KNOWN SCAMS

There are countless scams, frauds, and hoaxes targeting the men and women in our armed forces and their families.  This page provides information on known military-targeted scams (and how to avoid them) and how to recoqnize possible fraud and the neccesary steps to correct it.

Scroll through the page for a wealth of information, or jump straight to a topic of interest using the directory below.

  DIRECTORY

    Known Scams:
     How to Recognize Fraud and Correct it:

 


 KNOWN SCAMS
  Click any link for more information

  • FBI FRAUD ALERT
    If you can answer “YES” to any of the following questions, you could be involved in a FRAUD or about to be SCAMMED!

    Click here for more information.


  • MILITARY FRAUD
    Active members of the military can put a 'MILITARY FRAUD ALERT' on their accounts with each of the three credit reporting bureaus (Equifax, Experian, TransUnion). This alert is designed to prevent thieves from opening accounts in their names while overseas. It is not necessary that the military members prove that they have a been victim of identity theft to request a 'MILITARY FRAUD ALERT'. This alert will prevent anyone from opening new credit in the military members' name while the alert is in effect. Retired military members should not file their DD214's with the county auditor or clerk's office. Once filed these documents become public record subjecting you to the risk of identity theft.

    Click here for more information.


  • USAA MEMBER-TARGETED E-MAIL SCAM
    USAA is investigating a new phishing scam pictured below that attempts to collect members' sensitive information.

    Members have received a recent e-mail claiming to be from USAA that urges them to complete a "USAA Online Client Form." The e-mail directs members to a counterfeit website that aims to trick them into providing account information.

    Alternatively, members have received a recent e-mail claiming to be from USAA that urges them to download a "USAA Online Banking Tool," ironically, to guard against phishing attacks. The e-mail directs members to a counterfeit website that may contain malicious software designed to capture sensitive information.

    These emails generally say:
    "USAA will not ask for any personal or account information, including PINs or passwords, in an e-mail. USAA also will not ask you to download software or threaten any action if you do not respond by a certain deadline. If you are suspicious about any e-mails or websites claiming to be from USAA, please notify us immediately at 1-877-632-3002."

    Click here for more information.


  • THWART MALICIOUS PHISHING
    "Phishing" emails are fake e-mails appear to come from legitimate sources. They ask customers to verify personal information or link to fake websites that appear real.

    Beware of e-mails that:
    • Urge you to act quickly because your account may be suspended or closed.
    • Don't address you by name, but use more generic language like "Dear valued customer."
    • Ask for account numbers, passwords or other personal information.

    Do not click on any link in these suspicious e-mails, as they are generally "pharming" redirects. Pharming involves redirecting Internet users to a fake website, even when they entered the correct address. These bogus sites often look real, but secretly collect any personal information and passwords entered. Users end up at fraudulent sites by having spyware or a virus loaded on their computer, or by sophisticated hacking tricks.

    Beware of any changes to the logon screen. If you are asked for anything out of the ordinary, do not enter any information.


  • NEW SCAM TARGETS MILITARY SPOUSES
    The American Red Cross is warning military spouses about a new identity-theft scam that targets family members of deployed troops.

    The scam involves a person with an American accent calling a military spouse, identifying herself as a representative of the Red Cross, and telling the spouse that her husband was hurt in Iraq and was medically evacuated to Germany. The caller then says that doctors can't start treatment until paperwork is completed, and that to start the paperwork they need the spouse to verify her husband's social security number and date of birth. It is hard to determine how many spouses have been targeted by this scam, as there are many ways for spouses to report problems like this. However, one confirmed report was enough for the Red Cross to act.

    Devorah Goldberg of the Red Cross said:
    "We know that it happened to one person; it was probably going to happen to others, and we wanted to be prudent and alert people."

    American Red Cross representatives typically do not contact military members or dependents directly and almost always go through a commander or first sergeant, according to a Red Cross news release. Military family members are urged not to give out any personal information over the phone if contacted by unknown individuals, including confirmation that their spouse is deployed.

    In addition, Red Cross representatives contact military members or dependents directly only in response to an emergency message initiated by a family member, the news release said. The Red Cross does not report any type of casualty information to family members; the Defense Department will contact families directly about family members' injuries.

    It is a federal crime, punishable by up to five years in prison, for a person to fraudulently pretend to be a member of, or an agent for, the American Red Cross for the purpose of soliciting, collecting, or receiving money or material, according to the news release. Any military family member that receives such a call is urged to report it to their local family readiness group or military personnel flight.


  • TRICARE FRAUD WARNING
    TRICARE is warning members not to share their personal or financial information with anyone who approaches them, claiming that they are collecting fees or other funds on behalf of TRICARE or selling TRICARE-related products. TMA says members should only give information when they have made contact with TRICARE themselves. If you suspect that someone is misusing your personal information, contact the Federal Trade Commission's ID Theft Hotline at 1-877-438-4338 to file a report. There are also tips and a list of resources to help you protect your identity on the TRICARE Website.

    Click here for more information.

 
 


 HOW TO RECOGNIZE FRAUD AND CORRECT IT
  Click any link for more information

  • UNDERSTANDING FRAUD – “E-MAIL”
    What is Phishing?
    Phishing is the use of fraudulent e-mail that appears to come from your bank or another trusted business, but actually is from an imposter. Such e-mail asks customers to verify personal information or links to counterfeit websites that appear real. Pharming, on the other hand, does not require customers to respond to e-mail.

    How to Recognize Phishing
    Watch for e-mail that:
    •    Urges you to act quickly because your account may be suspended or closed.
    •    Doesn't address you by name, but uses a more generic title like "Dear valued customer."
    •    Asks for account numbers, passwords or other personal information.

    Remember, USAA will never ask you for personal information, such as account numbers or passwords, in an e-mail. Do not respond to any e–mail that directs you to update your personal information online or by dialing a telephone number. Use only the customer service numbers listed on usaa.com.

    How to Prevent Phishing
    •    Ensure that your virus scanning software automatically scans attachments, or scan them manually prior to opening them.
    •    Verify that the e–mail sender's address is what you would expect.
    •    Be suspicious of e–mail attachments from a stranger. If you don't know or recognize the sender, do not open the attachment.
    •    Do not reply to e–mail requests for financial information if you suspect the message might not be legitimate.
    •    Never send confidential information, such as account numbers or passwords, in an e–mail.
    •    Always use an up-to-date browser with at least 128-bit encryption.

    Helpful Resources
    •    Anti–Phishing Working Group: Association focused on eliminating fraud and identity theft
    •    Better Business Bureau Phishing Facts: Shows latest news and alerts
    •    FDIC: Phishing Consumer alerts
    •    OnGuard Online: Ten scams to watch for

  •  
     
  • UNDERSTANDING FRAUD – “IDENTITY THEFT”
    What is Identity Theft?
    Identity theft occurs when someone uses your personal information (name, address, Social Security number, bank or credit card account numbers) to commit fraud or other crimes, such as:
    •    Committing credit card fraud by changing your billing address.
    •    Opening new credit cards under your name.
    •    Opening a bank account in your name and writing checks.
    •    Counterfeiting checks or credit and debit cards.
    •    Authorizing electronic transfers in your name.
    •    Buying a car by taking out an auto loan in your name.
    •    Filing fraudulent tax returns in your name.
    •    Using your name in the event of an arrest.

    Recognizing Identity Theft
    Stay alert for signs of identity theft:
    •    Failing to receive bills or other mail
    •    Receiving suspicious charges on your credit card bills and other statements
    •    Receiving credit cards that you didn’t apply for
    •    Being denied credit for no apparent reason
    •    Getting calls or letters about merchandise or services you didn't buy

    Preventing Identity Theft
    Take the following steps to minimize the risk of identity theft:
    •    Don’t provide personal information over the phone, mail or Internet unless you trust the source.
    •    Carry only the identification information and the credit and debit cards you need.
    •    Deposit your outgoing mail at your local post office instead of in an unsecured mailbox.
    •    Carefully examine all credit card billing and other statements to verify charges.
    •    Shred receipts, checks, credit applications, insurance forms and bank statements.
    •    Request online delivery of bank, investment, insurance and credit card statements.
    •    Pick up your mail promptly. If you’ll be away, have someone pick it up or request a vacation hold.
    •    Order and review a copy of your credit report on an annual basis. Look for inaccuracies or unexplained entries.
    •    Use a subscription service to notify you when there are changes to your credit record.

    Reporting Identity Theft
    Helpful Resources
    •    FTC: Identity Theft: National resource about identity theft
    •    AnnualCreditReport.com: A resource from Equifax, Experian and TransUnion
    •    Federal Deposit Insurance Corporation (FDIC): Presentation on identity theft
    •    US Treasury: Identity Theft Resource Page
    •    Privacy Rights Clearinghouse: Identity Theft Resources
    •    IRS: Identity Theft and Your Tax Records
    •    Social Security Online: Identity Theft and Your Social Security number
    •    US Postal Inspectors: Information and tips


  •  
  • UNDERSTANDING FRAUD – “CREDIT CARD” 
    What Is Credit Card Fraud?
    Credit card fraud occurs when someone uses your credit card or credit card number without your authorization. While it's not always possible to prevent credit card fraud from happening, there are a few steps you can take to protect yourself.

    How to Recognize Credit Card Fraud
    USAA and other credit card companies constantly monitor account activity for anything suspicious. But no one knows your accounts as well as you do, which is why you should also keep a close watch.

    How to Prevent Credit Card Fraud
    •    Sign your credit card immediately. 
    •    Report lost or stolen cards immediately. 
    •    Shop only with reputable companies. Look for the lock icon on your browser's status bar, which means your information is secure during transmission. 
    •    Make sure your credit card company has your current phone number so they can call you if they spot something suspicious. 
    •    If you are contacted about suspicious activity, don't give any information over the phone or through e-mail. 
    •    Watch your statements for any purchase — no matter how small — that you didn't make.
    •    Turn off mail delivery of your paper statements. View your statements online instead. 
    •    Shred your monthly statements and credit card solicitations. 
    •    Keep a list of your account numbers in a secure place. 
    •    Check your credit report once a year. If you are a victim of fraud, alert each of the three national credit card bureaus: Equifax, Experian and TransUnion.

  •  
     
  • IDENTITY THEFT VICTIMS - FIRST STEPS TO SAFEGUARD YOUR INFORMATION
     
    Technology has made it easier for criminals to get personal information—making identity theft one of the fastest growing crimes in the United States. Protecting your personal information can help prevent identity theft.
     
    If you think you are a victim of identity theft, here's what to do:
    1. Contact the fraud departments of any one of the three consumer reporting companies below to place a fraud alert on your credit report.  You need to contact only one of the three companies. The company you call must contact the other two, and they will also place an alert on their versions of your credit report.
     
    Equifax    1-800-525-6285    www.equifax.com
    P.O. Box 740241
    Atlanta, GA 30374-0241
    Experian    1-888-397-3742    www.experian.com
    P.O. Box 9532,
    Allen, TX 75013

    TransUnion    1-800-680-7289    www.transunion.com
    P.O. Box 6790,
    Fullerton, CA 92834-6790

    The fraud alert tells creditors to contact you before opening any new accounts or making changes to your existing accounts.  Once you place the fraud alert in your file, you may order free copies of your credit reports.
     
    2. Close bank and/or credit card accounts that you know or believe have been tampered with or opened fraudulently. Use the ID theft affidavit, www.consumer.gov/idtheft/pdf/affidavit.pdf, to dispute new unauthorized accounts.
     
     3. File a report with your local police or the police in the community where the identity theft took place. Get a copy of the report, or at least the number of the report, to submit to your creditors and others that require proof of the crime.
     
    4. File your complaint with the Federal Trade Commission (FTC). The FTC maintains a database of identity theft cases used by law enforcement agencies for investigations. 
     
    Identity Theft Resources
    •    FTC: The National Resource for Identify Theft 
    •    FTC Prevention and Recovery
    •    Social Security Administration
    •    U.S. Department of Justice Identity Theft and Fraud
     
    Patient Privacy Information
    •    TMA Privacy Office
    •    HIPPAA Compliance

  •  
       
  • PROTECTING YOURSELF – “SECURITY CHECKLIST”
    Seven Tips for Safety
    1. Protect your personal information.
    •    Don't provide personal information over the phone, mail or Internet unless you trust the source.
    •    Be suspicious of e-mail requests for financial information; most reputable firms will never ask you for financial information via e-mail.
    •    Look for the lock icon on your browser's status bar when you are shopping online.
     
    2. Install anti-virus and firewall software.
    •    Keep your anti-virus and firewall software up to date.
    •    Install a firewall to block unauthorized users from accessing your computer.
    •    Avoid opening and reading unsolicited e-mails. Ensure that your virus scanning software automatically scans attachments, or scan them manually prior to opening them.
    •    Use a pop-up blocker.

    3. Use an up-to-date browser and operating system. 
    •    Always use an up-to-date browser with at least 128-bit encryption.
    •    Keep your operating system up to date.

    4. Protect your passwords and PINs.
    •    Don't share your passwords or PINs with anyone. Choose a password you can remember without having to write it down.
    •    Use a combination of numbers, words and punctuation for your passwords.
    •    Change your passwords and PINs at least twice a year.
    •    If you use a wireless router to connect to the Internet, make sure to create your own secure password for it, rather than relying on its default password.

    5. Prevent spyware.
    •    Install anti-spyware software on your computer.
    •    Download software only from sites you know and trust.
    •    Be careful about which websites you visit.

    6. Stay alert.
    •    Don't provide personal information over the phone, mail or Internet unless you trust the source.
    •    Review your statements and accounts regularly for unexpected transactions.
    •    Order and review a copy of your credit report. Look for inaccuracies or unexplained entries.


  •  
  • UNDERSTANDING FRAUD – “GLOSSARY”
    •    Adware - A program that automatically downloads advertising to a computer.
    •    Anti–Spyware Software - Protects your computer and the personal information that resides on it from spyware.
    •    Anti–Virus Software - Detects known viruses and prevents them from infecting your PC.
    •    Authentication - Verifying an individual's authorization to receive specific types of information.
    •    Cookies - Small files deposited on your computer so that a website can remember something about you at a later time. Generally harmless.
    •    Encryption - Scrambles your data into an encoded form before it is sent over the Internet, preventing unauthorized users from reading the information.
    •    Firewall - A program that provides a barrier between your computer and the Internet, preventing unauthorized traffic.
    •    Identity Theft - Occurs when someone uses your personal information to commit fraud or other crimes.
    •    Pharming - A scam in which malicious software is installed on a personal computer or server, misdirecting users to fraudulent websites without their knowledge or consent.
    •    Phishing - Fraudulent e-mail or pop-up messages that appear to come from legitimate sources. They may ask customers to verify personal information or link to counterfeit websites that appear real (see pharming).
    •    Spam - Unsolicited, irrelevant or inappropriate e-mail, especially commercial advertising in mass quantities.
    •    Spoofing - Impersonating another person or website by providing a false e-mail, URL or IP address.
    •    Spyware - Programs that are loaded onto your computer without your knowledge to collect information about your Internet usage.
    •    Trojan - A program that may be installed on your computer when you click on a link or attachment in an e-mail.
    •    Virus - A program that can embed itself into other programs on your computer, potentially causing damage to your files.
    •    Worm - A program that travels across a network of computers, using up computer resources and affecting performance.