Phishing Information

As phishing and it's variants become an increasing problem this page has been created to help keep you informed on phising attempts against Sno Falls Credit Union, and what you can to do help.

• What is Phishing?
• How can I tell?
• Examples
• What should I do?
• Where can I find more Information?

Phishing, Pharming, are acts of deceit, attempting to gather either your account login information or credit card indformation. This happens when you or your computer is deceived into thinking that a web page or e-mail is genuine, when in fact it is from a non-trusted source. There is also something called Vishing which is the same type of deceit, but takes place via phone calls rather than on the the Internet.

In many cases it is getting harder and harder. But here we will list some things we have noticed, that should raise your alert level. We will also list some services we have that might seem suspicious.

First let us list valid services.

• Sno Falls @Home, Home Banking is hosted at: https://s155.lanxtra.com
• Sno Falls @Home - Account Alerts can send e-mails/text messages regarding your account. These alerts will be plain text and have no web links. You must set this alerts up in Home Banking to get them.
• Bill Payment is through Virtual Branch. Virtual Branch will send e-mail reminders when a bill is due. These e-mails will contain a link, but the link won't work. Please login to home banking from the snofalls.com Home Page. Then click on Bill Payment
• If you have a Sno Falls Credit Card, it is possible you will get an automated phone call, it will ask you to verify your last few transactions. It will not ask you for your card number. This system is used to validate transactions that it finds suspicious.
• Also with your Sno Falls Credit Card, there are two websites you can visit, one is to manage your card: http://www.eZCardInfo.com
  The other is to manage your ScoreCard Rewards Points at: http://www.scorecardrewards.com

Now let's list things to watch for. These are not necessarily Sno Falls Credit Union specific.

• E-Mails containing links to foreign sites. (unless the business is foreign)
• Watch for forms asking for information that should already be known, such as account information, or Credit or Debit Card information.
• Some of the forms tend to be a bit lax, try clicking submit, without filling anything out, and see if it continues, or try putting invalid information and see if you get an error. If you do not get error messages then something is probably not right.

Here is where we will try and place examples of phishing attempts as we get them so you can be more aware of what to watch for. They usually asking for account or credit card information.

• Example from December 2007
• Example from April 2008

1. The most important thing to do, is to not give out any information!
2. The next thing to do is to forward the email to abuse@snofalls.com or if it is a phone call please send any phone numbers associated with that call to abuse@snofalls.com or call us at: (425) 888-4004 or toll free at (800) 243-7860
3. The next step to be a little more proactive is to use the link in your browser to report the page, so that other people will be warned to not put their information in.
   1. Follow the link in the e-mail to the malicious page
   2. In Internet Explorer 7: Click Tools->Phishing Filter->Report This Website
      In FireFox: Help->Report Web Forgery...
   3. In either browser, fill out and submit the form. This will help block the page, until it can be shutdown.
   4. Once you have reported the website, close out of it, to make sure you do not accidentally give them any information.

To find more information about these topics you can use the following links to wikipedia and StaySafeOnline.org

• More information on Phishing
• More information on Pharming
• More information on Vishing
• PhishTank - Report, Verify, or View Stats on Phishing Sites
• Stay Safe Online - Information about Online Security