Keep your money safe from phishing scams

Fraudulent emails and text messages from scammers trying to access your money are increasing each year. This type of cyberattack is called phishing (or smishing when attempted as a text message). It's a global problem, no matter what financial institution you belong to.

In a phishing attack, scammers will email, text or call you, pretending to be a representative of your financial institution. They will try to convince you to provide account information, such as your online banking username and password, debit card number or PIN.

Often, they prove that they already know sensitive information about you. The message may even display the website or phone number of the organization the scammer claims to represent.

To keep yourself and your accounts safe, don’t click links to login pages or pages that request personal information, like your account numbers or social security number. If the scammer calls you, don’t give them any personal information.

How to spot phishing and smishing attacks

One way to stay safe from phishing attacks is to understand what your financial institution will and will not ask of you.

At Veridian, we will never ask you for your account number, PIN or online banking username and password. Don’t share this information with anyone over the phone, text or email.

A few other signs that a message may be a phishing attempt include:

1. The sender’s email address doesn't include your financial institution's domain (@veridiancu.org).
2. The messages are poorly written and have misspellings throughout.
3. The email has attachments or suspicious links that don’t lead to your financial institution’s website.
4. They create a sense of urgency (like “secure your account now!”).

Reporting fraud

If you clicked a link and entered sensitive information, change your digital banking password immediately. Also, watch your transaction history. You can file a report with the Federal Trade Commission.

We encourage you to enable two-factor authentication for digital banking. This allows you to receive a text message or email to prove you're the owner when you log in.

If you ever question the legitimacy of a call about your Veridian accounts, hang up and call us at (800) 235-3228. Don't redial the number from the incoming call.

Frequently Asked Questions:

What is phishing?

A type of cyberattack where a scammer sends you a fraudulent email attempting to access your money by pretending to be a representative of your financial institution.

What is smishing?

A type of cyberattack where a scammer sends you a fraudulent text message attempting to access your money by pretending to be a representative of your financial institution.

How do I spot a phishing or smishing attack?

The scammer will try to convince you to provide account information, such as your online banking username and password, debit card number or PIN.

Often, they prove that they already know sensitive information about you. The message may even display the website or phone number of the organization the scammer claims to represent.

How can I protect myself from scammers?

Tip #1: We encourage you to enable two-factor authentication for digital banking. This allows you to receive a text message or email to prove you're the owner when you log in.

Tip #2: If the scammer called you, don’t give them any personal information.

Tip #3: Slow down and don’t click on any links in a suspicious email or text message, especially if it asks you to log into online banking or requests personal information. Just delete the message.

I’m being asked for my account number. Should I be suspicious?

Yes, Veridian will never ask you for your account number, PIN or online banking username and password. Don’t share this information with anyone over the phone, text or email.

A few more signs that an email may be a phishing attempt include:

1. The sender’s email address doesn't include your financial institution's domain (@veridiancu.org).
2. The messages are poorly written and have misspellings throughout.
3. The email has attachments or suspicious links that don’t lead to your financial institution’s website.
4. They create a sense of urgency (like “secure your account now!”).

This phone call from Veridian feels suspicious. What should I do?

Hang up and call us at (800) 235-3228. Don't redial the number from the incoming call.

I made a mistake and shared sensitive information. What should I do?

If you answered a question by phone or clicked a link and entered sensitive information, change your digital banking password immediately. It’s also important to watch your transaction history.