Latest Fraud Updates

Phishing Scams

Vishing Scams

Security Alert - CUNA.ORG Scam

There is an apparent CUNA.ORG phone scam that is attempting to obtain credit card and PIN information. Efforts are being made at this time by CUNA and PHFCU to take down this scam. Please take any precautionary action if you did provide confidential information.

An individual will receive either an automated phone call or text message asking them to call CARD SERVICES FOR CREDIT UNIONS at 1-866-446-2319 immediately regarding recent activity on their card. If the individual places the call they will be instructed by an automated phone system to enter their card number and PIN. The system will instruct them to enter the information again and then indicate that the information does not match "what is on file".

As in all phishing and phone scams the fraudsters will obtain contact information (email and phone numbers) through other sources and contact lists to blanket a large target base. The contact information does not come from our credit union or through our vendor relationships.

For more information regarding this scam visit http://cuna.org/initiatives/internet_fraud.html. For more information, visit our identity theft page at http://www.phfcu.com/identitytheft.html.

New Computer Virus May Prompt Online Fraud Attempt

Please be on the look out for a new computer virus that may be on your computer. This virus may cause a fraudulent screen to appear in the online Bill Payment window. The screen posts messages that attempt to trick you into providing sensitive information such as your account numbers and passwords – information the bill payment system already knows and you should not provide again.

If you are using PHFCU’s online Bill Payment and a new screen appears out of context asking you to provide sensitive information, do not provide this information.

UPDATE: Fraudulent emails appearing to originate from Pearl Harbor Federal Credit Union are being sent to both members and nonmembers.  These emails may state that your PHFCU account may be suspended unless you click on a link and update your account information.  Do not respond to these emails or follow links.  Fraudsters are attempting to acquire your account information.

Pearl Harbor Federal Credit Union, and most financial institutions, are not in the practice of obtaining personal or account information via emails or phone calls.  If you receive a suspicious e-mail or phone call claiming to be from us, please forward the e-mail to fraud@phfcu.com or call us at (808) 73PHFCU (737-4328) to report it immediately. 

You can learn more about phishing emails and telephone calls and what you can do to prevent identity theft by visiting our identity theft informational page.

A commonly used method of identity theft is known as "phishing."  Phishing occurs when a fraudster contacts an individual through email or the telephone requesting personal information.  Information obtained through this method is often used to perform fraudulent financial transactions.  In many instances, these attempts may even appear to originate from organizations where the recipient has an established relationship.

Below are examples of actual phishing emails and associated phishing websites.

The phishing email below offers a reward for answering a fake online survey.  Notice how hovering the pointer over the web link reveals the actual website address on the bottom.

Notice how this email threatens to suspend your account unless you click on the link and provide your account information. 

Similar to phishing, voice phishing or vishing scams attempt to trick you into providing your personal information over the phone.  Vishing scams begin with an email or text message that resembles the phishing email.  Unlike the phishing email where you are asked to click a link, you will be asked to call a specific “toll-free” number to settle some matter with your account.  Often times, the specified number isn’t a toll-free number.  When you call that number, you will be led through a series of voice-prompted menus that asks you to key in data from a ATM/debit or credit card, such as your 16-digit account number, expiration date, three-digit security code and other personal information.

Another version of vishing utilizes the telephone instead of emails or text messaging.  You will receive a call from either a live person or a recorded message with a fake Caller ID.  The caller ID may list a legitimate-looking phone number to gain your trust.  Fraudsters can hack into Caller ID systems or assign any area code to a phone number so that it will appear to be a 1-800 number or a local number.  In some cases, the caller already has some personal information on you, including your account or credit card numbers and asks for confirmation of the number or the three-digit security code on the back.  All of these methods are used to attempt to gain your trust and get you to reveal your information.  Below is an example of a vishing telephone call:

"Hello.  I'm with XYZ Bank and our records show that fraudulent withdrawals have been made from bank accounts in your area.  In order to prevent this on your account, we need to confirm your account information..."

Helpful Tips to Protect You:

• Never use the number provided in the email, text message or telephone call.  Use only the number provided on your account statement or on the back of your ATM/Debit or Credit Card. To contact Pearl Harbor Federal Credit Union, use our easy to remember phone number: (808) 73PHFCU (737-4328).

• Never give out personal information to an unsolicited caller.

• If you receive a suspicious or unsolicited phone call regarding your account at Pearl Harbor Federal Credit Union, hang up and call us back at (808) 73PHFCU (737-4328) to verify.

• Never rely solely on your caller ID – the phone number that appears may be falsified.

Remember: if you are in doubt, please contact us at (808) 73PHFCU (737-4328) or toll-free at 1-800-987-5583.