Carson Bank

05/29/2026

Scam of the Week
World Cup or World-Class Scam?

If you’re a fan of soccer/football, you’re probably excited for the upcoming 2026 FIFA World Cup! You might want to buy tickets or merchandise, so you search online for the official FIFA website. Eventually, you find a website that seems to be what you’re looking for. It contains what appear to be official FIFA images and logos, and even has an online store. The odd thing is that the store only accepts payment using payment apps or cryptocurrency.

But cybercriminals can use major events like the World Cup to trick you, and the webpage you found is actually fake! If you try to buy anything from this “store,” you’ll be instructed to log in to your FIFA account first. Cybercriminals will steal your login information, and then you’ll be directed to a payment page. Any payments you make will be sent directly to the cybercriminals, and you’ll never receive what you purchased. Even worse, they can use your stolen login information to access your real FIFA account and resell any legitimate World Cup tickets you've already bought!

Follow these tips to avoid falling victim to this scam:

* Don't assume that a website is official just because it looks legitimate. Cybercriminals can create convincing fake webpages that look very similar to the real thing.
* Be suspicious of any “official” website that only accepts payments from cryptocurrency or payment apps. Most official online shops will offer standard purchasing options.
* Trust your instincts. If you see anything that looks unusual about a webpage, such as a suspicious URL or unusual payment options, close out of the page immediately.

Member FDIC

05/26/2026

05/21/2026

Scam of the Week
The Help Desk Hijacking

Imagine starting your workday to find your email inbox flooded with hundreds of junk emails all arriving at once. Before you can make any sense of the chaos, you receive a Microsoft Teams message from someone claiming to be from your organization's IT team, offering to step in and fix the problem. They send you a link to install a “Mailbox Repair Utility”.

But this IT helper is actually a cybercriminal running a carefully planned scam! Cybercriminals send you this mass influx of emails deliberately to create a sense of panic and make their offer to help you seem credible. If you click the link they sent, you'll be directed to a malicious webpage. Once on the page, you'll be instructed to enter your username and password to install the repair tool. However, this webpage is designed to steal your login information, and the "repair tool" is actually malware!

Follow these tips to stay safe:

* If you experience a problem with junk emails, contact your IT department directly through a verified channel. Don't respond to anyone who messages you unexpectedly and offers to help.
* You shouldn't click links or install software if someone messages you unexpectedly, even if they claim to work for your IT department. If you receive a suspicious message, be sure to report it.
* Remember, always stop and think before you act. Cybercriminals can attempt to trick you by creating a problem and then offering to help you “fix” it.

Member FDIC

05/14/2026

Scam of the Week
Good Conduct, Bad Phish

In this week’s scam, you receive an email that looks like an official message from your organization. The email has an alarming subject line that says, “Reminder: employer opened a non-compliance case log.” It states that a code of conduct review has been opened against you, and includes a PDF attachment that contains a link for you to select to review additional documentation.

But this email is actually a phishing scam! If you select the link in the PDF file, you are instructed to complete a series of security checks, which include entering your email address and verifying that you are not a robot. Finally, you are directed to a login page and asked to sign in to your Microsoft account to access the file. But these “security checks” aren’t real, and the login page is fake. If you type your login information, scammers will steal it!

Follow these tips to avoid falling victim to this phishing scam:

* If you receive an unexpected email about a conduct report or compliance case, do not open any attachments or select any links. Instead, contact your manager or supervisor to see if the email is legitimate.
* Real internal documents usually don't require you to go through multiple security checks to access a file. If something seems suspicious, trust your instincts!
* Be extra cautious if you receive an unexpected email with an attachment, especially if it seems urgent. Remember, scammers often try to trick you into acting without thinking!

Member FDIC