Protecting Your Identity &
Overall Security Tips

Never share account information. This includes your Internet banking login, account numbers, social security number and PINs. Do not provide personal information over the phone unless you initiate contact and verify that it is a trusted source.

Do not “over share” on social media. For example, avoid posting when you are on vacation and when you will be returning. Wait until you get back to post the fun photos!

Secure your mail. Place outgoing mail in a post office collection box. If you plan on being away from home for more than a couple days, have the U.S. Post Office hold your mail. Credit union eStatements are a great option!

Safely dispose of sensitive information. Shred any papers that have personal or financial information.

Regularly review accounts statements.  Report any suspicious activity immediately.

Set up eAlerts. Get real-time text or email alerts when transactions occur on your account or Debit and Credit cards.

Request a copy of your credit report annually. Under the Fair Credit Reporting Act (FCRA), you have the right to request a free credit report from the three main consumer reporting agencies - Equifax, Experian, and TransUnion. The only website authorized to give this free report is www.annualcreditreport.com. You can also request a copy by calling 877.322.8228.

What Is Spoofing?

Spoofing is the act of disguising your communication from an unknown source as being sent from a trusted one. The objective of spoofing is to make the recipient believe that he/she is receiving notification from a legitimate source. The caller will pretend to be a staff member of the institution, or a representative from the institution’s fraud department in order to get the victim to disclose sensitive information, causing harm to the organization as well as the victim. The latest scam we've been made aware of in our area involves fraudsters pretending to be calling from your financial institution, stating there has been a breach to your account. This is not related to an internal breach within the credit union, rather, a common scam that has targeted some members and we want to make you aware so you do not fall victim. 

These fraudsters are asking for personal information such as your banking login credentials, in an effort to commit identity theft or gain access to your account. If you believe you have been a target of this scam, please contact us immediately. Memorial Employees Financial Credit Union will never contact members from our toll-free phone number, as well as they will never ask for information such as your online banking username and password or your card PIN number.

Tips to Avoid Becoming a Victim of Spoofing

You may not be able to tell right away if an incoming call is spoofed. Be extremely careful about responding to any request for personal identifying information.

• Don't answer calls from unknown numbers. If you answer such a call, hang up immediately.
• If you answer the phone and the caller - or a recording - asks you to hit a button to stop getting the calls, you should just hang up. Scammers often use this trick to identify potential targets.
• Do not respond to any questions, especially those that can be answered with "Yes" or "No."
• Never give out personal information such as account numbers, Social Security numbers, mother's maiden names, passwords or other identifying information in response to unexpected calls or if you are at all suspicious.
• If you get an inquiry from someone who says they represent a company or a government agency, hang up and call the phone number on your account statement, in the phone book, or on the company's or government agency's website to verify the authenticity of the request. You will usually get a written statement in the mail before you get a phone call from a legitimate source, particularly if the caller is asking for a payment.
• Use caution if you are being pressured for information immediately.
• If you have a voice mail account with your phone service, be sure to set a password for it. Some voicemail services are preset to allow access if you call in from your own phone number. A hacker could spoof your home phone number and gain access to your voice mail if you do not set a password.
• Talk to your phone company about call blocking tools and check into apps that you can download to your mobile device. The FCC allows phone companies to block robocalls by default based on reasonable analytics. More information about robocall blocking is available at fcc.gov/robocalls.

Caller ID Spoofing | Federal Communications Commission (fcc.gov)

Criminals are constantly developing new schemes to trick people into sharing private information. Unfortunately, these schemes are often hard to spot. For instance, one method that occurs regularly is the use of a fake email message, text or phone call to convince a person that their financial account needs attention.

If you’ve ever received an email message, text or phone call that out-of-the-blue claimed your financial account needs attention, it’s important to be immediately on guard. Is the caller or sender asking you to provide your account number, social security number or other identifying info? RED FLAG! Your trusted financial institution would never contact you in this manner regarding private information. Hang up or delete the fraudulent message right away.

In phony contact attempts, criminals may claim that your account has been locked or that your account information needs to be updated. These false tales may sound urgent, which can sometimes stun a person into sharing private info with the fraudster. If you’ve shared private info before realizing the contact is fake, we can help place additional protective measures on your account.

Debit and ATM card safety is essential to protecting your money and personal information. Simple habits like keeping your card and PIN secure, staying alert when using an ATM, and watching for suspicious activity can greatly reduce the risk of fraud or theft. Click here for important tips on how to protect your ATM card and safely use an ATM

Lost or stolen Debit Card:

1.800.472.3272

Change PIN Number:

1.800.992.3808

The Children’s Online Privacy Protection Act (COPPA) was created to give parents control over what information is collected from their children online and is enforced by the Federal Trade Commission. In compliance with these rules, MEFCU is committed to protecting children’s privacy by not collecting personal information such as names or email addresses and by avoiding features like chat rooms. Our goal is to provide a safe, fun, and educational online experience for all users.

Click here to learn more about the Children's Online Privacy Protection Rule

You Should Avoid Sending Personal Information via Unsecured Email:

• Email is not always secure – Standard email is transmitted over the internet without encryption, meaning it can be intercepted and read by unauthorized individuals.
• Risk of identity theft and fraud – Sending sensitive information like Social Security numbers, financial details, or passwords over unsecured email could expose you to identity theft or financial loss.
• Hacking and phishing risks – Hackers often target email accounts, and if personal information is shared through unsecured means, it becomes an easier target for exploitation.

What You Can Do:

• Use encrypted email services – Many email providers offer encryption features (e.g., Gmail's Confidential Mode or Outlook’s encryption options) to keep your messages safe.
• Share sensitive info through secure platforms – For sharing personal or financial information, consider using secure messaging apps, file-sharing services with encryption (e.g., Dropbox or Google Drive), or dedicated portals provided by the organization or service you’re communicating with.
• Avoid including personal details in the subject line – Even if your email is not encrypted, try to avoid including sensitive information in the subject line, as it may be exposed in transit or by email preview features.

If you must send sensitive information by email, be sure to use encryption or passphrase protection for attachments and double-check the recipient's email address to ensure it's correct. Your privacy and security are important, so it's always worth taking extra precautions when communicating sensitive data. Please feel free to reach out if you have any questions or need help setting up a secure communication method.

Elder abuse is the mistreatment, neglect, or exploitation of older adults or vulnerable individuals, often by someone they trust. It can include physical, emotional, or financial harm and can seriously affect a person’s safety and quality of life. Understanding elder abuse is important because recognizing the signs and knowing how to respond can help protect those who may be unable to protect themselves. To learn more about elder abuse and how to help prevent or report it, please visit https://elderaffairs.org/ for more information.

To stay up-to-date with the latest fraud trends, we recommend visiting:

• Federal Bureau of Investigation: https://www.fbi.gov/scams-safety
• Federal Trade Commission: https://www.consumer.ftc.gov/scam-alerts
• Fraud Prevention Center: https://www.mycreditunion.gov/fraud-prevention-center
• Report Identity Theft: https://www.identitytheft.gov/
• Report Fraud: https://reportfraud.ftc.gov/