Fraud Prevention

• Guard your credentials like cash. Never share your online banking password, PIN, or one-time verification codes with anyone — including someone claiming to be from your credit union. Legitimate staff will never ask you for this information.

• Use strong, unique passwords. Create a different password for each financial account, ideally a passphrase of 12+ characters mixing letters, numbers, and symbols. A password manager can help you keep track without reusing logins.

• Turn on multi-factor authentication (MFA). Whenever it's offered, enable MFA on your accounts. This adds a second layer of protection — even if a scammer gets your password, they can't get in without the extra code.

• Monitor your accounts regularly. Check your balances and transaction history often, not just once a month. Set up account alerts for large withdrawals, new logins, or unusual activity so you catch problems early.

• Secure your devices. Keep your phone and computer's operating system, browser, and antivirus software up to date. Avoid logging into your accounts on public Wi-Fi; use your phone's cellular data or a trusted VPN instead.

• Shred and store carefully. Shred paper statements, pre-approved credit offers, and anything with account numbers before throwing them away. Keep checks, cards, and financial documents in a secure place at home.

• Review your credit report. Pull your free credit report annually from each of the three major bureaus (through AnnualCreditReport.com) and watch for accounts or inquiries you don't recognize.

• Phishing emails and texts that mimic your credit union's branding and urge you to "verify your account" by clicking a link.

• Phone scams ("vishing") where a caller claims to be from fraud prevention and pressures you to act immediately.

• Fake check scams, where you're asked to deposit a check and wire back a portion of the funds.

• Romance and imposter scams, where someone you've built trust with online eventually asks for money or gift cards.

• Tech support scams, where a pop-up or caller claims your computer is infected and asks for remote access to "fix" it.

Knowing what's off-limits makes it much easier to spot an impostor. A legitimate financial institution will never:

• Ask you to share your online banking password or PIN

• Request a one-time passcode or verification code sent to your phone or email

• Ask you to move money to a "safe" or "protected" account to avoid fraud

• Pressure you to buy gift cards, wire money, or send cryptocurrency to resolve an account issue

• Ask for your full Social Security number over an unsolicited call, text, or email

• Threaten immediate account closure or arrest if you don't act right away

• Ask you to download remote-access software to "fix" a banking problem

If you receive a request like this — even if it looks like it's coming from us — stop and verify independently. Hang up and call the number on the back of your card or on our official website, rather than a number provided in the message itself.

1. Contact us immediately using the phone number on your card or our official website — not a number from a suspicious email or text.

2. Change your passwords for online and mobile banking, and any accounts using the same login.

3. Place a fraud alert or credit freeze with the credit bureaus if your personal information may have been compromised.

4. Report it to the Federal Trade Commission at ReportFraud.ftc.gov and, for identity theft, at IdentityTheft.gov.

5. Document everything — save emails, texts, and caller details to help with the investigation.