Every October, Cybersecurity Awareness Month is a reminder to take a closer look at how we protect our personal and financial information. But as scams become more convincing, staying safe online is no longer just about spotting a suspicious email or creating a stronger password. It is also about knowing what to do when a message, call, or alert looks legitimate.
Scammers increasingly impersonate financial institutions, government agencies and familiar businesses to gain your trust. They may know your name, phone number or other personal information. They may even make a call or text appear to come from a legitimate phone number.
At Florida Credit Union (FCU), we want our members to feel confident recognizing these situations and knowing how to respond. Three simple actions can help: pause, verify and protect.
Impersonation Scams Are on the Rise
Impersonation scams continue to be one of the most commonly reported types of fraud. According to the Federal Trade Commission (FTC), consumers reported losing $3.5 billion to imposter scams in 2025, with more than one million reports made during the year.
Some of the costliest scams begin with a fake security alert that appears to come from a financial institution. A scammer may claim there has been suspicious activity on your account and offer to help protect your money. The goal is to create enough fear or urgency that you act before stopping to question whether the request is legitimate.
That is why one of your best defenses against fraud is also one of the simplest: slow down.
Pause: Don't Let Urgency Make the Decision
Scammers want you to react quickly. You may receive a text saying your account has been locked, a call warning that someone is attempting a large transaction, or an email telling you that immediate action is required.
Before responding, pause.
Be especially cautious if someone unexpectedly asks you to:
- Transfer or move money to "protect" it.
- Provide a verification or security code.
- Share your password, PIN or other sensitive account information.
- Send money using an unfamiliar payment method.
- Give them remote access to your phone or computer.
- Keep the situation secret or discourage you from speaking with someone else.
The FTC advises consumers not to share personal or account information or verification codes with unexpected callers and not to give someone remote access to a device.
Even if the person contacting you seems to know information about you or your account, that does not necessarily mean the communication is legitimate.
Verify: Go Back to a Source You Trust
If you receive an unexpected communication about your FCU account, don't rely on the contact information provided in the message or by the caller.
Instead, verify the situation independently.
Open the FCU Anywhere mobile app, type flcu.org directly into your browser, use the phone number on the back of your FCU card, or contact FCU using information you already know and trust. Ask whether there is actually an issue with your account before taking further action.
This is especially important because technology can make fraudulent communications appear convincing. Caller ID information can be spoofed, emails can imitate legitimate brands, and fraudulent websites can closely resemble the real thing.
Verification creates a break between the scammer's request and your response. That extra step may be all you need to uncover the scam.
Protect: Put Your FCU Digital Tools to Work
Good cybersecurity isn't only about reacting to scams. The right tools can also help you keep a closer eye on your accounts.
The FCU Anywhere mobile app gives you access to features that can help you monitor and manage your finances wherever you are.
Monitor your accounts. Regularly review transactions so you can identify activity you don't recognize.
Set up account alerts. Notifications can help you stay informed about activity on your accounts and identify something unusual sooner.
Use card controls. If your FCU debit or credit card is lost, stolen or you notice suspicious activity, card controls give you the ability to turn your card off directly through FCU Anywhere.
Use secure login features. Multi-factor authentication adds another layer of protection by requiring more than a password to access an account.
These tools work best when combined with good cybersecurity habits. The Cybersecurity and Infrastructure Security Agency's Secure Our World initiative recommends several fundamental practices, including recognizing phishing attempts, using strong passwords, enabling multi-factor authentication and keeping software updated.
Protect Your Verification Codes, Too
A verification code may seem harmless because it expires quickly, but it can be an important key to your account.
Scammers may first obtain a password or other account information and then contact you pretending to help with suspicious activity. If they attempt to log in, a legitimate verification code may be sent to your phone. The scammer then asks you to read the code back to them.
Don't do it.
The FTC warns consumers that verification codes are intended to confirm your identity when you are accessing an account. Giving that code to someone else could allow them to gain access instead.
If you receive a verification code you didn't request, don't share it. Instead, contact FCU directly if you are concerned about your account.
What If You Think You've Been Targeted?
Receiving a suspicious call, text or email doesn't necessarily mean your account has been compromised. The important thing is not to engage with the sender or provide information.
If you believe you may have shared sensitive information or notice activity you don't recognize:
- Stop communicating with the suspected scammer.
- Contact FCU directly using a trusted method.
- Review your recent account activity.
- Change compromised passwords and secure affected accounts.
- Report suspected fraud to the Federal Trade Commission when appropriate.
The sooner you act, the sooner you can take steps to help secure your information and accounts.
Pause. Verify. Protect.
Cybersecurity doesn't have to be complicated. Sometimes the most effective defense is simply giving yourself time to think.
Pause before responding to an unexpected request.
Verify the situation through a source you already trust.
Protect your accounts by using the security tools available to you.
Scammers rely on urgency, fear and trust to get people to act. Taking a few extra moments to verify what is happening can make all the difference.
At FCU, we're committed to helping you protect your financial well-being. Stay alert, take advantage of the security features available through FCU Anywhere, and when something doesn't seem right, contact us directly.
Want to learn more? Visit FCU's eFraud Prevention page for additional resources and tips to help protect yourself from fraud.