|
Account takeover is an attack in which cybercriminals take ownership of online accounts using stolen passwords and usernames. These cybercriminals purchase cardholders’ Personally Identifiable Information (PII) via the dark web. Stolen PII (e.g., name, address, email, phone number, date of birth, business name, social media and login accounts and passwords) provides the necessary credentials for a fraudster to pose as their victim.
PII is typically gained from social engineering attacks, such as skimming and merchant terminal malware, phishing, vishing, smishing attacks, or data breaches.
- Be aware of what information you are choosing to submit online and never easily provide your personal information.
- If you receive a suspicious call, text, or email, don't respond. Contact the company in question using the official customer service number listed on the company’s legitimate website. Do not contact any number provided by the fraud call or message and do not click on links in suspicious text messages.
- Keep two-factor authentication codes private. These codes should only be used to sign into an account when trying to access it.
- Maintaining a secure, up-to-date operating system along with robust security and anti-malware software are critical.
- Keep in mind, Union State Bank will never ask for full social security numbers, PINs, or one-time passcodes.
For additional information about online scams and cybercrime visit our website: https://www.myunionstate.bank/services/mobile-and-online-banking/online-security-tips
|