Summit Bank will never ask you to verify, update, or provide sensitive information over email such as an account number, debit/credit card numbers, Social Security numbers, or online banking User IDs or Passwords.
Phishing is a scam to deceive users into providing sensitive information such as credit/debit card numbers, PINs, account number, User IDs and Passwords for online banking, and Social Security number. These are usually presented to the user via email with a sense of urgency in order to get the recipient to respond quickly. The recipient is asked to respond with the requested information or by accessing a link provided in the email.
Spear Phishing is a more specific form of Phishing where the sender may already have some details such as an account number in order to make the email look more authentic. It may target employees of a particular organization to make it appear someone else with the organization sent the email. These emails may appear to be more personalized.
Smishing involves a Phishing attack sent via text message and is a way to infect cell phones and other mobile devices with malware and viruses.
An example is cell phone users receive a text message confirming their purchase of a (fabricated) service. The user is asked to click on a link if they wish to cancel the order. If the user clicks on the link, malicious code is installed that could allow a Web-enabled phone to be controlled by hackers.
Another example, recipients receive a message their ATM card has been suspended or account frozen, and they must call a number provided in the message. When they call the number they are prompted to provide sensitive information such as account numbers.
U.S. Postal Inspection Service – Employment Fraud - https://postalinspectors.uspis.gov/investigations/MailFraud/fraudschemes/FraudSchemes.aspx
Internet Crime Complaint Center (IC3) – Fraud Advisory for Consumers: Involvement in Criminal Activity through Work from Home Scams - http://www.ic3.gov/media/2010/WorkAtHome.pdf
Fraud Watch International – Fake Jobs / Money Mules (List of Known Fake Job Postings) - http://www.fraudwatchinternational.com/fake-jobs/
FTC – Take Charge: Fighting Back Against Identity Theft - http://www.ftc.gov/bcp/edu/pubs/consumer/idtheft/idt04.shtm
Fraud Watch International – Lottery Scams - http://www.fraudwatchinternational.com/lottery/
U.S. Postal Inspection Service – Mail Fraud Schemes - https://postalinspectors.uspis.gov/investigations/MailFraud/fraudschemes/FraudSchemes.aspx
Be aware that con artists in this scheme usually work in pairs, although they will appear to the unsuspecting victim that they do not know each other.
Be cautious when an “overly friendly or non-threatening” stranger approaches you in a public area to strike up a conversation and then another stranger appears claiming that he/she has just found a large amount of cash or other valuables.
Be alert if the strangers tell you that they will give you a portion of the found money if you help them and don’t tell anyone.
As a means of establishing trust, the con artists may request that you give them some of your own money up front as “good faith” money and they will split the found money with you then return your “good faith” money.
The strangers may attempt to persuade you to go to the bank and make a large cash withdrawal to bring back to them.
They may also ask you for other favors to help them - like driving them or following them to their “attorney’s office” where they will leave your presence and never return with your money.
Be aware that con artists usually have a friendly face and pleasant demeanor that they will use to gain your trust and take your money.
If you become suspicious or feel uncomfortable in any way, do not get involved in the situation and simply walk away.
Do not be tricked into trusting someone that you do not know – especially when your money is involved.
Contact the police or explain the unusual situation to a bank employee before withdrawing any of your money.
Be cautious of swindlers that contact you claiming to be law enforcement officers, federal agents, bank investigators, or bank officials stating they need your assistance in conducting an investigation involving the bank. Be alert if the “authority” asks you to withdraw cash from your account and return the money to them.
The “authority” may indicate they need to take the cash from you as “evidence” and they will return it to you later or deposit it back into your account at a later date – which never happens.
Social Engineering – is the act of manipulating people into performing actions or divulging confidential information usually through telephone or online communication. The term applies to trickery or deception for the purpose of information gathering, fraud, or computer access; in most cases the attacker never comes face-to-face with the victim.
Pretext Calling – is a form of social engineering. It is a scheme associated with identity theft in which a fraudster, pretending to represent a legitimate person or entity, calls an unsuspecting party seeking personal identification data, such as social security numbers, passwords, account information, account activity, last deposit/withdrawal amount, etc.
Vishing - Voice Phishing termed “vishing” attempts to deceive users into divulging sensitive information over the phone, typically through automated customer service lines and Voice over IP services. Recipients may receive an email or text message that instructs them to call a number regarding a problem with their account. Once the targeted person (potential victim) calls that number, the automated service or perpetrators will ask the person to provide sensitive data such as their account number, social security number, date and dollar amount of their last deposit/withdrawal, etc.
FTC – Telephone and Telemarketing Scams - http://www.ftc.gov/bcp/menus/consumer/phone/scams.shtm
FTC – Straight Talk about Telemarketing - http://www.ftc.gov/bcp/edu/pubs/consumer/telemarketing/tel15.shtm
BBB – Alerts - http://www.bbb.org/us/business-alerts/
FBI – Common Fraud Schemes - http://www.fbi.gov/scams-safety/fraud
FakeChecks.org - Prevention / Scams - http://www.fakechecks.org
Please do not send any sensitive, confidential, or non-public information via this email address as it is non-secure.