Scam Awareness
Scammers are becoming more sophisticated every day. Learn to recognise the warning signs and protect yourself and your money.
Common Scam Types
Fraudsters use various tactics to trick you into sharing sensitive information or transferring money. Understanding their methods is your best defense.
Phishing Emails
Fraudulent emails that appear to come from your bank, asking you to click a link and enter your login credentials on a fake website. These emails often create a sense of urgency, warning that your account will be closed unless you act immediately.
Vishing (Phone Scams)
Scammers call pretending to be from the bank's fraud department, claiming there is suspicious activity on your account and asking you to confirm your password, PIN, or one-time codes over the phone.
Smishing (SMS Scams)
Text messages that appear to be from your bank, containing a link to a fake website or a phone number to call. The message may claim there is a problem with your account or that a transaction needs your confirmation.
Social Engineering
Manipulative tactics where scammers build trust over time, often through social media or messaging platforms, eventually convincing you to share financial information or send money.
Fake Banking Websites
Websites that look identical to the Whitestone Trust Credit Union login page, created to capture your username, password, and other sensitive details. Always check the URL in your browser's address bar.
Prize & Lottery Scams
Messages claiming you have won a prize or lottery but must pay a processing fee or provide bank details to receive your winnings. Legitimate prizes never require upfront payment.
How to Recognise Phishing and Social Engineering
Phishing attacks and social engineering rely on deception rather than technical hacking. Here are the most common warning signs:
Warning Signs
- Messages that create urgency: "Your account will be suspended in 24 hours"
- Poor grammar, spelling mistakes, or unusual formatting
- Email addresses that look slightly off (e.g., @dbhacu-secure.com instead of @dbhacu.com)
- Requests to share your password, PIN, or one-time codes
- Links that don't match the official website address when you hover over them
How to Verify
- Always type www.dbhacu.com directly into your browser
- Call our official phone number to verify any communication you receive
- Check your account by logging in through the official website, not through any link
- Forward suspicious emails to [email protected] for investigation
SMS and Email Scam Examples
Here are examples of common scam messages. If you receive anything similar, do not respond. Instead, report it immediately.
Fake SMS Example
"DBH Alert: A new payee was added to your account. If this was not you, verify your identity immediately: http://dbh-secure-verify.com"
This is a fake message. The link does not lead to our website, and we never send links asking you to verify your identity via SMS.
Fake Email Example
From: "Deutsche Bank" [email protected]
Subject: URGENT: Unusual Login Detected
"We detected a login from a new device. If this was not you, click below to secure your account immediately."
Note the sender email address is not from our official domain. We never use urgency to pressure you into clicking links.
What Whitestone Trust Credit Union Will NEVER Ask For
If anyone claiming to be from our bank asks for any of the following, it is a scam. Hang up, delete the message, and report it.
Your Password
We will never call, email, or text you asking for your online banking password.
Your PIN
Your 4-digit transaction PIN should never be shared with anyone, including bank staff.
One-Time Codes
We will never ask you to read back a one-time verification code sent to your phone or email.
Full Card Details
We will never ask for your full card number, CVV, and expiry date over the phone or via email.
How to Protect Yourself from Scams
Pause and Verify
Scammers rely on creating panic. If a message feels urgent, take a moment to stop and think. Contact the bank directly using the official phone number on our website — not the number provided in the message.
Don't Click, Type It
Never click on links in unsolicited emails or text messages. Instead, open your browser and type www.dbhacu.com directly into the address bar to access your account.
Enable Every Security Feature
Turn on multi-factor authentication, login notifications, and transaction alerts from your dashboard. These provide an additional layer of protection even if your credentials are compromised.
Talk to Someone You Trust
If you are unsure whether a communication is genuine, discuss it with a family member or trusted friend before taking any action. A second opinion can help you spot red flags.
Think You've Been Targeted?
If you believe you have received a scam message or shared sensitive information, report it immediately.