Some of our members have recently received phone calls and texts from fraudsters posing as credit union employees. Fraudsters spoof the credit union phone number(s) and use pieces of personally identifying information to gain members’ trust before gaining access to their accounts and stealing funds and completing unauthorized transactions.
Legacy will NEVER ask you to withdraw funds from your account/purchase gift cards or money orders and take them to another location nor call you directly and ask for sensitive information.
What is a Credit Union Impersonation Scam?
· Credit Union impersonation scams occur when members are convinced they are communicating with an actual credit union employee via live voice call, text message, or even email. In reality, they are sharing personal information with a scammer. Fraudsters may use this technique to gain access to your accounts online, transfer funds to outside institutions, and obtain debit/credit card information to complete fraudulent transactions.
· Scammers will be very persistent when attempting to make members believe they are speaking with the credit union.
What is Call Spoofing or Caller ID Spoofing?
· Fraudsters use this technique to disguise their phone number and make it look like it is the credit union calling the member.
How can you protect your information and your account?
· Never share private information via text message. Legitimate attempts to validate credit or debit activity only require a simple response YES/NO to validate via text.
· Do NOT click on hyperlinked phone numbers sent via text or on links inside emails.
· Do not provide personal info on a voice call that you did not initiate, even if the caller shows as coming from Legacy Credit Union. Hang up and contact Legacy directly at 205-930-5000.
Remember:
· Legacy Credit Union will NEVER contact you directly and request any of your account information such as:
o SSN
o Credit/Debit Card Numbers
o Security Code or CVV
o PIN number
o Address
o DOB
o Online Banking Login Info
o Verification or One-Time Passcodes
o Passwords
If someone does contact you and request any of this info, hang up immediately. Do not share any information. If you do share any info before realizing that it may be a scam, contact Legacy immediately to have your account(s) locked.
To learn more about spoofing and how it can be reported to the FCC, visit https://www.fcc.gov/consumers/guides/spoofing-and-caller-id

