Scam Text Reported in our Area
On Tuesday, February 18, one of our members notified us that they received the following text message saying that their accounts were frozen and that they needed to click a link to regain access.
Text Message from "[email protected]" - " -- Account on hold! Review immediately https://fccu-online1bb.weebly.com/ to avoid restrictions."
First and most importantly, FCCU has not been hacked. FCCU accounts have NOT been compromised.
Scammers can pretend to be ANY person, business, or even financial institution and send out a bunch of text messages to random phone numbers within the same area code.
Do not click the link. Block the sender. Delete the message.
The member that notified us of this scam did a GREAT job quickly identifying red flags and contacting us directly for confirmation. Here are a few red flags you may notice as well:
- The sender of the text message is [email protected]. FCCU DOES NOT send text messages to members from an email address. Additionally, FCCU’s REAL email domain is “@fortcommunity.com”.
- Whenever you see an unsolicited message with a sense of urgency like Account on hold! Review immediately, it is almost always scammer looking to make you panic, act quickly, and ask questions later.
- NEVER click on a link from an unsolicited message, especially for a website like fccu-online1bb.weebly.com. FCCU’s REAL website is “fortcommunity.com”.
If you receive an unsolicited text message from “FCCU”, please contact us using contact information from our website or social media, or from a legitimate document like a recent bank statement or business card handed to you. DO NOT use contact information provided in a suspected scam text message.
We are more than happy to verify the legitimacy of text messages sent from our team members BEFORE you choose to text back or click on any links.
What happens if you click the link?
Members who clicked on the link in the scam text message were taken to a FAKE login page and asked to enter their FCCU Digital Banking username and password (see screenshots below).
Screenshot #1 - "We don't recognize the device you are using. This may have happened because you are using a device you don't usually use or you cleared the cookies of your phone, cookies are how we remember you. For your security, we need to verify your identity before you can sign-in. Validate to continue."
Screenshot #2 - Fake online banking login page
If you clicked on the link, but DID NOT enter any personal information, you are likely in the clear. Our tests did not find malware (malicious software) downloaded onto the device after only clicking the link. However, we recommend you take extra preventative steps for account and device security:
- Reset your FCCU Digital Banking password from the website or mobile app.
- Download an anti-virus app from the App Store or Google Play Store to scan your device for malware.
What happens if you enter personal information?
If you clicked on the link AND entered personal information, you need to take action:
- Call FCCU as soon as possible at (920) 563-7305 between 9:00 am and 5:00 pm (Monday - Friday) or 9:00 am and 12:00 pm (Saturday). We will walk you through any necessary account security measures.
- Remain extra vigilant when you receive additional text messages and phone calls. At this point, the scammer has your phone number and thinks they can convince you to provide more private information or unknowingly compromise the security of your device.
- Reset your FCCU Digital Banking password from the website or mobile app.
- Download an anti-virus app from the App Store or Google Play Store to scan your device for malware.
Members who entered personal information have reported receiving an additional scam text from “Apple” claiming issues with their Apple ID/Apple Pay. From there, they were instructed to call an “Apple Support” phone number. The scammer pretending to be Apple Support instructed the member to download an app to remotely access their phone for “Apple Support” purposes— which would compromise the security of their device. One member was even instructed to go to the dollar store to purchase Apple gift cards.
NEVER give anyone you don’t know remote access to your electronic devices. Learn more about tech support scams by clicking on the resources below.
If you are ever instructed to go to a store and purchase gift cards, it is a scam. ALWAYS. Learn more about gift card scams by clicking on the resources below.
Bottom Line
Trust your gut. If something seems off, give FCCU a call using the contact information on our website or social media.