An unfortunate side effect of technological progress is that cybercriminals latch on to these advancements to compromise personal information.
As long as society keeps coming up with innovative technology, bad actors will find new ways to exploit it for nefarious purposes.
A relatively new technique called Account Takeover (ATO) Fraud has pushed its way to the front of the line. These attacks have become so rampant that they’ve overtaken ransomware as the leading threat for organizations, including financial institutions.
Thankfully, as with all online fraud, there are ways to prevent—or at least slow down—these attacks.
What is an ‘account takeover’?
Unfortunately, an “account takeover” is as alarming as it sounds—fraudsters access a user’s login credentials to take control of legitimate accounts. From phishing attempts to man-in-the-middle (MitM) attacks, bad actors initiate fraudulent transactions via ACH transfers, wire transfers, bill payments, etc. These types of scams can take over checking accounts, savings accounts, credit cards, and more.
The fallout from one of these attacks can be severe. Not only can ATO fraudsters make unauthorized purchases with stolen accounts, they can also steal the victim’s personal information, which can have ramifications well beyond financials.
What has SELCO been seeing?
Like other financial institutions, SELCO members have received an increasing number of emails and texts claiming to be from SELCO, mentioning fraudulent charges or a supposedly locked account. Members were then prompted to click on a fraudulent link that tricks them into thinking they’re logging in to SELCO’s digital banking. In turn, fraudsters are then able to access the member’s digital banking and generate fraudulent transactions.
Members have also been receiving calls from someone claiming to be with SELCO or SELCO fraud prevention. The impersonator will then send a code to the member’s phone to verify their identity. In reality, the fraudster is trying to access the member’s digital banking. And once the member “verifies their identity” by sharing the code, the fraudster can use it to log in as them.
“Fraudsters aren’t going anywhere, so it’s essential to practice caution in scenarios like these,” said Stephanie Ziegler, Senior Financial Investigations Manager at SELCO. “If an email or text doesn’t sit well with you—or if it comes as a surprise—call SELCO first and verify that the communication is legitimate. If you receive a suspicious phone call, hang up and call us at a verified SELCO number to confirm we were trying to reach you.”
What can you do to prevent ATO?
A great place to start is by making it extra difficult for fraudsters to access your information. Establishing strong passwords and usernames, and enabling multi-factor authentication (MFA), help build your personal firewall.
But in the event that you do receive questionable requests, follow these tips to keep the scammers at bay:
- Be skeptical. If you receive an unexpected text message, email, or phone call from someone claiming to be your financial institution, use caution. Don’t click links, and contact SELCO directly using a known number to confirm that the message is legitimate.
- Don’t rush. Fraudsters use urgency to keep victims from thinking through a situation. Take a moment to step back and carefully review the communication:
- Are there typos? Is the grammar unusual for business correspondence? Either is a big red flag.
- Does the sender have a legitimate SELCO phone number or email address? If not, delete the communication and report it.
Another red flag occurs when someone claiming to be from SELCO has an aggressive attitude and tries to rush or threaten you into taking action on your account.
“We pride ourselves on quality member service, and a legitimate SELCO representative will never try to pressure you into providing information,” Ziegler said.
- Contact SELCO immediately. If you feel like you may have received a fraudulent communication, the sooner we can look into your account and put precautions in place, the better.
Account takeover attempts are on the rise, so be sure to fortify your personal firewall, monitor your accounts, and look for red flags. If you do receive questionable communications, be very skeptical. Awareness and vigilance will help put a lock on your accounts and sensitive information.
“It can be tricky to navigate all the new tactics the fraudsters are rolling out, so don’t be afraid to ask for help,” Ziegler said. “Our representatives can share tips on password safety, setting up alerts, and other ways that you can keep your accounts safe. That’s why we’re here.”
