There are affiliate links on this page.
Read our disclosure policy to learn more.

 

Translate this page to any language by choosing a language in the box below.

National Credit Union Administration Email Scam - Phishing for Your Identity

Phishing and Vishing Identity Theft Scams
The National Credit Union Administration Email Scam

From: "National Credit Union Adminstration" < uqqixk@cox.net
Subject: Important Notification Regarding your Credit Union Profile

You may have received an email like the one below that looks very authentic, like it came from National Credit Union Administration, or a phone call about the same subject. It is an attempt to get you to enter confidential information (typically a social security number, name, address, bank account information, etc., to allow the scammers to steal your identity and open credit cards in your name.

The email version typically asks recipients to click on a link to confirm, verify or approve financial account information. If the recipient proceeds, the link directs them to a false website to verify or re-submit confidential information such as account and credit card numbers, Social Security number, password, and personal identification number, or  to complete a member satisfaction survey and receive $80.

This email was not sent by National Credit Union Administration; National Credit Union Administration is a victim as well. This is referred to as "phishing" (when by email) or "vishing" (when by telephone). If you receive an email similar to the one below, DO NOT click on the link, and do not enter any information on the forms there.

The website that the link leads to is a spoof; a fake website, not created by National Credit Union Administration. It goes to a fake website, not National Credit Union Administration! When you enter the information they ask for, you will simply be handing the thieves the keys to your bank accounts.  That is how spoofing, phishing and vishing works. See this page for more alerts at the NCUA website.

A variant, "vishing" uses telephone systems. A vishing scam occurs when a consumer receives a recorded message telling them a credit card and/or financial institution account has been breached and to immediately call a number provided in the message. The phone number leads the consumer to a fraudulent call center where people are asked to supply or verify pertinent financial account, social security or credit card information.

NCUA does not ask credit unions members for personal information. Anyone who receives an supposed e-mail or phone call from NCUA that asks for account information should consider it a fraudulent attempt to obtain their personal account data for an illegal purpose and should not follow the instructions in the e-mail or phone call.

Anytime you need to go to a website for your bank, credit card companies or other personal, financial or confidential information; do not follow a link in an email; just type their address in your browser directly (such as http://www.ncua.gov )

Below are actual phishing emails that started circulating in early 2008. We have put a warning over the links to the phisher's website. Notice the misspelling of "administration" and the return email address.


Message heading from the scammer:

From: "National Credit Union Adminstration" < uqqixk@cox.net >   

Subject: Important Notification Regarding your Credit Union Profile

Date: Thu, 24 Apr 2008 19:52:28 +0300

Email from the victim:

They are wanting me to submit information about my account.  Telling me someone or me has used my account at different locations.  I do NOT have an account with this company.  Ask me to confim online account gave this web link. https://www.ncua.gov/administration/auth/Authorize?=Submit

When you go to it, they ask for credit card information


What to do

If you inadvertently respond and provide confidential account information, please notify your credit union immediately. You should change affected accounts and PINs, and take any additional action recommended by your credit union to protect your account.

If you feel that you have received a fraudulent NCUA phishing e-mail, please forward the entire e-mail message to Phishing@ncua.gov

Additionally, you can file formal complaints concerning any suspected fraudulent e-mail with the Internet Fraud Complaint Center (IFCC) at www.ic3.gov. The IFCC is a partnership between the Federal Bureau of Investigation, and the National White Collar Crime Center. 

For more information about phishing, see this page.