Scams & Shams

There are many creative ways to steal your identity and personal financial information. Learn to outsmart today's identity thieves.

Scams

Learn how to protect yourself from check, lottery, mystery shopper, selling online and work at home scams. www.FakeChecks.org

ATM Security

ATMs can be subject to fraud, vandalism, burglary, and may be the scene of robberies. Consider the following tips when using an ATM:

  • Use a familiar ATM when possible. Alternatively, choose a well-lit, well-placed ATM where you feel comfortable. Use a "drive up" ATM especially if you're alone at night. Keep your car doors locked and your windows up, except for the driver's window.
  • Scan the entire ATM area before you approach it. Avoid using the ATM if anyone is loitering or if it looks too isolated or unsafe. Trust your instincts.
  • When using a walk-up ATM, avoid opening your purse, bag or wallet when you are in front of the ATM. Have your card ready in your hand before you approach the ATM.
  • Observe if anything looks unusual or suspicious about the ATM indicating it might have been altered. If the ATM appears to have any attachments to the card slot or keypad, do not use it. Check for unusual instructions on the display screen and for suspicious blank screens. If you suspect that the ATM has been tampered with, proceed to another ATM and inform the financial institution.
  • Avoid an ATM which has a message or a sign affixed to it indicating that the screen directions have been changed, especially if the message is posted over the card reader. Financial institutions will not post messages directing you to use an ATM that has been altered.

Skimming

Skimming is a method of obtaining magnetic strip data from ATM, debit, or credit cards that are used at an ATM machine or a merchant location. Learn how to protect yourself from skimming.

Criminals install equipment (disguised to look like normal ATM equipment) on legitimate ATM's in an effort to steal both the magnetic stripe data from the cards being used and the PINs that are assigned to those cards.

The criminals then return to the machine to remove the device along with the captured information. More recent technology allows criminals to remain nearby receiving the information transmitted wirelessly from equipment they install on the front of the ATM. In either case, the thieves copy the cards and use the PIN numbers to withdraw thousands from many accounts in a very short time directly from an ATM.

Please note: The following examples refer to ATM machines, but similar devices may also be placed on card readers at gas station pumps.

scamone

Equipment being installed on the front of the original ATM card slot. The false slot holds an additional card reader called a "skimmer." The skimmer captures and copies the card information.

 scamtwo

The equipment as it appears installed over the normal card slot.

scamthree

A camera that reads the card PIN is housed in an innocent looking pamphlet holder.

 scamfour

Camera inside pamphlet holder is angled to view monitor and keypad.

What can you do to protect yourself?

Be vigilant and inspect the ATM before using it. Skimming devices placed on or near the ATM's actual card reader are often difficult to detect, but if anything about the card reader or PIN pad looks different or unusual or seems loose to the touch, don't use it. If possible, report this to the owner of the ATM and/or local law enforcement as soon as possible.

What if a skimming device is found on a Members1st ATM?

If you suspect a skimming device has been place on a Members1st ATM, do not use it or try to remove the device. Speak to branch personel as quickly as possible and call our Fraud & Security Services at (717) 795-5202.

Phishing

Phishing is a technique that uses fake emails and fraudulent websites to gain personal information for purposes of identity theft. The fraudulent email messages and/or Web sites are designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc.

Phishers create a phony Web site that looks like a reputable and known good site and attach a link to the phony Web site in the email. Unsuspecting recipients that click on this link will find that a Web site opens up that resembles the reputable Web site. However, the computer user does not know that they have been redirected to a phony Web site which can be designed to collect personal information that you key in (such as account numbers and social security numbers.)

  • Be suspicious of any email that requires an urgent response from you and that seems alarming or exciting. Phishers will send emails that require your immediate attention or to "verify their records." They usually ask for information such as usernames, passwords, account numbers, social security numbers, etc. Emails from phishers are generally not personalized and may appear to be sent in mass distribution.
  • Do not click on links sent in an email that are asking for information. Emails suggesting to "click here" in order to enter personal information may end up redirecting you to a phony site that could be collecting your data for malicious use. If you are unsure, contact the company or financial institution on the phone or go to their Web site address directly by typing it into your browser's address bar.
  • Avoid filling out forms asking for confidential or financial information unless you are dealing with a reputable site that you can verify as authentic. If you enter any information, make sure that it is done over a secure link (SSL). This can be verified by checking the "lock" icon in your browser window and displaying HTTPS:// in the address bar. (HTTPS:// - the "S" represents secure)

VISA® & MasterCard Telephone Credit Card Scam

Updated 3/14/11

Please be aware of the following and note that the callers do not ask for your card number as they already have it. They are looking for you to provide the three-digit security code on the back of your card located next to the signature block.

How this scam works:

Person calling says:

"This is (name), and I'm calling from the Security and Fraud Department at VISA. My badge number is 12460, your card has been flagged for an unusual purchase pattern, and I'm calling to verify. This would be on your VISA card which was issued by (name of financial institution). Did you purchase an Anti-Telemarketing Device for $497.99 from a marketing company based in Arizona?"

When you say "No" the caller continues:

"Then we will be issuing a credit to your account. This is a company we have been watching and the charges range from $297 to $497, just under the $500 purchase pattern that flags most cards. Before your next statement, the credit will be sent to (gives you your address), is that correct? You say "yes."

The caller continues:

"I will be starting a Fraud Investigation. If you have any questions, you should call the 1- 800 number listed on the back of your card (1-800-VISA) and ask for Security. You will need to refer to this Control Number." The caller then gives you a 6 digit number. "Do you need me to read it again."

Here's the IMPORTANT part on how the scam works

The caller continues with, "I need to verify you are in possession of your card".  He'll ask you to turn your card over and look for some numbers. There are 7 numbers; the first 4 are part of your card number, the last 3 are the Security Numbers that verify you are the possessor of the card. These are the numbers you sometimes use to make Internet purchases to prove you have the card.  The caller will ask you to read the last 3 numbers to him. After you tell the caller the 3 numbers, he'll say, "That is correct, I just needed to verify that the card has not been lost or stolen, and that you still have your card. Do you have any other questions?"

After you say no, the caller then thanks you and states, "don't hesitate to call back if you do", and hangs up. You actually say very little, and they never ask for or tell you the card number. The scammers want the 3-digit number on the back of the card located next to the signature block.

As a reminder, we will not ask you for any numbers associated with your account since we already have that information on file. If you give the scammers the three digit number on the back of your credit card, you open yourself up to fraud. Do not provide your credit card number or any security code numbers to anyone unless you initiated the call.

Who Can I Talk To If I Have Questions Or Need To Report A Scam?

Loss Prevention & Security Services Department, (717) 795-5202, (800) 283-2328 ext. 5202 or email the Fraud Line