Security Center

Have you updated your contact email, cell and home phone with us?
Get notified by email, phone or text if Central One notices potential suspicious transactions on your account. 


When it comes to fraud prevention, knowledge is the key


A checklist has been added to the Mass.gov site to help people who are victims of fraud in general,  found here: https://www.mass.gov/info-details/report-unemployment-benefits-fraud#if-you-believe-you-are-a-victim-of-fraud-

In addition, they can also fill out the web form to alert the DUA if they have been a victim of unemployment fraud, found here: https://www.mass.gov/forms/unemployment-fraud-reporting-form

Online Scams

As more people turn to doing more online banking, fraudsters continue to try and take advantage and scam the unaware person. In some instances, scammers will send text messages and emails to you pretending to be from Central One’s fraud department. This text/email will provide a phone number to call for your users to resolve an attempted fraud on their account. When you call this number, scammers will request login credentials to your online banking profile. If access is given, these scammers will then have the ability to transfer funds out of your accounts.

Please follow these guidelines to protect you and your accounts against these fraudsters.

  • Only call Central One’s published phone numbers on our website.
  • Please do not share any of your credentials or provide one-time passcodes to anyone who is not authorized to have access to your account. Central One will never ask members to share their online banking credentials.
  • Never click on links in unsolicited emails or texts.
  • If you receive a call for mobile one-time passcode authorization that you did not request, do not respond to the text or call to validate the login.
  • The name that shows up on Caller ID can be modified by scammers so don’t assume it is a safe call if the name is Central One but the number is unfamiliar.

Security tips

  • Sign up for transaction alerts to monitor for unauthorized transactions.
  • Pay attention to emails, links, and websites. Think before you click!
  • Don’t open attachments with special offers. It’s a classic scam. The offer should be in the email and you should be able to see it right away.
  • Avoid entering card information on web forms (could be malware installed). Use your stored payment information when possible such as Amazon pay or PayPal.
  • Ensure home computers, laptops, and mobile devices are protected with antivirus, anti-spyware, and a firewall.
  • Use well-known websites for online purchasing.
  • Go directly to the website rather than through social media website advertisements.
  • Be cautious for skimming or shimming devices when using ATMs or gas pumps. For gas pumps, try to use the pump closest to the entrance door as they are less likely to be a target for skimmers.
  • Review and monitor your accounts daily and report any discrepancies immediately.

Money mule scams

Typical money mule scams include work-from-home scams, secret shopper scams, romance scams, and most recently, include filing for fraudulent unemployment benefits. Victims of unemployment scams not only can lose money but can also face potential charges.

Fraudsters are taking advantage of an individual’s uncertainty and fear to steal money, access personal and financial information, and use the individual as a money mule according to the FBI. Most recently, fraudsters have recruited hundreds of money mules, including credit union members, to receive fraudulent unemployment benefits via ACH. Once the funds are deposited, the members transfer the funds elsewhere.

Other common money mule scams include:

  • Fake work-from-home job offers trick applicants into providing account details so a deposit can be made. Once the fraudulent deposit or counterfeit check is deposited into the mule’s account, the mule transfers the funds. Work-at-home scams are typically perpetrated through online social networking and classified sites, job search sites, and spam emails.
  • Secret Shoppers involve recruiting someone to “evaluate” or test a money-service business as a secret shopper. The shopper cashes a check (which is counterfeit) and then send funds via Western Union or MoneyGram to “test” these services.
  • Romance money mules involve fake profiles created on online dating sites. Once love connection is made, a money wire transfer scam is arranged through emails, direct messages, or other methods of contact. Stories may include a claim of bank wire issues due to foreign accounts, or a need to get money to a sick family member in the mule’s home country. The mule agrees to accept funds and resend them using an instant money transfer service.

COVID-19 Scams

Fraudsters Use Global Crises, like COVID-19, to Phish. Don’t take the bait. Be alert to phishing emails and other COVID-19 related scams. This pandemic has fueled cyber criminals to prey upon our emotions about this crisis.  These scams are designed to trick people into sending money, to disclose personal information or to click on emails and websites that deliver malware onto your computer. Central One will never ask for your Social Security number, ATM or debit card PIN or any other sensitive information in response to an email.

Covid-19 related grants or stimulus payments claiming to be from the Treasury Department and offering grant money in exchange for personal financial information, or an advance fee, or charge of any kind, including the purchase of gift cards. Please contact the FBI at www.ic3.gov so that the scammers can be tracked and stopped.

Fraud involving payment of Federal Taxes should be reported to the Treasury Inspector General for Tax Administration.

 

Treasury Issues Information on Spotting Fake EIP Checks

U.S. Treasury checks will be mailed to millions of Americans starting late April due to the CARES Act, and the Treasury and U.S. Secret Service have issued information to help and consumers identify counterfeit U.S. Treasury checks.

Anyone who believes they may have a counterfeit economic impact payment check is urged to contact local law enforcement, a Secret Service field office, or the Treasury.

Checks issued from the U.S. Treasury contain several security features, including:

  • Treasury seal - There is a new Treasury seal to the right of the Statue of Liberty. The new seal should read “Bureau of the Fiscal Service” and it replaces the old seal that read “Financial Management Service;”
  • Bleeding ink - When moisture is applied to the black ink on the seal next to the Statue of Liberty, the ink will “run” and turn red;
  • Watermark - All Treasury checks are printed on watermarked paper. The watermark reads “U.S. TREASURY” and can be seen from both front and back when held up to a light source.
  • Ultraviolet overprinting - An invisible to the naked eye “protective ultraviolet overprinting” (UV) pattern is on the paper check. It consists of lines of “FMS” bracketed on the left by the FMS seal and on the right by the U.S. Seal (eaglet. As of 2013, a new ultraviolet pattern was introduced into the check that says ‘FISCALSERVICE.’ Either one of these UV patterns maybe be seen.
  • Microprinting - The back of the check is microprinted with the words “USAUSAUSA”.
  • Economic Impact Payment - Printed on the lower right side of the Statue of Liberty will be the following information “Economic Impact Payment President Donald J. Trump”.

Treatment scams:  Scammers are offering to sell fake cures, vaccines, and advice on unproven treatments for COVID-19

Supply scams:  Scammers are creating fake shops, websites, social media accounts, and email addresses claiming to sell medical supplies currently in high demand, such as surgical masks. When consumers attempt to purchase supplies through these channels, fraudsters pocket the money and never provide the promised supplies.

Provider scams:  Scammers are also contacting people by phone and email, pretending to be doctors and hospitals that have treated a friend or relative for COVID-19, and demanding payment for that treatment.

Charity scams:  Scammers are soliciting donations for individuals, groups, and areas affected by COVID-19.  

Phishing scams:  Scammers posing as national and global health authorities, including the World Health Organization (WHO) and the Centers for Disease Control and Prevention (CDC), are sending phishing emails designed to trick recipients into downloading malware or providing personal identifying and financial information.

App scams:  Scammers are also creating and manipulating mobile apps designed to track the spread of COVID-19 to insert malware that will compromise users’ devices and personal information. 

Investment scams:  Scammers are offering online promotions on various platforms, including social media, claiming that the products or services of publicly traded companies can prevent, detect, or cure COVID-19, and that the stock of these companies will dramatically increase in value as a result. These promotions are often styled as “research reports,” make predictions of a specific “target price,” and relate to microcap stocks, or low-priced stocks issued by the smallest of companies with limited publicly available information.

For continuing information on the COVID-19 virus and the federal response, check the CDC COVID-19 page.


Protect your card from skimming devices 
Inspect the card reader. So, you’ve checked out the location, and it seems secure. Now it’s time to check out the machine. Use this quick “SCAN” checklist next time you’re at a card reader:

  • S: Scan the area for hidden cameras that record you typing your PIN. These may be mounted near the keypad, so always cover your hand while you type in a PIN.
  • C: Compare the card reader and keypad to the rest of the machine. The colors and styles should all match, and graphics should be aligned and unobscured.
  • A: Assess for obvious signs of tampering. The panels may be broken or dented, or a security seal may be broken.
  • N: Nudge the card reader and keypad. Card skimmers and fake keypads are meant to be removed, so if they feel loose, you may have spotted a skimmer.

If the machine doesn’t seem right, then report it to the clerk on duty and go to another location.

For more information on protecting yourself from card skimmers, click here.

 

FINANCIAL ABUSE AND FRAUD AWARENESS

COMMON FINANCIAL SCAMS. Although this is not an exhaustive list, the following are many common financial fraud schemes popular with criminals today.

    1. Power of Attorney Fraud. The perpetrator obtains a Power of Attorney, which specifies that legal rights are given to manage the funds in the victim’s accounts. Once the rights are given, the perpetrator uses the funds for personal gain. 
    2. Caretaker/Personal Aide Fraud. Someone in a position to care for an elderly person is given access to their funds and uses them for personal gain. Please be wary of a caretaker or companion who takes too much of an interest in your financial affairs. Consult with trusted family or friends before allowing a companion or home health aide access to your finances or safe deposit box.
    3. International Lottery Fraud. Scam operators use telephone and direct mail to notify victims that they have won a lottery. To show good faith, the perpetrator may send the victims a check. The victim is then instructed to deposit the check and immediately send the money, via wire, back to the “lottery committee” to cover taxes, attorney’s fees, and exchange rate differences. The perpetrator will create a sense of urgency, compelling the victim to send the money before the check, which is counterfeit, is returned. The victim is typically instructed to pay taxes, attorney’s fees, and exchange rate differences in order to receive the rest of the prize. 
    4. Fake Prizes. A perpetrator claims the victim has won a nonexistent prize and either asks the person to send a check to pay the taxes or obtains the credit card or checking account number to pay for shipping and handling charges. 
    5. Internet Sales or Online Auction Fraud. The perpetrator agrees to buy an item for sale over the Internet or in an online auction. The seller is told that he or she will be sent an official check (e.g., cashier’s check) via overnight mail. When the check arrives, it is several hundred or thousand dollars more than the agreed-upon selling price. The seller is instructed to deposit the check and refund the overpayment. The official check is later returned as a counterfeit but the refund has already been sent. The seller is left with a loss, potentially of both the merchandise and the refund.  
    6. Social Security or IRS scam. The victim receives a call telling them they owe money to the Social Security Administration or the Internal Revenue Service or that their social security number has been suspended because of suspicious activity, or because it’s been involved in a crime. Sometimes, the scammer wants you to confirm your social security number to reactivate it. Sometimes, the scammer will say your bank account is about to be seized or that you need to pay money to avoid arrest. Your Social Security number will not be suspended, nor will your bank accounts be seized in this manner. You don’t have to verify your social security number to anyone who calls out of the blue. Neither the Social Security Administration nor the Internal Revenue Service will ever call to threaten you or tell you to wire money, send cash, or put money on gift cards.
    7. Advance Fee Fraud or “419” Fraud.  Named after the relevant section of the Nigerian Criminal Code, this fraud involves a multitude of schemes and scams involving mail, e-mail, fax and telephone promises that the victims will receive a percentage for their assistance in the scheme proposed in the correspondence.   
    8. Pigeon Drop. The victim puts up “good faith” money in the false hope of sharing the proceeds of an apparently large sum of cash or item(s) of worth which are “found” in the presence of the victim.   
    9. Romance Scam. Perpetrator develops a relationship with a vulnerable person, either online or in person. Intentions are not honest, but rather, to gain access to the victim’s funds. Use caution with new friends who show interest in or demonstrate need for your money.
    10. Grandparent Scam. The perpetrator calls an elderly person pretending to be a grandchild in trouble, asking for money. Often the caller will create a sense of urgency and beg the elderly person not to tell anyone, particularly the caller’s parents. Check in with your loved ones first, at the contact information you have on file for them, before sending any money.
    11. Financial Institution Examiner Fraud. The victim believes that he or she is assisting authorities to gain evidence leading to the apprehension of a financial institution employee or examiner that is committing a crime. The victim is asked to provide cash to bait the crooked employee. The cash is then seized as evidence by the “authorities” to be returned to the victim after the case.   
    12. Inheritance Scams. Victims receive mail from an “estate locator” or “research specialist” purporting an unclaimed inheritance, refund or escheatment. The victim is lured into sharing personal information or sending a fee to receive information about how to obtain the purported asset.   
    13. Financial Institution Employee Fraud. The perpetrator calls the victim pretending to be a security officer from the victim’s financial institution. The perpetrator advises the victim that there is a system problem or internal investigation being conducted. The victim is asked to provide his or her Social Security number for “verification purposes” before the conversation continues. The number is then used for identity theft or other illegal activity.   
    14. Government Grant Scams. Victims are called with the claim that the government has chosen their family to receive a grant. In order to receive the money, victims must provide their checking account number and/or other personal information. The perpetrator may electronically debit the victim’s account for a processing fee, but the grant money is never received.   
    15. Phishing/Vishing/Smishing. Emails, phone calls or text messages are used to entice victims to supply personal information (i.e., account numbers, login IDs, passwords, and other verifiable information) that can then be exploited for fraudulent purposes, including identity theft.
    16. Spoofing. An unauthorized website mimics a legitimate website for the purpose of deceiving consumers. Consumers are lured to the site and asked to log in, thereby providing the perpetrator with authentication information that the perpetrator can use at the victim’s legitimate financial institution’s website to perform unauthorized transactions. Spoofing can also be used to gain access to the login information of real estate agents and brokers, which leads to the mortgage closing scam.
    17. Mortgage Closing Scam. After obtaining the login information of a real estate agent or broker through a spoofing scam, or simply purchasing the login credentials from hackers on the dark web, the scammer can log in to the agent’s email and monitor communication between agent and buyer until the buyer is ready to make the down payment. Before the agent sends the wire instructions, the scammer uses wire instructions from a previous transaction, found in the agent’s emails, and alters the account number to the scammer’s own overseas account. Then the scammer sends the instructions by email to the buyer from the agent’s email address and the buyer thinks they are receiving a legitimate email from their trusted agent. Always double check payment instructions by calling the source of the instructions, at the phone number you have on file, to verify the information.
    18. Stop Foreclosure Scam. The perpetrator claims to be able to instantly stop foreclosure proceedings on the victim’s real property. The scam often involves the victim deeding the property to the perpetrator who says that the victim will be allowed to rent the property until some predetermined future date when the victim’s credit will have been repaired, and the property will be deeded back to the victim without cost. Alternatively, the perpetrator may offer the victim a loan to bridge his or her delinquent payments, perhaps even with cash back. Once the paperwork is reviewed, the victim finds that his or her property was deeded to the perpetrator. A new loan may have been taken out with an inflated property value with cash back to the perpetrator, who now owns the property. The property very quickly falls back into foreclosure and the victim/tenant is evicted.
       

  If you believe you have been the victim of a scam, contact your branch, local law enforcement and the Federal Trade Commission at ftc.gov/complaint


Please see the National Credit Union Administration (NCUA) link below for an extensive list of scams and great resources to combat them!

NCUA Fraud Prevention Center

Scams targeting older adults are on the rise and are all too often successful. For information relating specifically to these type of scams, please see the NCUA link below.

NCUA Fraud Prevention for Older Adults

  

How Central One Protects Your Accounts

Your safety is our top priority. We use industry leading technology and processes to keep your personal and financial information secure.

Real-Time Fraud Analysis

Fraud Protection

We have updated our real-time fraud monitoring system to include text alerts. Click Here to learn more.

Secure Website and Applications

Secure Website

Central One's website, online banking and mobile banking use secure protocols to ensure that your data stays secure.

Device Verification

All Devices

When you login to your account using a new device, we'll ask additional security questions to confirm that it is really you.

Mobile Wallet Payments

Tokenization

When using your smartphone's mobile wallet, your card's data is encrypted through a process known as tokenization.

EMV Smart Chip

EMV Smart Chip

Central One's debit and credit cards feature the added security of the EMV smart chip.

Instant Issue with EMV

Instant Issue Card Replacement

If your debit or credit card is ever lost or stolen, visit any full-service branch to have a new card printed instantly.

Fraud Prevention Center

Fraud Alerts

In addition to fraud alerts published by Central One, the National Credit Union Association (NCUA) publishes national fraud alerts at: www.mycreditunion.gov

View Fraud Alerts

Fraud Terminology

The National Credit Union Association (NCUA) provides a fraud prevention center with information on common types of fraud and the terminology used to describe them.

Visit the NCUA Fraud Prevention Center website .

Lost or Stolen Card

If your card is ever lost or stolen, report it to Central One as soon as possible. With our Instant Issue technology, we can replace your card while you wait at any full-service branch.

Call 800-527-1017 to report a lost/stolen card.

Travel Notice

If you plan on traveling outside of Massachusetts or outside the United States, please let us know by visiting your local branch or by calling 800-527-1017.

ID Theft

Report Identity Theft and build a custom recovery plan using the FDIC's IdentityTheft.gov website.

Build Your Recovery Plan

Keep Your Account Data Private

Don't share your account information, mobile or online banking login credentials or other financial data with others.


Get a Copy of Your Credit Report

You can receive a copy of your credit report for free each year. Check out annualcreditreport.com for details.


Freeze Your Credit for Free

Recent regulations have now made it free to freeze your credit. Check out the three credit bureaus below for details



You can also use these helpful resources:

NCUA's MyCreditUnion.gov website

Federal Trade Commission's website