Updated: September 9, 2011

Fraudulent Emails Appearing to Come from NACHA

Consumers and businesses are receiving emails that appear to come from NACHA. Perpetrators are sending these fraudulent messages to email addresses globally.

These fraudulent emails typically make reference to an ACH transfer, payment, or transaction and contain a link or attachment that infects the computer with malicious code when clicked on by the email recipient. The source addresses and contents of these fraudulent emails vary - with more recent examples purporting to come from actual NACHA employees and/or departments - and often including a counterfeit NACHA logo and the citation of NACHA's physical mailing address and telephone number.

NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to persons or organizations about individual ACH transactions that they originate or receive.

DO NOT open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual. Forward suspected fraudulent emails appearing to come from NACHA to abuse@nacha.org to aid in their efforts with security experts and law enforcement officials to pursue the perpetrators.

Unfortunately, the threat of fraud due to phishing attempts continues to be very active. Fraudsters are increasing in sophistication, and this type of activity shows no sign of slowing down. In these economic times, it is even more critical to continue educating members on the various ways fraudsters try to obtain their personal information for financial gain.

Please remember:

The credit union will NEVER solicit personal or financial information.
NEVER respond to requests for information unless you initiated the request. This includes requests via e-mail, phone, text messaging or through the mail.
 

If you responded to such a request and provided any confidential account information, please notify the credit union
immediately of the scheme. You should also change your account’s PIN, and take any additional action recommended
by your credit union to protect your account.

Formal complaints can be filed with http://www.IC3.gov .