Phishing & Vishing Attacks

Phishing are fraudulent electronic communications (emails, text messages, or instant messages) that appear to come from legitimate businesses to entice you to provide personal information. The fraudster then uses your information to commit identity theft or lure you to further engage in scams. The emails often look like they are coming from a company you know or trust, such as your bank, your insurance company, your Internet provider. However, upon closer inspection, the emails frequently contain typos or minor changes in the sender’s email address. They might also contain attachments that, when opened, install malware (malicious software) on your computer. Malware may be used to steal more personal information. For example, some forms of malware, such as spyware, may track without you knowing the keys that you type and steal your passcodes.

Additionally, phishing emails often contain links to fake websites intended to look like the legitimate companies you do business with, like your bank or brokerage firm. Just as the malicious attachments, these look-alike websites may also install malware on your computer or steal your password information.

Be aware of unsolicited emails asking for personal information, such as your credit card, bank account information, or Social Security number, or directing you to links to provide such information.

Unlike email phishing attacks (where the goal is to get you to point your web browser to a fraudulent site by clicking on a bad link), vishing (or voice phishing) is a technique of social engineering that employs a combination of text messages, phone recordings, and email to persuade customers to dial a telephone number or respond to a telephone call for the ultimate purpose of obtaining financial gain.

Fraudsters tell customers to contact their bank at a fraudulent telephone number, which is provided in an email a text message or by a recording using Voice over Internet Protocol (VoIP) technology. During the call, targets are asked to provide their card number and other personal or banking account information.

Since fraudsters constantly vary their scams, it is important to beware of text messages, emails, and telephone calls or recordings requesting confidential data.

PurePoint® Financial does not request personal account information by text message, email, or automated phone call. Do not respond to any unsolicited texts, emails, pop-ups, or links that ask for personal information of any kind.

If you receive suspicious emails, texts or calls that appear to come from PurePoint please call us right away at 1-855-488-7873, Monday – Friday, 9:00 a.m. – 7:00 p.m. Eastern Time (except Federal holidays). You can also sign in to Online Banking, go to Notifications, then select Secure Messaging and send us a message.