Fraudulent Email:
CUNA Security Notification

CUNA "Phishing" Emails Continue to be Directed to Your Members

Credit Union National Association (CUNA) "Phished" CUNA, NOT CUNA Mutual Group, is continually being used as the subject of a phishing message targeting your credit union members to collect personal account information, plastic card numbers and passwords. CUNA is warning people who receive the e-mail not to click on the link to the fake web page, just delete the message. Link to CUNA web site with warning.
The fraudulent message may use graphics from CUNA's web site. The message alleges "FCU NOTICE: Important Security Update" "Credit Union is constantly working to ensure security by regularly screening the accounts in our system. We recently reviewed your account, and we need more information to help us provide you with secure service. Until we can collect this information, your access to sensitive account features will be limited. We would like to restore your access as soon as possible, and we apologize for the inconvenience." The message provides a link to restore account access. The link will take the user to a spoofed web site. There are numerous versions of the e-mail being sent to credit union members.
CUNA does not have such a link on its CUNA.org site, and there is no security update process for accounts by CUNA. CUNA does not have access to credit union member accounts. CUNA is pursuing proactive actions to shut down any unauthorized web sites and servers.

Below is an example:

From:    Credit Union National Association
Sent:     Monday, September 05, 2005 2:17 PM
To:        undisclosed-recipients:
Subject:  * Important Security Notification *

In attention of all Credit Union Customers,

As the Internet and information technology enable us to expand our services, we are committed to maintaining the trust customers have placed in us for protecting the privacy and security of information we have about you. In order to protect your information against unauthorized access, identity theft and account fraud we earnestly ask you to update your profile.

To get started, please click the lin: Credit Union National Association Account Update

If you received this notice and you are not the authorized account holder, please be aware that it is in violation of our policy to represent oneself as another Credit Union user. Such action may also be in violation of local, national, and/or international law. Credit Union National Association is committed to assist law enforcement with any inquiries related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

Thanks for your patience as we work together to protect your account.

Sincerely,

David H. Stone
Credit Union National Association - Management Center Customer Support

Contact Us
(800) 654-1276
24 hours a day
seven days a week
webmaster@cuna.org

Copyright © 2005 - Credit Union National Association, Inc.

Credit Union National Association, Inc. "Federally Insured by the NCUA"

Preventative Methods

• If you receive the scam correspondence, but did not reply, still call your credit union to report it.
• If you complied with the fake information query, immediately alert your credit union and other financial institutions with which you do business.
• Contact the fraud department of the 3 major credit bureaus to report possible identity theft:
  Equifax: P.O. Box 740241, Atlanta, GA 30374-0241, (800) 525-6285 www.experian.com
  Experian: P.O. Box 2104, Allen, TX 75013, (888) EXPERIAN (397-3742) www.equifax.com
  Trans Union: 760 Sproul Road, P.O. Box 390 Springfield, PA 19064-0390, (800) 680-7289 www.tuc.com
• If you discover any accounts have been fraudulently accessed or opened, also contact the security department of each affected creditor or financial institution. Consider closing these accounts.
• File a report with the local police department or the police where the identity theft took place.
• Finally, the IRS wants help in keeping track of tax-related scams. Even if you did not fall for the scam, the agency asks that you report the event to its criminal investigation unit via its toll-free hotline at (800) 829-0433.