to a fake site that could be collecting your data for malicious use.
- If you are unsure of the legitimacy of a Seattle Credit Union email, contact us at 206.398.5500.
- Avoid filling out forms asking for confidential or financial information unless you are dealing with a reputable site that you can verify as authentic.
- Check your website for the browser address before entering any information. Make sure it is a secure link (SSL). This can be verified by checking the “lock” icon in your browser window or it will show HTTPS:// in the address bar if secure instead of HTTP://. The “S” represents secure in the HTTPS://www on web addresses.
- Suspicious emails, requesting personal information.
- Imposter websites or forms, requesting private information.
- Malicious links in emails and texts.
Where do I go for more resources?
Learn more about scams, recover from scams, and protect your personal information.
- FTC: If you are interested in more information on scams, the most up-to-date resource is the Federal Trade Commission website.
- FTC Report Fraud: If you want to make a report to the FTC to assist with their crime solving efforts
- IdentityTheft.gov: Identity Theft occurs every two seconds in the United States. While Seattle Credit Union can help with banking account needs and transaction disputes, there is often a larger need of recovering when identity theft occurs. The Federal Trade Commission has resources available to assist with making a recovery plan and utilizing resources available to you. You can also report your identity theft occurrence on their site.
- IC3.gov
- Do Not Call Registry
- Credit Freeze
- Credit Sense (Seattle Credit Union member benefit)
- Financial Wellness by BALANCE (Seattle Credit Union member benefit)
- Annual Credit Report: Monitoring your credit report is a great way to stay informed about what is happening with all accounts relating to your identity. The earlier you notice that something is off, the better chance you have of correcting the issue. Order your free annual credit report.
The USA PATRIOT Act was enacted in 2001 in response to the 9/11 terrorist acts. The intent is for banks, credit unions and other financial institutions to verify the identity of all people who do business with them. It has become clear that terrorist groups have used our financial institutions to funnel money to commit crimes.
What information does Seattle Credit Union obtain and why?
- To comply with the USA PATRIOT Act, we are required to verify the identity of individuals applying for and opening new accounts or services with our Credit Union.
- Information we are required to obtain includes your name, mailing and residence address, tax identification number, date of birth and a copy of a government issued photo ID. Additional information may also be gathered depending on the type of account applied for or opened.
- Identification and information on existing members will be gathered as they open or use additional services offered by our Credit Union. The Act requires us to maintain records of the identification verification and to periodically update this information. Confidentiality of the information gathered and used by our Credit Union will be maintained as required under the Privacy Act.
How does this affect me?
- The USA PATRIOT Act was passed as an effort to improve public safety and should not directly affect most people. We will, of course, ask to verify your identification occasionally. Additionally, this is a good safety precaution because of the increase in identify theft over the past several years.
- What will Seattle Credit Union do with my identification?
- We are required to keep proof that we have verified who you are. We will keep a record to show we are complying with the USA PATRIOT Act. Our member base is periodically checked against a list of known or suspected terrorists. The USA PATRIOT Act should have little to no affect on law-abiding citizens.
- The need for us to comply with the USA PATRIOT Act helps create a more secure country, making certain our financial institutions are not inadvertently aiding people or groups who wish us harm. Your cooperation and understanding is appreciated.
The Fair and Accurate Credit Transactions Act (often referred to as the FACT Act, or FACTA) was signed into law in December 2003. The FACT Act, a revision of the Fair Credit Reporting Act (FCRA), requires each of the nationwide consumer reporting companies to provide you with a free copy of your credit report, at your request, once every 12 months through a central source.
In addition to free credit reports, the following are also in effect:
- Uniform credit standards – These set clear rules on what credit agencies can include in consumer credit reports.
- Safeguarding receipts – Retailers must hide credit and debit card information on customer receipts. Only the last five digits of a card number appear on receipts. All cash registers and point-of-sale terminals must print safeguarded receipts.
- Opt-out rules – Consumers have the right to “opt-out” and block solicitations from affiliates of companies that they do business with.
- Disclosing bad credit news – Financial institutions now have to tell you if they report any negative information about you to the credit bureaus. By law, we may report information about your account to the credit bureaus including late or missed payments or other defaults that affect any of your savings, checking or loan accounts. This information could appear on your credit reports. A financial institution must tell you if it grants you credit at less favorable terms than those received by most other consumers.
- Reporting of false credit news – Any debt collector that learns that information on a consumer’s credit report is fraudulent must inform the creditor that the information is false. No retailer or creditor may report false credit information to credit bureaus.
- More power for identity theft victims – Identity theft victims that file police reports may block fraudulent information from appearing on their credit reports. Identity theft victims are able to obtain copies of business records that list fraudulent transactions carried out by an identity thief.
- Enhanced fraud alerts – Once a credit bureau receives a fraud alert, it must take steps to ensure that the consumer, not the thief, will be granted credit in the future.
- Special alerts for the military – American military personnel may place special alerts in their credit files while they are serving overseas to help minimize their chances of becoming victims of identity theft.
Disclosures
-
*Zelle and the Zelle related marks are wholly owned by Early Warning Services, LLC and are used herein under license.