Smishing - A form of social engineering in which bad actors send text messages to individuals in hopes of obtaining confidential information.
Vishing - A form of social engineering in which bad actors call and trick individuals into revealing personal information.
Several members recently informed HVCU that they received text messages that asked them to verify a transaction on their account or click a link that appeared to take them to HVCU’s online banking login page. When the member replied to the text, they received a call from a bad actor that asked them for their online banking credentials, one-time passcodes, debit card numbers, and debit card PIN. In another instance, a member clicked a link that brought them to a website that looked like HVCU’s website, but was fake and designed to capture the member’s online banking login credentials.
Reminder: HVCU will NEVER call or text you and ask for your online banking credentials, one-time passcodes, debit card number, or PIN. This information should not be shared with anyone. Moreover, HVCU will NEVER contact you via text and send you a link to our online banking login page.
If you are ever unsure if a call or message is legitimate, contact us at 845.463.3011. Pausing to think for a moment can prevent someone from using your info fraudulently to access your accounts and take your money.
We thank you for reporting these situations to us. Please continue to remain vigilant and never click on any email or text link that is odd, unexpected, or suspicious due to typographical errors, broken images, etc.