Home
Come Join Us
Locations & Hours
We're open 24/7
VISA Debit Card
Products & Services
Loan Rates
VISA Credit Card
Financing Partners
Savings Rates
Shared Branching
Protect Your Identity
Rainbow Insurance
Opinion Survey
Contact Us


Serving all of Oxford
& Androscoggin
Counties and ready
to serve you,
Rainbow has
branches in
Lewiston, Auburn, Mechanic Falls
& South Paris

Home BankingBill PayerCar Loans On-LineMortgage On-LineCUe-Statement

Current Phishing Scams 

Update 4/18  |  Update 4/19  |  Update 4/20 | Update 5/09
(Please also see at the bottom of this page information from NCUA and what you can do)


Below you will find a series of events that have happened over the past week(s).   The most recent attack on 4/20 was directed at credit union members in general, not just Rainbow FCU members.  Each attack is unique; this last one especially, by rewarding the person with $50 for simply filling out a on-line survey.  Sadly, many people will be duped.  We're hoping our members will not be.

We will not send you any any e-mails concerning the security of your account.  These events are unfortunate, but they are the actions of people trying to defraud you.  This is the first time that the members of Rainbow FCU have been attacked by this type fraudulent activity, but it has happened to many of the financial institutions throughout the country.  We are not alone.

To our Rainbow Members:  E-Mails are not secure!   We will not contact you via an e-mail to ask you to provide any account or personal information ever.  No legitimate financial institution would.    We are sure the deranged minds of these people who are trying to defraud you will continue to try other types of e-mails to get you to click on their links.  If you don't open the e-mail, if you don't click on the links, if you delete it from your system - they will go away.  From our end we are trying to track down where these are coming from.  Unfortunately it is from all around the world.  Stay smart, stay safe, and please call us if you have a question.
 

UPDATE 4-18-07- Another flurry of e-mails are circulating, referring to the "security system update".  They are telling you due to the recent problems we (Rainbow) are trying to improve the level of member service and to please click on the link below.

 

UPDATE 4-19-07- As of this morning we are aware of more e-mails to our members (and non-members) advising them that their Home Banking and/or Bill Payer has been deactivated, but the member can renew their service by clicking on the link.

 

UPDATE 4-20-07-  Although not directed toward Rainbow FCU members, our members should still be wary.  It was in the form of a on-line survey that was
e-mailed to credit union members.   It asked several simple questions about their opinions of home banking, and rewarded the survey taker with $50 to be debited immediately into their credit union account.  This is a pdf of what this survey looks like and how blatant they are in requesting account and PIN information.
pdf of scam
 
UPDATE 5-09-07-  The text of the bogus e-mail goes like this:
Dear Customer,
CONGRATULATIONS !!!
You have been chosen by Rainbow Federal Credit Union online department to take part in our quick and easy reward survey. In return we will credit $80 to your account - Just for your time!
Every month, 12,000 selected Members who complete certain transactions with the federal credit union are chosen to take part in this $80 reward survey. At Rainbow Federal Credit Union, we want to know how you feel about the service levels as well as the products and services we provide. We welcome your comments at any time. You can also participate in a variety of surveys we perform. By regularly surveying the Membership, we are better able to serve your needs. Your participation in these surveys gives you a voice and provides a convenient way for you to express your likes, dislikes and needs.
We kindly ask you to spare two minutes of your time in taking part with this unique offer!
To continue click or copy in your explorer address bar the link below:

At that point they then provide a link.  We know our members are smarter than this, but we still feel it's important to warn you.  It looks legitimate, and it's tempting with the offer of $80 deposited directly into your account.  But no financial institution, large or small is going to do that, and certainly not monthly and certainly not to 12,000 people.  As in the past, don't click on the links and delete the mails from your system.

Another alert this day is regarding the identify theft relating to the recent TJX Companies data breach.   A phishing e-mail is circulating, discussing the recent security breach, and  warns that "magnetic strip information was being stored and your PIN may have been captured" and "strongly" urges NCUA's "members" to update their information within the next 48 hours.

If you responded to such an e-mail and provided any confidential account information, please notify your credit union immediately of the scheme. You should also change your account’s PIN, and take any additional action recommended by your credit union to protect your account.

Loss Prevention Recommendations:

If you receive an unsolicited e-mail alleging to be from the NCUA, take the following steps:

  • NCUA does not ask credit union members for personal account information.
  • Anyone who has received a fraudulent phishing e-mail purportedly from NCUA should forward the entire e-mail message to Phishing@ncua.gov.
  • Do not open any attachments to the e-mail, in case they contain malicious code that will infect your computer.
  • If you have received this, or a similar hoax, please file a complaint at www.ic3.gov.

THESE ARE ALL SCAMS
IF POSSIBLE DO NOT OPEN THE E-MAIL
DO NOT CLICK ON THE LINK,
DO NOT REPLY TO THE E-MAIL.
Delete it from your mailbox!

This Credit Union is Federally-insured by the National Credit Union Administration