Security Bulletin: Voice-based “Vishing” Attack Targets Financial Institutions

Utah Community Credit Union has been alerted to a voice-based scam — commonly known as “vishing” — where fraudsters are using the National Credit Union Administration (NCUA) name in an attempt to obtain personal financial information from consumers. The call informs consumers that their debit cards have been compromised and instructs them to follow prompts and enter their personal information, including sensitive financial data and identification details. 

What is Vishing? – The term “vishing” refers to a technique for stealing information or money from consumers using telephone systems. The term comes from combining “voice” with “phishing”, with phishing being online scams that get people to give up personal information.

If you receive this type of call please hang up the phone. UCCU will never call and ask for such information. If you did receive a call like this and provided your account or card information please contact us at (800) 453-8188 immediately.

What can you do to protect yourself?

  • Be suspicious of any unsolicited calls where personal information is requested. Be just as suspicious of phone calls as you are of e-mails asking for personal information.
  • Don’t trust caller ID. Just because your caller ID displays a phone number or name of a legitimate company you might recognize, it doesn’t guarantee the call is really coming from that number or company.
  • Call them back. If someone is asking for information, tell them you will call them back. In the case of Utah Community Credit Union, call us using our number from your records.
  • Never provide credit card information or other private information to anyone who calls you.
  • Register your number with the National Do Not Call registry at Most legitimate telemarketers obey the rules and laws about contacting consumers.

If you were contacted by this vishing scheme you may contact the NCUA’s Consumer Assistance Center Hotline at 800-755-1030 or by email at to report the details of the scam. They have operators available to take calls Monday through Friday from 8 a.m. to 5 p.m. Eastern Time.

You may also report vishing to the FTC on their website or call them at (888) 382-1222. The FTC will ask for the number and name that appeared on the caller ID, the time of day you received the call and what was said or heard in any recorded message. If you think you’ve been a victim of a vishing attack you can also contact the Internet Crime Complaint Center.

Share Button

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.