Fraud Alert: Spoofing

By Jeanine Bader
January 26, 2010

There are many ways in which an on line fraudster can try to steal personal information from you. One of these ways is called web site “spoofing”. With “spoofing”, the fraudster tries to direct you to a fraudulent web site via links embedded in an email, pop-up windows, or imbedded computer programs called ‘malware’. If you click on the link embedded in the email or pop-up window, it can direct you to a “spoofed” site. “Spoofed” sites look legitimate and are designed to fool the user into entering personal information such as passwords and account information so it can be stolen and used without permission.

Another method fraudsters use involves sophisticated malware and spyware that can be attached to your computer via “freeware” that is downloaded from the internet. This type of malware is completely invisible to the user and takes control of the low-level functions of your home computer.

Make sure that the security padlock is in the right corner of the address line any time you are on a web page on which you enter your personal information, especially when making online purchases. with https:// instead of http://. The “s” indicates a secure site. While these features are no guarantee that you are on a legitimate site (even these features can be ‘spoofed’ by fraudsters), the absence of these items is a definite indicator that you are not on a legitimate site.

These steps can help you protect your personal information:

1. Never click on any links in an email or pop-up window even if they appear to come from a legitimate business or organization.
2. Always look up the correct web site and enter the address yourself in the address line to get to the appropriate site.
3. Keep current virus protection, spyware and a firewall on your computer and keep them updated at all times. Make sure you use commercially available antivirus software and never use freeware that is downloaded from the internet.
4. Make sure your version of Windows is up-to-date with security patches (using Windows automatic updates is the ideal method).
5. Never share your password, account information or personal information on any unknown website. Fraudsters can use the information they obtain to steal your identity or access your accounts without permission. Because they are using a computer, it can be extremely difficult to catch them.

If you feel you have shared your personal information on a "spoofed" web site, please contact the Fraud/Security Department of Deseret First Credit Union as soon as possible at 801-456-7131 and report the site on the Internet Crimes Complaint Center located at www.IC3.gov.

For additional information on spoofing and other types of scams, please see the “Fraud Protection Center” section of dfcu.com.