How the Scam WorksHow to Protect Yourself

SIM Swapping

Posing as you, a fraudster convinces your mobile carrier to move your phone number to a SIM card they control so they can intercept your text-based authentication codes.

  • Keep personal details private. To impersonate you with your carrier, a criminal needs information that isn’t, or at least shouldn’t be, public.

Fake Mobile Apps

A scammer builds a counterfeit banking app designed to mirror the real Exchange Bank app. Download it, and you hand your login credentials straight to the fraudster.

  • Think before you download. You can safely get the Exchange Bank mobile banking app directly from our website.

Password Spraying

Cybercriminals turn bots loose to test common passwords against many usernames, hoping to stumble onto a match that unlocks your accounts.

  • Always turn on multi-factor authentication (MFA), which requires a second form of verification to log in.
  • Don’t reuse the same username and password for online banking and email.

Phishing

A fraudulent email posing as a real company nudges you to click a link, landing you on a fake website that’s built to capture your online banking credentials.

  • Never click a link in an email unless you’re certain it’s legitimate.
  • Never enter sensitive information on a website you can’t verify.

Smishing

A text claiming to be from Exchange Bank warns that your account has been compromised. Using fear as the hook, the fraudster tries to coax out your login details or other personal information.

  • Delete the text right away. Exchange Bank will never reach out to ask for your personal financial information.

Malware

Banking malware is built to drain your money, and it can infect both your computer and your phone. You can pick it up by clicking a link to “claim a prize,” downloading pirated music or videos, or following clickbait on social media.

  • Don’t click on unfamiliar links or pop-ups.
  • Avoid random downloads from unknown sources and if something slips through, scan it with antivirus software before opening.