SCENARIO/METHOD: Social Security Phishing
Several UMCU members have reported receiving an automated call identifying themselves as being from "The U of MI (pronounced "my") and to enter in their social security number. Take notice: this call is not from UMCU. It is a phony call and an attempt to gather your personal information.
Additionally, the Social Security Administration has issued a warning about a new e-mail scam being circulated with the subject, “Cost-of-Living for 2007 Update.” The message appears to be from the Social Security Administration and provides information about the benefit increase for 2007. It contains the following, “NOTE: We now need you to update your personal information. If this is not completed by November 11, 2006, we will be forced to suspend your account indefinitely.” The reader is then directed to a Web site designed to look like Social Security’s Internet Web site. Once directed to the phony Web site, the individual is asked to register for a password and to confirm their identity by providing personal information such as the individual’s Social Security number, bank account information, and credit card information.
Inspector General O’Carroll recommends people always take precautions when giving out personal information. “You should never provide your Social Security number or other personal information over the Internet or by telephone unless you are extremely confident of the source to whom you are providing the information,” O’Carroll said.
To report receipt of this e-mail message or other suspicious activity to Social Security’s Office of Inspector General, please call the OIG Hotline at 1-800-269-0271. A Public Fraud Reporting form is also available online at OIG’s Web site, www.socialsecurity.gov/oig.
Recommendations:
- Do not click on the link in the suspect e-mail.
- Do not open an attachment to an unsolicited e-mail unless you have verified the source.
- Do not be intimidated by an e-mail or caller who suggest dire consequences if you do not immediately provide or verify information.
- If you believe the contact is legitimate, go to the company’s web site by typing in the site address directly or using a page you have previously book marked, instead of a link provided in the e-mail.