Security Center

Phishing, Vishing, and Text Fraud/Scams

Learn how to spot and report suspicious messages, email and text messages that claim to be from us.

Phishing, or the over-the-phone counterpart, “Vishing,” is the fraudulent attempt to obtain sensitive information, such as usernames, passwords, and account details.  This is typically done via an email, text message, or even a phone call. These messages may impersonate a company, charity, or government agency and often make up an urgent request to convince you to sign on to a fake site, open an email attachment containing malware, or respond with personal or account information. The information you provide can be used to commit identity theft or access your account to steal money.

Phishing is often used to gain a foothold in an organization’s networks as a part of a larger attack, where  employees are compromised in order to bypass security perimeters, distribute malware inside a closed environment, or gain privileged access to secured data.

Why are we posting this message?

Sadly, attacks are more and more commonplace in today’s society. In 2020, 74% of attacks targeting US businesses were successful. The FBI found that phishing, including vishing, SMiShing and pharming, was the most prevalent threat in the US in 2020, with 241,342 victims. This was followed by non-payment/non-delivery (108,869 victims), extortion (76,741 victims), personal data breach (45,330 victims) and identity theft (43,330 victims). We urge all of our customers and partners to be vigilant.

What do I do if I am suspicious?

If you receive a suspicious email, call, or text message, don’t respond, click any links, or open attachments. Don’t use a phone number listed in a suspicious message.  Never sign-in to your account through a link in a message. To sign in safely, always type a direct URL or use your password manager or other trusted secure tool to access your account.

How to report phishing

If you are suspicious of a message, or especially if you clicked on a link, opened an attachment, or provided personal or account information, call our customer service agents immediately at 877-790-5994

Things to watch out for: Common warning signs

Phishing scams can be hard to spot, but here are some warning signs:

Suspicious sender

While the “sender” can be faked, always look at the address of who sent the message. Many times, this is a dead giveaway that the message is fake.  Do you know the email address, phone number, or short code? Don’t respond to messages from a sender you don’t recognize.

We don’t send text messages

So, if you receive one claiming to be from us, unless it is by prior special arrangement, it’s not from us.

i

Unusual language

Are there spelling or grammar mistakes in the message? Does it contain unusual formatting, such as ID numbers or punctuation like exclamation points? It may be a scam, so don’t respond.

Request to Change Banking / Payment Information

If you receive a request involving your banking or payment information, do not respond. Call us back on a trusted number from our website 877-790-5994.

q

Urgent request

If you receive an urgent request to unlock your account, verify your identity, or confirm account details, don’t click any links or respond. It’s likely a phishing attempt and should be deleted.

Unexpected phone call

Phone numbers can be spoofed to impersonate legitimate companies. If you receive a request by phone for your company information, banking information or other sensitive information, do not respond. Call us back on a trusted number from our website 877-790-5994.

Bottom Line

We will never ask you to change bank account or payment information with just an electronic message. You should always confirm any such request by multiple methods. If you have any suspicions about a communication claiming to be from us, do not respond. Call us back on a trusted number from our website 877-790-5994.