It Can Happen to Anybody

Most people have experienced fraud with an unauthorized transaction, or they know someone who was victimized by a common scam. Keep reading for instructions to report fraud and for tips to reduce risk – including how to identify phishing email

Unauthorized Debit or Credit Card Transaction

To report unauthorized debit or credit card transactions, call Cardholder Services at 1-855-448-8197 (available 24/7) to start the process. You are not liable for unauthorized transactions if you report them within 60 days.

Your card will be closed permanently when you report unauthorized activity, so we recommend that you first disable your card (temporarily) with Card Controls in the CFCU Mobile Banking app, then contact the company to get information or resolution about the charge.

Free trial periods for subscription services are commonplace. If you notice an unauthorized transaction, first check if it is from a company that offered a free trial. It is possible that the service was not cancelled within the trial period, so the regular subscription charge was assessed.

Unauthorized ACH or Check

To report unauthorized ACH or check transactions, a Written Statement of Unauthorized Debit (WSUD) must be completed and notarized at one of our branches. If you are unable to visit a branch, please contact us for further assistance.

If checks have been lost or stolen, then you can submit a stop payment on those check numbers from Online Banking. If you do not use Online Banking, please contact us for further assistance.

Tips to Reduce Risk

There are a few simple steps you can take to decrease the chance that you experience an unauthorized (or unwanted) transaction.

  1. Complete your online shopping with well known online stores, preferably those with brick-and-mortar locations near you.
  2. Connect your debit or credit card to a Digital Wallet (like Apple Pay) for contactless and more secure in-store and online transactions.
  3. Lower your debit card daily transaction limit with Card Controls in the CFCU Mobile Banking app. You can increase the limit in real-time if you need to make an irregular, larger purchase.
  4. Be the initiator when signing up for new services or making purchases, both online and in-person. Be cautious when you are approached or prompted to buy something you were not planning to buy. Verify the company is established, trustworthy, and protects your personal information before doing business with them.
  5. If you sign up for a free trial, cancel the subscription ASAP if you do not intend to renew it at cost. Be cautious with free or greatly reduced trials of dietary supplements or beauty products ordered online.

Watch Out for Common Scams

If you or a loved one encounter any of these situations, stop immediately. Do not proceed. Do not provide personal information. Most importantly, do not send money or form of payment.

Computer Support Scam

A prompt on your PC states that there is a problem (like a virus) and that you should call a support number to resolve the issue, often claiming to be Microsoft Support. Do not call the support number or provide remote access to your computer.

The scammers intend to capture your personal information and obtain your passwords (keylogger malware). Instead, delete your browser history. When you need computer support, start with a person you know or a local business.

Gift Card Scam

Connected with the Overpayment Scam, you are asked to purchase gift cards, then provide the gift card numbers by email. You get to keep some money for yourself as payment for your services. There is never a legit situation where that makes sense.

Overpayment Scam

You receive a check payment for completing a task and are asked to return part of it by wire or P2P service (like Western Union or Venmo). Before the check is returned as fraudulent, the money you returned is sent and irrecoverable.

Relative In Need Scam

You receive a call or email concerning a relative who has been in an accident or arrested, typically in a foreign country, and are asked to send money to pay for medical bills or jail bonds. This scam is commonly directed at grandparents with a grandchild in trouble.

Sweetheart Scam

You meet someone online from a foreign country. You message one another. As the relationship develops, you are asked to send money to help in a sad situation. This is a tough one because you are invested emotionally, but sending money is the biggest red flag of every scam.

Tax Audit Scam

You receive a call about a tax problem and are told to pay in order to avoid a lien, garnishment, fines, or even imprisonment. Do not be alarmed or frightened by the threats. Hang up and do not provide personal information. You will receive a letter from the IRS if there is a concern about your tax return or tax payments.

Identify Phishing Email

Email is the most common communication method for criminals to obtain the information needed to commit financial fraud or theft. When reviewing email that has an attachment or link, you can quickly determine its legitimacy in 3 steps.

Check 3 Things

  1. Email Address: Identify the sender's ("from") email address in the email header. It should match the website of the company or service provider. Our website is, so email from Cornerstone will end with The sender's display name might look right, but the email address is the best giveaway.
  2. Grammar: Look for grammatical goofs such as misspelled words, incorrect capitalization, and odd phrases – all common indicators of fraudulent email.
  3. Link URL: Review the web address (URL) of a link by hovering (not clicking) over the link or button. The web address should make sense and match the website of the company or service provider. You may not be able to hover over a link on a touch device like a phone.

Delete Immediately If Suspicious

If you think an email is suspicious, it is most important to delete immediately. Do not open any attachment or click any link. Do not forward the email to anyone else. Just delete it or mark as spam. If you want to show someone else the email, then take a screenshot and send the picture.