I received a suspicious smishing text or phishing email posing as CUofCO.
In 2023, scammers are unfortunately out to steal more identities and personal information than ever before. These bad actors use a variety of tactics to steal private financial information. Once they have access to a credit card or bank account details, they can make unauthorized charges, drain your accounts, and steal your identity.
We have received many calls from members who have given their online banking and personal information in replies to texting and phishing scams. If the links are not @mmmukg.com, it is someone trying to steal your information. Do not reply to such a text, simply block the number.
Here are some examples of recent scam texts that have been circulating. You will notice some common themes among the fraudulent messages. The following are tells of a smishing message:
- The phone number is missing or is not a Credit Union of Colorado phone number
- The sender is requesting you call back a different phone number
- The message includes links that look similar, but contain extra letters or numbers, or may not be related to the Credit Union of Colorado domain
- They use a different domain qualifier such as .top, .biz, .net, or .online
- The message contains content that is alarming but lacks details
- There is poor grammar or spelling in the message
- The sender is requesting your username/password or other sensitive information
- The sender is requesting additional details like a One Time Passcode or social security number
- The sender is requesting details not normally needed to log into digital banking, such as social security numbers
-
The message does not include the name, Credit Union of Colorado, or the name is misspelled
Note that Credit Union of Colorado is abbreviated rather than spelled out in this example. The text also comes from an unknown number.
Note that this example doesn’t even mention Credit Union of Colorado. In addition, Credit Union of Colorado will never send out a message requesting a call back to a random phone number. NEVER try these fraudulent phone numbers or sites.
Notice the "problem" they are addressing. Also, the phone number is not recognizable, and the URL is not correct. NEVER try these fraudulent phone numbers or sites.
A legitimate message from Credit Union of Colorado
Below is an example of a real fraud alert from Credit Union of Colorado regarding a fraud alert. You can tell that it is legitimate because:
- The phone number remains the same each time
- There is a lack of urgency in the message (we can contact you later)
- There are no spelling or grammar mistakes
- The phone number to call remains the same between messages
- Contains clear details such as the last four digits of your card number
The Five P's of common fraud schemes
When you recognize and educate yourself with the five P’s, you can ruin their nefarious plans.
1. Fraudsters PRETEND to be from a known organization.
Scam artists often impersonate government organizations or companies you do business with, such as the Credit Union of Colorado. These criminals will also make up names that sound like well-known businesses or service providers and use technology to change the number displayed on your caller ID. Messages from the Credit Union will only include the web address xji1.mmmukg.com.
2. Fraudsters say there’s a PROBLEM
These crooks know how to get your attention. They'll use scare tactics to get you to respond to demands for cash, gift cards, wire transfers, or account access. Victims are often convinced they need to open their wallets after being told they:
- Owe back taxes
- Are in trouble with the law
- Need to resolve an account issue
- Are at risk of being physically hurt
- Have a family member in a financial crisis
The scammer always claims to have the solution but will only provide it in exchange for your money or private financial information.
3. Fraudsters PRESSURE you to act immediately.
Crooks want you to act fast and keep the communication secret. They might call, email or text with threats to arrest, sue, or humiliate you if you don't immediately do what they say. They don’t want you to take the time to verify their story.
Credit Union of Colorado will never send a message requesting a call back to a random phone number. Messages sent from us will include the name, Credit Union of Colorado.
4. Fraudsters tell you to PAY in a specific way.
Thieves often insist that you pay by cash, gift card, wire transfer, or virtual currency like Bitcoin. These payment methods are not easily traced or canceled. Some will send you a fake paper check for more than the amount needed, tell you to deposit it and instruct you to send them the difference.
5. Fraudsters ask you to claim a PRIZE.
Have you ever received an email, text, or phone call of congratulations for a contest or sweepstakes you don't remember entering? As enticing as the notification sounds, wise consumers ignore these attempts to lure victims into this common scam. Fraudsters will lie and say you've won the lottery or were approved for a free grant. But there's one big catch – you must pay a fee to claim your alleged prize.
How to Avoid Scams
Awareness is key to avoiding scams all year round. Before acting on any unsolicited request for personal information, remember:
- Impersonation scams take many forms. Government agencies and tech companies rarely call you out of the blue or send text messages demanding payment. If it's a legitimate request, they won’t mind if you call them back at the number displayed on the organization’s actual website.
- Fraudsters manufacture fake problems and emergencies. Confirm claims of out-of-town accidents and legal trouble by contacting family or local law enforcement. Look up the number. Do not call the number provided to you by a caller or the one that appears on your caller ID - numbers are frequently faked!
- Never pay to resolve a legal matter or claim a prize using virtual currency, cash, a wire transfer, or gift cards. These payment methods are hard to trace and are most often associated with fraud schemes. You may not be able to dispute or recall transactions you authorize, even if you later discover it was a scam.
- Credit Union of Colorado will NEVER ask you for a verification code, website password, or fully activated card number over the phone, via text message, or email. Whenever you contact a financial institution regarding your account, you may be asked to verify your identity in other ways. You should never divulge financial details to someone who calls you out of the blue.
- If it feels off, it probably is. Lotteries, loans, and jobs do not fall through if you ask for a few hours to consider. Trust your instincts!
If you believe you may be the victim of a scam, we recommend using our Fraud Checklist to recover the security of your accounts and possibly your identity. Contact us immediately at 800-444-4816 if you suspect fraud related to your Credit Union of Colorado account.
Additional Resources
We encourage our members to stay alert to potential fraud schemes. Your best defense is awareness. Our Risk Department recently found these specific scams to be on the rise across the country: