Online Banking » Online Security » Phishing—Frequently Asked Questions

Phishing—Frequently Asked Questions

Q.

How do crooks get my e-mail address and seem to know that I'm a UW Credit Union member?

A.

They obtain lists of e-mail addresses by legal or illegal means, similar to those who produce e-mail spam. Please know that e-mail addresses are not being obtained from UW Credit Union. We use up-to-date technology to protect data and information exchanges. The crooks sending the e-mail don't know you are a UW Credit Union member. They're guessing. E-mail messages may be sent to groups of people that are likely to have a banking relationship with a particular financial institution.

For example, people with yahoo.com in their e-mail address may have an account at UW Credit Union. Scammers take the chance that at least some of the recipients are UW Credit Union members. So the scammers go "phishing"—sending e-mails to pools of recipients that are the most likely to bite. It's really a numbers game. They send a thousand e-mails and hope some reply.

Q.

I don't remember having a security phrase in e-mails from UW Credit Union. Where does the security phrase appear in UW Credit Union e-mails?

A.

All Web Alerts contain your chosen security phrase in the upper right box titled "Security Center" within the e-mail. You can view or change your security phrase within Web Branch by selecting "Profile and Services."

Note: If you send us an e-mail, we'll reply to your e-mail; our e-mail reply will not contain your security phrase. As such, our reply will not contain any of your identifying information, nor will we ask you to provide personal information in an e-mail. If we need information that should not be relayed in an e-mail, we'll call you.

Q.

I don't understand how I can end up at a bogus Web site if I click on www.uwcu.org or uwcu.org in a phishing e-mail.

A.

The scammers use techniques to make the link text appear proper in the e-mail, but actually the link directs you to another Internet address. If you have any doubt about an e-mail, type in the Internet address of UW Credit Union yourself, rather than clicking the embedded e-mail link. Remember that links in e-mail text are not always what they appear to be. Always look for the lock icon in the bottom bar of your Web browser and "https" in the url to help validate our Web Branch site.

Q.

I think I may have replied to one of these e-mails recently. What should I do now?

A.

If you supplied any personal information, promptly call us at 608-232-5000 or 800-533-6773.

Q.

Should I be concerned about using UW Credit Union's Web Branch when phishing is on the rise?

A.

Phishing fraud is not related to Web Branch or its security. Instead, fraud success is related to the lack of education. For instance, several years ago consumers were being telephoned and asked for their account numbers. This fraud eventually declined—not because people stopped using their telephones, but because they became more informed about the risk of giving personal information over the phone.

Q.

What is UW Credit Union doing to protect me from phishing?

A.

We have security phrase protection that helps members recognize official e-mails from UW Credit Union. We periodically advise members in our newsletter, on our Web site, and in Web Alerts of how to protect their accounts. We have staff dedicated to ensuring that the system and account data remain secure. For example, when a member notifies us of a suspicious e-mail, we work very quickly to investigate and shutdown the spoofed sites, thereby minimizing the exposure to our members.