TCCU actively monitors fraud trends affecting financial institutions and consumers. Current threats include caller ID spoofing, phishing emails, fraudulent text messages, identity theft attempts, remote-access scams, social engineering attacks, and payment fraud.

As new scams emerge, this section will be updated with relevant alerts and guidance.

Torrance Community Credit Union may contact members regarding:

• Account servicing
• Loan applications
• Fraud monitoring
• Member service requests
• General account matters

When contacting members, TCCU may:

• Leave a voicemail with callback information
• Send account-related communications
• Ask general identity verification questions

However, TCCU Will Never Ask For:

• Online Banking passwords
• One-time authorization codes
• MFA codes
• Debit or credit card PINs
• Full debit or credit card numbers
• Remote access to your device
• Screen-sharing sessions

If you are uncertain whether a communication is legitimate, hang up and contact TCCU directly at (310) 618-9111.

What Is Caller ID Spoofing?

Caller ID spoofing occurs when a scammer manipulates the phone number displayed on your caller ID to make it appear as though the call is coming from a trusted organization.

Scammers may make their calls appear to come from Torrance Community Credit Union even though they have no affiliation with the Credit Union.

Common Warning Signs

• Claims of suspicious account activity
• Requests to verify account information
• Requests for passwords, PINs, or security codes
• Pressure to act immediately
• Requests to transfer money to a "safe account"

What You Should Do

• Do not provide any information.
• End the call.
• Contact TCCU directly using our published phone number.

What Is Phishing?

Phishing emails are designed to trick recipients into providing personal information, account credentials, or financial information.

Warning Signs

• Urgent requests for action
• Unexpected account verification requests
• Suspicious links or attachments
• Misspellings or grammatical errors
• Unfamiliar sender email addresses

Best Practices

• Never click links in unexpected emails.
• Never download attachments from unknown senders.
• Verify requests through trusted channels before responding.
• Contact TCCU directly if you receive an email that appears suspicious.

What Is Smishing?

Smishing is a form of phishing delivered through text messages.

Scammers may send messages claiming:

• Your account has been locked
• A transaction was declined
• Fraudulent activity has been detected
• Immediate action is required

Best Practices

• Do not click links in unexpected text messages.
• Do not provide personal information through text messages.
• Do not call phone numbers listed in suspicious texts.
• Verify concerns by contacting TCCU directly.

How These Scams Work

Scammers may claim they are helping resolve fraud, technical issues, or account problems.

They then attempt to convince consumers to install software or grant access to their computer or mobile device.

Examples include:

• AnyDesk
• TeamViewer
• ScreenConnect
• RemotePC
• LogMeIn

Important

TCCU will never request remote access to your device and will never ask you to share your screen.

If anyone claiming to represent TCCU asks you to install software, grant remote access, or share your screen, end the communication immediately.

Advances in artificial intelligence have made it easier for criminals to imitate voices and create convincing communications.

Be cautious if someone:

• Claims to be a family member in distress
• Requests urgent financial assistance
• Pressures you to act immediately
• Requests gift cards, wire transfers, payment app transfers, or cryptocurrency
• Asks you to bypass normal verification procedures

When in doubt, independently verify the request using a known phone number.

Scammers may falsely claim to represent:

• Microsoft
• Apple
• Internet providers
• Antivirus companies
• Device manufacturers

They often claim:

• Your device is infected
• Your accounts have been compromised
• Immediate action is required

Never grant remote access to unsolicited callers.

Never provide passwords or financial information to someone who unexpectedly contacts you.

Enable Multi-Factor Authentication (MFA)

Whenever available, enable Multi-Factor Authentication (MFA) for your online accounts.

MFA adds an additional layer of security by requiring a second form of verification after entering your password.

Use Strong Passwords

• Use a unique password for each important account.
• Use at least 12 characters.
• Include uppercase letters, lowercase letters, numbers, and special characters.
• Avoid easily guessed information.
• Consider using a reputable password manager.

Enable Account Alerts

Account alerts can help identify suspicious activity quickly.

Consider enabling alerts for:

• Deposits
• Withdrawals
• Debit card transactions
• Account balances
• Online Banking activity

Keep Your Contact Information Current

Maintaining current contact information helps ensure you receive important account notifications, fraud alerts, and security communications.

Please notify TCCU whenever you change your:

• Mobile phone number
• Home phone number
• Email address
• Mailing address

Fraudsters sometimes create fake mobile applications designed to steal information or impersonate legitimate organizations.

To help protect yourself:

• Only download apps from the Apple App Store or Google Play Store.
• Verify the publisher before installing an app.
• Avoid installing apps from links received through texts, emails, or social media messages.
• Keep apps updated.

Many consumers use legitimate financial management applications and services that connect to financial institutions to help track spending, budgeting, investments, taxes, and financial planning.

Examples may include:

• Intuit® products such as TurboTax® and Credit Karma®
• Quicken®
• Monarch Money®
• YNAB (You Need A Budget)®
• Rocket Money®
• Other reputable financial management applications

Best Practices

• Only connect your accounts to trusted and reputable applications.
• Research the application and provider before linking your financial accounts.
• Download applications only from the Apple App Store or Google Play Store.
• Review permissions requested by the application before granting access.
• Regularly review and remove connections you no longer use.
• Use strong passwords and Multi-Factor Authentication (MFA) whenever available.
• Be cautious of unfamiliar applications claiming to offer budgeting, investing, rewards, or financial services.

Important

Fraudsters sometimes create fraudulent applications, websites, and services designed to collect account credentials or personal information.

Before linking accounts or providing credentials to any third-party application, verify that the service is legitimate and comes from a trusted provider.

Review transactions frequently and report suspicious activity immediately.

Early detection is one of the most effective ways to minimize fraud losses.

Cybersecurity is not limited to computers and mobile devices.

Best Practices

• Be aware of your surroundings when accessing financial information.
• Shield your screen when viewing sensitive information in public.
• Cover ATM and payment terminal keypads when entering PINs.
• Be cautious of shoulder surfing, where someone attempts to observe passwords, PINs, account numbers, or other sensitive information.
• Consider using a privacy screen filter if you frequently work with sensitive information in public locations.
• Do not leave devices unattended.
• Lock devices when not in use.

Public charging stations and USB charging ports found in airports, hotels, shopping centers, and other public locations may present security risks.

Best Practices

• Avoid connecting your phone or tablet directly to unknown USB charging ports whenever possible.
• Use your own wall charger and plug directly into a standard electrical outlet when available.
• Consider carrying a portable battery pack when traveling.
• Use a USB data blocker if available.
• Keep your device updated with the latest security patches.

What Is Identity Theft?

Identity theft occurs when someone uses your personal information without your knowledge or permission to commit fraud.

Personal information criminals may target includes:

• Social Security Numbers
• Account Numbers
• Debit or Credit Card Information
• Online Banking Credentials
• Email Addresses
• Phone Numbers
• Dates of Birth

How to Protect Yourself

• Monitor account activity regularly.
• Review your credit reports periodically.
• Protect sensitive documents and personal information.
• Be cautious when sharing personal information online.
• Enable MFA whenever available.
• Use strong, unique passwords.

Warning Signs

• Accounts you did not open
• Unrecognized transactions
• Unexpected credit inquiries
• Collection notices for unfamiliar accounts
• Missing account statements

If You Suspect Identity Theft

• Contact TCCU immediately.
• Change affected passwords.
• Monitor your accounts closely.
• Consider placing a fraud alert or credit freeze with the major credit bureaus if your identity has been compromised.

Credit Bureaus

If your identity has been compromised, consider placing a fraud alert or security freeze with the major credit bureaus:

• Equifax: https://www.equifax.com/personal/credit-report-services/
• Experian: https://www.experian.com/fraud/
• TransUnion: https://www.transunion.com/fraud-alerts

Organizations occasionally experience data breaches that may expose personal information such as email addresses, passwords, account numbers, or other sensitive data.

If You Receive a Data Breach Notification

• Review the notification carefully.
• Determine what information may have been exposed.
• Change affected passwords immediately.
• Enable Multi-Factor Authentication (MFA) where available.
• Monitor your financial accounts for suspicious activity.
• Consider placing a fraud alert or security freeze with the major credit bureaus.
• Check whether your email address has appeared in known data breaches by visiting Have I Been Pwned.

If you believe information related to your TCCU accounts may have been compromised, contact us immediately.

Mobile wallets such as Apple Pay and Google Pay provide convenient and secure payment options.

Best Practices

• Only add cards to devices you personally control.
• Enable biometric security whenever available.
• Review wallet transactions regularly.
• Remove cards from devices you no longer own.
• Remove cards from lost, stolen, traded-in, or replaced devices as soon as possible.
• Report unauthorized wallet enrollment immediately.

Public Wi-Fi networks may expose users to additional security risks.

Best Practices

• Avoid conducting financial transactions on public Wi-Fi whenever possible.
• Use trusted networks whenever available.
• Use a reputable Virtual Private Network (VPN) provider when connecting through public Wi-Fi, if possible.
• Keep your devices and applications updated.
• Log out when finished using banking services.
• Avoid using public computers for financial transactions.

Fraudsters may impersonate financial institutions, businesses, celebrities, or customer service representatives through social media platforms.

Best Practices

• Never share account information through social media.
• Be cautious of unsolicited messages.
• Verify account authenticity before responding.
• Report suspicious accounts impersonating TCCU.

Fraudsters sometimes use malicious QR codes to direct users to fake websites or payment portals.

Best Practices

• Verify the source before scanning.
• Inspect posted QR codes for tampering.
• Confirm the website address after scanning.
• Never enter sensitive information on unfamiliar websites.

When shopping online:

• Shop only with reputable retailers.
• Verify the website uses HTTPS encryption.
• Be cautious of deals that appear too good to be true.
• Avoid entering payment information on unfamiliar websites.
• Consider using a credit card instead of a debit card when shopping online.
• Review account activity regularly after purchases.

For your protection, download Torrance Community Credit Union applications only from official app stores.

Current Official Applications

• TCCU Mobile Banking
• TCCU Card Manager

Always verify the publisher before installing an application.

Protect Your PIN

• Never share your PIN.
• Cover the keypad when entering your PIN.
• Never write your PIN on your card.

Inspect the ATM Before Use

Before using an ATM:

• Examine the card reader for signs of tampering.
• Check the keypad for overlays or loose components.
• Inspect the area surrounding the screen.
• Examine the bezel above the screen, where hidden cameras are sometimes placed to capture PIN entries.
• If anything appears unusual, use a different ATM.

Understanding Skimmers and Shimmers

Skimmers

Skimmers are devices attached to the outside of an ATM or payment terminal that capture card information from the magnetic stripe.

They are often accompanied by hidden cameras or fraudulent keypad overlays designed to capture PINs.

Shimmers

Shimmers are thin devices inserted inside a chip-card reader that attempt to capture information during an EMV chip-card transaction.

Because shimmers are hidden inside the card reader, they are often difficult to detect.

Additional Safety Tips

• Use ATMs located at financial institutions whenever possible.
• Monitor account activity regularly.
• Report suspicious transactions immediately.
• Consider using an RFID-blocking wallet or card sleeve for additional peace of mind.

Fraudsters may attempt to convince victims to:

• Wire money
• Send funds using payment applications
• Transfer money to a so-called "safe account"
• Move funds to avoid fraud

If anyone instructs you to move money to protect your account, contact TCCU directly before taking any action.

Zelle® provides a fast and convenient way to send money directly between eligible bank and credit union accounts.

Because transactions are typically processed quickly, it is important to send money only to people you know and trust.

Best Practices

• Only send money to friends, family members, and people you know and trust.
• Verify the recipient's email address or mobile phone number before sending money.
• Be cautious when buying goods or services from unfamiliar individuals using Zelle®.
• Never send money to someone claiming you must move funds to a "safe account."
• Treat Zelle® payments like cash. Once sent, recovery may not be possible if the recipient is a scammer.

Common Zelle® Scams

Fraudsters may impersonate:

• Financial institutions
• Utility companies
• Government agencies
• Online sellers
• Technical support representatives
• Fraud departments

Important

TCCU will never instruct you to send money to yourself, transfer funds to a safe account, or use Zelle® to resolve fraud concerns.

Treat unexpected requests to send money through Zelle® with the same caution you would use for cash transactions.

If anyone claiming to represent TCCU requests that you send money through Zelle®, end the communication immediately and contact TCCU directly.

What Are Cryptocurrency Scams?

Cryptocurrency scams often involve fraudsters convincing victims to purchase cryptocurrency and transfer it to a digital wallet controlled by the scammer.

These scams may appear as investment opportunities, fraud-protection requests, romance scams, giveaway promotions, technical support scams, or urgent account-security situations.

Common Warning Signs

Be cautious if someone:

• Promises guaranteed or unusually high returns.
• Claims an investment is risk-free.
• Requests immediate action.
• Asks you to purchase cryptocurrency to protect your money.
• Requests payment using Bitcoin, Ethereum, or other cryptocurrencies.
• Directs you to unfamiliar investment websites or mobile applications.
• Claims you must pay cryptocurrency fees before accessing funds.

Common Cryptocurrency Scams

• Investment scams
• Pig-butchering scams
• Romance scams
• Recovery scams
• Giveaway scams
• Impersonation scams

Important

TCCU will never instruct you to:

• Purchase cryptocurrency to protect your accounts.
• Convert funds to cryptocurrency because of fraud concerns.
• Transfer cryptocurrency to a third party.
• Send cryptocurrency for account verification purposes.
• Share cryptocurrency wallet recovery phrases, seed phrases, or private keys.

If anyone claiming to represent TCCU requests cryptocurrency payments or transfers, end the communication immediately and contact us directly.

How These Scams Work

Gift cards are one of the most common payment methods requested by scammers because the funds are difficult to recover once the card information has been provided.

Fraudsters may instruct victims to purchase gift cards and provide the card numbers and redemption codes by phone, email, text message, or social media.

Commonly Requested Gift Cards

• Apple Gift Cards
• Google Play Gift Cards
• Amazon Gift Cards
• Steam Gift Cards
• Visa Gift Cards
• Mastercard Gift Cards

Common Warning Signs

Be suspicious if anyone asks you to purchase gift cards for:

• Fraud protection
• Account verification
• Tax payments
• Government fees
• Utility payments
• Technical support services
• Prize, lottery, or sweepstakes claims
• Emergency assistance requests
• Debt collection payments

Important

Government agencies, financial institutions, legitimate businesses, and technical support providers do not require payment using gift cards.

If someone instructs you to purchase gift cards and provide the card numbers or redemption codes, it is likely a scam.

Be cautious of communications claiming you have won:

• A sweepstakes
• A lottery
• A prize drawing
• A cash award

If you are asked to:

• Send money
• Purchase gift cards
• Deposit a check and return funds
• Pay fees to collect a prize

the offer is likely fraudulent.

Remember: If it sounds too good to be true, it probably is.

Fraudsters often impersonate charitable organizations following natural disasters, major news events, or emergencies.

Before donating:

• Research the organization.
• Donate through official websites.
• Be cautious of unsolicited donation requests.
• Verify charities before contributing funds.

Fraudsters may build online relationships through social media, dating websites, or messaging applications.

Their goal is often to gain trust and eventually request money, gift cards, cryptocurrency, or personal information.

Be cautious of anyone requesting money whom you have never met in person.

Older adults are frequently targeted by scammers.

Common Scams Include

• Grandparent scams
• Government impersonation scams
• Sweepstakes scams
• Tech support scams
• Romance scams
• Gift card scams

Family members and caregivers should discuss financial safety and remain alert for unusual activity.

Use this checklist to evaluate your personal cybersecurity practices.

Account Security

• ☐ Multi-Factor Authentication (MFA) is enabled whenever available.
• ☐ I use strong, unique passwords for important accounts.
• ☐ I do not reuse passwords across multiple websites.
• ☐ I use a password manager or another secure method to store passwords.

Account Monitoring

• ☐ I regularly review my account activity.
• ☐ I have account alerts enabled for important transactions.
• ☐ I promptly report suspicious activity.
• ☐ My contact information is current with TCCU.

Device Security

• ☐ My computer, tablet, and mobile devices are updated regularly.
• ☐ Antivirus or security software is installed and maintained.
• ☐ My devices require a PIN, password, fingerprint, or facial recognition to unlock.
• ☐ I lock my devices when not in use.

Online Safety

• ☐ I only download apps from the Apple App Store or Google Play Store.
• ☐ I avoid clicking links in unexpected emails or text messages.
• ☐ I verify requests for personal information before responding.
• ☐ I avoid conducting financial transactions on public Wi-Fi whenever possible.

Personal Information Protection

• ☐ I protect my Social Security Number and sensitive personal information.
• ☐ I am cautious of phishing emails, spoofed phone calls, and text message scams.
• ☐ I independently verify unusual requests before taking action.
• ☐ I understand that TCCU will never ask for my password, PIN, authorization code, or remote access to my device.

If you believe you may have provided sensitive information to a scammer:

• Contact TCCU immediately.
• Change affected passwords.
• Review your account activity.
• Monitor debit and credit card transactions.
• If you sent money through Zelle® or another payment service, contact TCCU immediately and report the transaction as soon as possible.
• Report unauthorized activity promptly.
• Consider placing a fraud alert with the major credit bureaus.

The sooner suspicious activity is reported, the more quickly protective measures can be taken.

• Stop communicating with the suspected scammer.
• Do not click additional links.
• Do not provide further information.
• Change affected passwords if necessary.
• Review recent account activity.
• Contact TCCU immediately.

Have I Been Pwned?

https://haveibeenpwned.com

Check whether your email address has appeared in a publicly known data breach.

IdentityTheft.gov

https://www.identitytheft.gov

Official U.S. government identity theft recovery resource.

FTC Consumer Advice

https://consumer.ftc.gov

Consumer fraud, scams, privacy, and identity theft guidance.

National Cybersecurity Alliance

https://staysafeonline.org

Cybersecurity awareness and online safety resources.

NCUA Consumer Resources

https://www.ncua.gov/consumers

Consumer protection and financial education resources for credit union members.

FBI Internet Crime Complaint Center (IC3)

https://www.ic3.gov

Report internet crime, phishing attempts, online fraud, and cybercrime activity.

Credit Bureau Resources

Equifax
https://www.equifax.com/personal/credit-report-services/

Experian
https://www.experian.com/fraud/

TransUnion
https://www.transunion.com/fraud-alerts

Cybercriminals continually change their tactics, but awareness remains one of the most effective defenses.

Stay informed, follow good security practices, monitor your accounts regularly, and report suspicious activity promptly.

When in doubt, contact Torrance Community Credit Union directly before providing personal or financial information.