Locations
Become a Member

Phishing

Phishing emails and websites are designed to steal money. Cybercriminals have thought of several ways to do this and are getting savvier. We are here to show you what to look out for, so you don’t get phished.
Contact Us
Jump to:

What is Phishing?

Phishing is the act of defrauding an online account holder of financial information by posing as a legitimate company. They use social engineering, which are techniques aimed at talking a target into revealing specific information or performing a specific action for illegitimate reasons, to convince you to install malicious software or hand over your personal information under false pretenses. They might email you, call you, or convince you to download something from a website.

Phishing Example

Here is what a phishing email message may look like:

Hello!

As part of our security measures, we regularly screen activity in the Facebook system. We recently contacted you after noticing an issue with your account.

Our system detected unusual Copyrights activity linked to your Facebook account, please follow the link bellow (Alert 1: spelling errors) to fill the Copyright Law form:

http://www.facebook/application_form (Alert 2: links in email)

Note: If you don't fill the application your account will be permanently blocked (Alert 3: threats)

Facebook Copyrights Department (Alert 4: popular company)
 
What to Look For
Attachments

When hackers phish through emails, they often urge consumers to click on attachments. Be careful—attachments can contain software designed to destroy your computer and files.

Beware of links in emails

If you see a link in a suspicious email message, don’t click on it. Rest your mouse (but don’t click) on the link to see if the address looks legitimate. For example, a string of cryptic numbers often used in suspicious links will look nothing like a company’s actual web address or landing page. Links might also lead you to .exe files. These kinds of files are known to spread malicious software.

Spelling and bad grammar

Cybercriminals are not known for their grammar and spelling. Professional companies or organizations will not allow a mass email like this to go out to its users if it blatantly has misspellings and bad grammar. If you notice mistakes in an email, it might be a scam.

Spoofing popular websites and companies

Spoofing involves faking one's identity, and can be used for various attacks such as identity theft, where scam artists use graphics in email that appear to be connected to legitimate websites that actually take you to phony scam sites or legitimate-looking pop-up windows.

Threats

Have you ever received a threat that your account would be closed if you didn’t respond to an email message? The email message shown above is an example of the same trick. Cybercriminals often use threats that your security has been compromised.

Report a fraud

Important resources that can help you combat fraud.

Annual Credit Report

Get a free copy of your credit report every 12 months from each credit reporting agency. Ensure that the information on all of your credit reports is correct and up to date. Reviewing credit reports helps you catch signs of identity theft early. 

Learn More
Check, Credit, Debit Fraud

Check Fraud

  • Report check fraud, please visit your nearest branch location or call us at 904-354-8537

Credit Fraud

  • Report credit card lost or stolen: 904-354-8537 option 2, option 2, option 1
  • Report credit card fraud: 904-354-8537option 2, option 2, option 2

Debit Fraud

  • Report lost or stolen: 904-354-8537 option 2, option 1, option 1
  • Report fraud: 904-354-8537 option 2, option 1, option 3
Learn More
Credit Bureaus
Call: Or try: 
  • “Credit Freeze” - This tool lets you restrict access to your credit report, which in turn makes it more difficult for identity thieves to open new accounts in your name.
  • “Fraud Alert”- If you are concerned about identity theft, but haven’t yet become a victim, this fraud alert will protect your credit from unverified access for at least 30 days.
Elder Financial Abuse
Learn More
Federal Trade Commission

The Federal Trade Commission can be contacted to report Identity Theft or Scams, File a Consumer Complaint or Register for the Do Not Call List.

Learn More
Identity Theft
  • Report Identity theft and get a recovery plan below.
  • Notify Community First of any Identity Theft that you've experienced.
Learn More
IRS Tax Fraud

You can report an individual or a business you suspect of tax fraud online.
Call 800-829-0433 or visit www.irs.gov

Learn More
Social Security Administration Fraud Hotline
Do you suspect someone of committing fraud, waste, or abuse against Social Security? You can contact the OIG’s fraud hotline at 1-800-269-0271 or submit a report online at oig.ssa.gov
Call 800.269.0271
Resources
Fraud Prevention Tips for Holiday Shopping
Blog | Fraud prevention tips for holiday shopping

'Tis the Season for holiday shopping, eggnog, and....fraud? Unfortunately, this time of year is when fraudsters are especially active. Here are 10 tips right from our fraud team to keep you safe during the holidays.

Read Now
Person upset on the phone
Blog | Auto warranty expiration scam

“Hello! We’re calling about your car’s extended warranty…” 

More likely than not, you have received annoying phone calls from someone trying to sell you a car warranty regardless of what your car situation is. Either way, when you receive one of these calls, you should proceed with caution. 

Read Now
Two women looking at their phones
Blog | Are peer-to-peer payment apps safe?

Peer-to-peer payments have become even more popular during the pandemic as they've enabled people to reduce contact by going virtual and cashless. As apps increase in popularity, it is essential to know how they work in the first place.

Read Now
Couple looking at laptop concerned
Blog | How to avoid tax theft scams

Tax theft scams are more common than you think. Tax scammers are continually finding novel ways to steal your personal information as well as your money. 

Read Now