How to Detect and Avoid Man-in-the-Middle Scams

At Mazuma Credit Union, the security of our Members’ financial information and accounts is our top priority. As your trusted financial partner, we closely monitor the evolving risks our Members face in today’s digital world – from phishing and social engineering scams to identity fraud, cybersecurity threats, and beyond. We proactively share information to empower our Members to identify and avoid potential threats that can compromise the security of their data.

What is a Man-in-the-Middle Scam?

A man-in-the-middle attack, also known as adversary-in-the-middle phishing, is a cyberattack in which a scammer attempts to position themselves between you and the legitimate institution or service you’re trying to reach.

Here’s how these scams typically work:

You might receive an email, text, or other message that appears legitimate but directs you to a fraudulent website. If you enter your login or authentication information there, the scammer can attempt to use it to access the real service.

Because fraudulent messages and websites can look convincing, it’s important to slow down and verify that you’re communicating with the organization you intended to reach before entering sensitive information.

Spot the Warning Signs

While man-in-the-middle scams are designed to be convincing, there are some common red flags you can watch out for:

• Unexpected messages asking you to sign in. Be very cautious of emails or texts that direct you to a login page you weren’t expecting.
• Urgent security warnings. Scammers may use alarming messages about suspicious activity or compromised accounts to pressure you into acting quickly.
• Unexpected requests for authentication information. Treat unexpected requests for passwords or verification codes as a major warning sign.

Keep Your Accounts Secure

How can you help protect yourself from man-in-the-middle scams?

• Verify before clicking. If an unexpected message tells you there’s a problem with an account, verify that the source is legitimate before clicking a link or following any instructions.
• Go directly to the source. Instead of using links or contact information contained in an unexpected message, access the organization through a website, app, or phone number you already know is legitimate.
• Use strong authentication options when available. Setting up multi-factor authentication or passkeys can provide additional protection against attacks designed to capture login information.
• Monitor your accounts. Keep an eye out for activity you don’t recognize and report anything suspicious as soon as possible.

Most importantly, if a request is unexpected, stop and verify it through a separate, trusted channel before entering any information or taking action.

Remember: 

Mazuma Credit Union will never call, text, or email you asking for personally identifiable information (social security numbers, secure access codes, passwords/pin numbers, card numbers, or account numbers), ask you to provide us your card, or instruct you to send money through a third-party vendor (PayPal, Venmo, etc.).

If you are unsure whether an email, phone call, or text message is from Mazuma, please call us directly at 913-574-5000 so that we can assist you.

If you suspect a scam, report it to the FBI’s Internet Crime Complaint Center (IC3) at www.ic3.gov.

Check out Mazuma’s Member Security Center for more information!

Want to learn more about Mazuma Credit Union?   

Ready to become a Mazuma Member?