SECURITY

At Vermont Federal Credit Union, we work diligently to ensure your safety and security. We want to help protect your personal information, your accounts, your identity and, ultimately, your money.

CURRENT SECURITY ALERTS

Holiday Charity Scams

December 2022

The season of giving is here. For many, holiday giving includes supporting charitable causes. Make your donation count by avoiding end-of-year charity scams. Here are some steps to make sure a charity is real and your money will support the programs you care about.

Learn more about Holiday Charity Scams 

Holiday Scams

November 2022

The two most prevalent holiday scams this holiday season are non-delivery & nonpayment crimes, costing consumers more than $265 million.

Learn more about Holiday Scams 

Vishing, Phishing Scams

October 2022

 In today's electronic age, it's extremely important to be careful when doing business online or over the telephone. We are aware of a recurring scam in which members receive a text or phone call that claims to come from Vermont Federal Credit Union.

We will NEVER ask for your Online/Mobile banking credentials, one-time password, full debit or credit card numbers, or personal identification numbers – even if the text message provides one. DO NOT provide this information in response to a call, text, or email.

If you receive a text or call claiming to be Vermont Federal Credit Union that asks for any of the information listed above, do not respond. Hang up and call us directly at 1-888-252-0202 to report it to our security team.

Cybersecurity Awareness Month

October is Cybersecurity Awareness Month

October 2022

October is national cybersecurity awareness month. The Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA) take the month of October to raise cybersecurity awareness nationally and internationally. 

This year’s theme is: “See Yourself in Cyber.” 

Cybersecurity may seem complex, but it is all about people having the information and resources they need to make informed cyber-related decisions. As an individual, employee, or consumer, and no matter what role you play, CISA and NCA call on all of us to take the basic steps to protect our online information and privacy.

For October, we will post weekly on social media to raise awareness around cybersecurity and highlight a few simple ways to help secure our digital lives.

How to Make Your Password More Secure

October 2022

When a cybercriminal is looking to gain access to your account, they have a few different options:

  • Steal your password via phishing
  • Guess your password
  • Exploit vulnerable software to obtain encrypted password hashes that can be input into cracking software in order to expose your password

One simple trick to make your password stronger is to add spaces. These spaces turn your average password into what is called a "passphrase". Passphrases are strong and much harder to crack. For example: the random passphrase “accent most tricycle vigorous”. To crack that passphrase, it would take 1,895,349 centuries!

Defending Against Phishing

October 2022

STOP

Resist taking immediate action when receiving an email or text. Don’t click links without first inspecting the sender, message and link itself.

LOOK

Analyze the message and look for anything unusual.

THINK

Follow your gut! If something seems “Phishy,” report it straightaway to your IT Staff (if at work) or simply delete it.

FRAUD ALERT: Elder Fraud

August 2022

Each year, millions of elderly Americans fall victim to some type of financial fraud. Seniors are often targeted because they tend to be trusting and polite. They also usually have financial savings, own a home and have good credit - all of which makes them attractive to scammers.

Elder Fraud

 

FRAUD ALERT: Internet Fraud

july 2022

Protect yourself and your family from various forms of internet fraud.

Learn more about how to protect your computer from intrusion

FRAUD ALERT: Data Breaches

June 2022

Our personal information is in the hands of many businesses and data breaches are happening more frequently. If your information was stolen in a data breach, visit the FTC's identity theft help website for specific steps to take.

FRAUD ALERT: Romance Scams

May 2022

Romance scams happen when a criminal adopts a fake online identity to gain a victim’s affection and trust. The scammer then uses the illusion of a romantic or close relationship to manipulate or steal from the victim. These “relationships” may go on for some time before the scammer attempts to get money from the victim.

Romance Scams

FRAUD: Money Mules

april 2022

A money mule is someone who transfers or moves illegally acquired money on behalf of someone else. Some money mules know they are supporting criminal enterprises, but most don’t know that they’re doing anything wrong.

Money Mule Fraud

Fraud: Online Vehicle Sale 

March 2022

The FBI warns consumers that criminal perpetrators may post fraudulent online classified advertisements offering vehicles for sale that are not, nor have ever been, in their possession.

The fake advertisements usually include photos matching the description of the vehicle and a phone number or e-mail address to contact the supposed seller. Once contact is established, the criminal sends the intended buyer additional photos along with an explanation for the discounted price and the urgency of the transaction.

Online Vehicle Sale Fraud

What To Know About Identify Theft

February 2022

Identity theft is when someone uses your personal or financial information without your permission.  They might steal your name and address, credit card, or bank account numbers, Social Security number, or medical insurance account numbers. And they could use them to:

•    Buy things with your credit cards
•    Get new credit cards in your name
•    Open a phone, electricity, or gas account in your name
•    Steal your tax refund
•    Use your health insurance to get medical care
•    Pretend to be you if they are arrested

How to Protect Yourself

How To Donate Wisely After A Disaster

January 2022

If you’re looking for a way to help, the FTC urges you to be cautious of potential charity scams. Do some research to ensure that your donation will go to a reputable organization that will use the money as promised.

Learn More about Donating Wisely

Malicious Links and Search Engine Phishing

 

Illegitimate links or manipulated search engine results can take you to malicious pages that can seemingly lock your browser, install malware/viruses or harvest your account credentials/personal information. When navigating to the Vermont Federal website, it is always recommended to navigate directly to the site by typing “vermontfederal.org” in your browser’s address bar.

Consumer Scam Alerts from the Federal Trade Commission (FTC)

January 7, 2022

For more information on the latest consumer scams, and how you can avoid them, please visit the FTC website.

Increase in COVID-19 Related Fraud Including Money Mule Schemes

DECEMBER 8, 2021

The COVID-19 pandemic has resulted in a significant amount of fraudulent activity from scammers who are taking advantage of this volatile time period. The U.S. government, FBI, and other law enforcement agencies are asking all financial institutions and individuals to exercise extreme caution and to be on the lookout for COVID-19 related scams, including money mule schemes.

For more information on the most recent money mule scheme alert, please view this FBI Public Service Announcement.

DFR Encourages Vermonters to be Knowledgeable About
Cryptocurrencies to Avoid Risks and Scams

August 27, 2021

The Vermont Department of Financial Regulation (DFR) is reporting a spike in cryptocurrency related scams. Over the last month, DFR has received complaints from Vermonters who collectively reported losing over $1 million to cryptocurrency scams. Before you use, send, or invest in cryptocurrencies, make sure you know what makes cryptocurrencies different from other types of payment methods and investments and know how to spot cryptocurrency scams.

Click here to see more information from the Vermont Department of Financial Regulation.

Click here for the latest information from the Federal Trade Commission (FTC) regarding Cryptocurrency and Scams.

Suspicious Activity on Debit and Credit Cards

December 16, 2020

Vermont Federal Credit Union has been notified that member accounts are showing a deposit from AT&T.  Vermont Federal has investigated this and found that the deposits appear to be fraudulent and when the merchant is contacted they are asking for members account numbers.  Please be advised that Vermont Federal Credit Union believes that this is a scam . Please remember that you should always keep your account information confidential.  Should you have any concerns around this please feel free to contact us directly(888) 252-0202 option 2, or visit your local branch after scheduling an appointment.

We are here to help. If you are concerned that you may have given out personal information, have noticed suspicious activity within your accounts, are uneasy about a communication you have received, or have any general questions about keeping your financial information and identity safe, please call us at (888) 252-0202.

COVID-19 Phishing Scam

December 7, 2020

Click here to see the latest information from the VT Attorney General's Office on a recent Phishing Scam.

We are here to help. If you are concerned that you may have given out personal information, have noticed suspicious activity within your accounts, are uneasy about a communication you have received, or have any general questions about keeping your financial information and identity safe, please call us at (888) 252-0202.

OUR SECURITY PHILOSOPHY

At Vermont Federal Credit Union, we work diligently to ensure your safety and security. We want to help protect your personal information, your accounts, your identity and, ultimately, your money.

In today's electronic age, it's extremely important to be careful when doing business online or over the telephone. You should always stay informed about security issues and activities that could affect your economic future. Visit the Federal Trade Commission's website to learn more about different types of scams, and what to do if you've fallen victim to fraud. 

Phishing

E-mail phishing attacks are attempts by criminals to gain access to your personal information. Criminals send spam e-mails created to sound and look like official notices. Information entered into these websites goes directly to the criminal. These e-mails and websites usually look trustworthy and convincing. Keep your personal information safe with these Tips.

Identity Theft

Identity theft involves personal information such as name, address, date of birth, social security number or a mother's maiden name being stolen in order to assume an individual's identity. Learn More.

Voice Phishing (Vishing)

Voice phishing attacks are attacks by criminals to gain access to your personal information utilizing the telephone. Criminals use phone systems to call phone numbers and play an automated recording to alert the consumer that their credit card or debit card has had fraudulent activity or that their account has had unusual activity. The message typically instructs the consumer to call a phone number immediately. When the victim calls the number an automated system instructs the caller to enter their card information or account number using the keypad. The call can also be used to collect other sensitive personal information. A trustworthy organization will never request sensitive information in this manner.

Text Message Phishing (Smishing)

Text message phishing is a form of criminal activity using text message to acquire personal information utilizing cell phone text messages. The text message will include an alert requesting immediate attention with a website URL or phone number in an attempt to convince consumers to divulge sensitive personal information. These text messages are not sent from legitimate sources.

Tech Support Scams

Scams of this sort can come from people calling and claiming to be associated with well-known technology companies, such as Microsoft or Apple. Sometimes they send pop-up messages that warn about viruses or other malware on your computer. They will claim to be tech support, ask for remote access, and demand money for their "services". Learn more.

Still Have Questions?

We’ll help point you in the right direction.