Scam & Fraud

Don’t Be Easy Bait: How to Avoid Common Phishing Scams

February 27, 2025

Scams come in all shapes and sizes, and as technology advances, scammers are becoming more inventive in their ways to trick you. With the rise of banking apps and online login portals, as well as our continuous shift to computers and handheld devices, phishing scams are more common than ever. To phishers, the catch of the day is your private information: Phone numbers, account logins, and, yes, your banking details. 

In this article, we’ll break down common types of phishing scams and some effective ways to cut the line and keep scammers away, giving you the confidence to navigate the digital world safely. 


1. The Legitimate Organization Ruse

Scammers may pose as legitimate organizations you may recognize or are affiliated with. They will register with an email address or website name similar to the organization’s to trick your eye. Scammers posing as legitimate organizations will send you generic requests (such as exclusive product opportunities or password reset reminders) intending to get your card information or passwords.

Anti-Phishing Tactic: Never access an organization’s website from a link provided in a suspicious email; type in the URL or search for the company’s official website yourself. If you suspect an email may be phishing, contact the organization's customer support center immediately

2. Posing as Someone You Know

When scammers pose as someone you know, this is called spear phishing or specific phishing. Just as the name implies, this scam uses personal information to lure you into a false sense of security. The information may include your name, employer, job title, or details about your role at the company. 

Anti-Phishing Tactic: When receiving requests for personal information, pay attention to the sender’s email address. If you don’t recognize the address, contact the person or organization claiming to have sent you the email directly. Never respond to a suspicious email. Once you confirm it’s a scam, flag the email as phishing; most email providers have internal protocols to filter similar messages into spam and junk.

3. Urgent Text Alerts and Phone Calls

Texts from unknown numbers may seem urgent or include links for “emergencies” to spur you into action. Clicking these links will leave you vulnerable to the scammer's attacks and put your personal information at risk. Scammers may also pose as financial institutions and call to request a security code from you. Their caller ID might say Hello Credit Union or come from a stored number. 

Anti-Phishing Tactic: Do not respond to messages requesting confidential information. Be skeptical of phone calls about your account or any other personal matter, especially if the caller asks for private information like passwords or PIN numbers. Get in the habit of regularly checking your online account balances and transactions for any discrepancies. 

If you receive login verification codes you did not request, or there are purchase discrepancies on your account, contact us immediately.

You can never be too careful, but knowing good anti-phishing techniques will help ensure you and your private information are safe online. For more information on anti-scamming tactics, check out our Scam & Fraud Prevention page or the NCUA Fraud Prevention Page.