In April, Epsilon, an online marketing firm, encountered a massive security breach when millions of names and email addresses were exposed to hackers (and more recently, the Sony breach). While Capitol Federal does not use this marketing firm, the breach offers an important reminder to be vigilant about phishing scams. 
Phishing scams are a way of attempting to acquire sensitive information such as usernames, passwords, account information and credit card details by copycatting a trustworthy entity. Phishing scams can lure people in by looking like other popular sites or companies, such as popular online auction sites, payment processors, online banking sites and social media sites. This type of scam is usually found in email or instant messaging and can direct people to fake websites that look almost identical to the legitimate one. 
Use these recommendations to protect your information from phishing attacks:
- Don’t send your account information, user ID or password in an unsecured email.
This is also true for unsuspecting calls made to you. Never disclose an account number or other personal information to someone who calls you. Capitol Federal or any other legitimate company will never call to ask customers to provide or verify an account number or passcode. The company already has this information.
- Don’t respond to emails that ask for personal information directly in the email.
Most contests will have a separate web page for entering, and only ask for basic information like your name, address and phone number.
- Don’t use your email as a log-in ID or password.
- Be wary of links in unsolicited emails.
Make sure the links, when moused-over, contain a legitimate domain name and one that is associated with a reputable company.
Be sure to report any suspected phishing attacks to the company being copied. This will help fight against the attack and allow that company to alert its customers.
If you ever suspect Capitol Federal is the subject of an attack, please call 1-888-8CAPFED (1-888-822-7333) to alert us as soon as possible. And, if you are ever unsure if a CapFed email request is legitimate, you may call us to verify or email womensway@capfed.com.
Like this:
Be the first to like this post.