Security Bulletin

Phishing Alert: November 16, 2007

There are several emails currently circulating in email channels telling credit union members that their credit or debit card has been de-activated. To reactivate the card, members are instructed to call the number listed. The call is directed to an automated system which asks the member to enter their credit card number. This is a form of phishing called VISHING (or voice phishing).

While the attack is not targeted specifically to USA Federal CU members, you may receive one of these emails.

If you are a member and feel you have been a victim of this attack, please contact Card Services immediately through our 24-Hour Contact Center.

24-Hour Contact Center Available 24 hours a day, 7 days a week	Toll Free (within the U.S.) (800) 220-1USA (1872) Local and Outside the U.S. (858) 831-8100
Report a Suspicious Email	Suspicious Email

Remember:

Members should never give or send sensitive information such as passwords, credit card numbers, social security numbers, secret words, or PINs in an email or submit it through a web site or through a automated phone number. In addition, members should never click directly on links in an email that requests sensitive information, even if they recognize and trust the address. These links can redirect you to a fake -- though very real looking -- Web site.

If you are unsure if any message you receive is legitimate (email, phone call, etc.), please contact USA Federal directly for verification. Visit the Member Safety section to learn more on how to identify and avoid information security threats.