Consumer Alert

Loss Prevention Recommendations:
If you receive an unsolicited e-mail alleging to be from the NCUA, take the following steps:

• DHCU and NCUA will not ask credit union members for personal account information.
• Anyone who has received a fraudulent phishing e-mail purportedly from NCUA should forward the entire e-mail message to Phishing@ncua.gov.
• Do not open any attachments to the e-mail, in case they contain malicious code that will infect your computer.
• If you have received this, or a similar hoax, please file a complaint at www.ic3.gov.

For more tips regarding your online safety, use the FTC (Federal Trade Commission) Web site, www.onguardonline.gov.

Phishing
Criminals around the world are stealing credit card numbers, bank account passwords and other sensitive information in greater numbers than ever before. Many of them are using tools, easily found on the Web, that let them spy on the Internet habits of hundreds of thousands of people, from the sites they visit to the keystrokes they enter.

Recently several Illinois credit unions have been hit with email fraud attempts known as "Phishing". These fraud attempts were initiated via e-mail to credit union members. The e-mails appear to come from the credit union, even using the credit union's logo. They ask for the member to click on a link to verify credit union account information. Often the e-mail suggests verification is needed in order for the credit union to check on suspected unauthorized account activity. Once the member clicks on the link, he or she is directed to a false web site and is then asked for credit union account information, including the account number, PIN, social security number, credit card number, and other personal information.

How DHCU protects you:
Phishing emails and fraudulent sites look like the real thing. When reviewing your email, remember the following:

• DHCU would never ask you to type information into a pop-up window.
• DHCU would never ask you to verify your account information online.
• Most phishing emails contain spelling or grammatical errors. Don't respond to emails with obvious mistakes.

While virus protection and security software can help lower those risks, another scam is leaving many users on their own: e-mail "phishing," the random attempt to obtain account numbers and passwords by criminals masquerading as legitimate businesses.

Phishing Scams
"Phishing" is a kind of credit and debit card fraud. By pretending to be email from a bank or similar site, scammers "fish" for account numbers, passwords, Social Security numbers, etc. They trick consumers into divulging sensitive information so that unlawful charges can be made on the consumers' accounts.

Phishing email schemes change frequently and often have links or attachments with links. Users who click on the links are taken to look-alike sites where they are asked to enter personal data.

All such activity should be reported to the FBI at www.IC3.gov.