DoubleCheck
on Fraud

• If you get a call requesting personal information from someone claiming to be part of the ATH Móvil call center, ignore it and report it as fraud.
• We will never request personal information or any other sensitive information through calls, text messages, social media, or direct messages.
• In fraud attempts, you may be asked to provide personal information, such as passwords, telephone numbers, account details, financial details, and other sensitive information.
• Only access ATH Móvil on your personal devices through mobile apps for iOS and Android.
• Never provide your ATH Móvil verification codes to anyone or through a webpage.
• Never trust messages or calls saying you won a prize.
• Don't answer calls from unfamiliar telephone numbers. Criminals typically use area codes such as 866, 877, and 888.

Through this new scam method, scammers make phone calls that seem urgent or very attractive, and they may pose as bank staff to request personal information from you or to get you to do something.

Scammers will try to obtain confidential information by email, social media, text messages, and other digital channels that seem legitimate. These messages usually require you to take some kind of urgent action and ask you to click on a link to view your accounts or access Digital Banking. If you want to review your accounts, use the official FirstBank app or go directly to Digital Banking.

Spear phishing is a small, targeted, email-driven attack on a particular person or organization, with the goal of breaking through their defenses. The spear phishing attack is done once the target has been studied, and it has a specific customized component designed to make the target do something against their own interests.

Phishing emails are sent to a large number of recipients, somewhat randomly, with the expectation that only a small percentage will respond. Spear phishing emails are carefully crafted for a single recipient to respond. Scammers select an individual target within an organization.

Remember, if you are asked to respond with personal information or by clicking a link to update information, it is fraud. Visit the Tips section to learn other ways to identify and protect yourself from fraud.

Vishing is a phishing attack done over the phone, usually targeted at Voice over IP (VoIP) users, such as Skype users. Vishing is the telephone equivalent of a phishing attack. There are two forms of vishing: human and automated.

In the human example, the scammer takes advantage of the anonymity of a phone call and pretends to be a representative of the target's bank or credit card company. The scammer manipulates the victim to get them to enter their PIN, credit card number, or bank account number (and routing number) using the telephone keypad. This allows the scammer to gain instant access to another person's bank credentials. Recent examples include the stealing of credentials through phone calls to commit fraud involving ATH Móvil.

Smishing is a form of phishing where someone tries to obtain private information through a text message or SMS.

• Don't tap links you receive through text messages
• Do not open files that you receive via text messages
• Make sure the message is legitimate and that it comes from a legitimate entity

Remember that we will never ask you for your information via SMS text messages.

There is a new type of scam called spoofing, where you receive a masked call from a number that seems legitimate but is actually a FAKE number. If you answer the call, the scammers use a fraudulent script to ask for your personal information so they can steal your identity and money.

Identity theft occurs when the scammer uses another person's identity—including their name, Social Security number, or credit or debit card number—without permission to commit fraud and other crimes. The scammer may also pretend to be a family member or a friend and ask you to transfer money or provide information about your deposit accounts.

It is always a good idea to check your credit reports frequently to make sure there is no suspicious activity.

You should be suspicious if you receive a message with a link to a prize, asking for personal information, or with spelling mistakes. Never give out financial information, such as account numbers, your Social Security number, PIN numbers, or any other information that may be useful to scammers via WhatsApp.