Account Security

Current Scams

Tax-filing season brings out tax-preparation frauds

Consumers are being warned of fraud schemes by individuals
claiming to be tax preparers. In this type of fraud, the victims unwittingly provide the bogus tax preparers with personal information such as their name, Social Security number, bank account numbers, investment information and more so the preparers can complete the tax forms. The tax preparer inflates the information with fraudulent information to obtain a larger refund. Some victims have found their tax preparers have claimed children they don't have, day care expenses and so on.

The tax refunds are transmitted as a direct deposit (ACH credit) to a newly created account or to an existing account with an impersonator added as a joint owner. These accounts are established by an impersonator or a recruiter. Once the tax refund is deposited into the account, the impersonator or recruiter withdraws the tax preparation fee. The remainder of the ACH credit goes to the refund recipient.

To protect you from this type of scam:

• If you are not using a nationally recognized company and are using a personal tax preparer, avoid a tax preparer that claims to know something special and claims to get you more money back in your return than anyone else can.
• Be leery of a tax preparer that bases their fee on a percentage of the promised refund.
• Sit with the preparer as they fill out the tax forms. Never just sign a blank form and trust them to file it.
• Never open a new account and make someone else joint on the account that you do not know personally and trust.

Anti-Phishing Tips

Phishing is the illegal practice of tricking someone on the Web in order to retrieve their sensitive personal information: passwords, banking information, etc. Most often, phishing takes the form of
fraudulent emails that ask you to "confirm your password", "verify your account", or "confirm your identity."

1. Be aware of phishing scams. Be skeptical about any email that asks you to login through a link in an email. MidWest America will never ask you to login this way . Phishers will often send emails with urgent requests for personal financial information and will include upsetting or exciting (but false) statements in their emails to get people to react immediately. MidWest America will never ask you for personal information of any kind through email and you should notify us immediately if you receive an email of this sort.
2. Regularly log into MidWest Internet Banking or call MidWest Phone Banking for account information and balances. Don't leave it for as long as a month before you check your account. Regularly check your account so that you can ensure that all transactions are legitimate and if anything is suspicious or you don't recognize the transaction, contact MidWest America immediately.
3. Always report "phishing" or “spoofed” e-mails regarding your account to MidWest America immediately. You can forward the email to callcenter@mwafcu.org. There are many other places that you can report phishing emails to such as:
   • The Internet Crime Complaint Center of the FBI by filing a complaint on their website at http://www.ic3.gov/default.aspx
   • Email the Federal Trade Commission at spam@uce.gov
   • And remember that when forwarding spoofed messages, always include the entire original email with its original header information intact.
     
     

Identity Theft Fraud Tips

Identity theft occurs when someone uses your personally identifying information, like your name, Social Security number, or credit card number, without your permission, to commit fraud or other crimes.

The FTC estimates that as many as 9 million Americans have their identities stolen each year. In fact, you or someone you know may have experienced some form of identity theft. The crime takes many forms. Identity thieves may rent an apartment, obtain a credit card, or establish a telephone account in your name. You may not find out about the theft until you review your credit report or a credit card statement and notice charges you didn’t make—or until you’re contacted by a debt collector. Remember these tips below to safeguard your identity:

• Be wary of text messages that request personal information. If you do not know who is making the request, delete the message. MidWest America does NOT send text messages to cell phones about member accounts. If you receive such a text message, please do NOT respond.
• Do not give out personal information, such as your Social Security number, credit union account numbers or credit card numbers, to anyone you do not know who has called you on the phone.
• If you receive a call asking for personal information, hang up and call MidWest America to verify that the request is valid.

To request a free copy of your credit report from any of the three major credit reporting agencies, visit www.annualcreditreport.com. If you find any discrepancies on your credit report, please contact one of the major agencies:

• Equifax
  www.equifax.com
  1-888-766-0008
• Experian
  www.experian.com
  1-888-397-3742
• TransUnion
  www.tuc.com
  1-800-680-7289

ATM Safety

1. Don't hesistate to take action if you realize you have lost your ATM or debit card. Contact the credit union right away at 800-348-4738, so the number can be blocked and a new card with a different number can be ordered. If you have lost your card during a time when MidWest America is not open, you can have your card blocked to avoid any future usage by calling our MidWest Phone Banking at 260-423-8278 or toll free at 800-847-2278. Follow the prompts to block your card. You can also leave a message on our after hours voice mail; however, any action would not take place until we are once again open for business.
2. Never approach an ATM if anyone is lingering nearby. Never engage in conversations with others around an ATM. Remain in your automobile until other ATM users have left the ATM. Never use an ATM if you see loose or wobbly parts attached to the face of the ATM or a dramatic change in the appearance of the ATM since your last visit. If you feel uneasy, do not use the ATM. Go to another ATM location where you feel safer.
3. Ask us for a new card number if you suspect that your ATM or debit card my have been compromised at a merchant, restaurant, or ATM. It's important to change both your card number and your PIN whenever you experience a potential theft of your personal information.

Securely Manage Your MWA Accounts Online

MIDWEST AMERICA FCU HOMEPAGE:
Make sure it says http://www.mwafcu.org/ in the address line.


One trick phishers use is called “spoofing”. The phisher will set up a website that looks exactly like a legitimate one but has a different address. They then trick us into giving them information like account numbers, passwords, social security numbers or logon IDs. Once they have this information, they can go to the real website and use it to steal.

A fraudulent email or link may direct you to a website that looks like ours at first glance, but the address is different. Sometimes the difference is very subtle and hard to catch like http://www.mwafcu.com or http://www.mwfcu.org/ which are only slightly different, but take you to the wrong site.

HOME BANKING:

1. Make sure the address line starts with https://hb.mwafcu.org/
   
   
   There will be more following this in the address line, but this is the most important part and the easiest to look for. If the address does not start with this, you may be at a spoofed site. Notice that the first part of the address “https” is different from the start of the regular website address, “http”. The extra “s” stands for “secure” and means that the information is sent over a “secure socket layer” connection.
2. Make sure there is a closed padlock in the frame surrounding the web page. This is also an indicator that the information is being transmitted with a “secure socket layer” connection. Sometimes phishers will put a picture of a closed padlock in the web page to trick you into thinking it is secure. Remember that it must be in the frame around the web page to mean, “secure socket layer”.
3. You can check the digital certificate. A Digital Certificate is issued by a Certificate Authority that certifies that a business and a particular website are connected, just like a photo on your driver's license connects your identity with your personal details. The Certificate Authority called VeriSign attests that the website hb.mwafcu.org belongs to Midwest America FCU and Midwest America FCU is a real business. To view the digital certificate, you can either click on the VeriSign logo on the left of the home banking log in screen, or click on the closed padlock on the website frame.
4. When logging in to home banking, make sure the picture and phrase you selected during set up are correct. If they are not correct, you may be at a spoofed site because phishers do not know what you chose.

Mortgage Fraud Prevention

Have you applied or are you applying for a new mortgage? Click here for mortgage fraud prevention tips to help you when dealing with your mortgage lender.