Phishing and smishing are two popular forms of scams that operate by tricking individuals into sharing their sensitive information online. Phishing attacks occur online via email or websites while smishing attacks originate in text messages. In today’s blog, we’ll look at phishing and smishing while also exploring ways you can better protect yourself.

What is Phishing?
Phishing is the act of sending an email to a user falsely claiming to be an established enterprise in an attempt to scam the user into surrendering private information that could be used for fraudulent activity or identity theft. The email directs users to visit a website where they are asked to update personal information – such as passwords, credit card or debit card information, Social Security Number, or even the credit union or bank account numbers associated with their account(s). The website, however, is fake and has been set up only to appear official and steal the user’s information.

Helpful Tips:

• Make sure you’re running an up-to-date and supported operating system
• Use antivirus software on your computer
• Do not click links or respond to emails that appear suspicious
• Never enter your username or password into a website you arrive at by clicking a link in your email

If you receive an email which you think is phishing, and the message states it is from DCCU, please forward the entire email to abuse@mydccu.com. This will help us shut the site down more quickly.

What is Smishing?
Smishing is a form of fraudulent attack where SMS text messages are used to initiate contact with an individual in an attempt to steal their banking information. These messages almost always include links to a fake website impersonating an actual institution, such as a bank or government agency. The fake website, also called a spoof, then prompts the individual to enter the usernames, passwords, addresses, phone numbers, email addresses, banking account information, Social Security Numbers, and more. Once an individual has entered this information, the scammer has access to everything provided.

As a reminder, text messages generated by DCCU will never request your username and password information for Online Banking. If you think you may have experienced a smishing attempt or feel your information has been compromised, please email fraud@mydccu.com or call us 800-245-8085. For additional fraud prevention tips and information, please visit our Fraud Prevention Center.