Blog

We’ve seen a jump in fraud attempts recently, and it’s not just one scheme. Scammers are impersonating our leadership team, sending phishing texts, posing as tech support, and running fake check scams – sometimes all in the same week. We wanted to walk through what these look like so you know what to watch out for, whatever form it takes.

Why Fraud Is On the Rise

Scammers now have more tools than ever: data from breaches, AI-generated writing that sounds convincing, and spoofed phone numbers that show up as legitimate. A message can look and sound exactly like it’s coming from your credit union, a family member, or even your boss.

That’s exactly why it matters to know the patterns, not just the specific scams. Once you recognize the shape of a scam, it gets a lot easier to spot new variations before they catch you off guard.

Executive Leadership Impersonation

This is the one we’ve seen spike recently. A scammer poses as a Heritage executive, usually by text or email, and reaches out directly to an employee or member with an urgent request.

How it plays out:

1. A message arrives claiming to be from an executive, often referencing a real name and title pulled from a website or LinkedIn.
2. The first ask seems small. Something like “Are you free? I need a quick favor.”
3. Once you respond, the real request shows up: buy gift cards, wire money, or send account information.
4. The message often pushes urgency and secrecy: “This has to be done today.”

Red flags:

• An unfamiliar email address or phone number, sometimes one letter or number off from the real one
• Requests for wire transfers or gift cards
• Pressure to keep things quiet or act immediately
• Wording that doesn’t quite sound like the person it claims to be from

HCCU will never text or email you asking you to wire money or send us your account credentials. If you get a message like this, don’t reply. Contact us directly through a trusted number or email address.

Phishing Emails and Texts

Phishing is the broader category executive impersonation often falls under, but it also shows up in plenty of other forms: fake purchase notifications, "your account has been locked" alerts, or messages claiming to be from the IRS or a well-known company.

Red flags:

• Links that don't match the company's actual website when you hover over them
• Urgent language pushing you to click immediately or lose access
• Requests to confirm your password, PIN, or account number by email or text
• Generic greetings like "Dear Customer" instead of your name

HCCU will never ask you to confirm your full account number, PIN, or online banking password over email or text.

Tech Support Scams

These usually start with a pop-up warning that your computer is infected, or a call from someone claiming to be from Microsoft, Apple, or your internet provider. They'll ask for remote access to your device, then use that access to steal information or install malware.

Red flags:

• Unsolicited calls or pop-ups claiming your device has a virus
• Requests for remote access to "fix" the problem
• Pressure to pay immediately for a support subscription or software
• Requests for payment in gift cards or cryptocurrency

Real tech companies don't cold-call you about a virus on your computer. If you get a call like this, hang up and contact the company directly.

Fake Check and Overpayment Scams

This one usually shows up around online sales, job offers, or rental deposits. Someone sends you a check for more than the agreed amount and asks you to deposit it, then wire back the difference. The check later bounces, and you're on the hook for the full amount.

Red flags:

• A check for more than what was agreed upon
• A request to wire back the "extra" amount
• Pressure to act quickly, before the check has time to fully clear
• A buyer, employer, or landlord you've never met in person

Banks are required to make funds available quickly, but that doesn't mean a check has actually cleared. Fraudulent checks can take weeks to bounce.

What to Do If You Suspect Fraud

• Pause before you act. Legitimate requests can wait long enough for you to verify them.
• Verify independently. Use a phone number or contact method you already know is real, not one provided in the suspicious message.
• Don't send money or information based on pressure alone. Urgency is the scam's main tool. Slow down, and it usually falls apart.
• Report it. You can report fraud to the FTC at reportfraud.ftc.gov, and let us know if the message claimed to involve HCCU.
• Contact us right away if you've already shared information or sent money, so we can help secure your accounts.

How Heritage Community Credit Union Protects You

We're actively monitoring for scams targeting our members and staff, and we'll keep sharing what we learn as new tactics show up. But the strongest protection is still the same simple habit: pause before acting on any unexpected message asking for money or personal information, no matter who it claims to be from.

If you ever get a message that seems off, whether it claims to be from Heritage CCU leadership or anywhere else, call us. We'd rather answer a few extra questions than have a member lose money to a scam.

To learn more about protecting yourself and your accounts, visit our Fraud and Scam Prevention Center.

Fraud and Scam Prevention Center