Credit Union Impersonation Scams are on the Rise

Scammers are getting more sophisticated — and they’re targeting credit union members across the country. Recently, some Enrichment members have reported receiving phone calls and texts from fraudsters pretending to be Enrichment employees. These scammers often spoof our phone number and use bits of personal information to gain your trust before attempting to access your accounts.

Here’s what you need to know about impersonation scams:

What is a Credit Union Impersonation Scam?

Impersonation scams happen when a fraudster convinces you that you’re speaking with a real credit union representative — whether by phone (vishing) or text message (smishing). The communication looks legitimate, but the person on the other end is a scammer trying to steal your information or your money.

Fraudsters use spoofing to make their messages appear official so they can:

  • Obtain your personal and identifying information
  • Capture your debit card details
  • Bypass security safeguards to access your account
  • Ask for money under false or misleading pretenses

How these scams typically work:

Impersonation Scam Scenarios

A scammer will do everything they can to appear as if they are a real credit union employee attempting to assist you with your account.


Typical Vishing Scenario:

In this scam, a fraudster impersonates a credit union representative using a spoofed phone number and claims there is an urgent account issue. They begin by asking the member to verify their identity by providing their account number, personal details, and online banking credentials. Because the call appears legitimate, both in the caller’s explanation and the phone number shown on the caller ID, the member complies without hesitation.

The scammer then logs in using the provided credentials, requests the one-time security code, and gains full access to the account. They quickly change the password to lock the member out, move available funds into the checking account, and proceeds to move the money out. They may request the member’s debit card number to facilitate fraudulent purchases or link an external account to transfer funds to an account they control at another financial institution. In some cases, the caller may also convince the member to transfer funds themselves under false pretenses, such as securing their account, reversing a fraudulent transaction, or moving money to a “safe” account.

Typical Smishing Scenario:

Posing as a credit union fraud department employee, the scammer sends a spoofed text message to a member alerting them to suspicious debit card activity. Instructions urge the member to reply to the original message with account details, such as card numbers, CVV codes, PINs, or other online account credentials. Smishing gives the scammer valuable data they can use to make unauthorized charges or access the member’s account.

 

How to Protect Yourself from Impersonation Scams
  • Refrain from sharing sensitive personal details, such as your Social Security number or date of birth.
  • Do not provide copies of identification or personal documents.
  • Never share your card information with anyone.
  • Keep your online banking login information private.
  • Do not reveal your PIN, passwords, or verification codes.
  • Avoid buying gift cards if requested by someone else.
  • Do not send money through services like PayPal, Venmo, or Cash App when asked.
  • Be cautious of suspicious links or unexpected messages and avoid engaging with them.
  • Do not grant anyone access to your computer or mobile device.
  • Avoid installing software or allowing others to install applications on your devices.
Enrichment FCU will never contact you directly to request any of your account information, including:
  • Social Security Number
  • Credit or Debit Card Numbers
  • Security Code or CVV
  • PIN – Personal Identification Number
  • Address
  • Date of Birth
  • Online Banking Login Information
  • Passwords

If someone contacts you and requests this information or your account details by phone do not share any information and hang up immediately. Likewise, if you receive an email, website pop-up, or text with a suspicious link – stop and think before you click.


Fighting Fraud Together

Enrichment uses strong security measures to protect your accounts, and we continuously monitor for unusual activity. But member awareness is one of the most powerful tools we have.

If you receive a suspicious call, text, or email claiming to be from Enrichment, please contact us right away at 865‑482‑0045. Reporting these attempts helps us stay ahead of emerging scams and protect our entire membership.

For additional resources on avoiding unwanted calls, emails, and texts, the FTC offers helpful guidance on its website. Learn more. 

And please — share this information with friends and family who may be more vulnerable to fraud. Together, we can keep our community safe.