Phishing Scheme

Once again, members appear to be receiving fraudulent emails that claim to be from the Credit Union. These emails claim that your "online banking" service has been limited and that you must go to a website to enter your personal information to restore your online access. SeaComm will never ask you to update your personal information anywhere but on the Home Branch. We will also post an announcement within the Home Branch if, for some reason, we need you to update information online.

Below are samples of the most recent phishing emails. If you receive an email like either of these, please do not respond to the request for information.

1. Email claims to be from the NCUA Account Review Department:

From: "NCUA Security Center" <ncua@yahoo.com>
Subject: Official Information for all Federal Credit Union

Dear Credit Union holder account,

This notice informs you that your Credit Union bank has joined our Federal Credit Union (FCU) network. For both, our and your security, we are asking you to activate an online account on our database. After activation you can login on our system with your SSN and your Credit/Debit PIN number.

You must visit the FCU activation page and fill in the form to activate your online account:

https://www.ncua.gov/activate_account

In accordance with NCUA User Agreement, you can use your online account in 24 hours after actviation. We thank you for you prompt attention to this matter. Please understand that this is a security measure intended to help protect you and your account.

National Credit Union Administration Team apologize for any inconvenience.

Sincerly,

NCUA Account Review Department

2. Email claims to be from your credit union:

From : Credit Union <sender@creditunion.com>
Reply-To : "Credit Union" <sender@creditunion.com>
Sent : October 20, 2005 7:51:07 AM
To : youremailaddress@youremailaddress.com
Subject : System maintenance: update your Credit Union account

Credit Union is constantly working to ensure security by regularly
screening the accounts in our system. We recently reviewed your account,
and we need more information to help us provide you with secure service.
Until we can collect this information, your access to sensitive account
features will be limited. We would like to restore your access as soon
as possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason(s):
* We would like to ensure that your account was not accessed by an
unauthorized third party. Because protecting the security of your
account is our primary concern, we have limited access to sensitive
Credit Union account features. We understand that this may be an
inconvenience but please understand that this temporary limitation is
for your protection.

(Your case ID for this reason is PCU1-123-456-7890.)

At Credit Union, one of our most important responsibilities to you, our
customer, is the safekeeping of the nonpublic personal ("confidential")
information you have entrusted to us and using this information in a
responsible manner. Appropriate use of the confidential information you
provide us is also at the heart of our ability to provide you with
exceptional personal service whenever you contact us.

How can I restore my account access?

Please confirm your identity here: Restore 'MY ONLINE BANKING' (this is usually a link to the criminal's website) and complete the "Steps to Remove Limitations."

Completing all of the checklist items will automatically restore your
account access.

3. Email claims to be from the National Credit Union Administration:

Dear Credit Union Member,

During our regularly schedule account maintenance and verification we have detected a slight error in your billing information on file with NCUA. This might be due to either following reasons:

- A recent change in your personal information (i.e. change of address)
- Submitting invalid information during the initial sign up process.
- An inability to accurately verify your selected option of payment due an internal error within our processors.

Your credit card on file with NCUA
Card number: XXXX-XXXX-XXXX-#### (Not shown for security purposes)
Expiration date: ##/##
Please sign in to your NCUA account and update your billing information:

<http://211.21.111.66/~book/update/NCUA/index.html>
http://signin.ncua.gov/?SignIn&ssnPageName=h:h:sin:US

If your account information is not update, your credit/debit card access will become restricted.

Thank you,
NCUA Billing Department

_____

NCUA treats your personal information with the utmost care, and our Privacy Policy is designed to protect you and your information. For more information on how to protect your NCUA password and your account, please visit <http://211.21.111.66/~book/update/NCUA/index.html> User Account Protection.
This notice was sent to you based on your NCUA account preferences and in accordance with our http://www.ncua.gov/privacy.html> Privacy Policy. To change your notification preferences, <http://211.21.111.66/~book/update/NCUA/index.html> click here. If you would like to receive this email in text format, <http://211.21.111.66/~book/update/NCUA/index.html> click here.

Copyright C 2005 NCUA Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective
owners.

If you receive a fradulent or suspicious email representing itself to be from SeaComm, forward the entire email - including the header information - to us at: ecommerce@seacomm.org, then delete it from your mailbox.

For more information, please click the links below.

10 ways to recognize fake (spoof) emails