July 19, 2011

SPECIAL ALERT

TO: CHIEF EXECUTIVE OFFICER (also of interest to Security Officer)
Subject: Fraudulent "ACH and WIRE TRANSFERS" E-Mails
Summary: Fraudulent emails claiming to be from the FDIC are in circulation.

The Federal Deposit Insurance Corporation (FDIC) has received numerous reports of fraudulent e-mails that have the appearance of being from the FDIC. The e-mails appear to be sent from various "@fdic.gov" e-mail addresses, such as "protection@fdic.gov," "admin@administration.fdic.gov," or "service@admin.fdic.gov." They have various subject lines such as "Update for your banking account," "ACH and Wire transfers disabled," and "Banking security update." The fraudulent messages state:

"Dear clients,

Your account ACH and Wire transactions have been temporarily suspended for your Security, due to the expiration of your security version. To download and install the newest Updates, follow this link. As soon as it is set up, your transaction abilities will be fully restored. Best regards, Online security department, Federal Deposit Insurance Corporation." These e-mails and links are fraudulent and were not sent by the FDIC. Recipients should consider these e-mails an attempt to collect personal or confidential information, or to load malicious software onto end users' computers. Recipients should NOT access the link provided within the body of the e-mails and should NOT install any related files or software updates. Financial institutions and consumers should be aware that these fraudulent e-mails may be modified over time with other subject lines, sender names, and narratives. The FDIC does not directly contact bank customers, nor does the FDIC request bank customers to install software upgrades. Information about counterfeit items, cyber-fraud incidents, and other fraudulent activity may be forwarded to the FDIC's Cyber-Fraud and Financial Crimes Section, 3501 North Fairfax Drive, CH-11034, Arlington, Virginia 22226, or transmitted electronically to alert@fdic.gov. Questions related to federal deposit insurance or consumer issues should be submitted to the FDIC using an online form that can be accessed at http://www2.fdic.gov/starsmail/index.asp. For your reference, FDIC Special Alerts may be accessed from the FDIC's Web site at www.fdic.gov/news/news/SpecialAlert/2011/index.html. To learn how to automatically receive FDIC Special Alerts through e-mail, please visit www.fdic.gov/about/subscriptions/index.html.

Sandra L. Thompson
Director
Divison of Risk Management Supervision

NOTE: As a security precaution, the FDIC does not post to its Web site electronic images of fraudulent items that have been counterfeited. This is to avoid attempts by others to use these instruments to facilitate additional fraud. Financial institutions can view images of the fraudulent items using the FDIC's free, secure Web site, FDICconnect. (See more information about FDICconnect at http://www.fdic.gov/news/news/financial/2006/fil06032.html.) Printed copies of each Special Alert and its attachment(s) may also be obtained from the FDIC's Public Information Center (telephone: 1-877-275-3342 or 703-562-2200; fax: 703-562-2296; or e-mail: publicinfo@fdic.gov).

Distribution: FDIC-Supervised Banks (Commercial and Savings)

January 13, 2011

We have been alerted of a scam that The Federal Deposit Insurance Corporation (FDIC) has received numerous reports from consumers who received an e-mail that has the appearance of being sent from the FDIC. The e-mail informs the recipient that "in cooperation with the Department of Homeland Security, federal, state and local governments…" the FDIC has withdrawn deposit insurance from the recipient's account "due to account activity that violates the Patriot Act." It further states deposit insurance will remain suspended until identity and account information can be verified using a system called "IDVerify." If consumers go to the link provided in the e-mail, it is suspected they will be asked for personal or confidential information, or malicious software may be loaded onto the recipient's computer. This e-mail is fraudulent. It was not sent by the FDIC. It is an attempt to obtain personal information from consumers. Financial institutions and consumers should NOT access the link provided within the body of the e-mail and should NOT under any circumstances provide any personal information through this media.

January 15, 2010

We have been alerted of a scam that forces a pop-up to appear on legitimate banking websites.
This message tricks users into giving up passwords, account numbers and other sensitive information. Sometimes the message appears after one has logged into an online banking or other financial website. The message may also ask the user to participate in a survey to win prizes. Please know that The Peoples Bank will never present you with a pop-up message asking for sensitive information.