Fraud
Protect Yourself & Others
- Never give out login credentials over the phone, in person, or via email.
- This includes your user names and passwords.
- Watch what you’re sharing on social networks. Criminals can befriend you and easily gain access to a shocking amount of information—where you go to school, where you work, when you’re on vacation—that could help them gain access to more valuable data.
- If someone calls or emails you asking for sensitive information, it’s okay to say no.
- You can always call the company directly to verify credentials before giving out any information.
- Be sure to monitor your accounts for any suspicious activity. If you see something unfamiliar, it could be a sign that you’ve been compromised.
- ATM, Credit, and Debit Cards should be signed as soon as they arrive and only used for transactions in a secure setting (not on unfamiliar or suspicious websites).
- Do not utilize the “remember my card number” options on websites.
- Do not leave the cards out in visible, unsecured locations.
- Call us to immediately report a missing or stolen card.
- Tamper resistant checks are available through GSCU and utilize security features such as chemically sensitive paper to deter alterations.
- Statements, e-statements, bills and e-bills should be reviewed promptly upon receipt to verify that all transactions were made by authorized parties.
- Any transactions made by unauthorized parties should be reported to the appropriate financial institution, card issuer, or biller.
- Statements, bills, and transaction receipts that are to be discarded should be eliminated securely, for example by shredding, and should not be discarded in a readable form.
- Practice good password management by utilizing a strong mix of characters.
- At least 8 characters long.
- Avoid common words and phrases.
- Don't use personal information.
- Don’t use the same password for multiple sites.
- Don’t share your password with others.
- Don't write it down.
- Don't reuse past passwords.
- Use two-factor authentication when possible.
- Never leave your devices unattended.
- If you need to leave your computer, phone, or tablet for any length of time—no matter how short—lock it so no one can use it while you’re gone.
- If you keep sensitive information on a flash drive or external hard drive, make sure to secure it as well.
- Use strong passcodes or utilize biometric verification methods such as FaceID and fingerprint scanning.
- When using public Wi-Fi, refrain from sending or receiving private information.
- Use virus protection software on all computers connected to the Internet and ensure it is updated regularly. Most commercially available security software provides anti-virus, malware and firewall protection.
- Keep all applications, including your operating system patched, by setting your PC to automatically install updates.
- Turn off your computer or disconnect from the network when not in use. An intruder cannot attack your computer if it is turned off or disconnected from the network.
- Back up your data regularly.
- Be conscientious of what you plug in to your computer. Malware can be spread through infected flash drives, external hard drives, and even smartphones.
- Report any suspicious messages claiming to be GSCU to us: 1-800-645-4728.
- Report any other suspicious messages to the Federal Communications Commision and Federal Trade Commission
Recent Member Alerts
-
Beware of Crypto Scams
Cryptocurrency, or Crypto, is a type of digital currency purchased via phone, computer, or cryptocurrency ATM. Unlike traditional currency, crypto values frequently change and aren’t backed by the federal government. Using crypto doesn’t offer the same protections that a traditional bank account or debit card would.
-
Beware of Fake Parking Ticket Scams
Scammers are sending messages and/or documents that appear as legitimate parking violation notices with the goal of convincing targets that they owe for a ticket and pressure them to pay quickly.
-
How do I Spot Credit Card Fraud Early?
Credit card fraud can lead to unauthorized charges and financial harm. Spot it early by monitoring your accounts, using alerts, and safeguarding your personal information.
-
Member Statement Enhancements
March month-end statements will feature updates providing increased clarity and transparency. Members will begin receiving these enhanced statements in early April.
-
Top Tips: Spot the Artificial Intelligence (AI) Difference
Smart habits you can learn to protect yourself from AI related fraud.
-
Trending Scams: Romance Scams
This short piece from our February Fraud Newsletter offers helpful tips to recognize and avoid romance scams.
-
How to Protect Your Identity During the Holiday Shopping Season
Learn how to stay safe and protect your finances at the peak of fraudulent activity in this month's Fraud Education article!
-
Social media safety: What not to share
Social media connects us to friends, family, and communities—but it can also expose us to identity theft and fraud if we’re not careful. What you share online can be used by scammers to guess passwords, reset accounts, or impersonate you.
-
Identity theft: A survivor's guide
Identity theft is a crime with many faces: from the thief who your skims your card info at the ATM, to the hacker who assumes your persona and opens accounts in your name. Unfortunately, rectifying identity theft damage can be like untangling a wet knot. You can do it – but it’ll require patience and perseverance.
-
How To Protect Yourself From Credit Card Fraud
In the modern world, almost everyone holds a credit card. A recent study revealed that 84% of American adults have at least one credit card and that there are 572 million open accounts in the US.
The reach and popularity of credit cards have made them a major target of scammers. Many fraud schemes target credit cards, such as skimming (copying the credit card details electronically and duplicating the card), card theft, identity theft, phishing, vishing (voice phishing), card not present fraud, etc.
Here is how you can protect yourself from these credit card scams.
-
Federal Benefits Are Going Digital - Set up Direct Deposit with GSCU today!
Federal benefits are going digital! Set up direct deposit with GSCU today and beware of Government Impersonation Scams!
-
Avoiding Identity Theft: Secure Your Belongings in Public
In the past, people were concerned about protecting cash and jewelry from theft. Nowadays, with fewer people carrying around large wads of cash, the concern is more about theft of information.
-
Fight Fraud with a Credit File Freeze
Identity theft can catch even the most vigilant person off guard. Once a thief has possession of your personal information, they have the ability to open accounts and borrow in your name – leaving you with the bill and credit damage.
-
Fraud Education: New Rule to Protect Your Financial Information
Learn more about protecting your data in this month's fraud education article.
-
Scam Alert: Beware of Fake Toll Emails & Texts
A new phishing scam is targeting people with fake toll violation notices sent via email or text. Read our blog to learn more!
-
Watch Out For This Gmail Scam
Learn about the new Gmail scam that is on the rise in this month's fraud education article!
-
GRANITE STATE CREDIT UNION’S UNVEILS STATE-OF-THE-ART DRIVE-UP FACILITY
Granite State Credit Union is pleased to announce the opening of a new drive-up at their Manchester location (located at 1415 Elm Street)!
-
Protecting Your Kids from Identity Theft
Learn how to protect your kids from identity theft in this month's Fraud Education article.
Types of Scams
Common scams range in style, content, and purpose such as "romance" scams on dating apps or "grandparent" scams targeted toward seniors. Most of these scams have common signs that they are fraudulent.
Common signs to consider:
- If an offer seems too good to be true, it most likely is.
- Be cautious with any message offering to place money into your bank account.
- Is there a sense of urgency in the message?
- Are consequences noted if you don't act quickly?
- Is the message asking you to provide or update personal information?
- Social Security Number
- Bank Account Details
- Passwords
- Requesting payment through unconventional means.
Fraudsters send emails appearing to be from someone you know or a reptuable organization in an effort to gain personal information from unsuspecting victims.
How to spot a phishing email:
- Check for spelling mistakes and grammer errors within the email.
- Review the "From", and "To", areas within the message.
- Hover your mouse arrow over the name in the "From" column. By doing so, you will be able to tell if the email is from a recognizable domain that is linked to the actual sender name.
- If you notice that your email address is being identified as the "From address", this is a sign of a fake email message.
- Be wary if the "To" field reflects a large list of recipients. Legitimate emails will be sent directly to you and you only.
- You may see “undisclosed recipients” and this is something to keep an eye on as well. It could be a valid send, but double check by using the other tips identified.
- Pay attention to the email in the reply field. Does it match the sender of the original email?
- Most legitimate messages will be a mix of text and images. A poorly constructed phishing email may be missing images, including the company’s logo. If the email is plain text and looks different than what you’re used to seeing from that sender, go with your gut feeling and delete the message.
- Be careful when clicking on attachments or links in email.
- If it’s unexpected or suspicious for any reason, don’t click on it.
- Double check the URL of the website the link takes you to.
- Roll the mouse pointer over a link to reveal its actual destination before clicking on it.
- Make sure the link uses encryption (https://).
- Is this the first time the sender has included an attachment? Most organziations will not send out attachments via email.
- High risk attachments file types include: .exe, .scr, .zip, .com, .bat.
- It is a recommended best practice to always open a new window and go to the site directly without using the email link provided in an email.
Criminals attach a card-skimming device to an ATM or payment processing terminal to steal card information. This can be done with skimmers that read the magnetic strip or computer chip on the card, small cameras to record finger movement when entering passwords, electronic equipment directly installed into the ATM or payment terminal, or an overlay device on top of the keyboard area to record PINs.
Machines in public areas such as airports, gas stations, or stores are the most vulnerable.
How to protect yourself:
- Check all ATMs and other card-reading devices before use.
- Use ATMs inside buildings or in high-traffic areas that are harder to target.
- Opt for credit (or use your debit card as credit) to prevent access to your PIN.
- If an ATM looks suspicious, don’t use it. Report it to the bank or police.
Smishing combines the terms "SMS" and "phishing" to represent phishing scams presented through text message rather than email formats. A fraudster can disguise a text message to also appear to be from a trusted source.
How to spot a smishing text:
- Verify the source (email, phone number, etc.) by comparing to prior messages or finding the correct number on the source's website.
- Consider the tone of the message and be wary of:
- A sense of urgency
- A need to act quickly
- Dire consequences
Fraudsters make their phone number appear on Caller ID to be a trusted organization. These scammers use an automated dialing software to set up these calls and millions are made over the internet in a matter of minutes.
How to protect yourself:
- Utilize robocall blocking.
- Talk to your phone provider to learn more.
- Consider adding your phone number to the "Do Not Call" list.