IMPORTANT NOTICE: Links to non-Wolverine Bank websites contained on this page are offered only as pointers to sources of information on subjects that may be of interest to users of our website, and Wolverine Bank is not responsible for the content of such sites as we have no control over what is displayed there. Wolverine Bank does not guarantee authenticity of documents at such sites and links to non-Wolverine Bank sites do not imply any endorsement or responsibility for the ideas, opinions, information, products, or services offered at such sites. Use of links to a non-Wolverine Bank site is solely at the user's own risk.
- 07-22-10 NACHA Phishing Alert
- 07-21-10 Automated Phone Message Attack
- 02-08-10 Fraud Alert Automated Messages
- 12-03-09 Fraudulent Correspondence Claiming to Be From the FDIC
- 11-12-09 NACHA Phishing Alert - Email Claiming to be from NACHA
- 10-28-09 Fraudulent Emails Claim to be from FDIC
NACHA Phishing Alert
NACHA - The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent e-mail that has the appearance of having been sent from NACHA. See sample below.
The subject line of the e-mail states: "Unauthorized ACH Transaction." The e-mail includes a link that redirects the individual to a fake Web page and contains a link which is almost certainly an executable virus with malware. Do not click on the link. Both the e-mail and the related website are fraudulent.
Be aware that phishing e-mails frequently have links to Web pages that host malicious code and software. Do not follow Web links in unsolicited e-mails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.
Please Note:
- NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions.
- NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.
If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system. Always use anti-virus software and ensure that the virus signatures are automatically updated.
Ensure that the computer operating systems and common software applications security patches are installed and current.
Be alert for different variations of fraudulent e-mails.
= = = = = Sample E-mail = = = = = =
From: Information
Sent: Thursday, July 22, 2010 8:27 AM
To: Doe, John
Subject: Unauthorized ACH Transaction
Dear bank account holder,
The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:
Unauthorized ACH Transaction Report
(hyperlink removed for your security)
Automated Phone Message Attack
Pre-recorded phone messages are being delivered to random customers in the Provo, Utah area, with the warning that their debit cards have been closed. When consumers call the telephone number provided by the fraudsters, they hear a recording that requests a 16-digit card number and PIN. Please do not call these numbers - they may still be active. This matter is under investigation by the local Utah US Secret Service field office.
The following phone numbers have all been used to perpetrate this scam:
- (443) 912-1000
- (305) 555-5555
- (888) 839-3613
- (954) 447-4110
- (412) 381-2300
If you have received a call like this, do not call it back. Immediately contact the Wolverine Bank Operations department by calling (989) 631-4280.
FRAUD ALERT - February 8, 2010
There has been recent activity from an undetermined source asking you to reveal your debit (check) card account number. The automated message states that your card has been deactivated. It may prompt you to call back the following number: (843) 884-6884. This is NOT a number for Wolverine Bank. You should NEVER give a caller account information, unless you have initiated the call. Please contact Wolverine Bank at (989) 631-4280 or (800) 968-4280, with any questions or concerns.
Fraudulent Correspondence Claiming to Be From the FDIC
Summary: December 3, 2009 - Fraudulent correspondence bearing the FDIC's name continues to be mailed, faxed and e-mailed. This correspondence is being used in illegal schemes to collect sensitive personal information, such as bank account numbers, and to steal money and other assets.
The FDIC rarely sends unsolicited bills or other similar documents to financial institutions, businesses and consumers. In particular, the FDIC does not send unsolicited correspondence asking for sensitive personal information, including bank account information. Anyone receiving such correspondence should contact the FDIC immediately by calling toll-free at 1-877-ASK-FDIC (1-877-275-3342) or by e-mailing to alert@fdic.gov. Do not use contact information listed for the FDIC in the correspondence because it is likely to be falsified.
Information about counterfeit items, cyber-fraud incidents and other fraudulent activity may be forwarded to the FDIC's Cyber-Fraud and Financial Crimes Section, 550 17th Street, N.W., Room F-3054, Washington, D.C. 20429, or transmitted electronically to alert@fdic.gov. Questions related to fraudulent correspondence, deposit insurance or consumer issues should be submitted to the FDIC using an online form that can be accessed at http://www2.fdic.gov/starsmail/index.asp.
For your reference, FDIC Special Alerts may be accessed from the FDIC's website at www.fdic.gov/news/news/SpecialAlert/2009/index.html. To learn how to automatically receive FDIC Special Alerts through e-mail, please visit www.fdic.gov/about/subscriptions/index.html.
NACHA Phishing Alert E-mail Claiming to be from NACHA
November 12, 2009 - Random individuals and/or companies may have received a falsified e-mail with the subject title "Rejected ACH Transaction." This e-mail appears to be from the NACHA - The Electronic Payments Association telling them that there is a problem with an ACH transaction they have originated. The e-mail includes a link which redirects the individual to a fake web page which appears like the NACHA website and contains a link which is almost certainly an executable virus with malware. (Sample e-mail follows this message.) To read more, visit http://nacha.org/
= = = = = Sample E-mail = = = = = =
From: nacha.org [mailto:report@nacha.org]
Sent: Thursday, November 12, 2009 10:25 AM
To: Doe, John
Subject: Rejected ACH transaction, please review the transaction report
Dear bank account holder,
The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:
Unauthorized ACH Transaction Report (this is the how the link is presented)
------------------------------------------------------------------
Copyright ©2009 by NACHA - The Electronic Payments Association
= = = = = = = = = = = = = = = = = = =
Fraudulent E-Mails Claiming to Be From the FDIC
Summary:
E-mails fraudulently claiming to be from the FDIC are attempting to trick recipients into installing unknown software on personal computers. These e-mails falsely indicate that recipients should download and open a "personal FDIC insurance file" to check their deposit insurance coverage. The "insurance file" may actually be a form of spyware or malicious code and may collect personal or confidential information.
For your reference, FDIC Special Alerts may be accessed from the FDIC's website at www.fdic.gov/news/news/SpecialAlert/2009/index.html. To learn how to automatically receive FDIC Special Alerts through e-mail, please visit www.fdic.gov/about/subscriptions/index.html.
Resources
Online Banking
