Security and Fraud Center

Account takeover occurs when a fraudster gains unauthorized access to your email, password, and/or other login information through phishing, a data breach, or an emerging cyber threat. 

Signs of Account Takeover:

• Being locked out of your financial or social media accounts. 

• Notifications of failed login attempts or two-factor authentication codes you didn’t ask for.
• Your account looks different.
• Strange messages sent from your social media accounts.
• Alerts that someone logged into your account from a different IP address or location.
• The email or phone number associated with the account is changed without your permission. 

What to do: Immediately change passwords, enable two-factor authentication if available, and contact the service provider to report suspicious activity.

Debt collections scams are where scammers pose as debt collectors to intimidate someone into paying fake or illegitimate debts.

What to do: Request written validation of the debt, verify the collector’s legitimacy with the original creditor, and never provide payment or personal information without confirmation.

Check fraud is where criminals use fake, altered, or stolen checks to illegally withdraw money or make purchases.

What to do: If you receive a check in the mail that you were not expecting or someone asks to deposit a check on their behalf do NOT deposit the item. Verify checks before depositing, avoid accepting overpayments, and never send money back to a stranger. Use secure payment methods and monitor your bank statements for suspicious activity.

Identity theft is a serious crime. It occurs when someone uses your personal information, such as your name, Social Security number, or credit card number, without your permission to commit fraud or other crimes. The Federal Trade Commission (FTC) estimates that as many as 9 million Americans have their identities stolen each year.

What to do: You should review your credit report and credit card statements often to verify that you made the charges shown. 

Imposter scams occur when someone pretends to be a trusted person or organization to steal money or personal information.

What to do: Verify the identity of the caller or email sender by contacting the organization directly using official contact details. Never share sensitive information without confirmation.

Online purchase scams are where scammers create fake websites or advertisements  to trick shoppers into paying for products that are counterfeit, never delivered, or different from what was advertised.

What to do: Buy from reputable online retailers, make sure you're on a secure website (Look for HTTPS and a padlock symbol near URL), only use safe payment options , read reviews, and be cautious of deals that seem too good to be true. 

Phishing scams are where attackers impersonate legitimate organizations through emails, texts, or websites to steal personal information.

What to do: Avoid clicking links or downloading attachments from unsolicited messages. Confirm requests by contacting the organization directly.

Robocall scams are automated phone calls that deliver pre-recorded messages, often impersonating legitimate organizations to trick recipients into providing personal information or making payments.

What to do: Never share personal information to unknown callers and hang up immediately on suspicious calls. Register your number on the National Do Not Call Registry and use call-blocking tools.

Romance scams are where a fraudster forms a fake romantic relationship online to manipulate the victim into sending money or gifts.

What to do: Be smart about who you connect with and what information you share online. Don’t share sensitive personal information, such as bank account or credit card numbers or a Social Security number, with a new love connection.

Tax scams are where scammers impersonate tax authorities (like the IRS) to steal money or personal information, often through fake calls, emails, or letters claiming unpaid taxes or offering fake refunds.

What to do: If you receive an unsolicited tax-related call or email, immediately hang up and do not provide personal or financial information. Verify tax issues directly with the IRS by contacting them through official channels. 

Tech support scams are where scammers pretend to be tech support agents from reputable companies to trick victims into granting remote access to their devices or paying for fake repairs.

What to do: Never grant remote access or provide payment to unsolicited tech support callers. Avoid downloading any application or visit any website that the "tech support" agent directs you to open. If you receive a warning pop-up, close your browser and restart your device. Contact the official support team directly using their official website.