Digital Fraud Series - (Part 1 of 2)

Posted in Board Brief on Feb 21, 2024

Text Fraud

Who Can You Trust? Fraud continues to be rampant. It now includes attacks on your phone!
This Board Brief demonstrates the difference between a text you can trust (KTFCU Falcon Alert) and one you can’t (a Fraudulent Text). Let’s look at the difference.

FALCON ALERT (TRUSTED COMMUNICATION)

• Sender Address – Most legitimate texts from a financial institution like Falcon Alerts (which are tied to your KTFCU credit or debit cards) have a five-digit code (86975 is the example).
• Information Offered – It suspects fraud and is asking you to respond (YES or NO) to a specific situation (the a...

There's an App for That! Not Necessarily.

Posted in Board Brief on Jan 17, 2024

Downloading Mobile Apps: Do's & Don'ts

In December’s Board Brief we shared with you a released from NSYTRS regarding a fraudulent mobile app claiming the "NYS Retirement" App was available on Google Play. That App was a fraud.

Why would Google or Apple allow fraudulent Apps on their App stores? The quick answer; they try not to. They make every effort to detect such Apps before they are made available. As much as they try, bad actors get through. Once an App is discovered, they get removed.

Here are some things to consider and be aware of regarding downloading Apps. When you go to either Goog...

NYSUT Retirees Beware!

Posted in Board Brief on Dec 20, 2023

NYSTRS Mobile App Scam

On April 13, 2023, NYSTRS released a statement regarding a fraudulent mobile app claiming the "NYS Retirement" App is currently available on Google Play (https://www.nystrs.org/About-Us/Press-Room/Headlines/Beware-of-Fake-NYS-Retirement-Mobile-App). Thankfully, this App is no longer available on Google Play or the App Store. The “NYS Retirement” App was not affiliated with NYSTRS. Fraudulent Apps like this attempt to steal your personal data.

Please note that NYSTRS does offer a valid, secure mobile app titled "NYSTRS Mobile". NYSTRS suggests you periodically visit the...

Password Manager Series (Part 5 of 5)

Posted in Board Brief on Nov 15, 2023

What are the things I must be aware related to Password Managers (PM)?
Regardless of PM you use, keeping your Vault login credentials safe and highly unique are vital. Do not give your Vault login credentials to anyone and do not store it electronically (if you can avoid it). The convenience of browser and universal PMs (like Apple, Facebook and Google login) come with an increased level of risk if your login credentials are stolen.

As for managing the websites you log into and the Apps you use, here are some good practices.

• Use random, strong, unique passwords.
• Where possible, let the PM ge...

Password Manager Series (Part 4 of 5)

Posted in Board Brief on Oct 18, 2023

*In nearly all cases, a Password Manager (PM) is better than no PM. However, there are differences between the types of PMs. Which is best for you depends on your online activity and your concern for security.**

• Browser: Chrome, Firefox & Safari all have added a built in PMs. Your login credential to the browser is your access to manage your Vault. They are integrated with the browser and easy to use. Your major risk is if someone gets access to your login credentials to the browser. If they do, they have access to all your login/passwords for your websites.
• Platform: Your login information i...