Fraud & Security News
To report phishing scams to Oklahoma Central please send an email to Report_Fraud@OklahomaCentral.org.
Security Tips from US-CERT (United States Computer Emergency Readiness Team)
To Stop Unsolicited Credit Card Applications Call:
(888) 567-8688 - A 1996 amendment to the Fair Credit Reporting Act required the credit industry to create a one-contact, toll-free number for consumers to tell the nation's four main credit reporting bureaus to remove their names from their "pre approved credit card offer lists".
Protecting Yourself From Identity Theft
Identity theft can happen to anyone. The crime of stealing one’s identity is on the rise and the repercussions are endless. Each year there are close to 9 million victims and that number is rising. Criminals use a variety of methods to obtain identifying information on their victims, including:
- Social Security Numbers
- Driver’s Licenses
- Credit Card Numbers
- ATM Cards
- Telephone Calling Cards
- Victim’s Date of Birth
With any of this information, criminals can impersonate their victim and they will spend as much money as they can until they are caught and move on to their next target.
There are two types of identity theft to be aware of:
Account Takeover – where the thief takes over your existing credit accounts
Applicant Fraud – where the crook uses the identifying information listed above to open new accounts in your name
To reduce your risk, here are some steps to follow:
- Reduce the number of credit and debit cards you carry in your wallet. Should your wallet be stolen, report your loss to your financial institution immediately.
- Be aware of dishonest employees at restaurants or stores. Some have small hand-held devices (skimmers) that can record your credit card information and can be used to purchase items over the phone, online or even create a counterfeit card.
- Do not use your debit card for online shopping. You are better protected against fraud by using your credit card.
- Never give our your Social Security Number, credit or debit card number or other personal information over the phone, mail or internet unless you have a trusted relationship with the company and you have initiated the call.
- Keep a list or photocopy all of your cards, accounts and investments and their contact information. Keep this information in a secure place so you can quickly contact these companies in case of fraud.
- Always take credit receipts with you. Never toss them in a public container. Put receipts in your wallet rather than a shopping bag.
- Never permit your credit card number to be written onto your checks.
- Watch the mail when you are to be issued a new credit/debit card. Contact the company if you do not receive the card in a reasonable amount of time.
- Obtain a copy of your credit report annually at www.annualcreditreport.com
- Always shred new credit card applications before throwing them away.
- Be aware of phishing scams requesting your personal account information. (See phishing article below.)
- Do not keep passwords in your wallet and create pins that are not birthdates or a series of numbers.
- Do not carry your social security card in your wallet.
Be Aware
Examine your accounts for suspicious activity. Some criminals make a mint charging less than $20 to a person’s account, since many people will not question a charge that low. Also be aware if you do not receive bills as expected or if you receive bills/statements for credit cards that you do not own. Another red flag is if you receive phone calls from credit companies on purchases you have not made.
Take time to go over your statements and be sure to order your credit report to see if you have any fraudulent activity.
You are a Victim of Identity Fraud
Even if you have taken these precautions, you may still be vulnerable to identity theft. Should that happen, follow these steps:
- Place a “Fraud Alert” on your credit report. This will require creditors to follow a specific detailed procedure before opening new accounts in your name or making changes to existing accounts.
- Call one of the three credit bureaus to place your 90-day alert:
- Equifax – 1-800-525-6285
- Experian – 1-888-397-3742
- TransUnion – 1-800-680-7289
- Close any accounts that have shown fraudulent activity or have been opened fraudulently.
- File a police report.
- Contact the FTC at 1-877-438-4338 and report your experience.
For an informative brochure with additional information on identity theft please visit: http://www.ftc.gov/bcp/edu/pubs/consumer/idtheft/idt01.pdf
Get Online Fraud Protection - Everyday, Everywhere!
Your online security has always been a top priority. Now, we’re implementing a new feature to protect you from fraud.
Enhanced Login Security Protects You
Introducing new, Enhanced Login Security – set up once and you're all set. It’s that simple: the next time you log in, its business as usual. And the rest of your online banking experience will remain exactly the same.
This superior security technology protects your identity from whatever computer you're using, whether you're at home, at the office, or on the go. Your accounts are protected from unauthorized access, and your peace of mind? At ease.
Best Defense Against ID Theft!
Enhanced Login Security will:
- Ask you to select and answer 3 security questions.
- Only be required once per computer you use.
- Defend against identity theft and fraud.
- Provide security from any computer, wherever you are.
- Make it easy for you with one-time sign-up.
Just one more way to ensure online fraud prevention, everyday and everywhere!
FBI Fraud Alert
If you can answer “Yes” to any of the following questions, you could be involved in a FRAUD or about to be SCAMMED!
- Is the CHECK from an item you sold on the Internet, such as a car, boat, jewelry, etc?
- Is the amount of the CHECK more than the item’s selling price?
- Did you receive the CHECK via overnight delivery?
- Is the CHECK connected to communicating with someone by email?
- Is the CHECK drawn on a business or individual account that is different from the person buying your item or product?
- Have you been informed that you were the winner of a LOTTERY, such as Canadian, Australia, El Gordo, or El Mundo that you did not enter?
- Have you been instructed to “WIRE”, “SEND” OR “SHIP MONEY”, as soon as possible, to a large U.S. city or to another country, such as Canada, England, or Nigeria?
- Have you been asked to PAY money to receive a deposit from another country such as Canada, England, or Nigeria?
- Are you receiving PAY or a COMMISION for facilitating money transfers through your account?
- Did you respond to an email requesting you to CONFIRM, UPDATE, OR PROVIDE your account information?
Tell Branch Personnel Immediately!
Something Phish-y's Going On Here...
So, you’re checking your e-mail and find a message from a financial institution. This message asks you to click on a link that will take you to a Web site where you can “confirm your account information” as part of their system update. Or it hints at “unauthorized activity” on your credit card or ATM card and directs you to a Web page where you can “verify your identity” in order protect your account.
The e-mail seems genuine — it looks just like the institution’s other Web pages, right down to the logo. And the address on the link even includes the institution’s name.
But don’t take the bait. Because the reality is that you’re being “phished” by criminals who hope to gain personal information from you. Their goal is to use your information in order to commit identity theft or credit fraud.
The fact is, Oklahoma Central will never ask you to confirm personal information on line or direct you to our Web site via an e-mail link. If you receive such an e-mail that says it’s from us, contact us by phone immediately at 918.664.6000 and we’ll take steps to shut down the phony Web site and find the person that posted it.
Recognizing a Phish
Look for the “tells.” A sophisticated scam can look pretty convincing, but there are usually clues that will tell you an e-mail is a phish:
- You’re asked to provide personal information — a bank account or credit card number, PIN number or password, your social security number or your mother’s maiden name;
- The e-mail doesn’t use your name, indicating that is a mass mailing;
- The message includes scare tactics, warning that you might have been a victim of fraud, or that your account is being shut down until you provide “verifying” information;
- The text contains spelling or grammatical errors; these are especially common in phishing schemes that originate in other countries.
Commonsense Precautions
Criminals can be clever. But so can ordinary, law-abiding citizens. With a healthy dose of skepticism and a few relatively simple measures, you can successfully foil online criminals:
- Don't give out personal information unless you’re sure you know with whom you're dealing. Check an organization's Web site by typing its URL in the address line, rather than copying and pasting it. Or call customer service using the number listed on your account statement or in the telephone book.
- Be cautious when responding to promotions. Identity thieves may create phony offers to get your personal information, or to obtain your e-mail address, which they can then use to send a phish.
- Avoid using information such as your mother's maiden name, your birth date, the last four digits of your SSN, your phone number, or your address as an online password. If a Web site asks for your mother’s maiden name, ask to use another password instead.
- To create a strong password, use a combination of letters (upper and lower case), numbers and symbols. Think of a memorable phrase and use the first letter of each word as your password, converting some letters into numbers that resemble letters. For example, "I love Felix; he's a good cat," would become 1LFHA6c.
- Set your computer to automatically update virus protection software each week.
- Do not open files, click on links or download programs from people you don't know.
- Use a firewall program, especially if you have a high-speed Internet connection that leaves your computer constantly connected to the Internet. Without it, hackers can access information stored on your computer.
- Use the most up-to-date version of a secure browser for online transactions. When submitting information, look for the lock icon on the browser's status bar to be sure your information is secure during transmission.
- After you’ve completed a secure online transaction, sign off the site right away.
- Don’t store financial information on a laptop computer unless absolutely necessary. If you must use a laptop, don't use an automatic login feature that saves your user name and password, and always log off when you're finished.
- Before you dispose of a computer, delete all personal information stored on it. Be aware that deleting files or reformatting your hard drive may not be enough; use a "wipe" utility program to overwrite the entire hard drive.
