‘SMiShing’ is a type of social engineering that uses cell phone text messages to persuade victims to provide personal information such as card number, CVV2, and PINs. The test message may contain either a website address or more commonly, a phone number that connects to an automated voice response system, which then asks for personal information. The following are examples of SMiShing messages sent to cardholders:
Text messages originating from either notice@jpecu or message@cccu:
- ABC CU- has- deactivated-you-Debit_card. To-reactivate-contact:210957XXXX
- This is an automated message from ABC Bank. Your ATM card has been suspended. To reactivate call urgent at 1-866-215-XXXX
Text message orginating from email@example.com
- firstname.lastname@example.org/VISA. (Card Blocked) Alert. For more information please call 1-877-269-XXXX
Although First Federal or its business partners may ask fro personal information to confirm identification such as the cardholders name, date of birth, and/or last four digits of a social security number, we will NEVER ask for CVV2 or a PIN. You should remain alert to any type of communication not initiated by you that requests personal information.