We had several reports of SMiShing attacks (text phishing) by several financial institutions (primarily in the eastern region of the U.S). Cardholders are receiving suspicious text messages attempting to collect information about their card
SMiShing is a type of social engineering that uses cell phone text messages to persuade victims to provide personal information such as card number, CVV2 (the security code on the back of your card), and PIN. The text message may contain either a website address or more commonly, a phone number that connects to an automated voice response system, which then asks for personal information.
The following are examples of SMiShing messages recently sent to cardholders:
- Text message originating from either email@example.com or firstname.lastname@example.org
- ABC CU has deactivated your Debit Card. To reactivate contact: 512XXXXXXXX (capturing local area codes)
- This is an automated message from ABC Bank. Your ATM card has been suspended. To reactivate call urgent at 1866215XXXX
- Text message originating from email@example.com
- firstname.lastname@example.org/VISA(Card Blocked) Alert. For more information please call 1877XXXXXXX
Never provide personal information to anyone claiming to be your institution that is asking for a card number, CVV2 or PIN number.