The FBI warns account takeover fraud is rising, with cybercriminals hijacking bank accounts and stealing millions. Learn how these scams work and how to protect yourself.
To learn more please visit: https://bankingjournal.aba.com/2025/12/fbi-issues-alert-about-account-takeover-fraud/
As October is Cyber Security Awareness Month and in a continuing effort to keep you, your accounts and your personal, private information safe and secure we want to alert you to the growing threat of fraudulent text scams.
Customers may receive text messages claiming to be from their financial institution stating,
“For security reasons, your account has been restricted” or some similar messaging.
The message urges customers to click on a link that goes to a fake website posing as their institution. If you have received this message, please:
As an added measure of security you may consider updating your username and/or password within Coastal Heritage Bank Online or Mobile Banking.
As malicious activity continues to grow, please remember to be ever vigilant and look for signs of scam communications, including:
Never assume a text message is from a trusted source. Scammers often spoof numbers of legitimate businesses to make spam texts appear authentic.
Please keep in mind:
A valid text alert from Coastal Heritage Bank’s Fraud Prevention Center will always be from a 5-digit number (37268) and NOT a 10-digit number resembling a phone number, or text that appears from an email address.
We will never request that you Zelle funds to keep your account or funds safe.
If you have any doubt about a text message or call you have received, please call us at 800-695-1300 or visit your local branch office and we will be happy to address any concerns.
Coastal Heritage Bank was made aware of a trend in the online banking industry which has resulted in an increase of fraudulent payments in the Person to Person (P2P) network space at other banks. We have been informed this is common in Zelle, a fund transfer service currently offered to our consumer customers. In the vast majority of reported cases, online banking platforms are sending one-time passcodes to the customer, and through a series of social engineering and pre-texting initiatives, fraudsters are successfully obtaining the one-time code needed to complete the payment.
Many times, the fraudster is also spoofing the financial institution’s phone number or pretending to call from the bank’s contact center. Fraudsters either have online banking credentials already through other means (social engineering, other site breach using same credentials, malware, etc.) or are using the forgot password functionality and are convincing the user the process is done to help “validate themselves.” The calls are often regarding a fictitious transaction and the fraudster calls from the banks phone number pretending to be the banks fraud department.
Coastal Heritage Bank would like to remind you that we will NEVER call or text you asking for one-time codes. One-time codes will only be presented to you for activity that YOU have initiated.
We would like to take this time to encourage separate passwords for online banking and personal email. For best protection, have separate, randomly generated passwords for all of your sites. Fraudsters will commonly obtain credentials from other online portals or black-market sales which originated from other sites and then try those same credentials in online banking.
If ever in doubt regarding a phone call, it’s best to hang up and call us back at a phone number posted on our website, 800-695-1300.
An increase in telephone scams including individuals claiming to be from a “Bank Fraud Department” has been recently noted.
In one instance the fraud scheme was initiated through an email that the individual received from a fictitious “PayPal” email address alerting the individual that a substantial charge was going to be processed against the individual’s bank account. The PayPal email directed the customer to call a fictitious PayPal phone number if they did not authorize the charge. The individual called the fictitious PayPal phone number and the representative told them that they would be receiving a call from the Bank Fraud Department to resolve the issue. Once contacted by phone the fraudulent “representative” then probed for additional private financial information.
Please be aware and always be on guard to protect your private information.
A few important points to keep in mind:
For additional information please visit: https://coastalheritagebank.com/2017/09/07/be-aware-phone-scams/
Please keep in mind Coastal Heritage Bank will never contact you without you first initiating a request.
The Internal Revenue Service (IRS) has launched its “Identity Theft Central” webpage to provide 24/7 access to online information regarding tax-related identity theft and data security protection. Tax-related identity theft occurs when someone steals personal information to commit tax fraud.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages taxpayers, tax professionals, and businesses to review the IRS news release and CISA’s Tip on Preventing and Responding to Identity Theft for more information.
This product is provided subject to this Notification and this Privacy & Use policy.
October is cyber security month in the U.S., and in recognition of that, we are going to take some time over the next few weeks to explain some basic threats and terms that everyone needs to know to keep themselves safe online.
Let’s start with “phishing”.
There are many different types of fishing: deep sea fishing, ice fishing, fly fishing… you get the point. But today, we want to talk about phishing with a “ph”—and the related problem of “spear phishing.”
Phishing is when a fraudster sends you texts, emails, or other messages with the intent of tricking you into responding in some way. He will often include a malicious attachment or link in the message. If you open the attachment or click on the link, the scammer can gain access to your device.
From there, the possibilities are endless. He can install ransomware that will lock you out of your computer. He can steal your data or install software that allows him to track all of your activity, including the passwords you enter. He can gain access to your bank accounts, credit cards, and the most personal info you have stored.
Spear phishing is a more personalized version of the same scam. In this case, instead of receiving an email from a random individual, the scam artist will send you a personalized message that appears to come from a trusted source. It could look as though it comes from a friend, a business partner, a social media acquaintance, or even your bank. There are many variations of the scam, but the scam artist will often tell you a story to trick you into giving up your private information. For example, the fraudster may:
So what are the warning signs of such scams?
Phishing messages often look legitimate—as though they came from a person or company you know. It’s easy to spoof a logo, and scammers will often make their messages look like they are from a trusted source.
What can you do?
Protect your devices by using anti-virus and anti-malware software. Set the software to update automatically.
Don’t assume that a message that looks like it is from a friend or business associate is real. Call or email the person or company to confirm before ever clicking on a link or opening an attachment.
Most importantly, if you have any doubt—don’t click.
If you have been a victim of this online scam or any other fraud, report it to the FBI’s Internet Crime Complaint Center at www.ic3.gov or call your local FBI office.
FBI Portland
Beth Anne Steele
(503) 460-8099
Even in today’s digital and mobile world where electronic money transfers are common, consumers and businesses may still prefer the assumed security of paper cashier’s checks or official bank checks for large or major payments. Recipients generally prefer one of these checks over a personal check because the financial institution presumably has already collected the funds from the party purchasing the cashier’s checks or official bank checks. This means the payment is guaranteed, unless the check is counterfeit, so there are risks to consumers and businesses from these types of paper instruments, as well.
Protect yourself from fake check scams with these tips from FDIC Consumer News.
Every year, thousands of people lose money to telephone scams — from a few dollars to their life savings. Scammers will say anything to cheat people out of money. Some seem very friendly — calling you by your first name, making small talk, and asking about your family. They may claim to work for a company you trust, or they may send mail or place ads to convince you to call them.
Please visit the Federal Trade Commission bulletin on phone scams here:
https://www.consumer.ftc.gov/articles/0076-phone-scams
Please keep in mind Coastal Heritage Bank will never contact you without you first initiating a request.
Scammers are creative, cunning and cruel — and they often mix in a little truth to spice up their big lies. This scheme shows just how low they can go.
Government imposters claiming to be with the FTC, or another agency like the fictitious “Consumer Protection Agency,” are calling to inform people they have won a huge sweepstakes from the Make-a-Wish Foundation, a well-known charity for very sick children. To get the money, the callers say, the “winner” must first pay thousands of dollars to cover taxes or insurance on the prize. The call may even come from a 202 (Washington, DC) area code to appear credible — since the headquarters for the FTC and most federal agencies are in DC.
This is just a scheme using the well-known names of Make-a-Wish and the FTC to rob thousands of dollars from people. Once you wire money or send banking information, you will never see your money again.
Here are a few facts and tips to protect yourself and others:
Lisa Lake
Consumer Education Specialist
Federal Trade Commission
