Protecting Your Accounts: A Guide to Spotting Smishing and Phishing Scams

Phishing refers to fraudulent emails that appear to come from legitimate organizations like financial institutions or well-known companies. These messages typically ask you to click a link, download an attachment, or provide personal information.

Smishing is similar but uses text messages (SMS) instead of email. The name combines “SMS” and “phishing.” You might receive a text claiming there’s an urgent issue with your account, a package delivery, or even a prize you’ve won.

Both tactics have the same goal: tricking you into sharing sensitive information like passwords, account numbers, or Social Security numbers.

While scammers are becoming more sophisticated, there are telltale signs that can help you identify suspicious messages:

• Urgent or threatening language – Messages claiming your account will be closed, locked, or suspended unless you act immediately
• Requests for personal information – Legitimate organizations won’t ask for passwords, PINs, or account numbers via text or email
• Suspicious links – URLs that don’t match the official website or have misspellings (like “pena1r.com” instead of “penair.org”)
• Unexpected attachments – Especially from senders you don’t recognize
• Too-good-to-be-true-offers – Unexpected refunds, prizes, or rewards
• Poor grammar or spelling – Professional organizations proofread their communications

1. Don’t click any links or download attachments – Even if you’re curious, resist the urge to click
2. Don’t respond to the message – Responding confirms your number or email is active
3. Verify independently – If a message claims to be from PenAir, call us directly using the phone number on your card or our official website
4. Delete the message – Once you’ve verified it’s fraudulent, remove it from your device
5. Report it – Use your provider’s reporting system to mark the message as suspect

To help you distinguish legitimate messages from scams, here’s what you should know about our communication practices:

• We will never ask you to provide your full account number, password, PIN, or Social Security number via text or email
• We will never send you texts with links asking you to verify your account or give account information
• Our official website is org – always verify the URL before entering any information

If you’re ever unsure whether a communication is truly from PenAir, don’t hesitate to contact us directly. We’re here to help

• Keep software updated – Regular updates include security patches that protect against new threats
• Use strong, unique passwords – Consider a password manager to keep track of them
• Enable two-factor authentication – This adds an extra layer of security to your accounts
• Monitor your accounts regularly – Check your statements and set up account alerts to catch any suspicious activity quickly
• Trust your instincts – If something feels off, give us a call

Staying informed is your best defense against scams. If you ever have questions about a message you’ve received or want to learn more about protecting your accounts, please reach out to us. You can contact our Member Services Team at any time, and we’ll be happy to help verify whether a communication is legitimate.

Remember, taking a few extra moments to verify a message is always worth it. Your security and peace of mind matter to us.

Have concerns about a message claiming to be from PenAir? Contact us directly at the number on the back of your card or visit your local branch. We’re always happy to help you stay safe.