security and fraud protectionYour Money & Your Identity, Always Protected

When you use DFCU Online and DFCU Mobile, we encrypt your Member Number and password and use firewalls that act as a shield between the Internet and DFCU Financial’s internal systems. These precautions are intended to prevent anyone other than you and DFCU Financial from accessing your personal information.

While we work hard to protect and secure your accounts, there are several steps you can also take to help prevent unauthorized account activity:

1. Install security software on your computer.
2. Do not write down or share your login credentials or any other personal information.
3. Log off when leaving your computer.
4. Provide personal information only once you have logged in to DFCU Online from our website’s homepage.

In addition to the safeguards outlined above, the federal government also provides protection for consumers. The same law protecting you from fraudulent credit card usage also protects you from unauthorized account access activity. Please refer to your Online Account Access Agreement for details.

Bill Payment

FraudNet, our Bill Payment Fraud Detection solution, provides fraud prevention capabilities by analyzing daily bill payment transaction data, comparing the data to suspicious fraud scenarios and examining user behavioral patterns.

When fraud is suspected, our representatives may hold processing of suspicious payments until the transaction can be verified as fraudulent or authentic. You may be contacted with questions and asked to verify your name and address, but will never be asked to provide your Social Security number.

If you have any problems or questions, call Bill Pay Customer Service at 888.918.7436 or send us a Secure Message through DFCU Online.

So-called “credit union impersonators” are fraudsters who contact unsuspecting consumers while impersonating employees of their financial institution’s security team. Using panic and fear, consumers are pressured into transferring their savings to the fraudsters.

Red Flags of a Credit Union Impersonator Scam

• Caller claims the consumer is the victim of a cybersecurity breach or identity theft.
• The call will appear to be coming from DFCU Financial. This is called spoofing.
• The imposter then logs into the victim’s DFCU online account, which prompts a Secure Access Code email or text message.
• The fraudster asks for the Secure Access Code to “verify the victim’s identity.” A legitimate DFCU Financial employee will never ask for your online banking Secure Access Code.
• The fraudster may claim your funds need to be transferred to a so-called “secure account.”
• Once the fraudster has control of the victim’s online banking account, funds will be transferred to the fraudster and are generally unrecoverable.

A variation of this scam involves the caller making accusations of member wrongdoing (“You need to clear your name.”) or demanding the victim convert their savings to Bitcoin with similar end results.

If you suspect a Credit Union Impersonator Scam:

• Keep DFCU online secure access codes confidential. DFCU employees will never ask for this information.
• Terminate the call. It’s never too late to hang up!
• Immediately contact DFCU Financial at 888.336.2700.

Phishing is when someone sends an email pretending to be a legitimate entity to scam someone else into providing personal information that will be used for identity theft. The email usually directs the user to visit a website where they are asked to update personal information (Member Numbers, Social Security numbers, PIN numbers, passwords) that the legitimate organization already has.

Some common wire fraud schemes to watch for:

• Unrealistic discounts on vehicle purchases
• Law enforcement or IRS demanding payment for a previously unknown criminal offense
• Converting DFCU deposits to cryptocurrency (Bitcoin)
• Tech support overpayments

If you encounter any of these scams, here’s what you need to do:

• Pause, Reflect, Decide: Does this make sense?
• Don’t send the money.
• Alert DFCU about this problem.
• Tell a trusted friend or family member what happened.

DFCU Financial will never request that you send personal information via email and will not sell your email address to our partners and vendors. If you encounter a suspicious email or website that says it’s from DFCU Financial, do not respond to it and consider this an unauthorized attempt to gain access to your personal information for purposes of fraud.

You should be suspicious of any email that appears to be from DFCU Financial containing links (other than a link to our website) to a page asking you for your personal information. Never provide personal information in response to an unsolicited request.

Forward suspicious emails and websites that claim to be affiliated with DFCU Financial to reportabuse@dfcufinancial.com so we can investigate the source. Once you have forwarded the email, please delete it from your mailbox. Please do not use this email address for conducting other business with DFCU Financial.

Every year, millions of people are conned into giving access to their computers by tech support imposters. These imposters claim to be from Microsoft or other computer firms, but in reality, they are imposters looking to steal your information.

Every year, some 3.3 million people fall victim to the tech support scam, costing victims around $1.5 billion. Once you realize what has happened, you’ll need to take immediate action to minimize the potential damage.

We want to help keep you protected, so we have come up with a 10-point plan to help you.

Spoofing​

In the constant fight against fraud, it is imperative that we work together to maintain your privacy and security. To that end, please remember that DFCU Financial will never ask you for confidential information.

If you receive a call requesting your account information, debit card PIN, or online banking password – even if it appears to be from a DFCU Financial phone number – please immediately terminate the call and contact us at 888.336.2700.

This is a fraud scheme known as “spoofing.” Please refer to FCC guidance to learn more about spoofing.

Credential Stuffing

Credential stuffing occurs when hackers use stolen information, such as usernames and passwords, from database breaches or phishing software from one account, and attempt to gain access to another. The hackers prey on people’s habit of using the same usernames and passwords for multiple sites. Using automated tools, they run large amounts of stolen information across multiple sites, looking to find the same usernames and passwords being used elsewhere. Once they find a match, they can monetize the personal and financial information they gather.

Credential stuffing attacks are on the rise, but there are steps you can take to protect your DFCU accounts:

• Select a Login ID that is unique to you and to your DFCU account. This means you would only use that Login ID with DFCU Online and no other websites. Choose something that is unique…not your email address, your name, or anything else easily guessed. To change your DFCU Online Login ID, log in using your existing login credentials, go to Settings, and select Security Preferences.
• Change your password to something strong and unique that is only used with DFCU Online. Using the same password for multiple websites can increase the chances of fraudulent activity.
• DFCU Online uses multi-factor authentication to verify a login attempt. It is important to ensure the email address and phone numbers used to receive these secure access codes are accurate and only accessible by you. To review and edit these delivery options, log in to DFCU Online, go to Settings, and select Security Preferences.

While no breaches have occurred at DFCU Financial, fraudsters may use compromised credentials from other websites to attempt to access your accounts through DFCU Online. When these attempts occur, you may receive invalid password security alerts. If this happens to you, this is a signal that you need to strengthen your login credentials for DFCU Online.