Many parents have been surprised by unexpected charges on their credit or debit cards, only to find that the culprit was their child making in-app purchases on a phone or tablet. These purchases can add up fast, especially in games where rewards and extra features are just a quick tap away.

Here are a few ways to safeguard your accounts:

• Set up parental controls. Most smartphones and app stores allow you to require a password or biometrics for every purchase.
• Review app permissions. Some apps make it easy for kids to click on purchase prompts without realizing they are spending real money.
• Use family sharing settings. Many devices allow a family organizer to approve purchases before they go through.
• Educate your kids. Have age-appropriate conversations about what apps cost and how purchases work.

When disaster strikes, whether it is a hurricane, flood, wildfire, or tornado, many people feel moved to help. Sadly, scammers take advantage of this generosity by setting up fake charities or posing as relief organizations to steal money and personal information.

These scams often appear quickly after a major event, using emails, phone calls, social media posts, or even text messages to ask for donations. Some may claim to represent well-known organizations or create look-alike websites to trick you into giving.

Here are steps you can take to avoid becoming a victim:

• Verify before you give. Check if the charity is registered with the IRS or use sites like Charity Navigator or the Better Business Bureau’s Wise Giving Alliance.
  

• Avoid clicking links in unsolicited messages. Visit official websites directly by typing them into your browser.
  

• Be cautious of high-pressure tactics. Legitimate charities do not rush or pressure you into donating.
  

• Watch for payment requests through gift cards, wire transfers, or cryptocurrency. These are signs of a scam.
  

If you think you may have fallen victim to a disaster relief scam, contact your credit union right away for support. You can also report scams to the FTC at reportfraud.ftc.gov. Staying informed helps protect your finances, and your community, when it matters most.

If you’re working to improve your credit, be on alert; some credit repair companies make big promises but use shady or illegal tactics to get results. One common scam involves filing false disputes with credit bureaus in an attempt to remove accurate negative information from your credit report. These companies may claim they can “clean” or “erase” your credit history for a fee, but misleading the credit bureaus can lead to serious consequences, including fraud investigations and damage to your credit over time.

It’s important to know that no legitimate company can remove accurate, timely information from your credit report. You have the right to dispute errors on your own, for free. If you need help understanding your credit report or want to build a long-term plan to improve your score, Alero is here to help. Our trusted experts can guide you with free resources, credit counseling, and personalized support. If you think you’ve encountered a scam, report it at ReportFraud.ftc.gov and contact us for support.

If you're facing mortgage difficulties, be cautious—scammers often target distressed homeowners with promises of quick relief or foreclosure prevention. These fraudsters may pose as foreclosure specialists or claim ties to government programs, charging upfront fees and making false guarantees. Common scams include phony loan modification services that ask you to stop paying your lender and redirect payments to them, or deceptive offers that result in you unknowingly signing over the deed to your home. Others may promise to “audit” your loan for errors or secure government funds that don’t exist.

It’s important to know that no legitimate company will guarantee to stop foreclosure or ask for fees before providing services. Instead of falling for a scam, contact your lender and explore trusted resources. At Alero, we help you understand your options and support your financial well-being. Whether reviewing your mortgage terms or connecting you with certified housing counselors, we can help you confidently navigate the next steps. If you suspect a scam, report it immediately at ReportFraud.ftc.gov and contact us for guidance.

If you’ve ever thought, “I could really use a little more money each month,” you’re in good company. Many people are looking for flexible ways to earn extra income - and during times of financial stress, opportunities that promise “easy money” can be especially appealing.

That’s why it’s important to take a closer look at offers from organizations like multi-level marketing (MLM) companies or business models that resemble pyramid schemes. These opportunities are often promoted as low-risk side hustles with high-earning potential. But the reality can be more complicated.

According to a report from the Federal Trade Commission, 99% of participants in MLMs lose money. Many companies focus heavily on recruiting new members rather than selling actual products or services, which can make it difficult to earn a sustainable income. A study published in the Journal of Business Research found that over 60% of MLM participants quit within the first year.

This doesn’t mean every opportunity is a scam - but it does mean it’s worth taking time to do your research. Understand how the compensation works, what’s required to stay active, and whether you’ll be expected to purchase inventory upfront.

As we celebrate Financial Wellness Month, consider asking yourself a few key questions before signing on:

• Will this support my long-term financial goals?

• Do I have clear information about the risks and potential rewards?

• Am I being asked to spend more money than I can comfortably afford?

Trust your instincts, seek out trustworthy resources, and remember: real financial wellness comes from informed, empowered decisions.

How to Spot a Debt Collection Scam

• Calls About Fake or Unrecognized Debts – They may claim you owe money on a debt you don’t recognize and refuse to provide details. Legitimate collectors should always provide written validation of a debt.
• Threats of Arrest or Legal Action – Scammers may falsely claim you will be arrested, sued, or have your wages garnished if you don’t pay immediately. Legitimate debt collectors cannot have you arrested.
• Spoofed Caller ID & Fake Agencies – Fraudsters manipulate caller IDs to appear as reputable financial institutions or law firms. Always verify their identity through a trusted source before providing any information.
• Demands for Unusual Payment Methods – If someone insists on payment through gift cards, wire transfers, or cryptocurrency, it’s a scam. Legitimate collectors will accept traditional, trackable payment methods.
• Fraudulent Debt Settlement Offers – Some scammers claim you can settle a fake debt for a discounted amount. Once paid, they disappear, and any real debts remain unpaid.

How Legitimate Debt Collection Works

• They must provide a written validation notice that includes details about the debt.
• They will not threaten arrest or use intimidation tactics.
• They will accept secure and trackable payment methods.
• You can verify their legitimacy by contacting the original creditor directly.

• Ask for written validation – Request official documentation before making any payments.
• Verify with the original creditor – Contact the company directly to confirm whether the debt exists.
• Never share personal information – Scammers may try to steal Social Security numbers or financial details.
• Stay wary of high-pressure tactics – If someone demands immediate payment, pause and verify before acting.
• Report suspicious activity – If you suspect a scam, report it to the Federal Trade Commission (FTC) or the Consumer Financial Protection Bureau (CFPB).

Considering Debt Consolidation?

1. Small Amounts Go Unnoticed: Many people don’t review their bank statements thoroughly or assume small charges are part of their legitimate spending.
2. Automation: Scammers use automated systems to apply charges across thousands of accounts, quickly amassing profits.
3. Lack of Reporting: Victims often don’t report these charges, assuming the time and effort aren’t worth it for such small amounts.
4. Recurring Charges: Some scams involve setting up recurring microtransactions that gradually drain funds over time.

1. Monitor Your Accounts Regularly: Review your bank statements and transaction history frequently to identify unfamiliar charges.
2. Set Up Alerts: Use your bank or credit union’s notification system to receive alerts for all transactions, no matter how small.
3. Question Small Charges: If you see a charge you don’t recognize, investigate it. Contact your financial institution if it looks suspicious.
4. Be Cautious with Personal Information: Avoid sharing your account details or card numbers online unless you are confident in the platform’s security.
5. Report Fraud Immediately: If you notice unauthorized charges, report them to your financial institution as soon as possible. Acting quickly can prevent further losses.

• Look out for skimmers with hidden cameras that record your personal identification number (PIN). These cameras are often placed above the reader or keypad and pointed toward where you will enter your pin. Watch for holes in those areas on the ATM. Another way skimmers will obtain your PIN is by using a keypad overlay to track which keys you press. 
• Watch for signs that an ATM has been tampered with, such as loose wires or machines that are not flush with one another.  
• Check for skimming devices placed over the card insert slot. Since card skimmers are designed to look exactly like the card insert slot, they might be challenging to spot, but there are a few tell-tale indicators that you can look out for, like not being flush to the machine, being raised or bulky, or having too much glue residue around them.  
• You can also try a touch test: Jiggle the reader around; if it moves, there is a chance that there is a skimming device attached to it. The same goes for the keypad. If any attachments seem loose fitting, haphazardly glued, taped, or jammed on/in the machine, be cautious and avoid that machine.  

• the EMV chip on your card  
• tap to pay (available at some terminals)
• the mobile wallet on your phone

The reason these options are safer is because when an EMV chip or a tap to pay (utilizing NFC - Near Field Communication) is used to make the payment, it generates a unique one time tokenization code. This code is then sent to your financial institution where they are able to to match it to your account and approve the purchase.

Although credit card account data can be compromised in breaches involving retailers, it does not mean data related to your account was taken or that fraud has occurred on your account.

Please be assured that we are actively monitoring the activity on your account to protect you from fraud. You will be contacted if we determine that your card must be replaced or if we see any activity that requires you to take any action. Otherwise, please review your monthly statements carefully and call us immediately if you see any suspicious activity.

You’re protected! Visa’s Zero Liability* policy means you don’t pay for unauthorized use of your credit or debit card. Rest assured knowing your financial security is our top priority.

*Visa’s Zero Liability policy covers U.S.-issued cards only and does not apply to ATM transactions, PIN transactions not processed by Visa, or certain commercial card transactions. If any unauthorized use is discovered, cardholder must always notify Alero promptly.

• When purchasing a smartphone, know the features of the device, including the default settings. Turn off features you don’t need to minimize the risk of attack.
• Some phones have encryption available. This can be used to protect your personal data in the case of loss or theft. Ask your cellphone dealer if this is available on your model.
• With the growth of the application market for mobile devices, be sure to look at the reviews of the developer/company who published the application.
• Review and understand the permissions you are giving when you download applications.
• Use a passcode to protect your mobile device. This is the first layer of security to protect the contents of the device. Also enable the screen lock feature after a few minutes of inactivity.
• Obtain malware protection for your mobile device. Look for applications that specialize in antivirus or file integrity that help protect your device from rogue applications and malware.
• Be aware of applications that use geo-location, which will track the user’s location anywhere. This application can be used for marketing but can also to assist a possible stalker and/or burglar.
• Jailbreak or rooting is used to remove certain restrictions imposed by the device manufacturer or cellphone carrier. This allows the user nearly unregulated control over what programs can be installed and how the device can be used. However, this procedure often compromises the cellphone’s security, making it more vulnerable to attack.
• Do not allow your device to connect to unknown wireless networks. These networks could capture information passed between your device and a legitimate server.
• If you decide to sell your device or trade it in, make sure you wipe the device (reset it to factory default) to avoid leaving personal data on the device.
• Smartphones require updates to run applications. Update your phone regularly to reduce the risk of the device being hacked or compromised.
• Avoid clicking on or otherwise downloading software or links from unknown sources.
• Use the same precautions on your cellphone as you would on your computer when using the Internet.

*Source: Federal Bureau of Investigations, IC3 (Internet Crime Complaint Center), October 2012.

1. Contact your financial institution to inquire about a suspicious transaction right away. At Alero, we help our members dispute fraudulent transactions and prevent future transactions from posting to their accounts. 
   
   
2. Notify the credit bureaus, Equifax, Experian, and TransUnion, and find out what they can do to help you protect your credit.
   
   
3. Check your computer. Make sure your devices weren't compromised. Install and run anti-virus software (or updating the software you currently have). This can detect malware and keylogging software that might be secretly stealing your data. 
   
   
4. Contact vendors: If you think you’ve been cheated, try first to figure out what might have happened with the company directly. Send your complaint to a supervisor, manager, owner, or president of the company in writing and provide copies of any documentation of your complaint. Never send original receipts or canceled checks.
   
   
5. Contact the Federal Trade Commission (FTC). The FTC is an independent government agency devoted in part to promoting consumer protection. This resource from the FTC can help you with next steps if you think you’ve been scammed.
   
   
6. Report fraud to your local or state government. For example, in Illinois you can file a consumer complaint with the Consumer Protection Division of the Illinois Attorney General’s office if you’ve been victimized by fraud or deception. File a Complaint (illinoisattorneygeneral.gov). All states have consumer protection acts and agencies tasked with enforcing them.  

• Watch out for any company that promises they can easily settle all of your debts.  
• Be especially wary of debt relief companies that charge you fees up front before providing any real help. 
  
• Look for a nonprofit debt management program like the one offered by credit unions. For example, Alero partners with BALANCE to offer members free financial counseling services, including debt management programs with no fees. This means all funds are going to repay your bills: There is no skimming off the top to cover fees.  
  

• What is debt consolidation and how can it help pay off debt? 
• Here's what to do with all that student loan debt 
• Consumer Financial Protection Bureau’s resource on debt relief scams

The Consumer Financial Protection Bureau (CFPB) issued an advisory reporting that billions of consumer dollars may be at risk when stored on popular peer-to-peer (P2P) and other apps that handle payments. These apps are acting like banks in that they store money and allow consumers to make certain types of transactions. However, money stored in some apps may not be federally insured. When you keep your money in a bank or credit union checking or savings account, it is typically insured up to $250,000 by either NCUA (credit unions) and the FDIC (banks).

If you use a fintech application to send or receive money or transact in other ways, make sure to transfer your money to a federally insured credit union or bank account before it accumulates in that app.

• answer calls from unknown numbers. 

• open, reply to, or open links you receive via text messages from unknown numbers.

• open emails from unknown senders that don’t come from a company’s official web domain. 

DocuSign^® is a globally-trusted, secure communication channel for signing documents. In the past, criminals acquired email addresses of people that use the service and attempted to commit fraud by sending fake emails that look like they are from DocuSign.

What you need to know:

1. Requests from DocuSign always come from one of these two addresses:
   • www.docusign.com
   • www.docusign.net
2. If you are not expecting a DocuSign email, don’t open it. If you feel it may be valid, access the documents directly by visiting www.docusign.com and enter the unique security code included at the bottom of every legitimate DocuSign email.
3. DocuSign never asks recipients to open a PDF, Office document or ZIP file in an email. If one is attached, assume the email is not legitimate and delete the email.

Vishing is a type of cybercrime in which scammers make phone calls or leave voice messages impersonating reputable companies in order to gather personal information from victims.

Credit union members may receive an automated call claiming to be from the credit union. The recipient’s caller ID may even show a legitimate-looking local number. The recorded message requests verification of financial information or claims that the member’s account has been compromised. The member will be asked to enter account information using a touchtone phone. The sensitive information is then digitally transcribed by the scammer’s computer.

What you need to know: CAFCU may need to contact members by telephone for a variety of reasons. Our calls are always made by live credit union representatives and we will always verify your identity by repeating information you have previously shared with us. We will never ask you to volunteer information such as account numbers, credit card numbers or your PIN.

Similar to vishing and phishing, smishing is a type cybercrime in which scammers send text messages impersonating reputable companies in order to gather personal information from unsuspecting victims.

In a vishing scam, text messaging scammers will send an SMS message from an unrecognizable number stating that your credit union account or credit card account has been closed due to suspicious activity. The text will then provide a number to call or URL to follow for more information. When you call or click, you will be asked for personal information like your Social Security and bank account numbers.

What you need to know:

• If you receive unwanted text messages, be careful. Contact your cell phone company and find out how to avoid receiving spam texts. They can help prevent text messaging fraud by adding spam filters to your account.
• Exercise the same caution you would when giving out a mobile phone number as you would with a personal email address or other personal information.
• Never respond to unsolicited text messages – it lets the sender know they've reached a working number.

The Federal Trade Commission recommends never turning over private information based on a text message request. And CAFCU will never ask you to follow a link or call a number via text message. Contact our Member Center immediately at 1-800-359-1939 if you have entered any personal information on a fraudulent web page.

You can also file a complaint on the Federal Trade Commission’s website, www.ftc.gov, or call 1-877-FTC-HELP.