Tech Support Scam Alert

Haga clic aquí para español

Our team has identified a tech support scam that has affected several members in our area. Below, we will detail how the scam works, what it affects, and what to do if you fell victim.

First and most importantly, FCCU has not been hacked. This scam appears to be targeting our broader community, not just FCCU members specifically. Luckily, a few of our members noticed strange account activity within their FCCU accounts and contacted us quickly, which has allowed us to investigate and identify patterns across different affected members.

How does the scam work?

The members that reported strange account activity to us all had one thing in common: they gave remote access to their phone or computer to someone claiming to be from Microsoft Support.

This is a classic tech support scam where a scammer pretends to be from a well-known tech company, like Microsoft, and contacts you to let you know that your phone or computer has a technical problem. The scammer may ask you to open some files or run a scan on your device, all while using a lot of technical terms to seem legit.

Then, “Microsoft Support” may ask you to do a variety of things to help troubleshoot the problem including gaining access to your device, asking for personal information, and more.

In the case of our members, the scammer asked for remote access to their phone or computer— which compromised the security of the device and all the information on it.

This is where the account takeover begins.

At this point, we presume that the scammer installed something like a keylogger on the device to track keystrokes and quietly steal typed-out usernames and passwords as the member used their device as usual. This includes usernames and passwords for platforms like FCCU Digital Banking (and any other financial accounts accessed from the device).

Once logged in to a member’s FCCU account, the scammer initiated the 1–3-day process of adding an External Account— with the hope of stealing the member’s money by transferring it to the scammer’s account at another financial institution.

HOWEVER! All the affected members received an account alert that a new External Account had been added and immediately contacted FCCU of the strange account activity.

Should I be concerned? Should I contact FCCU?

Have you received an alert that a new External Account was added to your FCCU account, but you didn’t add it yourself?
Have you given anyone remote access to your phone or computer for any reason?
Has your phone or computer been running slower, acting glitchy, or displaying pop-ups?
Are there any apps on your phone or computer that you don’t recognize?
Have you been contacted by anyone claiming to be IT support?

If you answered “yes” to any of the above questions, you need to take action:

Call FCCU as soon as possible at (920) 563-7305 between 9:00 am and 5:00 pm (Monday - Friday) or 9:00 am and 12:00 pm (Saturday). We will walk you through any necessary account security measures.
Contact a trusted professional to restore the security of your compromised device. If you are unsure where to start, contact John Foust from goJefferson.com at (920) 674-5200. He has helped several of our members in the past.