Phishing Scams

BE ALERT TO PHISHING SCAMS

Phishing scams lure account holders into providing personal or financial information to scammers posing as a legitimate business. Most phishing scams are conducted through email, with messages containing links that ask for your personal data or download spyware to your computer or mobile device. Other phishing scams are conducted by phone call, text messages and social media.

What To Do If You've Been Phished

1. Email: Forward the message with the original subject line intact and include the name of your Internet Service Provider (ISP) in the body.
2. Phone or Text: Send an email with the time and date of the call or text, the number it originated from and what was requested.
3. Social Media: Send an email with the content of the message you received along with the social media account it originated from.
4. If you suspect you're a victim of phishing:

• Ensure that your computer's firewall, anti-virus and spyware detection software is current.
• Run a virus scan on your computer and clean up any viruses or trojans that are detected.
• Change your Account Access password from an uninfected computer.
• If you supplied personal information via email, phone, social media or other means to someone you suspect was scamming you, contact Direct Federal 24/7 at 1-800-676-0001.

What We're Doing for You

Direct Federal will never solicit your password, date of birth, Social Security number, credit card details and other personally identifiable information via phone, email or other message. If you believe that you've received a phishing email, phone call, or text or social media message from us, email us at memberservice@direct.com and include the original message when possible.

What You Can Do To Stay Protected

If an email looks suspicious or is from an unknown source, do not provide any information, open any attachments or click on any links. Look up the website of whoever the message appears to be from and go to it directly. Always beware of anyone who contacts you asking for personal information, such as account numbers. Your bank or credit card issuer already has them and shouldn't be asking for them.

Watch out for emails, messages or phone calls that:

• Request your confidential information like your SSN, account numbers, login IDs, PINs and passwords.
• Threaten to close or suspend your account or state that it's been compromised.

If you supplied personal information via email, phone, social media or other means to someone you suspect was scamming you, contact Direct Federal at 781.455.6500 or 888.2DIRECT.