FAQ

Q: What account number do I give to my payroll department for direct deposit?

A: Your Magnolia FCU account number is an eight-digit number (e.g., 10101010). This number will appear at the top right side of your Statement of Account in the box to the right of the words "Account Number". On your checks, your account number is the last 8 digits that appear to the left of the check number (e.g., 17000010101010 1234). Do not include any share ID number when providing your account number to your payroll department - they will use a processing code to direct your deposit to your savings or checking account.

Q: I've moved and need to change my address. Can I call the credit union with that information?

A: For your security, we do not accept changes to your account by phone. We will accept a change of address in a signed written request that is mailed or dropped off at one of our branches. We also accept address changes electronically via the message board within our password-protected TOTAL ACCE$$ Online Banking.

Q: What are Share and Loan ID numbers?

A: Share ID numbers identify the different share accounts that comprise your membership account at the credit union. You can find your share and loan ID numbers on your Statement of Account, next to the name of each share listed. You will need to know your share ID numbers when you use our TOTAL ACCE$$ Telephone Teller system. We typically identify your share accounts as follows: 00 - for Regular Share; 01 - for a Secondary Share such as a secondary savings, a Christmas Club Account, or a Vacation Club account; 70 - for Share Draft Checking; 71 - for a secondary checking account; 50 ... 59 - for Share Certificates

Q: What is the credit union's Routing Number (also known as Routing and Transit or ABA number)?

A: 265377235

FAQs about "Phishing"

Q: How does a phishing scam work?

A: Messages from a party falsely representing itself as a financial institution, such as a bank or credit union, are sent to consumers at random. (In fact, you may not even have an account with the bank or credit union whose name is "hijacked" and used in the scam.) The message typically states there is a "problem" with an account/card or an account/card requires "verification," "re-activation" or "unlocking." Those that respond to the message are asked to enter/provide account information and PIN numbers. Those that do provide the personal financial details the message requests may become the victim of fraud.

Q: How did they get my phone number?

A: The message is likely distributed at random. A computer may be used to generate a list of numbers that could be possible for a certain geographic area, based on area code or prefix. The computer simply calls or sends a message to that randomly generated list of numbers. These types of attacks are not generally the result of any type of information "breach" at the financial institution. Receiving this type of scam message does not mean a crook HAS your information -- It means they WANT your information. They are trying to fool you into giving it to them.

Q: I responded to the message and provided personal information. What do I do now?

A: Act immediately if you've been hooked by a phisher. If you provided account numbers, PINS, or passwords to a phisher, notify the companies with whom you have the accounts right away and tell them you may be a victim of fraud. They can help you close compromised accounts and establish account fraud alerts.

For information about how to put a "fraud alert" on your files at the credit reporting bureaus and other advice for ID theft victims, visit the Federal Trade Commission's ID Theft site: http://www.ftc.gov/bcp/edu/microsites/idtheft or call 1-877-ID-THEFT (438-4338); TTY: 1-866-653-4261.

Q: I didn't respond to the message, but I believe it is fraudulent. What do I do now?

A: Report the message to the company that the phisher was impersonating. However, do not use any contact information that was provided in the message; instead, look up the company's official phone number in the phone book or find their official website.

Q: Should I report it to the police, Better Business Bureau or others too?

A: You certainly may. However, there is little authorities can do about this type of fraud. The criminals that set-up the fraudulent phone numbers, website addresses or email addresses used in the messages move very quickly. In most cases, the numbers or websites related to the scam message have already been removed long before authorities can even be notified.

There is also, unfortunately, little that the authorities, phone companies or the company whose name is used in a phishing message can do to prevent the message from being distributed. Therefore, the best protection against becoming a victim of fraud is knowledge: Do not respond to unsolicited text messages, phone calls or emails requesting personal information. Ever.

Q: How do I know if message, phone call or email may be an attempt at fraud?

A: Unsolicited contact requesting you to enter or disclose account or personal information is almost always an attempt at fraud. Legitimate companies simply do not conduct business that way.

Fraudsters try to create a sense of urgency and need for "immediate" action. The "hook" may come in many forms:

• Account Activation, or De-activation

• Confirming Account or Credit Card Numbers

• Account Status Alert

• Changes to Terms and Conditions

• Irregular Activity

Here are some examples of phishing scam messages:

• "Your Federal Credit Union card has been deactivated. To reactivate please visit urgent http://[fraudulent address or call (555) 555-5555."

• "866555555@abccreditunion.com ABC Credit Union. Your account has been locked. Call online banking service @ 866-555-5555 for assistance"

• "There has been irregular activity in your account. Please call XYZ Bank customer service at (555) 555-5555 or go to http://fraudulent address"

• "8775555555@xyzcreditunion.com Customer issue. ABC Credit Union service frozen. Please call 877-555-5555"

Bottom line: NEVER respond to unsolicited phone call, text message or email requesting account or other personal information. If you have doubts about the legitimacy of the request, contact the company directly through a trusted phone number or website (do not use the contact information provided in the request).