Coordinated Spoofing Attack Highlights Value of Rapid Fraud Response

A large credit union recently faced a coordinated spoofing and social engineering campaign in which fraudsters impersonated credit union personnel and members, generating approximately 600 inbound calls and nearly 100 separate member reports in a short period. At the credit union’s request, identifying details have been withheld.

Attackers Target Members at Scale

Fraudsters frequently claimed to represent the credit union’s fraud department and attempted to persuade members to disclose online banking credentials, debit card information, and other sensitive account data. Some members were also directed to move funds through external payment channels, while fraudsters called the credit union separately and impersonated members.

Unlike previous attacks that appeared to cluster around holidays or last only briefly, this campaign began around noon on a Tuesday and continued into Wednesday. Some members received repeated calls from multiple telephone numbers throughout the day.

Vigilance Helps Limit Potential Losses

Staff responded quickly by warning members, identifying potentially compromised accounts, freezing affected relationships, closing compromised debit cards, resetting credentials, and increasing monitoring.

The credit union also reviewed card activity through Verafin and worked with its card provider to establish additional fraud-monitoring rules based on observed transactions.

Because employees recognized the warning signs and acted quickly, the credit union reported preventing fraudsters from potentially accessing more member funds. 

The credit union also identified and blocked transaction descriptors including MYRT GLOBAL, NEXTWARE TECH ENTERPRI, CBZ ONLINE, APPLE CASH BALANCE ADD, YIGIM **AVENUE NIZAMI, and JSC BOG P2P TRANSFER.

Prepare Before the Next Attack

The incident underscores the importance of employee training, layered fraud controls, and rapid communication when social engineering attacks escalate. Having procedures and trusted partners in place before an attack occurs can help credit unions respond quickly and limit potential losses.

Credit unions looking to strengthen their fraud response readiness can turn to Cornerstone Resources for risk management, compliance, and information security expertise. Explore available solutions and connect with Cornerstone Resources to help your credit union assess risks, strengthen controls, and prepare for emerging threats