Security Alerts

1. I received an email asking me to provide account numbers and passwords. Is it valid?

   NO! Your financial institution will never ask for personal account information, account numbers, passwords/PINs or ask for security verifications via these kinds of calls or emails. This scam is called "Phishing" (pronounced "fishing"). "Phishes" are Internet or telephone scams in which the perpetrator calls people or sends out legitimate-looking emails or instant messages that represent themselves as a financial institution in an effort to trick the individual to divulge user names, passwords, credit/debit card numbers, account numbers, and other confidential information.

   "Phishers" use a variety of ploys to trick users into responding or clicking a link to go to a spoofed website. How will you know it is a "fake" web site? It will look VERY real but it will ask you to provide personal information such as credit, ATM, or debit card numbers, personal identification numbers, social security numbers, bank account numbers, and/or passwords. It may also use a suffix in the web address that we do not use such as .net, .com, or others.

   Remember, never give out your credit card, debit card, or ATM card password/PIN to ANYONE - this includes family members, roommates, etc. You are liable for transactions conducted using your secret PIN.

   View more ATM/Debit card saftey tips

2. How did they get my information?

   "Phishers" have programs that automatically:

   • Generate email lists
   • Collect addresses by intercepting normal emails over the Internet
   • Collect them from sites a user might visit
   • Dial random phone numbers

   They did not get this info from us. OUCU does not share your personal or account information other than with trusted partners such as check printers.

   View OUCU's privacy policy.

3. What is the Credit Union doing to protect me?

   Our data processor has installed security and intrusion software and firewalls to protect our members. OUCU does not share your personal or account information.

4. What should I do if I receive a "Phish" email or telephone call?

   Delete it from your mailbox or hang-up on the caller. Any reputable financial institution would never ask you for account, password, credit card numbers, password/PIN, or security information in this manner.

5. What should I do if I entered my information into a "Phish" website or over the telephone?

   • Notify your financial institution immediately. All of us in the financial services industry are very skilled in helping you do what you need to do to correct any potential security breach that may have been caused by you responding to the Phishing email. They will assist you in changing your account passwords , as well as any other action necessary to protect your account.
   • Report this Internet crime at http://www.cybercrime.gov.

6. Where can I get more information about "Phishing"?

   • You can always call OUCU at 597-2800 or 800-562-8420 to verify the authenticity of the email or send us an email at memberservices@oucu.org
   • Visit http://www.antiphishing.org

7. Final thoughts

   OUCU goes to extraordinary lengths to keep your account information private and secure. The only way our security can be breached is if you inadvertently give "the bad guys" this information by responding to Phishing emails or telephone calls. Always contact us if you are in doubt about a communication you believe is from us.

• Identity Theft Information
• OUCU Privacy Policy
• ATM/Debit Safety Tips