Credit Union members are being targeted in a vishing (phone-based phishing) scam in which fraudsters spoof phone numbers making the calls appear to originate from the credit union. The members are duped into providing CVV2/CVC2 codes and expiration dates for their debit cards. The fraudsters, already possessing the counterfeit mag stripe debit cards, use the information to change the PINs through voice response units. Then, they use the counterfeit cards to make ATM withdrawals, as well as purchases at Wal-Mart in Florida and Georgia. Credit unions in Indiana, Kentucky, Ohio, and Virginia have been impacted by the scam.
As a reminder, your financial institution will never ask for the CVV or CVC code on your debit card or credit card. Please do not give out any personal information over the phone and monitor your debit card and credit card transactions online and in your monthly statements for discrepancies.