Security Alerts

Security Alerts - Intech Credit Union

Stay Smart Online

Stay Smart Online is the Australian Government's online safety and security website, designed to help everyone understand the risks and the simple steps we can take to protect our personal and financial information online. Browse alerts and subscribe to stay up to date.


SCAMwatch
SCAMwatch is a website run by the Australian Competition and Consumer Commission (ACCC). SCAMwatch provides information to consumers about how to recognise, avoid and report scams.

Click here to browse alerts and subscribe to stay up to date


Latest Security Alerts



29 November 2016
Be wary of online scams as the holiday season approaches

Scam emails that claim to come from reputable organisations are being sent to harvest personal details or to infect your computer with malicious software such as ransomware. Based on previous experience, email-based scams may increase during the 2016 holiday

What is ransomware?
Ransomware is a type of malicious software that handicaps computer functionality, for example, through browser hijacking or encrypting personal data, and offers to restore the functionality for a fee, which is a form of extortion.

Recovery of systems that have been infected with ransomware is almost impossible without clean backups, so prevention is always the best approach.

While there have been reports that files are recovered if the ransom is paid, this does not protect your computer against further attacks. The attacker may simply encrypt your files again, and increase the ransom. For this reason, responding to extortion is not encouraged.


Staying safe

Prevention is the best antidote to ransomware and other malware attacks.

  • Use spam filters and be cautious when opening emails, especially if there are attachments.
  • Make sure you are using a reputable security software product.
  • Make sure it is up-to-date and switched on.
  • Make sure your operating system and applications are up-to-date and fully patched.
  • Run a full scan of your computer regularly, or preferably set it to run automatically.
  • Use strong and unique passwords.
  • Set passwords on all your hardware devices (modems and routers) and change them regularly – never leave the default, factory set password in place – it is usually ‘admin’.
  • Back up your data regularly.
  • Keep a backup copy of your data in a safe place, disconnected from your computer and the internet, on a device that has been scanned.
  • Only visit reputable websites and online services.

If you believe you may have fallen victim to a scam, please contact us immediately.




16 September 2016
Mystery Shopper Scam

SCAMwatch is warning Australian job hunters to be wary of a mystery shopper job scam.

If you see a mystery shopper job ad in the employment section of your local newspaper be wary, it may be a scam.

Applicants are asked to send their CV to an overseas e-mail address, often in the UK. After doing so, they are sent American Express travellers' cheques in U.S. dollars, European dollars, or British pounds. Similar scams may also involve bank cheques or money orders.
The cheques, which are often forgeries, will be for a round sum of money such as $1000 or $2000.

Recruits are told to cash the cheques at financial institutions and take a percentage as a wage or commission. They are then asked to transfer the remaining cash overseas.

If you have replied to a mystery shopper job scam and have been sent traveller’s cheques, do NOT cash them as you may be committing an offence. If you get further emails from the scammer pressuring you to cash the cheques don’t respond. Delete their emails.
SCAMwatch has also received reports of this scam being initiated by spam email.


Protect yourself
  • Offers that involve transferring money for someone you don’t know are nearly always a scam—never agree to them.
  • Don’t trust the legitimacy of a job ad just because it appears in a reputable newspaper or job website—scammers often use these media.
  • If you aren’t sure whether an ad is authentic, do an internet search using the exact wording in the ad. Many well-known scams can be found this way.
  • Do not respond to the ad, if you receive cheques and cash them you may be committing an offence such as money laundering.
  • Remember there are no get-rich-quick schemes: the only people who make money are the scammers.

If you believe you may have fallen victim to this scam, please contact us immediately.




09 August 2016
Federal Court Spam Email Alert

The Federal Court has been contacted by a large number of people who have received emails, purportedly sent by the Federal Court on behalf of the Federal Circuit Court, subpoenaing them to attend court at a specified time. The email also requires the recipient to click on a link to both the court address and case related information.

Neither the Federal Court nor the Federal Circuit Court issue subpoenas in such an informal way. These emails have not been issued by the Court and are fraudulent.

If you receive one of these emails:

  • Do not click on any of the links as they may contain viruses or malware
  • Delete the item from your in-box and Deleted folder.

If you believe you may have fallen victim to this scam, please contact us immediately.




29 July 2016
Steer clear of tax scams

The Australian Competition and Consumer Commission is urging Australians to hang up on and delete tax scams after more than $1 million was reported lost to Scamwatch already this year, with over 300 people reporting that they lost money to tax scams in the first half of the year. This is compared with 400 people who reported losing money in the 12 months previous, with $1.6 million lost in total.

These incessant scams come in many guises but generally claim that you have underpaid your taxes and are required to repay the tax debt immediately or face frightening repercussions such as arrest.

“Tax scammers are particularly aggressive so many people feel pressured to pay quickly without questioning them. The most threatening scammers even say that police are on their way to arrest you but can be stopped if you pay immediately,” ACCC Deputy Chair Delia Rickard warned.

These scams often use personal information they found online to try and convince you they’re legitimate. They usually ask for payment for an “unpaid debt” via wire money transfer, credit card, direct debit cards or even iTunes cards. The call looks like it comes from a local phone number but most use voice over internet protocol (VOIP) phone numbers to disguise the fact that they are calling from overseas.

The ATO said that while it makes thousands of outbound calls to taxpayers a week, the ATO would never cold call you about a debt, would never threaten jail or arrest, and our staff certainly wouldn’t behave in an aggressive manner. If you’re not sure, hang up and call the ATO back on 1800 008 540.

The ATO would never request the payment of a tax debt via gift or pre-paid cards such as iTunes and Visa cards, nor will it ask for direct credit to be paid to a personal bank account


If you believe you may have fallen victim to this scam, please contact us immediately.




18 July 2016
Rio 2016 Olympic and Paralympic Games Caution

From 5th August unti 18th September, the Olympic and Paralymic Games will be held in Rio de Janeiro, Brazil, the first Games to be held in South America.

Over 500,000 tourists, spectators and athletes are expected to visit Rio during the games and unfortunately, criminals may try to take advantage by committing card fraud.

If you plan on traveling to the Games, please take the following precautions to keep your funds safe:
  • Advise the Credit Union of your travel plans before leaving;
  • Review your statements for any unusual transaction history; and
  • Contact the Credit Union immediately if you suspect fraud has occurred on your card.

For more information on protecting your funds while travelling, please visit https://travel.visa.com/apcemea/au/en/traveltips.html.




16 March 2016
Criminals use social media details in sophisticated ransomware attack

Criminals are using information from social media websites to trick people into opening malicious attachments in emails that appear to come from Australia Post.

People who do open the attachments risk downloading ransomware called 'Locky' to their computer. This ransomware locks targeted files on the computer and demands that victims pay a ransom of hundreds of dollars for the digital key to unlock them. The criminals demand the payment be made in the digital currency bitcoin.

The ransomware captures personal details from social media, such as name, location, workplace and job description, and incorporates them in the fake message to mislead users into believing the email is legitimate.

The email claims that a package has arrived for the recipient at an Australia Post store, and asks them to print out the attachment that it describes as a 'shipment confirmation'.

Australia Post warned in February this year that it would never send users an email asking them to click on an attachment. If you receive one of these emails, you are advised not to open the message or any attachments and to advise the Australian Cybercrime Online Reporting Network.

This Stay Smart Online Alert incorporates some tips that may help you recover in the event of a ransomware attack. You should also review the personal details you make publicly available on social media networks and consider limiting the number of people who can access sensitive data that may be misused.


If you believe you may have fallen victim to this scam, please contact us immediately.




18 February 2016
Police issue warning on cold calling scams - Fraud and Cybercrime Squad

The NSW Police Force Fraud and Cybercrime Squad is warning members of the public to be aware of cold calling scams, in particular ‘long-held’ call scams, after a number of recent reports.

Cold calling scams involve a phone call from a person claiming to be a representative from a business – such as a retail store, a telecommunications company or a financial institution – who seek to verify personal details, obtain banking details or gain access to your online accounts.

They include ‘long-held’ call scams whereby criminals cold call a potential victim on a landline telephone then stay on the line and pick up further calls that person makes.

Commander of the Fraud and Cybercrime Squad, Detective Superintendent Arthur Katsogiannis, said people falling victim to this scam often thought they were calling direct to their financial institution or, in some cases, the police.

“The scammers will call the victim, tell them they are from a business where a person has attempted to use their credit card fraudulently, and advise they should call their bank immediately to cancel the card,” Det Supt Katsogiannis said.

“When the victim hangs up believing that the call has been terminated, the scammers stay on the line at their end keeping the call active.

“The victim then calls their bank but is instead talking to the scammers who will ask questions to obtain account details, passwords and personal information to allow them access to the victim’s accounts.

“In some cases, victims have been convinced to transfer their money to another nominated account for safe keeping by scammers purporting to be from the police.”

Detective Superintendent Katsogiannis said victims had lost more than half a million dollars to the scam, with those funds believed to have gone overseas.


Investigations by police are continuing.

Police urge members of the public to take the following precautions to reduce the risk of being scammed by cold callers:


  • Never provide your personal or banking details to a person who cold calls you;
  • Be careful what personal information you provide over the phone, even if you are the person who made the call;
  • Never provide your financial PIN or account passwords over the phone;
  • If you have been cold called on a landline, consider making any further calls on a different phone or check that the line is free by calling someone you know first;
  • If you are suspicious about the credentials of a person on the phone, ask questions – what’s their street address, telephone number, Australian Financial Services Number – if they avoid answering then it could be a scam;
  • Never transfer funds to a person or an account you do not know.

To find out more information about scams, to report a scam or to find out other ways to protect yourself, visit www.scamwatch.gov.au

If you believe you may have fallen victim to this scam, please contact us immediately.