Fraudsters are constantly refining their tactics, but a few smart habits can keep your accounts and personal information safe. Whether you're banking online, over the phone, or in person, here's what you need to know to stay one step ahead.
Guard your credentials like cash. Never share your online banking password, PIN, or one-time verification codes with anyone — including someone claiming to be from your credit union. Legitimate staff will never ask you for this information.
Use strong, unique passwords. Create a different password for each financial account, ideally a passphrase of 12+ characters mixing letters, numbers, and symbols. A password manager can help you keep track without reusing logins.
Turn on multi-factor authentication (MFA). Whenever it's offered, enable MFA on your accounts. This adds a second layer of protection — even if a scammer gets your password, they can't get in without the extra code.
Monitor your accounts regularly. Check your balances and transaction history often, not just once a month. Set up account alerts for large withdrawals, new logins, or unusual activity so you catch problems early.
Secure your devices. Keep your phone and computer's operating system, browser, and antivirus software up to date. Avoid logging into your accounts on public Wi-Fi; use your phone's cellular data or a trusted VPN instead.
Shred and store carefully. Shred paper statements, pre-approved credit offers, and anything with account numbers before throwing them away. Keep checks, cards, and financial documents in a secure place at home.
Review your credit report. Pull your free credit report annually from each of the three major bureaus (through AnnualCreditReport.com) and watch for accounts or inquiries you don't recognize.
The common thread in almost every scam: urgency and pressure. Scammers want you to act before you have time to think it through or call to verify. If a message or call creates a sense of panic, slow down — that's often the biggest red flag.
Knowing what's off-limits makes it much easier to spot an impostor. A legitimate financial institution will never:
If you receive a request like this — even if it looks like it's coming from us — stop and verify independently. Hang up and call the number on the back of your card or on our official website, rather than a number provided in the message itself.
Fraud prevention isn't about being suspicious of everyone — it's about building a few simple habits that make you a harder target. When in doubt, pause, verify through official channels, and don't let anyone rush you into a decision about your money.
Have questions about your account security or think you've spotted suspicious activity? Contact our member care team — we're here to help.