Security Center

Security Update

Phone Impersonation Scam: Caller ID Spoofing

Your security is our top priority. We want to make you aware of a scam affecting financial institutions nationwide — including Pathways members — so you know what to watch for and how to protect yourself.

What’s happening

Scammers are spoofing Pathways’ phone number so calls appear to come from our fraud department. During these calls, fraudsters may:

• Claim suspicious debit card transactions were blocked
• Provide a fake case number to sound legitimate
• Ask for your card expiration date and CVV to “reissue” your card

That’s why it’s important to know what we will — and will not — ask for.

What Pathways will never ask you for

• Your full debit or credit card number
• Your card expiration date
• Your CVV (the 3-digit number on the back of your card)
• Your online banking username or password

What to do if you receive a suspicious call

1. Hang up immediately.
2. Call us directly at 800-367-7485 using a trusted number.
3. We’ll verify account activity and help secure your information if needed.

There is no penalty for hanging up on a call you’re unsure about. We’d rather you double-check than take a risk.

Note: Caller ID spoofing is a common tactic used in impersonation fraud. When in doubt, hang up and call back using a verified number. Source: Federal Communications Commission guidance on caller ID spoofing and spoofed calls (FCC).

Security Update

Unexpected Calls Claiming Your Money Is at Risk

If you get a call that tries to panic you — claiming fraud on your card, a hacked bank account, tax debt, or that your benefits will end today — treat it as a potential scam.

What to do if you receive a call like this

• Get basic details — then hang up. Ask what company they claim to represent, then end the call.
• Verify independently. Contact the company using a trusted number from your card, statement, or official website.
• Avoid searching for phone numbers online. Scammers can place ads so fake numbers appear at the top of search results.
• Talk to someone you trust. Legitimate fraud departments will never demand secrecy.

Never do these things during an unexpected call

• Don’t share personal or account information.
• Don’t provide one-time passcodes or verification codes.
• Don’t give anyone remote access to your phone or computer.
• Don’t send money through gift cards, wire transfers, or crypto.

Source: Federal Trade Commission Consumer Alert, “How to handle unexpected calls that claim your money is at risk” (January 2026).

Security Update

Avoiding Sweetheart (Romance) Scams

With Valentine’s Day approaching, love is in the air — but so are scams.

And while getting hit by Cupid’s arrow can feel new and exciting, it’s important to be wary of a fairy tale romance that turns out to be too good to be true.

At Pathways Financial Credit Union, we’re here to help you protect your finances and avoid fraudsters who want to leave you, and your account, broken-hearted.

Signs of a Sweetheart Scam

• They move fast. They push emotional commitment quickly and say all the right things early on.
• They avoid meeting. They refuse in-person or video meetings and always have an excuse.
• They build a “reason” for distance. Travel-heavy professions are common cover stories (military, construction, overseas student, etc.).
• They manufacture emergencies. Once trust is built, they ask for money for “urgent” needs (repairs, travel, bills).
• They push unusual payment methods. Gift cards, wire transfers, crypto, or other non-traditional payments are major red flags.

How to Protect Yourself

• Meet first in public first, and safely. Use a public meet-up or video chat before sharing personal or financial information.
• Use a second set of eyes. If it feels too good to be true, talk to a trusted friend or loved one.
• Do a quick check. Search their name + “scam,” and consider a reverse image search of profile photos.
• Don’t send money. Real relationships don’t require urgent financial help or pressure.
• Act fast if money/info was shared. Contact your credit union and any financial institutions immediately.

Sources: FTC press release on romance scam losses in 2021 (FTC); FBI/IC3 elder fraud reporting on confidence/romance scam losses in 2023 (FBI).

Scammers tell lots of different stories to try to get your money or personal information. They want you to hurry and do what they say before you have time to think, check out their story, or reach out to someone who might intervene. That’s where the FTC’s new tool, How I’ll Avoid a Scam: My Action Plan, can help.

CLICK HERE to view it!

Security Update

Virtual Kidnapping Scams: What to Watch For and What to Do

Scammers are increasingly using technology and psychological pressure to convince people that a loved one has been kidnapped. In many cases, no one has actually been taken — the goal is to trigger panic and rush you into paying money before you can verify what’s happening.

Red flags to watch for

• You receive a call that appears to come from a loved one’s number, but an unfamiliar voice claims they’ve been kidnapped.
• The caller uses fear + urgency and demands payment immediately (often via wire transfer, prepaid cards, cryptocurrency, or payment apps).
• The caller insists you don’t hang up or don’t contact law enforcement.
• There’s no verifiable information — just emotional pressure and threats.

How to protect yourself

1. Stay calm. Take a breath and slow things down — panic is what scammers rely on.
2. Verify independently. Try to contact the person using a different method (text, another phone number, a known friend, workplace/school, etc.).
3. Ask a verification question. If you stay on the call, ask something only the real person would know (a family-only detail a scammer can’t guess).
4. Hang up and call law enforcement. If you believe there is any real risk, contact local police immediately.
5. Do not send money. Don’t share financial info or make payments to someone threatening you over the phone.
6. Limit what you share online. Be cautious posting phone numbers, locations, travel plans, or detailed family information publicly.

Sources: FBI overview of virtual kidnapping extortion scams (FBI); FBI/IC3 public service announcement on criminals using altered “proof-of-life” media in virtual kidnapping scams (IC3).

Security Update

Ohio BMV Text Scam Alert

We want to alert you to an active scam affecting Ohio residents. People are receiving fake text messages claiming to be from the Ohio Bureau of Motor Vehicles (BMV) about unpaid traffic tickets. These messages are fraudulent and designed to steal your personal and financial information.

How the scam works

1. Victims receive a text message claiming to be from the Ohio BMV stating they have an unpaid traffic ticket.
2. The message includes a link urging immediate payment and warns that failure to act may result in a suspended license.
3. Clicking the link may lead to a fake website designed to steal personal and financial information.

How to protect yourself

• The Ohio BMV will never send text messages requesting payment or personal information.
• Ignore and delete suspicious texts — do not click on any links.
• Verify official requests by contacting the BMV directly through their official website or local office.
• Report scams to the Federal Trade Commission at ReportFraud.ftc.gov .
• If you believe you’ve been targeted, contact local law enforcement immediately.

Sources: Ohio Bureau of Motor Vehicles scam warning page (Ohio BMV); Federal Trade Commission fraud reporting portal (FTC).

Security Update

Account Takeover Scam: “Fraud Alert” Texts That Lead to a Fake Specialist

Imagine this: you receive a text message from your financial institution asking about suspicious transactions. You reply “No.” Moments later, you get another message asking you to “press 1” to speak with a fraud specialist. Thinking it’s legitimate, you respond — and suddenly the scammer is walking you through “security steps” that give them access to your email, phone, and financial accounts.

This isn’t hypothetical — we’ve seen cases where fraudsters attempted large transfers and opened fraudulent credit in a member’s name within hours.

How this scam works

How to protect yourself

• Don’t trust the number on your screen. Caller ID and message threads can be spoofed.
• Never share your screen or grant remote access to someone who contacted you first.
• Never share one-time passcodes or verification prompts with anyone — even if they claim to be “fraud support.”
• Stop and verify. Hang up and call back using a trusted number (back of your card, statement, official website/app).
• Use stronger sign-in protections on your email and financial accounts (and keep recovery info up to date).

Sources: FDIC guidance on bank impersonation scams and verifying by calling your bank using a trusted number (FDIC); FCC consumer guidance on spoofed calls/robocalls and scam texts (FCC); FTC consumer scam guidance and reporting portal (FTC) and (ReportFraud.ftc.gov).

Security Resources

Trusted Scam Alerts and Fraud Reporting Tools

Staying informed is one of the best ways to protect yourself from fraud. Below are trusted national resources that provide up-to-date scam alerts, reporting tools, and guidance on avoiding financial scams.

Security Resource

Fraud Prevention Center (NCUA)

Protecting your financial information starts with awareness. The National Credit Union Administration (NCUA) provides a dedicated Fraud Prevention Center with guidance on common scams, fraud tactics, and steps you can take to keep your money safe.

Identity Protection Resources

Trusted Identity Theft Prevention and Recovery Tools

Identity theft can happen to anyone — and the impact can be serious. Below are trusted Federal Trade Commission (FTC) resources to help you understand identity theft, prevent it, and take action if you become a victim.