Beware of Account Takeover Fraud
Do not share one-time verification security codes with anyone who calls or texts you claiming to be from BECU’s fraud department. Learn to recognize the tactics fraudsters are using to take over accounts and drain funds within minutes.
Criminals spoofing BECU's phone number are claiming to be from our fraud department. Pretending to notify you about possible fraud, they seek to gain access to your account in Online Banking. Once they're in, they can transfer funds out of your account in minutes. Unfortunately, these fraudsters are good at convincing people they're from BECU.
Victims report the person contacting them already had legitimate information like physical address and date of birth that made the contact seem authentic. Fraudsters use bits of information they've gathered about a target to lend credibility to their act.
At least some of your personal information is likely out there—and could be in the hands of a fraudster. Most people have been impacted by a security breach, like those announced by Equifax and Marriott.
It can be difficult to tell if a call or text is legitimate. Make sure you understand how the scam operates so you can recognize and avoid it if you're targeted.
How The Scam Works
You receive a call or text message from someone claiming to be from BECU's fraud or security department.
If it's a phone call, caller ID displays BECU's number (because it's been spoofed to match). Text messages may direct you to call BECU at a different number (not 800-233-2328).
They alert you about possible fraud or suspicious transactions on your account. (You don't recognize these because they're made up.)
They ask for multiple pieces of verifying information, like your mother's maiden name, Online Banking user name and sometimes password, too. (We don't call and ask multiple identifying questions.)
They may tell you there's been unauthorized online access to your account and they need to verbally verify your online password. (We never ask for your online password.)
If they don't get the password, they ask numerous security questions. (They use the answers to gain access to your account)
When our online fraud prevention system asks for additional verifying information, the fraudster will ask for that, too.
They tell you they're sending a one-time security code so they can “assist in resetting your account information.” (The code is actually sent from our system as a security measure to protect your account from unauthorized access.)
They ask you to read back the one-time security code “they just sent you.” (We never request one-time security codes verbally by phone.)
Don't share the code! If you provide this code, the fraudster has full access to your account. They can set up a transfer and drain the funds within minutes using digital payment services in Online Banking.
- Don't share your Online Banking credentials with anyone.
- Don't share one-time security codes with anyone.
- Hang up or don't reply if someone claiming to be from BECU asks for personal identifying information or a one-time security code. Report these calls to BECU immediately.
- If you aren't sure, better to be safe and call us by dialing 800-233-2328. (Don't reply to the number that called or texted you.) You can also send us a secure message using Messenger in the mobile app.
We take your privacy and security very seriously. If you think you've been a victim of fraud, contact us immediately at 800-233-2328.