When Imposters Pretend to Be Your Financial Institution: Protect Yourself from Account Takeovers
Published: January 14, 2026
They look official. They sound convincing. And they're after your money.
Today's fraudsters are digital con artists—masters of disguise who impersonate your trusted financial institution (FI) to sneak into your accounts. This is not just a problem, it's a growing threat. Account Takeover (ATO) is one of the fastest-growing threats in personal finance, and it's crucial to be aware of it.
What's an Account Takeover?
An ATO happens when a fraudster gains access to your account and poses as you. Once in, they may:
- Transfer money
- Lock you out
- Apply for loans or credit
- Steal sensitive information
And the scariest part? They often get in by pretending to be us, your financial institution.
How Do Imposters Do It?
These con artists are clever. Here are some common tricks they use to pose as your FI:
- Phishing Emails or Texts: "Your account has been locked." "Click here to verify your information." These fake alerts look real, but they're designed to steal your login credentials.
- Spoofed Phone Calls: The number may look like it's from your bank or credit union. The voice on the Line claims to be from the fraud department and urgently needs your password or verification code.
- Fake Websites: These sites mimic the look and feel of your FI's real site, but any information you enter goes straight to the scammer.
How to Stop an Account Takeover
You don't have to be a cybersecurity expert to protect yourself. You have the power to keep imposters out. Here are a few powerful habits of keeping imposters out:
- Don't Share Your Info: Your financial institution will never ask for passwords, PINs, or full account numbers via phone, email, or text.
- Use Strong, Unique Passwords: Avoid using the same password for multiple accounts, especially financial ones.
- Turn on Multi-Factor Authentication (MFA): MFA makes it much harder for someone to access your account, even if they have your password.
- Slow down and double-check: If you receive an unexpected call, email, or text, pause. Don't click. Don't respond. Contact your FI directly using a known number or website.
Remember, you are the first Line of defense. If something doesn't seem right, notify your FI immediately. Acting fast can minimize damage, and your vigilance can make a difference.
Bottom Line: Don't Let the Imposters In
Fraudsters are getting more sophisticated — but so are the tools and knowledge to fight back. Stay alert, stay skeptical, and always verify before you act. If something feels off, trust your instincts — and contact your financial institution directly. Don't let fraudsters in disguise turn your account into their playground.
If you are ever uncertain or suspicious about communication you are receiving, end the communication immediately and reach out to us directly.
[email protected] | 800.374.2758 | my.ussfcu.org USSFCU'S POLICY REMINDER:
- We Will Never Ask for Your Account Credentials via Unsolicited Communication.
- You are Always Encouraged to Reach Out to Us Directly for Verification or Concerns.
- We will never direct or instruct you against reaching out to us directly.
Article content is provided for information purposes only.


