Home > Information Desk > Phishing

Phishing

Phishing is the practice of luring internet users to a fake website by using authentic-looking emails in an attempt to steal passwords, personal information, or introduce a virus attack.

Further, it generally utilizes a website made to look similar, if not identical, to that of a legitimate financial institution or other service providers, such as a Visa credit card provider or the National Credit Union Administration (NCUA). There are numerous methods employed to compel an internet user to divulge personal information. Some such techniques include but are not limited to:

  • Avoid account closure/service interruption
  • Suspicion of fraud/phishing
  • Request for charitable donations
  • Get rich quick schemes
  • Replications of Government programs, i.e. economic stimulus checks

Phishing scams are not limited to identity theft. For example, Visa has reported a rise in fraudulent PIN-based transactions believed to be the result of online phishing scams. The cardholder responds to a phishing email and in the response the cardholder provides personal information, such as account number and PIN. The criminal encodes the account number and PIN on a plastic card with a magnetic stripe. These cards are then used for withdrawals at ATMs around the world. Additional information about phishing can be found at visa.com/phishing.

Tips to avoid phishing scams:

  • Be suspicious of emails requesting personal information
  • Do not reply to suspicious emails or click on a link within suspicious email messages
  • Contact the business/organization that is claimed to have sent the email directly. Use a published phone number or manually type the website address into your web browser.
  • Never send personal information (e.g. credit or debit card number, Social Security number, or PIN) in response to an email request from any entity
  • Report suspicious emails to the business/organization claimed to have sent the email

Western's email policy:

  • Western may contact you by email from time to time, however, we will never ask you to update information via a separate webpage or link provided in an email.
  • Western does not request personal information via email unless the communication was first initiated by a member.
  • Western recommends that the provision of any personal information be made via our secure online form (https://www.western.org/applications/email.htm) or by contacting our Call Center at 877-254-9328.

If you suspect you have been a victim of a phishing scam on your Western accounts please contact our Call Center at 877-254-9328.


Phishing Alert - April 2009

Western has learned of a recent phishing scam involving identity thieves posing as the Internal Revenue Service and sending illegitimate emails promising government economic stimulus packages or grants. The email message asks the user to download an attachment or visit a website where they are instructed to fill in personal information which is actually an identity theft tool used to steal personal information entered onto the form. If you have been a victim of this scam, contact our Call Center at 877-254-9328 immediately.

Report Suspicious Email
  • Never respond to emails requesting personal or account information
  • Forward any suspicious email bearing the Western name, logo, or inferring any association with Western to phishing@western.org
Phishing Alert - April 2009
Western has learned of a recent phishing scam involving identity thieves posing as the Internal Revenue Service and sending illegitimate emails promising government economic stimulus packages or grants. Read more