South Ottumwa Savings Bank has been notified of Mishing and Vishing Scams taking place. These scams are being aimed at cardholder’s (debit and credit). To help protect our customers, each scam type has been defined below as well as a reminder of the definition of Phishing. Also included are tips of what to look for, how to prevent, and tips on how to reduce damage if information may have been given out. For information on how to improve your credit rating please visit our blog.

'Mishing' is a combination of the words mobile phone and phishing. Mishing is very similar to phishing—the only difference is the technology. Phishing involves the use of emails to trick you into providing your personal details, whereas mishing involves mobile phones. If you use your mobile phone for purchasing goods and services and convenient banking, you could be more vulnerable to a mishing scam.

A typical mishing call or message involves a scammer, posing as an employee from your bank or another organization, claiming to need your personal details. Scammers are very creative and they could tell you many different reasons why they need this information from you—perhaps to verify your account or maybe to authorize a purchase you have made on your mobile.

'Vishing' is a combination of the words voice and phishing. Vishing is very similar to phishing—the only difference is the technology. Phishing involves the use of emails to trick you into providing your personal details whereas vishing involves voice or telephone services. If you use a Voice over Internet Protocol (VoIP) phone service, you are particularly vulnerable to a vishing scam.

A typical vishing call involves a scammer, posing as an employee from your bank or another organization, claiming to need your personal details. Scammers are very creative and they could tell you many different reasons why they need this information from you. Do not assume you won't be a target of a vishing scam.

Regardless of the story you are told, the scammer will be aiming to convince you to divulge confidential personal and banking information, such as your PIN or password. Even if you use your telephone keypad or keyboard to type in your details, if you are on the line to a scammer, the scammer can record them.

In the majority of both of these scams, the telephone calls will be automated, if the call is not answered a message will be left on the telephone asking them to call back and provide the information.

'Phishing' refers to emails, sent to you by scammers, which are designed to trick you into providing your personal and banking information.
Typically, scammers will send phishing emails which often appear to be from your bank, a government organization, a company or other financial institutions urging you to click on a link to update your personal profile or 'validate' or 'confirm' your personal details. By clicking on the link in the email, you will be taken to a fake website designed to look like the real thing and prompted to enter your password, PIN and other personal information. Any details you enter are recorded by the scammer.

Some phishing emails contain spelling mistakes or other errors that may alert you to the scam, but other messages look so genuine that you could be fooled if you are not careful. Scammers are creative and manipulative. They can easily copy an institution's logo and message format to make their email look genuine. It will also be easy for them to set up a fake website.