Skip to content

Security Center

Your financial security matters. Learn about our advanced security measures and how to protect yourself. 

fraud image
Protection Online
Common Indicators
Money Mules
What to do if...
Safeguards
Resources

Protecting Yourself, Your Money, and Your Financial Identity Against Fraud

Disregard unexpected calls, emails and texts.

  • Don’t rely on caller ID. Criminals can spoof caller ID to impersonate companies and agencies.

  • Ignore any call or text that threatens to arrest you, deport you or levy a fine against you.

  • Don’t respond to messages from unknown people or phone numbers.

  • Be skeptical. Never click on any links from unexpected emails, texts or social media requests

Keep your personal information private!

  • Criminals look for ways to learn about you. They want to know your likes and dislikes, make connections and gain information about your private life. They want to lure you in through contrived stories that resonate with you, and they get that information through social media and online channels.

  • Don’t share your bank account numbers, your salary/income, Social Security number, driver’s license, PINs, date of birth, passwords or one-time login codes.

Don’t give into pressure.

  • Criminals want you to act quickly so that you don’t question them or have a chance to think. If they can manipulate your emotions, they know they can get you to part with your money.

  • Hang up if someone demands immediate payment, threatens you, asks you to keep a secret or coaches you into lying about what you’re doing.

 

Verify before you act.

  • If you have concerns about any account, contact customer service using the number on your account statements or bills.

  • If you’re concerned that a loved one may be in trouble, reach out directly or connect with a close family member to confirm any stories.

 

Protecting Yourself Online Against Fraud 

Keep your computers and mobile devices up to date.

Having the latest security software, web browser and operating system is the best defense against viruses, malware and other online threats. Turn on automatic updates so you receive the newest fixes as they become available. Also, be sure to regularly back up your data.

Use strong passwords.

A strong password is at least 12 characters long and includes a mix of upper and lowercase letters, numbers and special characters. Do not reuse passwords; each account should have a distinctive password.

Enable multi-factor authentication.

When you log in to your accounts, multi-factor authentication adds steps to verify who you are, like sending a text or email with a code. Criminals are aware of these codes; if you use them, don’t share them!

Watch out for phishing scams.

Phishing scams use fraudulent emails, text messages, direct messages and websites to trick users into disclosing private accounts or login information. Do not click on links or open any attachments or pop-up screens from sources you are not familiar with. Immediately file a complaint with the FBI’s Internet Crime Complaint Center at IC3.gov.

Recognize and avoid bogus website links.

Cybercriminals embed malicious links to download malware onto devices and/or route users to fake websites. Hover over suspicious links to view the actual URL that you are being routed to. Fraudulent links are often disguised by simple changes in the URL. For example: www.ABC-Bank.com vs. ABC_Bank.com.

Keep personal information safe.

Hackers can use social media profiles to figure out your passwords and answer security questions in password-reset protocols. Lock down your privacy settings and avoid posting things like birthdays, addresses, mother’s maiden name, etc. Be wary of requests to connect with people you do not know.

Secure your internet connection.

Always protect your home wireless network with a password. When connecting to public Wi-Fi networks, be cautious about what information you send over it. Consider using a virtual private network (VPN) app to secure and encrypt your communications when connecting to a public Wi-Fi network.

Shop safely.

Before shopping online, make sure the website uses secure technology. When you are at the checkout screen, verify that the web address begins with “https” and check to see if a tiny, locked padlock symbol appears on the address bar.

Be skeptical.

Never click on any links from unexpected emails, texts or social media requests for friends.

Read the site’s privacy policies.

Though long and complex, privacy policies tell you how the site protects the personal information it collects. If you don’t see or understand a site’s privacy policy, consider doing business elsewhere.

Common Indicators of Scams

One of the best ways to avoid a scam is to recognize how criminals act.

warning-1

You’re told to keep secrets and lie.

Legitimate companies and agencies will not ask you to deceive anyone, especially not your bank or family members. Do not engage with anyone who tells you otherwise, no matter how convincing they may sound.

You’re told your account has a problem.

Scammers may alert you to “suspicious activity” and ask you to correct it by verifying your information or sending money. If someone reaches out to you, hang up and contact the company on a known number. You can find this on a company’s official website or your bank/credit card. Do not use any information you receive in an email, text or phone call when verifying the legitimacy of any message you receive.

Requests to access your computer or cellphone.

If criminals use your technology, they can obtain access to your accounts and information. They may manipulate the information you see, take over your accounts or use your devices to scam others. Legitimate companies do not need access to your technology.

You’re told you or someone you know is in legal trouble.

Criminals often impersonate law enforcement and government officials to gain your trust and make you act quickly. They also may pose as a loved one and ask you to send money to save them from jail or kidnappers. Criminals may threaten to arrest you or tell you to pay a fine over the phone

You’re asked to pay so you can receive a prize, gift, or lottery sweepstakes.

You may receive an email, call, text or letter indicating you’re a winner, but you must pay fees to access your winnings. Criminals may claim paying increases your chance of winning or that you must pay taxes, shipping and handling charges, or processing fees.

You’re pressured to pay quickly through payments that are hard to track or reverse.

Criminals often want money via cryptocurrency (e.g. Bitcoin), gift cards, wire transfers or cash. They may also rely on peer-to-peer payment apps like CashApp, Venmo or Zelle. Legitimate government agencies do not accept these forms of payment.

A romantic interest, particularly someone you meet online who asks for money or recommends that you invest with them.

They may profess love quickly, indicate there’s a medical or other emergency, or claim to have an amazing risk-free opportunity. The requests may start small but will quickly escalate to significant dollar amounts.

Be Aware of Money Mule Scams

What is a Money Mule Scam?

When criminals obtain money illegally, they need to hide or launder the funds. One method is using a money mule: someone who can move and launder the money for them so that law enforcement cannot easily track it.

If someone sends you money and asks you to send some or all of it to someone else, you could be at risk of becoming a money mule. Scammers will often approach you online, but they may also call you.

If someone asks to use your bank account or asks you to open a bank account in your name to send and receive money on behalf of their business, don’t do it! Even if they offer to pay you cash for your trouble, it’s not worth it. You may not only be risking your financial assets and identity, but your actions could be criminal.

 

Are There Legal Consequences?

Yes, acting as a money mule is illegal, even if you are unaware of the fraud. Money mules could be prosecuted, fined and/or incarcerated. Beyond the legal ramifications, money mules may open themselves up to identity theft as their personally identifiable information can be stolen to facilitate theft of their assets.

How to Avoid Becoming a Money Mule
  • Be wary of unsolicited emails, texts or other communications that promise you easy money with little or no effort.

  • Don’t share your financial details or give access to your bank account to anyone you don’t know and trust.

  • Don’t purchase cryptocurrency or gift cards on someone else’s behalf.

  • Never use your bank account or open one in your name to transfer money to anyone else.

  • Never send money to an online romantic interest, even if he or she sends you a check first.

  • Watch out for messages in which people claim to be abroad and ask you to send or receive money on their behalf or on behalf of their loved one. They may claim to be quarantined, recovering from an illness or in the military.

  • When seeking employment, conduct research and confirm the legitimacy of any company that offers you a position. You can ask them for a copy of their license to conduct business in your state.

What To Do If...

A Scammer Has Taken
Your Money

Did you pay with a credit card or debit card?
Contact the company or bank that issued the credit card or debit card. Tell them it was a fraudulent charge and ask if they can reverse the transaction.
Did a scammer make an unauthorized transfer from your bank account?
Contact your bank and tell them it was an unauthorized debit or withdrawal. Ask them to reverse the transaction and give you your money back.
Did you pay with a gift card?
Contact the company that issued the gift card. Tell them it was used in a scam and ask them to refund your money. Keep the gift card and the gift card receipt.
Did you send a wire transfer through a company like Western Union or MoneyGram?
  • Contact the wire transfer company. Tell them it was a fraudulent transfer. Ask them if they can reverse the wire transfer and give you your money back.

  • MoneyGram at 1-800-926-9400

  • Western Union at 1-800-448-1492

  • Ria (non-Walmart transfers) at 1-877-443-1399

  • Ria (Walmart2Walmart and Walmart2World transfers) at 1-855-355-2144
Did you send a wire transfer through your bank?
Contact your bank and report the fraudulent transfer. Ask the bank if they can help you get your money back. Additionally, file a report with the FBI at IC3.gov. The faster you file a report, the better the chance for recovery of funds.
Did you send a wire Transfer through a money transfer app?
Report the fraudulent transaction to the company behind the money transfer app (e.g., Venmo and Zelle) and ask them to reverse the payment. If you linked the app to a credit card or debit card, report the fraud to your credit card company or bank. Ask them if they can reverse the payment and help you get your money back.
Did you pay with cryptocurrency?
Cryptocurrency payments typically are not reversible. Once you pay with cryptocurrency, you can only get your money back if the person you paid sends it back. Contact the company you used to send the money and tell them it was a fraudulent transaction. Ask them to reverse the transaction, if possible.
Did you send cash?
  • If you sent cash by U.S. mail, contact the U.S. Postal Inspection Service at 877-876-2455 and ask them to intercept the package.
  • If you used another delivery service, contact them as soon as possible.

You Gave a Scammer Your Personal Information

Did you give a scammer your Social Security number?
Go to identitytheft.gov to see what steps to take, including how to monitor your credit.
Did you give a scammer your username and password?
Create a new, strong password. If you use the same password anywhere else, change it there too.

A Scammer Has Access to Your Computer or Phone

Does a scammer have remote access to your computer?
Run a scan using a tool that can detect and remove remote access software, such as Seraph Secure (seraphsecure.com). Make sure to do this prior to changing any passwords or banking information so that criminals cannot track the changes.
Did a scammer take control of your cellphone number and account?

Contact your cellphone provider to take back control of your phone number. Once you do, change your account password.


Also check your credit card, bank and other financial accounts for unauthorized charges or changes. If you see any, report them to the company or financial institution. Then go to identitytheft.gov to see what steps you should take.

For More Help
Use the Better Business Bureau’s Scam Survival Toolkit: bbb.org/scansurvivalkit.

Safeguards

End all communication with the criminal.
Do not reply to messages, calls, or emails—ending all contact reduces risk and prevents the criminal from manipulating or threatening you further.
Change all passwords, lock down accounts and create new ones.
Scan for and remove any remote access software prior to updating your information.
Maintain one central file.
Maintain one central file that contains all relevant documentation related to the crime (such as a timeline of events, police reports, credit reports, any evidence including text messages or emails, written communications with creditors, banks, financial institutions and/or credit reporting companies, etc.).
Notify all financial institutions.
Notify all financial institutions including credit card companies and review all transactions.
Review your credit reports.

Review your credit reports by visiting annualcreditreport.com. You may want to place a security freeze on you credit by contacting the three credit bureaus: Experian (experian.com), TransUnion (transunion.com) and Equifax (equifax.com).

Report to:
  • Local law enforcement
  • The Federal Trade Commission: reportfraud.ftc.gov
  • The FBI Internet Crime Complaint Center: IC3.gov
  • The Social Security Administration: 1-800-269-0271
Basic security Tips:
  • Don’t click on links in emails and text messages.
  • Don’t answer unknown calls; let them go to voicemail.
  • If any business leaves a voicemail or provides you with a number to call, do not call that number back. Instead, call a known number or the number on the back of your bank card.
  • Don’t trust caller ID; calls can be spoofed, that is, falsified by criminals.
  • Consider using a secret code word with family members to prevent spoofing scams. Create a unique word, phrase or question that’s not easy to guess so when criminals call pretending to be family, you can quickly identify bogus communications.

Spot a Scam?

  • Don’t continue communicating with the scammers. Break off all contact and stop transferring money to them.

  • Tell your bank, the wire transfer company, gift card provider or other payment provider right away.

  • Immediately file a complaint with the FBI’s Internet Crime Complaint Center.

  • If you or someone you know is an older adult who has been victimized, call the VictimConnect Resource Center at 1-855-4 VICTIM (855-484-2846) or the National Elder Fraud Hotline at 1-833-FRAUD-11 (1-833-372-8311).
FBI Internet Crime Complaint Center

 

All suspicious contacts should be reported to the Federal Trade Commission’s Identity Theft Website, or by calling 1-877-IDTHEFT.

Scam Prevention and Reporting Resources