• Most companies use a 5 or 6 digit short code instead of a phone number (731-609-1850 in the example). 
• Text message recipients must be able to opt out at any time by responding with language like: “stop,” “end,” “cancel,” “unsubscribe,” or “quit.”  
• The notice appears to be from Centra Credit Union. However, however the website address shown is for an unknown domain, plmpac.com. 
  
• Legitimate companies typically do not have misspellings or grammar issues.

Scammers will often ask you for a code sent via text message so they can hack into your account.  

Schwab understands that you should be suspicious of receiving a phone call from someone claiming to be Schwab, and if there truly is a fraud concern, you can call their number (found on their website) to have a representative look into it.  Do NOT call a phone number provided by the caller since that could be a false number.  For reference, our clients can call Schwab directly at 800-515-2157.

Never provide a Schwab security code over the phone, since it says, "Do not share this code with anyone, even if they claim to be from Schwab.”

Both emails should cause you concern since you did not initiate a password reset.  If you invest with SMI Private Client, you can call us at 800-796-4975. 

It is likely that your email account has been compromised and is being accessed by a hacker.  You will likely need to reset your email account password. It is best not to try to log in using your current password because it's possible your computer is being monitored.

Do NOT use the phone number in the email you received, in case the email is fraudulent.  Your financial advisor will provide instructions regarding how to remove malware from your computer and change your email password.

Legitimate companies will not call you and offer to “clean” your computer for free. It is likely that the caller is requesting remote access to your computer to steal sensitive files (such as tax-return documents) or use your IP address to access your investment accounts online. 

If you are concerned about viruses, you can install antivirus software from a reputable company.  In addition, you should ensure your operating system has the latest updates and enable automatic updates.

Although it is convenient to reuse passwords, this puts you at tremendous risk if your password is compromised.  Hackers often sell compromised passwords on the "dark web" so other scammers can attempt to use those credentials on multiple websites.

It is best practice to use a password management app that can generate and store unique passwords for every website. If you prefer to write down passwords, secure your document in a safe location.

This is a phishing email. Phishing is a type of cyberattack that uses fraudulent emails, text messages, phone calls or websites to trick people into sharing sensitive data, downloading malware or otherwise exposing themselves to cybercrime.

If you suspect phishing, resist the temptation to click on links or attachments that seem too good to be true and may be trying to access your personal information.  Instead, report the email phish to protect yourself and others. Typically, you'll find options to report near the person's email address or username.

Never send money to someone you don't know. Scammers use various methods and stories to trick you into giving them your hard-earned money. Most of these payments are difficult (if not impossible) to recover or reverse, so you will most likely not get your money back.